Re: [DNSOP] CloudFlare policy on ANY records changing

Florian Weimer <fw@deneb.enyo.de> Sat, 14 March 2015 19:57 UTC

Return-Path: <fw@deneb.enyo.de>
X-Original-To: dnsop@ietfa.amsl.com
Delivered-To: dnsop@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1A7661A0194 for <dnsop@ietfa.amsl.com>; Sat, 14 Mar 2015 12:57:10 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: 0.339
X-Spam-Level:
X-Spam-Status: No, score=0.339 tagged_above=-999 required=5 tests=[BAYES_20=-0.001, HELO_EQ_DE=0.35, T_RP_MATCHES_RCVD=-0.01] autolearn=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0g1dC1olG2_w for <dnsop@ietfa.amsl.com>; Sat, 14 Mar 2015 12:57:08 -0700 (PDT)
Received: from albireo.enyo.de (albireo.enyo.de [46.237.207.196]) (using TLSv1.2 with cipher DHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CA6E41A0111 for <dnsop@ietf.org>; Sat, 14 Mar 2015 12:57:07 -0700 (PDT)
Received: from [172.17.203.2] (helo=deneb.enyo.de) by albireo.enyo.de with esmtps (TLS1.2:DHE_RSA_AES_128_CBC_SHA1:128) id 1YWsBA-0005QP-BJ; Sat, 14 Mar 2015 20:57:00 +0100
Received: from fw by deneb.enyo.de with local (Exim 4.80) (envelope-from <fw@deneb.enyo.de>) id 1YWsBA-0008M8-1p; Sat, 14 Mar 2015 20:57:00 +0100
From: Florian Weimer <fw@deneb.enyo.de>
To: Evan Hunt <each@isc.org>
References: <0A8D7AE0-B6FF-4B85-A42B-4EBF93A17873@verisign.com> <54FF86CB.7010705@redbarn.org> <20150311015710.GB10189@isc.org> <alpine.LSU.2.00.1503111205440.10193@hermes-1.csi.cam.ac.uk> <20150311150622.GA91255@isc.org> <alpine.LSU.2.00.1503111617130.23307@hermes-1.csi.cam.ac.uk> <20150311171535.GC91255@isc.org> <alpine.LSU.2.00.1503111723080.10193@hermes-1.csi.cam.ac.uk> <871tku18np.fsf@mid.deneb.enyo.de> <49DEE35910F1A6438E9805F4DEBBA30715CC32C0@038-CH1MPN1-041.038d.mgd.msft.net> <20150313003003.GB65353@isc.org>
Date: Sat, 14 Mar 2015 20:57:00 +0100
In-Reply-To: <20150313003003.GB65353@isc.org> (Evan Hunt's message of "Fri, 13 Mar 2015 00:30:03 +0000")
Message-ID: <87oanve4j7.fsf@mid.deneb.enyo.de>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Archived-At: <http://mailarchive.ietf.org/arch/msg/dnsop/SMRuT9FNl5pSJYy_ugMDkCCyy-4>
Cc: dnsop <dnsop@ietf.org>, "Darcy Kevin (FCA)" <kevin.darcy@fcagroup.com>
Subject: Re: [DNSOP] CloudFlare policy on ANY records changing
X-BeenThere: dnsop@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnsop>, <mailto:dnsop-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dnsop/>
List-Post: <mailto:dnsop@ietf.org>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 14 Mar 2015 19:57:10 -0000

* Evan Hunt:

> On Thu, Mar 12, 2015 at 11:38:04PM +0000, Darcy Kevin (FCA) wrote:
>> So you're thinking it's more likely that we'll get folks to understand
>> this new type, that's designed to frustrate QTYPE=* queries in a
>> more-or-less graceful way, than it is to convince them to stop making
>> QTYPE=* queries in the first place?

Yes, I do.

> They don't need to understand it, they just need to be able to receive
> it without choking.

Correct, or not too much choking.  Entering a fallback path is
acceptable and the desired behavior (if you can speak of such in this
context).