Re: [DNSOP] WGLC: "Considerations for the use of DNS Reverse Mapping"

Samuel Weiler <weiler@watson.org> Fri, 04 April 2008 15:35 UTC

Return-Path: <dnsop-bounces@ietf.org>
X-Original-To: dnsop-archive@optimus.ietf.org
Delivered-To: ietfarch-dnsop-archive@core3.amsl.com
Received: from core3.amsl.com (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id BA84A28C722; Fri, 4 Apr 2008 08:35:55 -0700 (PDT)
X-Original-To: dnsop@core3.amsl.com
Delivered-To: dnsop@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 7110928C45D for <dnsop@core3.amsl.com>; Fri, 4 Apr 2008 08:27:44 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.599
X-Spam-Level:
X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id HHlHgi3yGJBK for <dnsop@core3.amsl.com>; Fri, 4 Apr 2008 08:27:43 -0700 (PDT)
Received: from fledge.watson.org (fledge.watson.org [209.31.154.41]) by core3.amsl.com (Postfix) with ESMTP id ED02F28C452 for <dnsop@ietf.org>; Fri, 4 Apr 2008 08:27:32 -0700 (PDT)
Received: from fledge.watson.org (localhost.watson.org [127.0.0.1]) by fledge.watson.org (8.14.2/8.14.2) with ESMTP id m34FRXjx001839; Fri, 4 Apr 2008 10:27:33 -0500 (EST) (envelope-from weiler@watson.org)
Received: from localhost (weiler@localhost) by fledge.watson.org (8.14.2/8.14.2/Submit) with ESMTP id m34FRWFH001836; Fri, 4 Apr 2008 11:27:33 -0400 (EDT) (envelope-from weiler@watson.org)
X-Authentication-Warning: fledge.watson.org: weiler owned process doing -bs
Date: Fri, 04 Apr 2008 11:27:32 -0400
From: Samuel Weiler <weiler@watson.org>
To: Andrew Sullivan <ajs@commandprompt.com>
In-Reply-To: <20080401213559.GA38207@commandprompt.com>
Message-ID: <20080404003024.F21475@fledge.watson.org>
References: <200803312055.m2VKtQvt039221@drugs.dv.isc.org> <a06240801c417f486db4d@[192.168.1.100]> <20080401213559.GA38207@commandprompt.com>
MIME-Version: 1.0
X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-3.0 (fledge.watson.org [127.0.0.1]); Fri, 04 Apr 2008 10:27:33 -0500 (EST)
X-Mailman-Approved-At: Fri, 04 Apr 2008 08:35:55 -0700
Cc: dnsop@ietf.org
Subject: Re: [DNSOP] WGLC: "Considerations for the use of DNS Reverse Mapping"
X-BeenThere: dnsop@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/pipermail/dnsop>
List-Post: <mailto:dnsop@ietf.org>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=subscribe>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Sender: dnsop-bounces@ietf.org
Errors-To: dnsop-bounces@ietf.org

I have read this document and have no objection to its publication.

That said, I share Jinmei's concern that the recommendation against 
depending on reverse mapping is too weak in the context of the rest of 
the document.  I'm in favor of much stronger language saying "don't 
depend on reverse mapping being available".

While I appreciate the spirit of the text proposed by Ed Lewis, the 
below paragraph seems a bit confusing:

>> The number of address records in an PTR set before tripping the upper
>> limit on what can fit on even a TCP carried DNS message is
>> approximately 4000 for A RR only and about 2000 for AAAA RR only.

I believe that adding explicit mention of the dangers of too many PTR 
RRs at a name will help emphasize the "you really shouldn't depend on 
reverse mapping", which is a good thing.

-- Sam
_______________________________________________
DNSOP mailing list
DNSOP@ietf.org
https://www.ietf.org/mailman/listinfo/dnsop