IETF Logo Mail Archive

[DNSOP] Re: Need some help in interpreting EDNS version negotiation

Paul Vixie <paul@redbarn.org> Sat, 02 November 2024 20:35 UTC

Return-Path: <paul@redbarn.org>
X-Original-To: dnsop@ietfa.amsl.com
Delivered-To: dnsop@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B366AC14F5F3 for <dnsop@ietfa.amsl.com>; Sat, 2 Nov 2024 13:35:59 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.104
X-Spam-Level:
X-Spam-Status: No, score=-2.104 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_BLOCKED=0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=redbarn.org
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rPzGkQ4Uy0av for <dnsop@ietfa.amsl.com>; Sat, 2 Nov 2024 13:35:55 -0700 (PDT)
Received: from util.redbarn.org (util.redbarn.org [24.104.150.222]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C89D6C14F603 for <dnsop@ietf.org>; Sat, 2 Nov 2024 13:35:55 -0700 (PDT)
Received: from family.redbarn.org (family.redbarn.org [IPv6:2001:559:8000:cd::5]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "*.redbarn.org", Issuer "RapidSSL TLS RSA CA G1" (not verified)) by util.redbarn.org (Postfix) with ESMTPS id 43158160BB0; Sat, 02 Nov 2024 20:35:55 +0000 (UTC)
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=redbarn.org; s=util; t=1730579755; bh=Ev4TatokWe9Q3NT75oFPeqSRTKpyFWylJTkL7ACVrhY=; h=Date:Subject:In-Reply-To:References:From:To; b=l4netw+eExC4gv4KW5JwIn1KVCw/quM42MP0szqfameQGl/gadbD9KgWgsYvLq8LZ Z0m7l357XztCLGUYgBhrZEol8r8qczloa8zOYPPEHUvnAKzb7hdJXZCH2LHanjplv+ TPM8RDQKT4XgJiL1XtpoNSK87e82r2DV75TeFtQ8=
Received: from [100.81.95.133] (unknown [37.96.3.36]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by family.redbarn.org (Postfix) with ESMTPSA id 170B8C3F22; Sat, 02 Nov 2024 20:35:53 +0000 (UTC)
Date: Sat, 02 Nov 2024 20:35:47 +0000
Message-ID: <517ad7f4-d0a8-4aec-a84f-9b868dc379eb@redbarn.org>
In-Reply-To: <26406.33587.161388.573089@gro.dd.org>
References: <ZyZMEjCgCtczojyX@laperouse.bortzmeyer.org> <26406.33587.161388.573089@gro.dd.org>
From: Paul Vixie <paul@redbarn.org>
To: Dave Lawrence <tale@dd.org>, dnsop@ietf.org
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="--_com.boxer.email_5561755994158948"
Message-ID-Hash: JRQH5IYL5YTTQUKCP2LQFGHC47WPQRPO
X-Message-ID-Hash: JRQH5IYL5YTTQUKCP2LQFGHC47WPQRPO
X-MailFrom: paul@redbarn.org
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-dnsop.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [DNSOP] Re: Need some help in interpreting EDNS version negotiation
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/dnsop/XMCAr9LRwMkTBLw_RkK2FYYOWyY>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dnsop>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Owner: <mailto:dnsop-owner@ietf.org>
List-Post: <mailto:dnsop@ietf.org>
List-Subscribe: <mailto:dnsop-join@ietf.org>
List-Unsubscribe: <mailto:dnsop-leave@ietf.org>

The version number in the initiation is the one that the initiator is expecting in the response. Probably should have made that an array. 


p vixie 


On Nov 2, 2024 19:54, Dave Lawrence <tale@dd.org> wrote:

Stephane Bortzmeyer writes: 
> So, when a responder knows both version 0 and some higher version (say, 
> version 1), can it reply to a EDNS=0 query with a EDNS=1 response? Can 
> we use that for greasing? 

I agree with your reading.  6.1.3 seems quite clear that request = 0 
and response = 0-255 is legit. 

_______________________________________________
DNSOP mailing list -- dnsop@ietf.org
To unsubscribe send an email to dnsop-leave@ietf.org

v2.46.0 | Report a Bug | By Email | System Status