[DNSOP] Barry Leiba's No Objection on draft-ietf-dnsop-server-cookies-04: (with COMMENT)

[Barry Leiba via Datatracker <[e-mail]>]

Barry Leiba has entered the following ballot position for
draft-ietf-dnsop-server-cookies-04: No Objection

When responding, please keep the subject line intact and reply to all
email addresses included in the To and CC lines. (Feel free to cut this
introductory paragraph, however.)


Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html
for more information about IESG DISCUSS and COMMENT positions.


The document, along with other ballot positions, can be found here:
https://datatracker.ietf.org/doc/draft-ietf-dnsop-server-cookies/



----------------------------------------------------------------------
COMMENT:
----------------------------------------------------------------------

Thanks for this; very useful.  I have two small points:

— Section 3 —

   It is reasonable to change the
   Client Cookie then only if it has been compromised or after a
   relatively long period of time such as no longer than a year.  Client
   Cookies are not expected to survive a program restart.

Itis anvery small thing, but “a relatively long period of time such as no
longer than a year” strikes me as an odd way to put it, and especially so
because of the sentence that follows it.  If you’re actually suggesting that a
year is a reasonable and likely choice, please say that more clearly. 
Otherwise, you might consider suggesting a shorter period as a (lower-case)
recommendation, with the year as a maximim... or, alternatively, leave it at
the vague “relatively long” with something like, “or after a relatively long
implementation-defined period of time.  The time period should be no longer
than a year, and in any case Client Cookies are not expected to survive a
program restart.”

— Section 4.2 —
Why is it a SHOULD, rather than a MUST, to zero the reserved field?  Why might
a server not zero it for good reason?  And wouldn’t it harm future
interoperability if implementations don’t, and an extension comes along that
uses bits in that field?