Return-Path: X-Original-To: dnsop@ietfa.amsl.com Delivered-To: dnsop@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 22C49128CF2 for ; Sun, 4 Nov 2018 20:17:17 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=isoc.org Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6AxB2cdwufP9 for ; Sun, 4 Nov 2018 20:17:14 -0800 (PST) Received: from NAM02-SN1-obe.outbound.protection.outlook.com (mail-sn1nam02on0051.outbound.protection.outlook.com [104.47.36.51]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 77CE4128B14 for ; Sun, 4 Nov 2018 20:17:14 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=isoc.org; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=xj66sxhod/dLrG4DN7IPR658pqIHrSyd4YTeL4LrG3w=; b=HM1yPEdwxk9qzlGYstrtDkalft9B/wCmma3qfpNfABHEAWqFhZw3ZjyHDA60Fwh0p7tWk/9t30MWFkPCHnHEFYla0fz8YFW3JWhp5f1Ne2h76kKRbIILOB/kIFEaZaRI5Sy9traJbCSJOu1ph7DNssSKAqmI9zM7zN1919KXy1c= Received: from BY1PR0601MB1320.namprd06.prod.outlook.com (10.161.206.139) by BY1PR0601MB1159.namprd06.prod.outlook.com (10.160.196.22) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1294.26; Mon, 5 Nov 2018 04:16:20 +0000 Received: from BY1PR0601MB1320.namprd06.prod.outlook.com ([fe80::c90e:a45:e216:57c9]) by BY1PR0601MB1320.namprd06.prod.outlook.com ([fe80::c90e:a45:e216:57c9%2]) with mapi id 15.20.1294.028; Mon, 5 Nov 2018 04:16:20 +0000 From: Dan York To: "dnsop@ietf.org WG" Thread-Topic: FYI - in v6OPS today - IPv6-Ready DNS/DNSSSEC Infrastructure Thread-Index: AQHUdL5NY8HmJjSYO0WuqxyeWunIvw== Date: Mon, 5 Nov 2018 04:16:19 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=york@isoc.org; x-originating-ip: [31.133.129.154] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; BY1PR0601MB1159; 6:f4utJk0HSkhusLCmGs4orSpMMtsPtdq8ZERoprWoRiEaOWuRslsqOLMEA/8szYPmPBDZ91Apbbiqp+1vfjQKpxINzxTQrb60P9pNAxNsO/ZZoLMKx9RcMdOfIGUcnwONZ0bZZnitstdT+qUb91/EIelevW25YYAik++kRnkbraIZjK27h8Y5BRlcNYLaILSSf2AGKQsupKA//4gNOWFUI1OTrszxboX1hBcBK1/uKoFBD0HhWlU21y3MFDS92/hXmmoCovVobnNf1RlnnhLkde3Bpy4YOzRjPoP1ffLANseiffNgUb6crlu76l4PFR2AmyVwzpC6sPyHZ3Xf4o6XuJNPb0gONr5J8hFTXE1eaGvpWmv4QBjWnJFXy98885Hq/EYVSSn0hSr6zls1e+eSpfLw7DRlROZeNNi5DHwJMtDLBKSyPBpKvEbm4sqTGRDwaUk/AvRL/x/YuV0EWhExOg==; 5:gTecdUK0YAhOjmgaKXkhu0fq//N2CunWkzMuu5qHaqT6Jpuh3rzPhbXGyeAlJwTSksuFoOgsvqijAIou9Dq3kUnX3Cm05C0qKNCz21qo6xxWDkZKEGEjFJpzXUd8MjWqZ4PS91acA/sI1ChM2qsCKcglFaoUwFPeooQWrcnmJw4=; 7:XoIBNpHVKrjkuoAtHVEonmXUyQ2L5Zady7YiGHHEYE73Kl576a0/8egElp5JxIHIooEZdg1CZfxHo7gjYApGVZ48ZFiHZWv2XJcQPOOczNOuZJpcwToeDHm/PqtuLmPz5vAKd1n5sPHZVg9AC7DelA== x-ms-exchange-antispam-srfa-diagnostics: SOS; x-ms-office365-filtering-correlation-id: d527a2bc-46fb-4bf2-123c-08d642d57067 x-microsoft-antispam: BCL:0; PCL:0; RULEID:(7020095)(4652040)(8989299)(5600074)(711020)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(2017052603328)(7153060)(7193020); SRVR:BY1PR0601MB1159; x-ms-traffictypediagnostic: BY1PR0601MB1159: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(120809045254105)(31418570063057); x-ms-exchange-senderadcheck: 1 x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(6040522)(2401047)(8121501046)(5005006)(93006095)(93001095)(10201501046)(3002001)(3231382)(944501410)(4982022)(52105095)(148016)(149066)(150057)(6041310)(20161123564045)(20161123560045)(20161123562045)(20161123558120)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(201708071742011)(7699051)(76991095); SRVR:BY1PR0601MB1159; BCL:0; PCL:0; RULEID:; SRVR:BY1PR0601MB1159; x-forefront-prvs: 08476BC6EF x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(136003)(39840400004)(366004)(396003)(376002)(346002)(189003)(69234005)(199004)(25786009)(99286004)(8936002)(5660300001)(6916009)(6486002)(86362001)(97736004)(6116002)(606006)(316002)(3846002)(7736002)(105586002)(6436002)(33656002)(486006)(256004)(83716004)(14444005)(476003)(6306002)(2616005)(54896002)(53376002)(81166006)(81156014)(82746002)(966005)(106356001)(236005)(2900100001)(6512007)(478600001)(53936002)(71200400001)(71190400001)(186003)(26005)(2906002)(36756003)(66066001)(68736007)(6506007)(102836004)(8676002)(14454004)(32563001); DIR:OUT; SFP:1101; SCL:1; SRVR:BY1PR0601MB1159; H:BY1PR0601MB1320.namprd06.