Re: [DNSOP] review of draft-ietf-dnsop-no-response-issue-05

Suzanne Woolf <suzworldwide@gmail.com> Wed, 19 October 2016 20:20 UTC

Return-Path: <suzworldwide@gmail.com>
X-Original-To: dnsop@ietfa.amsl.com
Delivered-To: dnsop@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3862812967E for <dnsop@ietfa.amsl.com>; Wed, 19 Oct 2016 13:20:04 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.699
X-Spam-Level:
X-Spam-Status: No, score=-2.699 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GOasf6Tetvpp for <dnsop@ietfa.amsl.com>; Wed, 19 Oct 2016 13:20:01 -0700 (PDT)
Received: from mail-yw0-x22a.google.com (mail-yw0-x22a.google.com [IPv6:2607:f8b0:4002:c05::22a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AB1891294C4 for <dnsop@ietf.org>; Wed, 19 Oct 2016 13:20:01 -0700 (PDT)
Received: by mail-yw0-x22a.google.com with SMTP id t192so27204144ywf.0 for <dnsop@ietf.org>; Wed, 19 Oct 2016 13:20:01 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:subject:from:in-reply-to:date:cc:message-id:references :to; bh=dPhKIqTtaQOSvlu4mCPohiaLnJtHgAaO4b4HWzpL54w=; b=q+sU6nAqLxJnSkzuoXLKf9gJ0F09bDCJsrgtDCCcQaxRcocr804zwbAYscTjBujMRH sel06NSwHFSAQIzg4/o+Vu4PGpoafmv5v10BuXYMzqm+jxacRB/ZBnG/lJcoNUBWIQ08 jdF44h+4GVybJdyYdGwRorTIgbqbuupnjimBxcEAiyliXKvPm1HPF3vJU3SLb3JwTxd8 uUs9So2jvqyP4lpvQ2Sf7Xa6u6G0u/2nEZtV7iwaW9ItR0KM+TECsiaOCXeZZdZhlrcs w4bRj0b8POvzKPsif4HRawxVmI2lu/NIVpjMBuhYNGxNkLCkJt3pPZTrpqASmQ0YQIOX R6Lg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:subject:from:in-reply-to:date:cc :message-id:references:to; bh=dPhKIqTtaQOSvlu4mCPohiaLnJtHgAaO4b4HWzpL54w=; b=WKMZdJbrOrdSC0VnKRXK5WW/07cV9DCbeeYeIvuj8SnE3BW4JMnNP2ld/oQlvysaB9 6ovb2pB1DQ0Tbi2UOv4sa1HKTmLsTLg0bPOmxib22Rqv5QZhZ5m2EO2n8AI/J9K4/LZv yHbfvghseD9tiQ61WMDCnukVFGK40hqQaOl5BoJ7/iY8dXCQE3UE0lOSmUrVx9FhbtGu MdoPjYKogSwriva8xJ5cVnE2MDO/PbPP2h8McoVyp18a85F5ZGyl6vtad/fMWlnrJidJ peRz4fm3CMtMyoe2Ix9hoZP8XYyUHmdWC9+LQyFKw/AGcYT4VxigjNNDUhiSjr/4G4Z6 02UQ==
X-Gm-Message-State: AA6/9RkjS5sgjsIhVpy/+Gm2FCCjKdxeyUPoYBIrPH8GE8YbiRwZvIyRLirqHrWi6UrhHw==
X-Received: by 10.129.85.149 with SMTP id j143mr8871282ywb.230.1476908400880; Wed, 19 Oct 2016 13:20:00 -0700 (PDT)
Received: from ?IPv6:2620::ce0:101:2516:dfc2:65e2:7044? ([2620:0:ce0:101:2516:dfc2:65e2:7044]) by smtp.gmail.com with ESMTPSA id k3sm3797014ywk.40.2016.10.19.13.19.59 (version=TLS1 cipher=ECDHE-RSA-AES128-SHA bits=128/128); Wed, 19 Oct 2016 13:19:59 -0700 (PDT)
Content-Type: multipart/alternative; boundary="Apple-Mail=_8B606C04-EAD3-41A2-980C-EAAE5F23C541"
Mime-Version: 1.0 (Mac OS X Mail 8.2 \(2104\))
From: Suzanne Woolf <suzworldwide@gmail.com>
In-Reply-To: <CAAiTEH_D_OPAc9KV8d7z3spaQrt2V2V6pZB3s+mcDvvpNqLDTw@mail.gmail.com>
Date: Wed, 19 Oct 2016 16:19:58 -0400
Message-Id: <66334AF3-A365-46C5-A448-1A10B38E169C@gmail.com>
References: <CAAiTEH9Rbw4u3gV9GULQ-8WdoPHf3SXQMTRY+CtfUGrNQSGAWw@mail.gmail.com> <20161010023251.241F1560C844@rock.dv.isc.org> <CAAiTEH_Tn8YXXe9wYMgobeg0Fd3OdY9M4Rey6QQxh0Yg=G0UWw@mail.gmail.com> <20161017021526.7AB1656D0F46@rock.dv.isc.org> <CAAiTEH_D_OPAc9KV8d7z3spaQrt2V2V6pZB3s+mcDvvpNqLDTw@mail.gmail.com>
To: Matthew Pounsett <matt@conundrum.com>
X-Mailer: Apple Mail (2.2104)
Archived-At: <https://mailarchive.ietf.org/arch/msg/dnsop/PFSIBLuAVNIq1H92e5WlocQ64Pc>
Cc: dnsop <dnsop@ietf.org>
Subject: Re: [DNSOP] review of draft-ietf-dnsop-no-response-issue-05
X-BeenThere: dnsop@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnsop>, <mailto:dnsop-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dnsop/>
List-Post: <mailto:dnsop@ietf.org>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 19 Oct 2016 20:20:04 -0000

