Re: [DNSOP] Fwd: [homenet] WGLC on "redact" and "homenet-dot"

Steve Crocker <steve@shinkuro.com> Wed, 14 December 2016 16:59 UTC

Return-Path: <steve@shinkuro.com>
X-Original-To: dnsop@ietfa.amsl.com
Delivered-To: dnsop@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 88DBB129E89 for <dnsop@ietfa.amsl.com>; Wed, 14 Dec 2016 08:59:17 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.794
X-Spam-Level:
X-Spam-Status: No, score=-4.794 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, MIME_QP_LONG_LINE=0.001, RP_MATCHES_RCVD=-2.896, SPF_HELO_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id CuzOuAAqO3Mg for <dnsop@ietfa.amsl.com>; Wed, 14 Dec 2016 08:59:15 -0800 (PST)
Received: from execdsl.com (remote.shinkuro.com [50.56.68.178]) by ietfa.amsl.com (Postfix) with ESMTP id A1657129E75 for <dnsop@ietf.org>; Wed, 14 Dec 2016 08:59:15 -0800 (PST)
Received: from dummy.name; Wed, 14 Dec 2016 16:59:14 +0000
Content-Type: multipart/alternative; boundary="Apple-Mail-E87445E3-B062-4D04-96FC-A1D36C09CEC0"
Mime-Version: 1.0 (1.0)
From: Steve Crocker <steve@shinkuro.com>
X-Mailer: iPhone Mail (14B100)
In-Reply-To: <CAPt1N1nCWgEtsMY4s669CHicWppyz9wCVYA9HR0QR_rGOPXSfA@mail.gmail.com>
Date: Wed, 14 Dec 2016 11:59:13 -0500
Content-Transfer-Encoding: 7bit
Message-Id: <CE36578B-780B-4222-B5A8-F6A252259234@shinkuro.com>
References: <4ab2a538-603e-4e7a-3be9-ad75ed459006@bellis.me.uk> <E773C5B4-BA00-488C-9854-C729B671DFBD@gmail.com> <95E95A61-2079-498B-91C6-E98B50B84044@shinkuro.com> <CAPt1N1nCWgEtsMY4s669CHicWppyz9wCVYA9HR0QR_rGOPXSfA@mail.gmail.com>
To: Ted Lemon <mellon@fugue.com>
Archived-At: <https://mailarchive.ietf.org/arch/msg/dnsop/Yw-To1OSCprQJpElCT0mIbPFizk>
Cc: joel jaeggli <joelja@bogus.com>, Suzanne Woolf <suzworldwide@gmail.com>, dnsop <dnsop@ietf.org>, Terry Manderson <terry.manderson@icann.org>
Subject: Re: [DNSOP] Fwd: [homenet] WGLC on "redact" and "homenet-dot"
X-BeenThere: dnsop@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnsop>, <mailto:dnsop-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dnsop/>
List-Post: <mailto:dnsop@ietf.org>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 14 Dec 2016 16:59:17 -0000

The latter.  All DNS answers at all levels should be signed to assure the querier of the integrity of the answer.  This has been the goal and best practice for a very long time.  For example, it was the explicit objective of the quote substantial DNSSEC effort funded by the US Dept of Homeland Security starting in 2004.

Within ICANN, in 2009 we made it a formal requirement of all new gTLDs must be signed.  The ccTLDs are not subject to ICANN rules but they have been gradually moving toward signed status.  Most of the major ccTLDs are signed and many of the others are too.  Detailed maps are created every week by ISOC.

I will also try to contribute to the homenet mailing list.

Steve

Sent from my iPhone

> On Dec 14, 2016, at 11:36 AM, Ted Lemon <mellon@fugue.com> wrote:
> 
> Is this a matter of religious conviction, or is there some issue with unsecured delegations in the root that you are assuming is so obvious that you don't need to tell us about it?   :)
> 
>> On Wed, Dec 14, 2016 at 11:18 AM, Steve Crocker <steve@shinkuro.com> wrote:
>> I am strongly opposed to unsecured delegations in the root zone.  No matter what the problem is, an unsecured delegation is not the answer.
>> 
>> Steve
>> 
>>> On Dec 14, 2016, at 11:11 AM, Suzanne Woolf <suzworldwide@gmail.com> wrote:
>>> 
>>> Hi all,
>>> 
>>> DNSOP participants who are interested in the special use names problem might want to review draft-ietf-homenet-redact (https://datatracker.ietf.org/doc/draft-ietf-homenet-redact/) and draft-ietf-homenet-dot (https://datatracker.ietf.org/doc/draft-ietf-homenet-dot/) for the WGLC on them in the HOMENET wg.
>>> 
>>> WGLC comments should go to the WG list, homenet@ietf.org.
>>> 
>>> If you do, it will also be helpful to look at RFC 7788, which specifies the Home Networking Control Protocol for homenets. 
>>> 
>>> The redact draft is intended to remove the inadvertent reservation of “.home” as the default namespace for homenets in RFC 7788. 
>>> 
>>> The homenet-dot draft is intended to provide a request under RFC 6761 for “.homenet” as a special use name to serve as a default namespace for homenets. It also asks IANA for an unsecured delegation in the root zone to avoid DNSSEC validation failures for local names under “.homenet”. The root zone request to IANA has caused some discussion within the WG, as there’s no precedent for such a request.
>>> 
>>> Terry Manderson mentioned the homenet-dot draft briefly at the mic in Seoul. 
>>> 
>>> The WGLC ends this week.
>>> 
>>> 
>>> Suzanne
>>> 
>>>> Begin forwarded message:
>>>> 
>>>> From: Ray Bellis <ray@bellis.me.uk>
>>>> Subject: [homenet] WGLC on "redact" and "homenet-dot"
>>>> Date: November 17, 2016 at 11:27:08 PM EST
>>>> To: HOMENET <homenet@ietf.org>
>>>> 
>>>> This email commences a four week WGLC comment period on
>>>> draft-ietf-homenet-redact and draft-ietf-homenet-dot
>>>> 
>>>> Please send any comments to the WG list as soon as possible.
>>>> 
>>>> Whilst there was a very strong hum in favour of ".homenet" vs anything
>>>> else during the meeting, and there's some discussion of that ongoing
>>>> here on the list - I'd like us to please keep the discussion of the
>>>> choice of domain separate from other substantive comment about the
>>>> drafts' contents.
>>>> 
>>>> thanks,
>>>> 
>>>> Ray
>>>> 
>>>> _______________________________________________
>>>> homenet mailing list
>>>> homenet@ietf.org
>>>> https://www.ietf.org/mailman/listinfo/homenet
>>> 
>>> _______________________________________________
>>> DNSOP mailing list
>>> DNSOP@ietf.org
>>> https://www.ietf.org/mailman/listinfo/dnsop
>> 
>> 
>> _______________________________________________
>> DNSOP mailing list
>> DNSOP@ietf.org
>> https://www.ietf.org/mailman/listinfo/dnsop
>> 
>