Re: [DNSOP] Interim DNSOP WG meeting on Special Use Names: some reading material

Paul Hoffman <paul.hoffman@vpnc.org> Sat, 09 May 2015 03:10 UTC

Return-Path: <paul.hoffman@vpnc.org>
X-Original-To: dnsop@ietfa.amsl.com
Delivered-To: dnsop@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 49FE21A8A48 for <dnsop@ietfa.amsl.com>; Fri, 8 May 2015 20:10:46 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: 0.552
X-Spam-Level:
X-Spam-Status: No, score=0.552 tagged_above=-999 required=5 tests=[BAYES_40=-0.001, HELO_MISMATCH_COM=0.553] autolearn=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id KeIOKe6SmZyO for <dnsop@ietfa.amsl.com>; Fri, 8 May 2015 20:10:42 -0700 (PDT)
Received: from proper.com (Opus1.Proper.COM [207.182.41.91]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A01891A8A43 for <dnsop@ietf.org>; Fri, 8 May 2015 20:10:42 -0700 (PDT)
Received: from [10.20.30.101] (50-1-98-218.dsl.dynamic.fusionbroadband.com [50.1.98.218]) (authenticated bits=0) by proper.com (8.15.1/8.14.9) with ESMTPSA id t493AfAK039665 (version=TLSv1 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO) for <dnsop@ietf.org>; Fri, 8 May 2015 20:10:42 -0700 (MST) (envelope-from paul.hoffman@vpnc.org)
X-Authentication-Warning: proper.com: Host 50-1-98-218.dsl.dynamic.fusionbroadband.com [50.1.98.218] claimed to be [10.20.30.101]
Content-Type: text/plain; charset="utf-8"
Mime-Version: 1.0 (Mac OS X Mail 8.2 \(2098\))
From: Paul Hoffman <paul.hoffman@vpnc.org>
In-Reply-To: <alpine.OSX.2.11.1505082118060.31363@ary.lan>
Date: Fri, 08 May 2015 20:10:41 -0700
Content-Transfer-Encoding: quoted-printable
Message-Id: <0902600F-134B-4688-9CDD-1ACB23431DDE@vpnc.org>
References: <20150508193400.55273.qmail@ary.lan> <FF464258-0C33-45CC-A684-BAB7BCE8A8FB@gmail.com> <alpine.OSX.2.11.1505082118060.31363@ary.lan>
To: DNSOP WG <dnsop@ietf.org>
X-Mailer: Apple Mail (2.2098)
Archived-At: <http://mailarchive.ietf.org/arch/msg/dnsop/VOpYmD0kXmVuol6ZF-YorNVRmIk>
Subject: Re: [DNSOP] Interim DNSOP WG meeting on Special Use Names: some reading material
X-BeenThere: dnsop@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnsop>, <mailto:dnsop-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dnsop/>
List-Post: <mailto:dnsop@ietf.org>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 09 May 2015 03:10:46 -0000

> It's a reasonable question, but I think a reasonable answer in some circimstances is "yes".
> 
> Let's say we found that there's some online thing we never heard of before, but it turns out that 100,000,000 people in India and China use it, it uses private names in .SECRET, and people looking at DNS logs confirm that they're seeing leakage of .SECRET names.  Beyond rolling our eyes and saying we wish they hadn't done that, what else should we do? Why shouldn't we reserve it?  The number of possible TLDs is effectively unlimited, striking one more off the list that might be sold in the future doesn't matter.  This is engineering, not ideally what we might have done with a blank slate, but the best we can do under the circumstances.

Let's say it is only 100,000 people. Then what?

What if it is name that makes some sense both as a private name and a public name? Like ".ibm"? (For those not following along, .ibm is a new TLD that is recently allocated.)

Instead of throwing out narrow examples, it might help the WG to have some specific goals.

- Will the IETF require some specific metrics for RFC 6761 reservations?

  - If yes, what are those metrics?

  - If no, who makes the non-specific decision?

>> Furthermore, given that ICANN has already said they won’t delegate these names in particular, how is it helpful for the IETF to also add them to the Special Use Names registry?
> 
> I believe that they're currently blocked in the current new gTLD round, but not necessarily beyond that.  

According to <https://www.icann.org/resources/pages/name-collision-ro-faqs-2014-08-01-en>: "The delegation of .CORP, .HOME and .MAIL has been deferred indefinitely. ICANN will collaborate with the technical and security communities to determine the best way to handle these strings in the long term."

--Paul Hoffman