Re: [DNSOP] More after onion? was Re: Some distinctions and a request

Warren Kumari <warren@kumari.net> Wed, 01 July 2015 18:23 UTC

Return-Path: <warren@kumari.net>
X-Original-To: dnsop@ietfa.amsl.com
Delivered-To: dnsop@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 73DF51AC3B9 for <dnsop@ietfa.amsl.com>; Wed, 1 Jul 2015 11:23:22 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.978
X-Spam-Level:
X-Spam-Status: No, score=-1.978 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FM_FORGED_GMAIL=0.622, RCVD_IN_DNSWL_LOW=-0.7] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id oaAXOonZzkWF for <dnsop@ietfa.amsl.com>; Wed, 1 Jul 2015 11:23:19 -0700 (PDT)
Received: from mail-oi0-f48.google.com (mail-oi0-f48.google.com [209.85.218.48]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 577C11AC3AD for <dnsop@ietf.org>; Wed, 1 Jul 2015 11:23:16 -0700 (PDT)
Received: by oiyy130 with SMTP id y130so38471199oiy.0 for <dnsop@ietf.org>; Wed, 01 Jul 2015 11:23:15 -0700 (PDT)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:date :message-id:subject:from:to:cc:content-type :content-transfer-encoding; bh=YDmW28smHEcWwt+PBE92OoyHm4pcBLvSu5briqRvZxY=; b=cEdJ2KKGxnDBvQbSphuZ6gwuGa5xDl8vp87Z6NUbiuNVnNTfuw/wO/7srSCvOrACLJ szhACiEj3DQabd6Okn92NfcFkcjNWNNX+Z/WP76nE+2NAMJFBou+i4dZhEs0hIMyWIJ4 ntj5K68YobDIcgSlzruMpfJy6E5Vu2kBUQA0ukSMp3xFEVFpFc/DguyvdP6RiNqh8Jbu PwbuDU9QiMkQmMYmr0wa9vO3rsqU2Czfjgt48wbWAKXQwDY8Dpx3HwXOaLaB/tQs0hMm Wzrnihp1v44qYAM88dZyjYsEUzNQLrQsUGYzMqcEoeX3/k8L69ZXG1dIR4trWtsfVled VdiA==
X-Gm-Message-State: ALoCoQkTmClUg2WjZdQKoGl4f5DSPTMm1UDGHSClBR+8M/HviKGzJpjguQzvA+N76rbHCQ2TV93O
MIME-Version: 1.0
X-Received: by 10.182.135.202 with SMTP id pu10mr24917017obb.52.1435774995711; Wed, 01 Jul 2015 11:23:15 -0700 (PDT)
Received: by 10.202.203.134 with HTTP; Wed, 1 Jul 2015 11:23:15 -0700 (PDT)
In-Reply-To: <DF014EDF-819B-47BB-817D-AB13D57A57E9@gmail.com>
References: <D1B951E7.C996%edward.lewis@icann.org> <B26365D7-11B3-441D-BED3-5FEFB671B0FA@gmail.com> <D1B966DB.C9AC%edward.lewis@icann.org> <DF014EDF-819B-47BB-817D-AB13D57A57E9@gmail.com>
Date: Wed, 01 Jul 2015 14:23:15 -0400
Message-ID: <CAHw9_iJQ+Ydu4m-dd8cMOvVtYkKdEYMO_bx1Z5GBX3jLVgq=Jg@mail.gmail.com>
From: Warren Kumari <warren@kumari.net>
To: Suzanne Woolf <suzworldwide@gmail.com>
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Archived-At: <http://mailarchive.ietf.org/arch/msg/dnsop/VwzFVz0phQNo_uS-fykKWCzK08E>
Cc: Edward Lewis <edward.lewis@icann.org>, "dnsop@ietf.org" <dnsop@ietf.org>, str4d <str4d@i2pmail.org>
Subject: Re: [DNSOP] More after onion? was Re: Some distinctions and a request
X-BeenThere: dnsop@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnsop>, <mailto:dnsop-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dnsop/>
List-Post: <mailto:dnsop@ietf.org>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 01 Jul 2015 18:23:22 -0000

On Wed, Jul 1, 2015 at 10:08 AM, Suzanne Woolf <suzworldwide@gmail.com> wrote:
> Ed,
>
> First-- apologies for the misunderstanding.
>
> On Jul 1, 2015, at 9:53 AM, Edward Lewis <edward.lewis@icann.org> wrote:
>>
>> Trying to be more clear, I have in the past imagined that today someone is
>> inventing a new communications technology, in 6 months will need to cobble
>> an identifier space and in 2 years the IETF-connected crowd detects
>> significant deployment of this and needs to decide whether to register a
>> TLD to avoid name collisions.  I've been told that this wouldn't happen
>> because the IETF will have rules - which I am skeptical would "prevent"
>> the situation from happening.
>
> I don't think we have "rules" or even guidelines now that have any chance of preventing it.
>
> I agree we'll never prevent it completely; it's the nature of the DNS and the internet that people can do things with names and they don't have to ask the IETF first.
>
> But I don't think it's impossible that we'll be able to provide guidance, such that developers who follow it are reasonably sure of avoiding the various types of collisions and ambiguities we're concerned about-- and such that there's a clear basis for saying "You're doing something outside of the guidance we can provide about how names work in the internet, you're on your own."


