Re: [DNSOP] More after onion? was Re: Some distinctions and a request

Warren Kumari <warren@kumari.net> Wed, 01 July 2015 20:59 UTC

Return-Path: <warren@kumari.net>
X-Original-To: dnsop@ietfa.amsl.com
Delivered-To: dnsop@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id F2EDE1ACD9A for <dnsop@ietfa.amsl.com>; Wed, 1 Jul 2015 13:59:55 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.978
X-Spam-Level:
X-Spam-Status: No, score=-1.978 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FM_FORGED_GMAIL=0.622, RCVD_IN_DNSWL_LOW=-0.7] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TcaRlcq_B-YI for <dnsop@ietfa.amsl.com>; Wed, 1 Jul 2015 13:59:53 -0700 (PDT)
Received: from mail-ob0-f172.google.com (mail-ob0-f172.google.com [209.85.214.172]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C28551ACD93 for <dnsop@ietf.org>; Wed, 1 Jul 2015 13:59:52 -0700 (PDT)
Received: by obbop1 with SMTP id op1so36705881obb.2 for <dnsop@ietf.org>; Wed, 01 Jul 2015 13:59:52 -0700 (PDT)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:date :message-id:subject:from:to:cc:content-type; bh=qvitnon4DNuC/7Ev6j2UipddDzxVOCWih1LNTzPlNew=; b=EIlBnqvFI5j2kLYVRQCkuMTpIqx+4jZUEtjyHoqeVy06Ss3E36tEFzXiJ7oWM6IPUb 3PhHhIrVyoWB8FHiZuh3Gu4enUVFkrvtBI4aTmtIYzh571aGEY268+PeZZVrUK/5Y72B /lAQ9WoldZTuwBqFXzu76ziv0EkAW5CW8dEnhDPzBULHCGerGwWnzRE/ejHEGNl1p/oF I/IribS7cVr0NAwkIKQiTVvOMnhoR4RSz0sVDlSJ0z5VopIObKd9nMfEVnctaglAR1tQ RZon4nYO+vmSKtNQ1x5gLY/AoyaFZsKqTYMdeZbUlyzhLTiM5cnsYJN7MACjaSIMnro2 1w0g==
X-Gm-Message-State: ALoCoQnXnGAxArugxDXDc3Ulkd8i5m5a3sT4kvgQcUEOwf9wGfZOzlvTNGTTZTMLm8/m/VKOE6OI
MIME-Version: 1.0
X-Received: by 10.60.56.97 with SMTP id z1mr28182952oep.59.1435784392268; Wed, 01 Jul 2015 13:59:52 -0700 (PDT)
Received: by 10.202.203.134 with HTTP; Wed, 1 Jul 2015 13:59:52 -0700 (PDT)
In-Reply-To: <CAL02cgQUmvDXHwokoL-ubmg0DpQ1XKRZ53W0n50PBYEBJmTdfQ@mail.gmail.com>
References: <D1B951E7.C996%edward.lewis@icann.org> <B26365D7-11B3-441D-BED3-5FEFB671B0FA@gmail.com> <D1B966DB.C9AC%edward.lewis@icann.org> <DF014EDF-819B-47BB-817D-AB13D57A57E9@gmail.com> <CAHw9_iJQ+Ydu4m-dd8cMOvVtYkKdEYMO_bx1Z5GBX3jLVgq=Jg@mail.gmail.com> <CAL02cgQYxFq7C0mWbs92RzoELU-Di9juKc5Dg16SP_ze=BzXxw@mail.gmail.com> <D1B9AD4C.C9EA%edward.lewis@icann.org> <CAL02cgQUmvDXHwokoL-ubmg0DpQ1XKRZ53W0n50PBYEBJmTdfQ@mail.gmail.com>
Date: Wed, 01 Jul 2015 16:59:52 -0400
Message-ID: <CAHw9_iKL1YbWe19Y2APaKKBT3BFkJ4ih2Tdd-BxfMOQjoUPnXg@mail.gmail.com>
From: Warren Kumari <warren@kumari.net>
To: Richard Barnes <rlb@ipv.sx>
Content-Type: text/plain; charset="UTF-8"
Archived-At: <http://mailarchive.ietf.org/arch/msg/dnsop/ZtLSWeifAP2fP2VD60OsOZn0-so>
Cc: Edward Lewis <edward.lewis@icann.org>, "dnsop@ietf.org" <dnsop@ietf.org>
Subject: Re: [DNSOP] More after onion? was Re: Some distinctions and a request
X-BeenThere: dnsop@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnsop>, <mailto:dnsop-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dnsop/>
List-Post: <mailto:dnsop@ietf.org>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 01 Jul 2015 20:59:56 -0000