Hi,

Adding a few comments on this discussion, just one chair’s opinion:

The underlying question in this exchange seems to be what advice should this document offer, and to whom?

This is a Working Group document, which means the decision about what’s in and what’s out doesn’t rest with any individual; it belongs to the WG. 

The bulk of the document is a description of certain issues that can arise in name server operation, and tests that can be performed to identify servers that behave incorrectly or suboptimally with respect to those issues. I’m seeing several suggestions that those portions of the document might benefit from some editorial work, but not seeing opposition to publishing them.

At the same time, there’s a question of what sound, credible advice this group can include in the document. A couple of thoughts on that:

	1. I don’t think that citing advice to operators in RFC 1033 as normative is helpful. Retaining any advice found there should be clearly justified in terms of current understanding of both protocol and practice. Besides the changes in how we use language in standards (RFC 2119) since RFC 1033 was written, it’s really hard to argue for the assumption that *anything* about the way we operate the TCP/IP internet hasn’t changed as it’s grown, or that *any* advice to operators of the 1980s is automatically relevant to operators today.
	2. In this particular case, the suggested “Remediation” includes advice that isn’t actionable for many TLD operators, because they’re operationally and contractually constrained from the recommended action. It may also be passing up an opportunity to provide advice to others who do have leverage over name server operators that TLD operators don’t— including registrars and registrants.

The chairs have asked those who have objections to the current “Remediation” section to “send text” and look forward to review by the WG. We need more comment/feedback on what advice, if any, should be given in this document.


thanks,
Suzanne
(for the chairs)



> On Oct 18, 2016, at 3:00 PM, Matthew Pounsett <matt@conundrum.com> wrote:
> 
> 
> 
> On 16 October 2016 at 21:15, Mark Andrews <marka@isc.org <mailto:marka@isc.org>> wrote:
> 
> In message <CAAiTEH_Tn8YXXe9wYMgobeg0Fd3OdY9M4Rey6QQxh0Yg=G0UWw@mail.gmail.com <mailto:G0UWw@mail.gmail.com>>
> , Matthew Pounsett writes:
> > >
> > > But not all registries as so constrained.  This is BEST current
> > > practice not LOWEST COMMON DEMONINATOR practice.
> > >
> > > GTLD are required to remove records for abuse so removal of record
> > > is expected for some conditions so it is not beyond belief that
> > > they can change to include these reasons.  ICANN still has a committee
> > > to maintain the stability of the DNS.  Nameserver behavior very
> > > much affects that stability.
> > >
> >
> > The draft can say it would be helpful to take action.  The draft can't
> > require action.  Requiring action isn't describing a best current
> > practice.  That just won't fly on today's Internet.
> 
> I've had TLD's saying they want the hard line to be there as it
> backs up their stance.
> 
> > If you want to lobby ICANN to modify the gTLD agreements, then we can
> > revisit this discussion.  But until those are changed the IETF has no
> > business insisting on contractually prohibited actions.
> 
> The IETF can say what is BEST practice.  If gTLD's feel they cannot
> meet BEST practice they will not do that.  No one can make someone
> follow BEST practice.
> 
> Every time I hear "But the gTLD's can't do" I see a conflict of
> interest showing.
> 
> The IETF can recommend things that gTLD's can't do today.  There
> is nothing wrong with doing that.  It puts the IETF's position not
> gTLD operator position.
> 
> The problem with the draft is that it doesn't recommend -- it requires. 
> 1) It incorrectly references a non-normative RFC as if it were normative. 
> 2)  It includes imperative statements while claiming to be a description of best practice.
> 
> Neither of these things are supported by your argument.
> _______________________________________________
> DNSOP mailing list
> DNSOP@ietf.org
> https://www.ietf.org/mailman/listinfo/dnsop