IETF Logo Mail Archive

Re: [DNSOP] ALT-TLD and (insecure) delgations.

Ted Lemon <mellon@fugue.com> Sat, 04 February 2017 14:14 UTC

Return-Path: <mellon@fugue.com>
X-Original-To: dnsop@ietfa.amsl.com
Delivered-To: dnsop@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9D185129AF3 for <dnsop@ietfa.amsl.com>; Sat, 4 Feb 2017 06:14:25 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.7
X-Spam-Level:
X-Spam-Status: No, score=-0.7 tagged_above=-999 required=5 tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=fugue-com.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 59fYv-kQEvZa for <dnsop@ietfa.amsl.com>; Sat, 4 Feb 2017 06:14:24 -0800 (PST)
Received: from mail-qt0-x22d.google.com (mail-qt0-x22d.google.com [IPv6:2607:f8b0:400d:c0d::22d]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 38E91129AEE for <dnsop@ietf.org>; Sat, 4 Feb 2017 06:14:24 -0800 (PST)
Received: by mail-qt0-x22d.google.com with SMTP id x49so70849981qtc.2 for <dnsop@ietf.org>; Sat, 04 Feb 2017 06:14:24 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=fugue-com.20150623.gappssmtp.com; s=20150623; h=from:message-id:mime-version:subject:date:in-reply-to:cc:to :references; bh=OUO5hFTksGmBo01bZLxs3oEKc5LC9Kj6uHHBBSALc/I=; b=ZyePmuRMR8Yr560DaxsabJUmQw0rkaX2ijHhG+KYf4YZb7Vu9R/S8BkR8U/FbD+sfa 7rBcFsypnBMmiQlZ4YdyH46mrD0cHcUp9S9ELz99xC0STcfYMyvMorn5QY7feGlVZVCC f3/Ys6ytQ5BFQbdT2CEW7vLdC5oxjT5LHDM9MihGUSiRiSiJrHWKdMUMTbwRCPiLtZYo 0Y1S7IyWB8Pb6s+qZ9Heb9MH+WwKKxCsWwEZSKvp3sxMfLcpXk5HhiEJAghJK1WFpAQ9 mH0BaqB6ffORikLVwLGRlqF6HndVsLKm+I1d3CaGrZLQOptQ2NKb457f7MdcyaSMerqz CXTg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:message-id:mime-version:subject:date :in-reply-to:cc:to:references; bh=OUO5hFTksGmBo01bZLxs3oEKc5LC9Kj6uHHBBSALc/I=; b=GWtYlMXw3PaOLARXbkiUKvTMA/qBsYBQBRh5tVnOKQpiv/RvGT4bpOhUH6o6otoEgL Ay6XeiSPRINbwM2+wMWviquFiMxQUwoyzvxuhh0PAgYja57XK4sNFTbJ6nvC13XTwNye 5TXdevQlt+EOJ3mrAjRgX2Q34a5ND/HfRMlducRvHA38+JxwH1nRy/oQ1jkRk7Azkp16 5Q//cfdJ43B8YBcJgKagRlk7tTcC8YUUlGrjpHqsPxa2MCC38sDiL44zY5lYwZyKbXU1 1bN9fYxgLWw2gJmRheuhPy/VE2Wv1apYW76apr6RRVZidjKAygwXrnC2DyaaS3zlP8i2 3pzw==
X-Gm-Message-State: AMke39nnSDBM3m44r6AmOn40L6/YuushSoZHXtQgDwYrbOLqHlcFueiKIjgPz0Rd7jwJOA==
X-Received: by 10.200.49.249 with SMTP id i54mr2082355qte.3.1486217663365; Sat, 04 Feb 2017 06:14:23 -0800 (PST)
Received: from [10.0.20.229] (c-73-167-64-188.hsd1.ma.comcast.net. [73.167.64.188]) by smtp.gmail.com with ESMTPSA id y194sm6165859qkb.2.2017.02.04.06.14.21 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Sat, 04 Feb 2017 06:14:22 -0800 (PST)
From: Ted Lemon <mellon@fugue.com>
Message-Id: <9920BDF2-E676-4262-9226-46652896E2EF@fugue.com>
Content-Type: multipart/alternative; boundary="Apple-Mail=_7E187897-6E02-4FB8-A4AB-587AE13B7686"
Mime-Version: 1.0 (Mac OS X Mail 10.2 \(3259\))
Date: Sat, 04 Feb 2017 09:14:21 -0500
In-Reply-To: <20170204132943.45609618F1BA@rock.dv.isc.org>
To: Mark Andrews <marka@isc.org>
References: <CAHw9_i+8PA3FQx8FqW-xQ_96it7k-g5UrMB7fxARUi1gwQ++hw@mail.gmail.com> <20170201204455.6nymmjlj5lzq2ect@mycre.ws> <CAHw9_iJ50jWgsAe+hRKUtubfAtpt7+GEeCKEASzypcf86+4nYA@mail.gmail.com> <20170204015158.GB67739@mx2.yitter.info> <5BB1A3F5-5EFB-4164-9720-68E262E58636@fugue.com> <20170204021353.GF67739@mx2.yitter.info> <20170204132943.45609618F1BA@rock.dv.isc.org>
X-Mailer: Apple Mail (2.3259)
Archived-At: <https://mailarchive.ietf.org/arch/msg/dnsop/Zwqd3XllGoCuk9f6_1iSWv7Z7WU>
Cc: dnsop@ietf.org, Andrew Sullivan <ajs@anvilwalrusden.com>
Subject: Re: [DNSOP] ALT-TLD and (insecure) delgations.
X-BeenThere: dnsop@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnsop>, <mailto:dnsop-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dnsop/>
List-Post: <mailto:dnsop@ietf.org>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 04 Feb 2017 14:14:25 -0000

On Feb 4, 2017, at 8:29 AM, Mark Andrews <marka@isc.org> wrote:
> 
> It's a problem for ALL special names.  BOGUS / SERVFAIL isn't the
> response leaked names should get.  Its bad engineering.

What is the response leaked names should get, and why is that the correct response?   Why is SERVFAIL not the correct response?

v2.23.0 | Report a Bug | By Email