On Wed, Jul 1, 2015 at 3:05 PM, Richard Barnes <rlb@ipv.sx> wrote:
> On Wed, Jul 1, 2015 at 2:54 PM, Edward Lewis <edward.lewis@icann.org> wrote:
>> On 7/1/15, 14:26, "Richard Barnes" <rlb@ipv.sx> wrote:
>>
>>>We do our best work when we do engineering, not rule-making.  Let's
>>>engineer a solution here that's more appealing than squatting.  For my
>>>money, alt-TLD looks about right.
>>
>> How does that help this:
>>
>>>>>>>>On 7/1/15, 1:47, str4d@i2pmail.org wrote:
>>>>>>>>> .onion and .i2p (and to my knowledge, the other proposed P2P-Names
>>>>>>>>> TLDs too) have to conform to DNS rules in order to be usable in
>>>>>>>>>legacy
>>>>>>>>> applications that expect domain names.
>>
>> Having a alt-TLD is fine.  But what if names are proposed, experimented
>> and deployed outside the sphere of influence of the IETF and/or working
>> group?  Writing this as someone who is unfamiliar with "other proposed
>> P2P-Names" efforts and whether they want to engage with "standards bodies"
>> before deploying.  I've gotten the impression that members of those
>> efforts dislike standards processes - I may be wrong but that's the
>> impression I've gotten from the discussion on this list.
>
> The thing that got .onion to the IETF is that they needed to be
> "official".  (So that they could get certificates for .onion names.)
> Until they get an RFC 6761 registration, they're in a grey zone of
> being neither officially DNS names nor officially not DNS names.
>
> ISTM that the benefit of .alt is that it creates a
> clearly-not-normal-DNS zone.  We would have to check with the CAs, but
> I think that that would do a lot to prevent issues like what .onion
> ran into.  My hope would be that that benefit would make it appealing
> enough for at least some of these other pseudo-TLDs to tolerate the
> switching cost.


It also provides the ability for the IETF to push back more easily on
some applications.

Warning: The following is how this plays out in my mind. Many things
in here are a little odd, but, hey, it's my imagination, not yours...

Dramatis personae:
Applicant: A young, eager developer.
IETF (personification): Played by someone who looks like a cross
between Spencer Dawkins and Scott Bradner. For some reason speaks with
a strong Scottish accent...

Without .alt:
(Applicant enters stage left)
Applicant: I'd like .foo added to the SUN registry please. I've
developed a resolution service that maps from names of cartoon
characters to IP addresses, and is use by many many people. It meets
all the RFC6761 requirements....
IETF: You did a bad thing. You should not have simply squatted on a
label. Anyway, a namespace made up of cartoon character names is
silly...
Applicant: But this meets all of the 6761 requirements, and I've got
dozens of people using this. Anyway, I didn't really have an
alternative, did I? How is anyone supposed to innovate in the
namespace?!
IETF: Well, erm.... you should have... errrr... um... ideally you
would... err... Yeah, OK, we'll make .foo be a Special Use Name, but
don't do it again, OK?!
(Applicant skips off stage left, IETF plods off stage right, looking dejected)


With .alt:
(Applicant enters stage left)
Applicant: I'd like .foo added to the SUN registry please. I've
developed a resolution service that maps from names of cartoon
characters to IP addresses, and is use by many many people. It meets
all the RFC6761 requirements....
IETF: You did a bad thing. You should not have simply squatted on a
label; we have a defined process and location for this sort of thing,
it's called .alt  <IETF waves sheaf of papers> Anyway, cartoon
characters as a basis for a namespace? Really?
Applicant: But I didn't know about .alt... and I've got dozens of
users, dozens I tell you...<shakes fist>
IETF: Sorry, ignorantia legis neminem excusat.
Applicant: Fine....
(Applicant stomps off stage left in a bit of a huff, IETF looks
remarkably smug, then exits stage right to further examine navel)
[ Unfortunately the IETF ends up looking like a bit of an ass here,
but redeems itself later by doing something helpful for the community,
or, at least, entertaining... Hey, I did warn you that things in my
brain are often a little, um, surreal... ]

The IETF can still add things to the RFC6761 / RFC6761bis registries,
but at least has:
A: provided an alternative for people who /want/ to do the right thing and
B: more of a leg to stand on if we need to push back on nuisance
applications in the future.

W


>
> --Richard
>
>>
>> _______________________________________________
>> DNSOP mailing list
>> DNSOP@ietf.org
>> https://www.ietf.org/mailman/listinfo/dnsop
>>
>
> _______________________________________________
> DNSOP mailing list
> DNSOP@ietf.org
> https://www.ietf.org/mailman/listinfo/dnsop



-- 
I don't think the execution is relevant when it was obviously a bad
idea in the first place.
This is like putting rabid weasels in your pants, and later expressing
regret at having chosen those particular rabid weasels and that pair
of pants.
   ---maf