Re: [DNSOP] HTTPS and SVBC key names.

On Mon, 20 Jul 2020 at 22:54, Ben Schwartz <bemasc@google.com> wrote:

The unknown-key format is designed more for authoring than reading.  As an
> author, it works somewhat better than your example.  For instance, your
> key1 could be written as
>
> key1=\005h3-29\005h3-28\005h3-27\002h2
>

It is not as easy as you might think.  This all needs to work on EBCDIC and
UTF8 platforms.
I plan to kick the problem into the long grass for now.

 That seems more intelligible than hex or base64.

Am I correct in thinking that the key5 base64 is decoded at RR creation,
not by the eventual consumer?

In short, the unknown-key format is fairly usable for authoring fields
> whose values are plain text or numeric octets, since a human author can
> choose escape codes or ASCII characters as appropriate.  A renderer (by
> definition) has no idea what the contents mean, so it can work well for
> plain text or numeric octets but not both.
>

Exactly!   Which is why I am where I am.

With the addition of comments for the recognized keys and fields, I think
> you're probably right.  However, when authoring a zone file I would hate to
> have to use RFC 3597 hex for the whole record just to add one key that my
> parser doesn't support yet.  Also, if most future keys turn out to have
> ASCII plaintext values (e.g. URLs), an unknown key renderer that uses ASCII
> symbols where possible might turn out to work quite well.
>

I am not suggesting that you fish about in RFC3597 format.

If you are authoring from scratch than you can use this form:

my $rr = new Net::DNS::RR <<'END';
    example.net.        300     IN      HTTPS   1 target.example.net.
        alpn=h3-29,h3-28,h3-27,h2
        no-default-alpn
        ...
        key65333=...
    END

If thou coverteth thy neighbour's RR in RFC3597 format (contrary to Exodus
20:17), there are the necessary tools to modify it:
        $value = $rr->keyNN();          # access a value (in your favoured
format)
        $rr->keyNN($value);             # assign a value
        $rr->keyNN(undef);              # delete a key

--Dick

_______________________________________________
>>>>>>>
>>>>>> DNSOP mailing list
>>>>>> DNSOP@ietf.org
>>>>>> https://www.ietf.org/mailman/listinfo/dnsop
>>>>>>
>>>>>