IETF Logo Mail Archive

Re: [DNSOP] draft-ietf-dnsop-rfc6598-rfc6303-01

Joe Abley <jabley@hopcount.ca> Thu, 14 August 2014 16:20 UTC

Return-Path: <jabley@hopcount.ca>
X-Original-To: dnsop@ietfa.amsl.com
Delivered-To: dnsop@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 671071A0884 for <dnsop@ietfa.amsl.com>; Thu, 14 Aug 2014 09:20:45 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.001
X-Spam-Level:
X-Spam-Status: No, score=-2.001 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, SPF_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 26JY5PcDDhMM for <dnsop@ietfa.amsl.com>; Thu, 14 Aug 2014 09:20:43 -0700 (PDT)
Received: from mail-vc0-x232.google.com (mail-vc0-x232.google.com [IPv6:2607:f8b0:400c:c03::232]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 65FA71A088A for <dnsop@ietf.org>; Thu, 14 Aug 2014 09:20:40 -0700 (PDT)
Received: by mail-vc0-f178.google.com with SMTP id la4so1693361vcb.9 for <dnsop@ietf.org>; Thu, 14 Aug 2014 09:20:39 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hopcount.ca; s=google; h=content-type:mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=zq/sytnqSDcCPVyqLTmfoeNcb9ksAKCZ8R9GTfDyOE4=; b=RhwdTDHmNBsnYgH6ak8yNf+SXOO3t6BrCTRUOtbT+Q/VPHcaFockFmeqyapDWuAXKL gXjyfTMrB1jbj7hx3nfp+TfmgPY7sz6OKaqr9sM13TrOYpSzZsU0mN2shgr7w42PRW+B yQoTS4FPp11Yy2TuApDrrKlJ3d7ARNJ0voV9U=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:content-type:mime-version:subject:from :in-reply-to:date:cc:content-transfer-encoding:message-id:references :to; bh=zq/sytnqSDcCPVyqLTmfoeNcb9ksAKCZ8R9GTfDyOE4=; b=Knw0Xkfq68od74hmPaJsKz42xbS3nW8Xbk0K6FrV56hgOlF1towG+3WFwjbhjClJ65 KERUP2WItZbvYKxQFIoDPRsUXOJIxHJ4rj3dbawLeBOcHKW2IIWUWVcYiwN4UjaKQq3q Wr9SUtMm26xrSEXnwho6jOgCQ78odE1cZ189I5+Ng8dymvgG2Z+JtvCOOVpT9G+roidT +GGKYnjrQOI6a59LqTi4U+IlXzv2FQ/59+uC/WnJ0LTckkTRlQg5ee6SbkXDQsjdN8Rv EEnwJ4DRzXaXx/ULfXxBAciPn397YdrkbQNyuADqDOFx78OuVJApupkoRNZ8YbvUjLrw aTbg==
X-Gm-Message-State: ALoCoQkeer1Bt57FIt+mxwgI0oGDqbyOuZD4avS1AoU6eB1L79DwNOi8CopFNGzx4h3zhjDXbLSx
X-Received: by 10.220.79.68 with SMTP id o4mr3799469vck.38.1408033239564; Thu, 14 Aug 2014 09:20:39 -0700 (PDT)
Received: from [10.10.0.184] ([186.1.202.38]) by mx.google.com with ESMTPSA id qr1sm15817415vdb.6.2014.08.14.09.20.35 for <multiple recipients> (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Thu, 14 Aug 2014 09:20:39 -0700 (PDT)
Content-Type: text/plain; charset="us-ascii"
Mime-Version: 1.0 (Mac OS X Mail 7.3 \(1878.6\))
From: Joe Abley <jabley@hopcount.ca>
In-Reply-To: <20140814160453.1C7931CCE03D@rock.dv.isc.org>
Date: Thu, 14 Aug 2014 12:19:51 -0400
Content-Transfer-Encoding: quoted-printable
Message-Id: <7EA38D42-3915-403E-AFE3-C0A8E4A391BF@hopcount.ca>
References: <20140814001610.3124D1CC688D@rock.dv.isc.org> <86AC48C0-4DFF-4286-A9B1-2A6BE3D14BDC@hopcount.ca> <20140814160453.1C7931CCE03D@rock.dv.isc.org>
To: Mark Andrews <marka@isc.org>
X-Mailer: Apple Mail (2.1878.6)
Archived-At: http://mailarchive.ietf.org/arch/msg/dnsop/Yc1shsxGHFGoJJf0u1ehzfW_r1o
Cc: dnsop@ietf.org
Subject: Re: [DNSOP] draft-ietf-dnsop-rfc6598-rfc6303-01
X-BeenThere: dnsop@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnsop>, <mailto:dnsop-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dnsop/>
List-Post: <mailto:dnsop@ietf.org>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 14 Aug 2014 16:20:45 -0000

On 14 Aug 2014, at 12:04, Mark Andrews <marka@isc.org> wrote:

> The assignements go:
> 
> 	0.0.0.0/0 IANA		(IN-ADDR.ARPA)
> 	100.0.0.0/8 ARIN	(100.IN-ADDR.ARPA)
> 	100.64.0.0/10 IANA	(64.100.IN-ADDR.ARPA through
> 				 127.100.IN-ADDR.ARPA)
> 
> The 100.64/10 address range is assigned to IANA.  IANA has not yet
> setup IN-ADDR.ARPA zones and servers for this range.

Since there is no secure delegation in place right now, anybody who wants to set up their own reverse DNS (and e.g. point their resolvers at it through resolver configuration) can do so, right? So there's no current problem?

Are you reacting to some other suggestion that one or both of ARIN and IANA are keen to insert a secure delegation for each of those 64 zones?

It seems to me that no delegation is a perfectly reasonable steady state, so long as ARIN doesn't mind the NXDOMAIN load from leaked queries. An alternative to a delegation (if they do care) would be a DNAME redirection to EMPTY.AS112.ARPA once that is available.


Joe

v2.46.0 | Report a Bug | By Email | System Status