Re: [DNSOP] Delegation acceptance checks [was: Re: [Ext] WGLC rfc8499bis one week extension for lame delegation definition]

John R Levine <johnl@taugh.com> Fri, 12 May 2023 02:09 UTC

Return-Path: <johnl@taugh.com>
X-Original-To: dnsop@ietfa.amsl.com
Delivered-To: dnsop@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 06472C1782A7 for <dnsop@ietfa.amsl.com>; Thu, 11 May 2023 19:09:46 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -7.098
X-Spam-Level:
X-Spam-Status: No, score=-7.098 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_PASS=-0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=iecc.com header.b="JSCicHYB"; dkim=pass (2048-bit key) header.d=taugh.com header.b="qYuIIqLY"
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id MjOHDDr4la2P for <dnsop@ietfa.amsl.com>; Thu, 11 May 2023 19:09:41 -0700 (PDT)
Received: from gal.iecc.com (gal.iecc.com [IPv6:2001:470:1f07:1126:0:43:6f73:7461]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E97E6C16B5B6 for <dnsop@ietf.org>; Thu, 11 May 2023 19:09:40 -0700 (PDT)
Received: (qmail 35602 invoked from network); 12 May 2023 02:09:38 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed; d=iecc.com; h=date:message-id:from:to:cc:subject:in-reply-to:references:mime-version:content-type:content-transfer-encoding; s=8b0f.645d9fe2.k2305; bh=9v045vT+An/znaGaQpfqGiVSfzd02nJjaoRAU6kM7Iw=; b=JSCicHYBAvD1fXMsqedF7PkjG3amFMgQsQ/QIjTrOXzFDwBA5UbSunKDCfuJoFgMBlZDEoHjmGgUni9bbi7tY166VR7ggsww0XZAU4vRMn7TOCmLw2b5re2xiUmxq+jd7CtNmScRzBpQ8b0Uk3yjVtP9YSUVJcVLvfEt48+FrJSrasenqVe8P1MN3i03ytfTgBqA0SR5K3KHRawdlwe/PBnf5xjdulx1QRFLHrw5NAflSw/VRR/E0iV/1hEgS69G9IPXGwo6w4phVdbeo/tuKoZEl4K+A7JTh3wv8Pwbpl87ze3QO5xX8EUqIc5VsK9DTNfCffmsk6bzd9CU91ZLqQ==
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed; d=taugh.com; h=date:message-id:from:to:cc:subject:in-reply-to:references:mime-version:content-type:content-transfer-encoding; s=8b0f.645d9fe2.k2305; bh=9v045vT+An/znaGaQpfqGiVSfzd02nJjaoRAU6kM7Iw=; b=qYuIIqLY4gNYET/kH0fBjoS7J9wgIB2dA8EnfKntqkPJmzK2/M7Yf+Sc5/HAZytTw4kWRMbcDJ66xp0HrwzTuECw4lgN4hpyXxQjFYPNjDVqkwJsLdsk2YVsDV9dtWkT3caGVYuqFa4Hh61BkAgLD+rFxoP+uQhjXMGPcrzJmHN4sGmSko6Z6l6pV62kgbnwfc2/KHvr+O7l2F21bVtS6K8pPn9WDdcf2jr4tM+zR4yJzfZGYQm6SeWBCWDFG1ulUrlJFZm4CuesofdpHiWMms7tL+z4SBZWqN4KqxGOa6sReyAcwP85kIgh/kCSMyDl9kdjksHIWUTS3LhVJ/VLRw==
Received: from ary.qy ([IPv6:2001:470:1f07:1126::78:696d:6170]) by imap.iecc.com ([IPv6:2001:470:1f07:1126::78:696d:6170]) with ESMTPS (TLS1.3 ECDHE-RSA AES-256-GCM AEAD) via TCP6; 12 May 2023 02:09:37 -0000
Received: by ary.qy (Postfix, from userid 501) id 65C3ED675000; Thu, 11 May 2023 22:09:37 -0400 (EDT)
Received: from localhost (localhost [127.0.0.1]) by ary.qy (Postfix) with ESMTP id 50949D674FFF; Thu, 11 May 2023 22:09:37 -0400 (EDT)
Date: Thu, 11 May 2023 22:09:37 -0400
Message-ID: <331e7b86-dc5c-5589-9cbb-b3331bc972b8@taugh.com>
From: John R Levine <johnl@taugh.com>
To: Mark Andrews <marka@isc.org>
Cc: dnsop@ietf.org
X-X-Sender: johnl@ary.qy
In-Reply-To: <A7E2E387-559B-4623-8218-887ED583F57E@isc.org>
References: <20230512013510.2ACD2D670AF9@ary.qy> <A7E2E387-559B-4623-8218-887ED583F57E@isc.org>
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"; format="flowed"
Content-Transfer-Encoding: 8bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/dnsop/SK6iHx14negu0WZWBfIniYRibjE>
Subject: Re: [DNSOP] Delegation acceptance checks [was: Re: [Ext] WGLC rfc8499bis one week extension for lame delegation definition]
X-BeenThere: dnsop@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnsop>, <mailto:dnsop-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dnsop/>
List-Post: <mailto:dnsop@ietf.org>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 12 May 2023 02:09:46 -0000

>> Yeah, that's a better way to put it. But the main point still stands,
>> that it would be a signficant operational change to insist that all
>> delegated NS be active when delegated, and even moreso to insist that
>> they continue to be active.
>
> No, it is not a “significant” change.  It should just be a minor extension
> of the existing requirement to keep the NS and glue records consistent.
>
> Even if it was you just introduce it with a soft start.  Just start checking
> the delegations of every TLD like zone then report the broken servers
> publicly and email the contacts for the delegation.  The tools for checking
> already exist.

Well, OK, you do that, half the emails bounce, half of what's delivered is 
reported as spam, and the third half are ignored.  Now what?

Regards,
John Levine, johnl@taugh.com, Taughannock Networks, Trumansburg NY
Please consider the environment before reading this e-mail. https://jl.ly