IETF Logo Mail Archive

Re: [DNSOP] DNS stamps

Vladimír Čunát <vladimir.cunat+ietf@nic.cz> Thu, 09 January 2020 18:21 UTC

Return-Path: <vladimir.cunat+ietf@nic.cz>
X-Original-To: dnsop@ietfa.amsl.com
Delivered-To: dnsop@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D305A120104; Thu, 9 Jan 2020 10:21:08 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.997
X-Spam-Level:
X-Spam-Status: No, score=-1.997 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=nic.cz
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id SMuFhfTqZZtx; Thu, 9 Jan 2020 10:21:06 -0800 (PST)
Received: from mail.nic.cz (mail.nic.cz [IPv6:2001:1488:800:400::400]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 85A4912008A; Thu, 9 Jan 2020 10:21:06 -0800 (PST)
Received: from [IPv6:2001:1488:fffe:6:7147:1edd:e3ca:8bd2] (unknown [IPv6:2001:1488:fffe:6:7147:1edd:e3ca:8bd2]) by mail.nic.cz (Postfix) with ESMTPSA id A10DE140CA1; Thu, 9 Jan 2020 19:21:04 +0100 (CET)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=nic.cz; s=default; t=1578594064; bh=e8moUpfPC2iQWoQsA0nqAX1X+MRteteZmzsCKe8RWWY=; h=To:From:Date; b=xFUYuGWjpgYlKH4ojl+eamwyBfDHrtckm6wnqxYJ/dCC6+9xk5HxPIyEU6YlP3EGV o6YOCgau27tYqPhrYIdg6R0x2JN0r+gdwHCWjIA2Yd4WG9QsLOaiue1tIskwwE5uQP 2rjw23HZ8yDgNj0gjo2YQRHqC4nhKJaOv4lIaNUM=
To: Ted Lemon <mellon@fugue.com>
Cc: dns-privacy@ietf.org, dnsop@ietf.org
References: <20200109143554.GA24757@nic.fr> <B0E87CB4-7CD4-4A12-A58C-1A3BEF104540@fugue.com> <c5e55d18-26b5-6103-7f86-031d2699ff42@nic.cz> <DD5E13AA-8CB1-4698-8892-FF9C470FCDC0@fugue.com>
From: Vladimír Čunát <vladimir.cunat+ietf@nic.cz>
Message-ID: <addcd575-994c-250e-28c9-24b26ebf7244@nic.cz>
Date: Thu, 09 Jan 2020 19:22:46 +0100
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:68.0) Gecko/20100101 Thunderbird/68.3.0
MIME-Version: 1.0
In-Reply-To: <DD5E13AA-8CB1-4698-8892-FF9C470FCDC0@fugue.com>
Content-Type: multipart/alternative; boundary="------------8B1560A3E960C5E6A6200F39"
Content-Language: en-US
X-Virus-Scanned: clamav-milter 0.101.4 at mail
X-Virus-Status: Clean
Archived-At: <https://mailarchive.ietf.org/arch/msg/dnsop/TLt_hW3qL9zPGj0CG-ehm28-0qs>
Subject: Re: [DNSOP] DNS stamps
X-BeenThere: dnsop@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnsop>, <mailto:dnsop-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dnsop/>
List-Post: <mailto:dnsop@ietf.org>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 09 Jan 2020 18:21:09 -0000

On 1/9/20 6:37 PM, Ted Lemon wrote:
> On Jan 9, 2020, at 9:21 AM, Vladimír Čunát <vladimir.cunat+ietf@nic.cz
> <mailto:vladimir.cunat+ietf@nic.cz>> wrote:
>> Depends what you'd want from the stamps.
> If the stamps make assertions about what service is offered, I’d want
> that to be verifiable.  [...]

I'd personally have stamps without these assertions (or without giving
them any weight).

I see a bigger problem that some of desired assertions are in principle
unverifiable, e.g. "no logging".  Of course, we could (optionally)
extend the string by a signature, but I suspect that'd increase the
length a lot without sufficient gain in exchange.

v2.23.0 | Report a Bug | By Email