Re: [DNSOP] draft-huston-kskroll-sentinel - naming format?

Joe Abley <jabley@hopcount.ca> Tue, 31 October 2017 15:51 UTC

Return-Path: <jabley@hopcount.ca>
X-Original-To: dnsop@ietfa.amsl.com
Delivered-To: dnsop@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AAC1413F79E for <dnsop@ietfa.amsl.com>; Tue, 31 Oct 2017 08:51:39 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.7
X-Spam-Level:
X-Spam-Status: No, score=-2.7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_LOW=-0.7] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=hopcount.ca
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id nrypuEV2e0p3 for <dnsop@ietfa.amsl.com>; Tue, 31 Oct 2017 08:51:38 -0700 (PDT)
Received: from mail-io0-x22d.google.com (mail-io0-x22d.google.com [IPv6:2607:f8b0:4001:c06::22d]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BF25913F777 for <dnsop@ietf.org>; Tue, 31 Oct 2017 08:51:35 -0700 (PDT)
Received: by mail-io0-x22d.google.com with SMTP id 97so36132345iok.7 for <dnsop@ietf.org>; Tue, 31 Oct 2017 08:51:35 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hopcount.ca; s=google; h=mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=9Inhiu8CmBfMfAFRDKZy5tnU7wNVtfytBkYT2KAglMo=; b=AXEiHRmLfK6kpr23LZ6BDMwjVbUSC26h0YXd+o+pDNS729/JgbnQaBl0eOxzyroXxL 5fnA+KysKnsuoA2kbLrPScaz2H+xm7BREqsEF0aeDV7ZzUvmOnDDFOoue2hs8xHU2gk3 Rhfn7um3eb1DFiGPEIe5IxYQW6OAfYqDDk5w0=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=9Inhiu8CmBfMfAFRDKZy5tnU7wNVtfytBkYT2KAglMo=; b=DbFLHMOqIVvpoXUmX7WHuNgOK/1FYVho4WgJVcs0Ur7X8vdDGo6K2OLTWSR+16I2yD tlbbbPlMfob3flrWccdmQUCblH1btW1rg99axoCz5nLmjNUumC6InD93Nby8Y3IgrSX9 SMrZD+0FgPzTZGJJpcgb7sFYR4xtcEiggAhxgTv4tb2ECmhI0BjMAyR8JiN/gmRZrce2 zsnXcqPbAXeKMKysJ470gIgPBSY5bvcGZ0g0PvPQZ05CChYnrvbd+jCR4+rZuWNWXIGy SVdg9kJvwu2skiLv4Xz8j7mybJu75nD8lCvcvi8OXAJYl+tuPvvQCBkAfwxD9VIIS8es 96/g==
X-Gm-Message-State: AMCzsaVWVorWW23dZoXjh0KecuimJyvL2zr1xESZyCkxUYJqwwB88pfF QuZleGC0YQiGHQgKT6uQSzAgzw==
X-Google-Smtp-Source: ABhQp+SaqcBk94BTDOAfLHzOebU5yyHzCWUPt0bgYUsFOSxmTrioyAs0tJqWqPlLQnzl6Lkp5TbpjQ==
X-Received: by 10.36.79.10 with SMTP id c10mr3654632itb.146.1509465095023; Tue, 31 Oct 2017 08:51:35 -0700 (PDT)
Received: from ?IPv6:2607:f2c0:101:202:6409:9c5b:60c2:7a05? ([2607:f2c0:101:202:6409:9c5b:60c2:7a05]) by smtp.gmail.com with ESMTPSA id g79sm1003238itb.43.2017.10.31.08.51.33 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Tue, 31 Oct 2017 08:51:34 -0700 (PDT)
Content-Type: text/plain; charset=us-ascii
Mime-Version: 1.0 (Mac OS X Mail 11.0 \(3445.1.7\))
From: Joe Abley <jabley@hopcount.ca>
In-Reply-To: <cf15d0b6-6e8d-851e-248b-5a3dfff21905@bellis.me.uk>
Date: Tue, 31 Oct 2017 11:51:27 -0400
Cc: dnsop@ietf.org
Content-Transfer-Encoding: quoted-printable
Message-Id: <88551C53-593F-4672-9655-4530F4B8068A@hopcount.ca>
References: <027a469c-5bb6-7940-fd89-55b91dd97275@bellis.me.uk> <20171030174052.GB87160@isc.org> <ce2c26be-d944-345c-0e63-d063682c78a6@bellis.me.uk> <CFAF5F11-E120-4E5D-A317-00B25DAE9F9A@hopcount.ca> <cf15d0b6-6e8d-851e-248b-5a3dfff21905@bellis.me.uk>
To: Ray Bellis <ray@bellis.me.uk>
X-Mailer: Apple Mail (2.3445.1.7)
Archived-At: <https://mailarchive.ietf.org/arch/msg/dnsop/aLyv3gYNdZaADsiwgVpxNrNSGfw>
Subject: Re: [DNSOP] draft-huston-kskroll-sentinel - naming format?
X-BeenThere: dnsop@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnsop>, <mailto:dnsop-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dnsop/>
List-Post: <mailto:dnsop@ietf.org>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 31 Oct 2017 15:51:40 -0000

On 31 Oct 2017, at 11:01, Ray Bellis <ray@bellis.me.uk>; wrote:

> On 31/10/2017 14:56, Joe Abley wrote:
> 
>> Perhaps I missed something, but how do you ensure that _ta is an
>> empty non-terminal?
> 
> By having that be part of the required server logic to implement the
> sentinel mechanism?

If a format is going to be specified that specifically prohibits a zone cut, doesn't it make more sense to choose one that can't possibly involve one because there are no potential label boundaries?


Joe