<Warren points at ALT-TLD>

Yup, we will not be able to prevent people from using an identifier
space that looks like a DNS name not rooted in the DNS, but we *can*
provide them with guidance and a safe place to do this sort of thing,
namely under the .alt TLD.


>
>> To underscore - I am not against the innovation.  I am urging that the
>> processes put in place are future proof by being "reactionary" - reacting
>> to the new names, not trying to fend off the situation.  I.e., in
>> agreement with the words below "trying to apply RFC 6761 and finding that
>> it remains subjective".
>
> This supports the initial suggestion that we need to get serious about a 6761bis, am I correct?

I believe so, but instead of simply raising the bar to get a special
use name (which will simply result in people squatting more), I think
we need to provide solid, usable advice and an option for people...

W


>
>
> thanks,
> Suzanne
>
>>
>> On 7/1/15, 9:05, "Suzanne Woolf" <suzworldwide@gmail.com> wrote:
>>
>>> (no hats, for the moment)
>>>
>>> Ed,
>>>
>>> It seems to me that this is exactly the issue: we've already had multiple
>>> drafts requesting new entries in the special use names registry, and
>>> expect more. Your note sounds as if you're fairly sanguine about "a
>>> stream of unpredictable requests"; however, based on what we've seen so
>>> far, I admit I'm not.
>>>
>>> I'm still re-immersing in DNSOP after being entirely absorbed in other
>>> work the last couple of weeks, but I want to support us continuing this
>>> discussion, because it seems to me that the point Andrew started the
>>> thread to make is valid: we don't have a coherent view of how the
>>> relevant namespaces (based on DNS protocol, compatible with DNS protocol
>>> but intended for different protocol use, or otherwise) interact.
>>>
>>> The painful immediate consequence is that we're trying to apply RFC 6761
>>> and finding that it remains subjective to do so, with an element of
>>> "beauty contest" in the deliberations that means outcomes are
>>> unpredictable. There's no meaningful guidance we can give developers on
>>> what names it's "safe" for them to use in new protocols, or even for
>>> specific uses in-protocol, and as Andrew and others have pointed out,
>>> there may even be ambiguity about what our own registries mean in
>>> protocol or operational terms.
>>>
>>> Longer term, this lack of clarity has implications for both architecture
>>> and policy for the DNS, including our ability to support innovation and
>>> to coordinate with other groups in the IETF and beyond.
>>>
>>>
>>> best,
>>> Suzanne
>>>
>>>
>>> On Jul 1, 2015, at 8:26 AM, Edward Lewis <edward.lewis@icann.org> wrote:
>>>
>>>> On 7/1/15, 1:47, "DNSOP on behalf of str4d" <dnsop-bounces@ietf.org on
>>>> behalf of str4d@i2pmail.org> wrote:
>>>>> .onion and .i2p (and to my knowledge, the other proposed P2P-Names
>>>>> TLDs too) have to conform to DNS rules in order to be usable in legacy
>>>>> applications that expect domain names.
>>>>
>>>> I'd been told that "onion." was a one-time thing, that in the future
>>>> conflicts wouldn't happen.  What I read in the quoted message is that
>>>> "onion."'s request isn't a one-time thing but a sign of things to come.
>>>>
>>>> I'm sympathetic to the use the path of least resistance - e.g., use
>>>> names
>>>> that syntactically are DNS names - instead of building a separate
>>>> application base.  I expect innovation to be free-form and thus a stream
>>>> of unpredictable requests to reserve names for special purposes,
>>>> including
>>>> DNS-like names.
>>>>
>>>> What DNSOP can comment on is how the DNS "reacts" to names, whether in
>>>> protocol or operational convention, once they are known before they
>>>> achieve some degree of widespread adoption. To what extent is an effort
>>>> made (by whomever) to detect these budding namespaces, is this
>>>> proactive?
>>>> _______________________________________________
>>>> DNSOP mailing list
>>>> DNSOP@ietf.org
>>>> https://www.ietf.org/mailman/listinfo/dnsop
>>>
>
> _______________________________________________
> DNSOP mailing list
> DNSOP@ietf.org
> https://www.ietf.org/mailman/listinfo/dnsop



-- 
I don't think the execution is relevant when it was obviously a bad
idea in the first place.
This is like putting rabid weasels in your pants, and later expressing
regret at having chosen those particular rabid weasels and that pair
of pants.
   ---maf