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: isoc.org does not designate permitted sender hosts) x-microsoft-antispam-message-info: nYycWo7riw4fHVM6JE/GmrhQwGJ097ihHupDLjvh5UczYX7Sz0K07vY+sz70h5u0IFx8jQmED0ETtEwh7CVAAjikidEDXQavvJG6pwgiokhY17+YTYnoYDzko4rmlLeBhIvG6r6H3d3PQeoucx4y8m3dHV6w/MqQGYfN4Kgs75/X726YLCMw7u6+51eDKjYy93vHCQc8QEzo8Co0L/MZF7I7nu9Eptwfh+SXPnDT/nIuQV1rbVhd9BJ+er8u0qZKWcZBQUxt+YSaj62artoXIOWz0gXs0R9Iv8J50b8MG8hQdg2hkuEjbn79tpq5yhOFzuLg/Jzmo5XpOlqVYzHn1bpvyFSFiKxH8gpiuK6tP/M= spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_E751BC610F9945C296A8FE970B237CCDisocorg_" MIME-Version: 1.0 X-OriginatorOrg: isoc.org X-MS-Exchange-CrossTenant-Network-Message-Id: d527a2bc-46fb-4bf2-123c-08d642d57067 X-MS-Exchange-CrossTenant-originalarrivaltime: 05 Nov 2018 04:16:19.8282 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 89f84dfb-7285-4810-bc4d-8b9b5794554f X-MS-Exchange-Transport-CrossTenantHeadersStamped: BY1PR0601MB1159 Archived-At: Subject: [DNSOP] FYI - in v6OPS today - IPv6-Ready DNS/DNSSSEC Infrastructure X-BeenThere: dnsop@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: IETF DNSOP WG mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 05 Nov 2018 04:17:17 -0000 --_000_E751BC610F9945C296A8FE970B237CCDisocorg_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable FYI, in the v6ops working group right now in Meeting 1 on the 7th floor, th= ere is a draft that will be discussed (after two other drafts are discussed= ) that is: IPv6-Ready DNS/DNSSSEC Infrastructure https://tools.ietf.org/html/draft-bp-v6ops-ipv6-ready-dns-dnssec-00 Abstract: This document defines the timing for implementing a worldwide IPv6-Ready DNS and DNSSEC infrastructure, in order to facilitate the global IPv6-only deployment. A key issue for this, is the need for a global support of DNSSEC and DNS64, which in some scenarios do not work well together. This document states that any DNSSEC signed resources records should include a native IPv6 resource record as the most complete and expedient path to solve any deployment conflict with DNS64 and DNSSEC. Slides: https://datatracker.ietf.org/meeting/103/materials/slides-103-v6ops= -ipv6-ready-dnsdnssec-infrastructure-00 The key point is the conflict between DNS64 and DNSSEC, as described in the= draft here: DNS64 ([RFC6147]) is a widely deployed technology allowing hundreds of millions of IPv6-only hosts/networks to reach IPv4-only resources. DNSSEC is a technology used to validate the authenticity of information in the DNS, however, as DNS64 ([RFC6147]) modifies DNS answers and DNSSEC is designed to detect such modifications, DNS64 ([RFC6147]) can break DNSSEC in some circumstances. I'm passing it along in case others were, like me, not paying attention to = this draft. Dan -- Dan York Director, Content & Web Strategy, Internet Society york@isoc.org +1-802-735-1624 Jabber: york@jabber.isoc.org Skype: danyork = http://twitter.com/danyork http://www.internetsociety.org/ --_000_E751BC610F9945C296A8FE970B237CCDisocorg_ Content-Type: text/html; charset="us-ascii" Content-ID: <0716E26AE340A54F811711F1DBA5946B@namprd06.prod.outlook.com> Content-Transfer-Encoding: quoted-printable
FYI, in the v6ops working group right now in Meeting 1 on t= he 7th floor, there is a draft that will be discussed (after two other draf= ts are discussed) that is:

