Re: [DNSOP] draft-liman-tld-names-04

Tony Finch <dot@dotat.at> Wed, 17 November 2010 11:20 UTC

Return-Path: <fanf2@hermes.cam.ac.uk>
X-Original-To: dnsop@core3.amsl.com
Delivered-To: dnsop@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 78F9D3A68E0 for <dnsop@core3.amsl.com>; Wed, 17 Nov 2010 03:20:13 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.622
X-Spam-Level:
X-Spam-Status: No, score=-2.622 tagged_above=-999 required=5 tests=[AWL=-0.023, BAYES_00=-2.599]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3lWhnw5hJqxs for <dnsop@core3.amsl.com>; Wed, 17 Nov 2010 03:20:12 -0800 (PST)
Received: from ppsw-51.csi.cam.ac.uk (ppsw-51.csi.cam.ac.uk [131.111.8.151]) by core3.amsl.com (Postfix) with ESMTP id D7B823A68D2 for <dnsop@ietf.org>; Wed, 17 Nov 2010 03:20:11 -0800 (PST)
X-Cam-AntiVirus: no malware found
X-Cam-SpamDetails: not scanned
X-Cam-ScannerInfo: http://www.cam.ac.uk/cs/email/scanner/
Received: from hermes-2.csi.cam.ac.uk ([131.111.8.54]:40077) by ppsw-51.csi.cam.ac.uk (smtp.hermes.cam.ac.uk [131.111.8.158]:25) with esmtpa (EXTERNAL:fanf2) id 1PIg4O-0007FR-YB (Exim 4.72) (return-path <fanf2@hermes.cam.ac.uk>); Wed, 17 Nov 2010 11:20:56 +0000
Received: from fanf2 (helo=localhost) by hermes-2.csi.cam.ac.uk (hermes.cam.ac.uk) with local-esmtp id 1PIg4O-0003dv-Is (Exim 4.67) (return-path <fanf2@hermes.cam.ac.uk>); Wed, 17 Nov 2010 11:20:56 +0000
Date: Wed, 17 Nov 2010 11:20:56 +0000
From: Tony Finch <dot@dotat.at>
X-X-Sender: fanf2@hermes-2.csi.cam.ac.uk
To: Andrew Sullivan <ajs@shinkuro.com>
In-Reply-To: <20101116164818.GN1389@shinkuro.com>
Message-ID: <alpine.LSU.2.00.1011171101250.14239@hermes-2.csi.cam.ac.uk>
References: <4CDE6D2D.40805@necom830.hpcl.titech.ac.jp> <4819246C-FF1F-456D-9732-51510F0537A1@frobbit.se> <4CE0F829.1010605@necom830.hpcl.titech.ac.jp> <7F03C666-16F8-49E4-BC56-F5DD441DD970@frobbit.se> <4CE1A110.1060403@necom830.hpcl.titech.ac.jp> <20101115213532.GD322@shinkuro.com> <04856F66-598D-43CC-8164-90178A6F2952@virtualized.org> <4CE283DA.5080606@abenaki.wabanaki.net> <20101116145308.GG1389@shinkuro.com> <alpine.LSU.2.00.1011161601450.14239@hermes-2.csi.cam.ac.uk> <20101116164818.GN1389@shinkuro.com>
User-Agent: Alpine 2.00 (LSU 1167 2008-08-23)
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset="US-ASCII"
Sender: Tony Finch <fanf2@hermes.cam.ac.uk>
Cc: dnsop@ietf.org
Subject: Re: [DNSOP] draft-liman-tld-names-04
X-BeenThere: dnsop@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dnsop>
List-Post: <mailto:dnsop@ietf.org>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 17 Nov 2010 11:20:13 -0000

On Tue, 16 Nov 2010, Andrew Sullivan wrote:
>
> Define what you mean by "normative text".

Normative text specifies requirements. (This is the usual meaning of the
word.) Text in "DISCUSSION" sections is not normative. RFC 1123 section
1.3.1 says:

         Under many of the individual topics in this document, there is
         parenthetical material labeled "DISCUSSION" or
         "IMPLEMENTATION".  This material is intended to give
         clarification and explanation of the preceding requirements
         text.  It also includes some suggestions on possible future
         directions or developments.

Therefore the "will be alphabetic" phrase is not a requirement, it's part
of an explanation of how the syntax works in practice.

> But the argument has been that the Discussion segment amounts to a
> constraint on the protocol, or anyway may well have been interpreted
> that way in running code.  We don't know.

This is why you need to be clear about the layering. If this constraint
had been implemented in low-level non-policy code then IDNA TLDs would not
work.

There is quite a lot of policy enforcement code that has detailed
knowledge of which TLDs are valid, and that is perfectly fine because it
is operating at the policy layer not the protocol syntax layer, and is
obliged to keep up with changes in allocation policy.

> So I read the document as trying to relax that rule just exactly enough
> to allow A-labels in the TLDs, without relaxing everything.

I believe that no requirement needs to be relaxed to allow A-labels. A
clarification might be helpful.

What this document does is introduce new syntactic restrictions, by
specifying policy-layer stuff as protocol syntax.

> There's probably some heuristic software out there that checks the
> top-most label, looks for a digit in the first character, and treats the
> set of labels as an IP address if there is one.

That is blatantly broken. There is no need for any heuristic to tell IP
addresses and host names apart. This kind of code should be mocked, not
accommodated.

> Even if I don't like it, the top level is different from other levels in
> the DNS, and we need to be careful there.

Careful is for policy not mechanism.

Tony.
-- 
f.anthony.n.finch  <dot@dotat.at>  http://dotat.at/
HUMBER THAMES DOVER WIGHT PORTLAND: NORTH BACKING WEST OR NORTHWEST, 5 TO 7,
DECREASING 4 OR 5, OCCASIONALLY 6 LATER IN HUMBER AND THAMES. MODERATE OR
ROUGH. RAIN THEN FAIR. GOOD.