Re: [DNSOP] draft-adpkja-dnsop-special-names-problem-01

"Adrien de Croy" <adrien@qbik.com> Wed, 30 March 2016 02:31 UTC

Return-Path: <adrien@qbik.com>
X-Original-To: dnsop@ietfa.amsl.com
Delivered-To: dnsop@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2D79812DC5C for <dnsop@ietfa.amsl.com>; Tue, 29 Mar 2016 19:31:05 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.911
X-Spam-Level:
X-Spam-Status: No, score=-1.911 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id r-vGD6tNOGZm for <dnsop@ietfa.amsl.com>; Tue, 29 Mar 2016 19:31:03 -0700 (PDT)
Received: from smtp.qbik.com (smtp.qbik.com [122.56.26.1]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 182BD12DB5D for <dnsop@ietf.org>; Tue, 29 Mar 2016 19:31:02 -0700 (PDT)
Received: From [192.168.1.146] (unverified [192.168.1.146]) by SMTP Server [192.168.1.3] (WinGate SMTP Receiver v8.5.6 (Build 4877)) with SMTP id <0000685674@smtp.qbik.com>; Wed, 30 Mar 2016 15:31:00 +1300
From: Adrien de Croy <adrien@qbik.com>
To: John R Levine <johnl@taugh.com>
Date: Wed, 30 Mar 2016 02:31:00 +0000
Message-Id: <em29c9a593-01cc-4124-8fc8-0fdb5a91fa67@bodybag>
In-Reply-To: <alpine.OSX.2.11.1603292212470.42318@ary.lan>
User-Agent: eM_Client/6.0.24928.0
Mime-Version: 1.0
Content-Type: text/plain; format="flowed"; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Archived-At: <http://mailarchive.ietf.org/arch/msg/dnsop/U9sCyGb7-5zuOk7IpXGwhU8q6-0>
Cc: "dnsop@ietf.org" <dnsop@ietf.org>
Subject: Re: [DNSOP] draft-adpkja-dnsop-special-names-problem-01
X-BeenThere: dnsop@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
Reply-To: Adrien de Croy <adrien@qbik.com>
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnsop>, <mailto:dnsop-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dnsop/>
List-Post: <mailto:dnsop@ietf.org>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 30 Mar 2016 02:31:05 -0000


>>>don't leak into the DNS.  The only thing that anyone's asking DNS
>>>developers to do is to fail .onion requests rather than forwarding
>>>them along.
>>That's the problem.  Creating new requirements for DNS developers to 
>>do anything at all is a huge problem.
>
>It's not a requirement.  It's a request.  I expect it's a lot easier 
>than whatever you have to do to deal with .local.  If we adopt .alt, 
>you can stub that out too and with any luck you're done.
we ignore .local also otherwise we'd break Active Directory resolution 
which also ignores .local, and happily gives us records for .local 
queries over DNS.  So maybe Microsoft is ignoring it too?

I also don't feel a commercial compulsion to implement a multicast DNS 
resolver and server just to deal with that.

In fact we ignore all special use names except localhost.  Stubbing out 
the private IP range reverse zones would break a lot of stuff.  
Example.com etc are seemingly ignored by the internet at large, since I 
can still resolve it.  That leaves .test?


>
>>Having said that, I wish there was a way with a single DNS lookup one 
>>could resolve both/either IPv4 and/or IPv6 addresses from a name with 
>>a single query (e.g. the "give me any version address" query), rather 
>>than having to make 2 lookups and fail over etc.  Would basically 
>>halve the amount of DNS traffic on the network and resolve a lot of 
>>pathological cases.
>
>Surely you've been reading the draft-vavrusa-dnsop-aaaa-for-free 
>thread.
Thanks for the pointer, I'll check it out.

Cheers

Adrien

>
>R's,
>John