IPv6-Ready DNS/DNSSSEC In=
frastructure
https://tools.ietf.org/html/draft-bp-v6ops-= ipv6-ready-dns-dnssec-00

Abstract:

   This document defines the timing for implement= ing a worldwide
   IPv6-Ready DNS and DNSSEC infrastructure, in o= rder to facilitate the
   global IPv6-only deployment.

   A key issue for this, is the need for a global= support of DNSSEC and
   DNS64, which in some scenarios do not work wel= l together.  This
   document states that any DNSSEC signed resourc= es records should
   include a native IPv6 resource record as the m= ost complete and
   expedient path to solve any deployment conflic= t with DNS64 and DNSSEC.

Slides: https://datatracker.ietf.org/meeting/103/materials/slides-103-v6op= s-ipv6-ready-dnsdnssec-infrastructure-00

The key point is the conflict between DNS64 and DNSSEC, as = described in the draft here:

    DNS64 ([RFC6147]) is a widely deployed techno= logy allowing hundreds
   of millions of IPv6-only hosts/networks to rea= ch IPv4-only resources.
   DNSSEC is a technology used to validate the au= thenticity of
   information in the DNS, however, as DNS64 ([RF= C6147]) modifies DNS
   answers and DNSSEC is designed to detect such = modifications, DNS64
   ([RFC6147]) can break DNSSEC in some circumsta= nces.

I'm passing it along in case others were, like me, not payi= ng attention to this draft.

Dan

--
Dan York
Director, Content & Web Strategy, Internet Society
york@isoc.org   +1= -802-735-1624 
Jabber: york@jabber.isoc= .org  Skype: danyork   http://twitter.com/danyor= k

http://www.internets= ociety.org/

--_000_E751BC610F9945C296A8FE970B237CCDisocorg_--