Re: [DNSOP] [Ext] WGLC rfc8499bis one week extension for lame delegation definition

Brian Dickson <brian.peter.dickson@gmail.com> Mon, 01 May 2023 20:20 UTC

Return-Path: <brian.peter.dickson@gmail.com>
X-Original-To: dnsop@ietfa.amsl.com
Delivered-To: dnsop@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2D7CBC152564 for <dnsop@ietfa.amsl.com>; Mon, 1 May 2023 13:20:22 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.095
X-Spam-Level:
X-Spam-Status: No, score=-2.095 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id P6ooCp3mS3cw for <dnsop@ietfa.amsl.com>; Mon, 1 May 2023 13:20:18 -0700 (PDT)
Received: from mail-pj1-x1036.google.com (mail-pj1-x1036.google.com [IPv6:2607:f8b0:4864:20::1036]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 68751C151B30 for <dnsop@ietf.org>; Mon, 1 May 2023 13:20:18 -0700 (PDT)
Received: by mail-pj1-x1036.google.com with SMTP id 98e67ed59e1d1-24782fdb652so2009357a91.3 for <dnsop@ietf.org>; Mon, 01 May 2023 13:20:18 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20221208; t=1682972418; x=1685564418; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:from:to:cc:subject:date:message-id:reply-to; bh=D4IiFyBuU6Ov3HYveEUcOViKcZ7Z1d70Q/Mz9fAO/gU=; b=Z5TNRT7DJxRzssgkb2I5LhhW0N6BQj7QaBUl8LVU/N49eMPB+vmpGEqKhIAJ1grt0l gMY+ZbmFW6kBlVG9Dee2ugXJcCOxmJxtflFqiHaYMAYUR5igxsU6pf3Ss1eEAqxhNJQZ tP7zBEvZYXD7FHBenh40ucJUavrskLah9ofYGqDCNP0kDsGZ2b/FglZ7o9rF9xJPpfiv R6l96D2KgZpgt6MR/Tk92xfjwkHC+KIn2OzeW4Cs+DQDb62HFG3GDSnfXC46nLtw4/ol oGLp4DhvyNowAONPF6s0Ku3knEhMwIR5z6cGH+6E0GoNY7SYQFfvfQh/oTk0oo+668m2 mtjQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20221208; t=1682972418; x=1685564418; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=D4IiFyBuU6Ov3HYveEUcOViKcZ7Z1d70Q/Mz9fAO/gU=; b=lJlbDiazuqbsAmEm85xhEemv/9jSTT9VqFkQ20aOetl4FsuuUsHumwEACc6RivRZiD SEgg0QlYW7BqsyXZalkdKbXNWk7gjxb1zxsNmS5CP+MAmSw3CSZwleqehvoRH+FckpXs sfcCi3zOZclVML6hssnBxV/j8ldTLDHWeEDGug0My+cMO1uuo2Qq2THNvDi10uz9jPEP wXG79luxVx8P+hmkqNpH2Lqbqi/madX26xVBvF1276omb6jDdfAgz2kIQd5yJ8CNswkG illwI6TsAw3KfMCM5wtEppjKC7un3xKNDID1I2ILsh6fPm9wfTZV9mu+48aWynMrbQK3 ssUQ==
X-Gm-Message-State: AC+VfDxNpExSSN9BethjT0LrPyBwZRHSI8LO9x+DMWyQOdPKmX/mfY6u 8wwWhAz7Krkr6sa6qjpYwZHOTm7YlsQN543Z6xE=
X-Google-Smtp-Source: ACHHUZ5tgQNT/sJbhqtVj8ew0WFHiKeEuWwH8CfVjUhUe5+DuZ3CjheJj8AKbPYwLKk61UTIakRCCQQXrEZdLwzS+pw=
X-Received: by 2002:a17:90a:f30d:b0:24d:d50f:95d2 with SMTP id ca13-20020a17090af30d00b0024dd50f95d2mr8227551pjb.22.1682972417791; Mon, 01 May 2023 13:20:17 -0700 (PDT)
MIME-Version: 1.0
References: <f5757414-dd3b-8a09-f945-d73cecf556a3@NLnetLabs.nl> <40C193AF-938C-418F-924E-94F4DD358164@icann.org> <6e16ded9-695b-a901-0d1b-a5828ff4d2a0@nic.cz>
In-Reply-To: <6e16ded9-695b-a901-0d1b-a5828ff4d2a0@nic.cz>
From: Brian Dickson <brian.peter.dickson@gmail.com>
Date: Mon, 01 May 2023 13:20:06 -0700
Message-ID: <CAH1iCip6MhV1D7uEkdg34Ayy04Bq2FHANmcAvH6v=8vXY2ytwQ@mail.gmail.com>
To: "libor.peltan" <libor.peltan=40nic.cz@dmarc.ietf.org>
Cc: Paul Hoffman <paul.hoffman@icann.org>, DNSOP Working Group <dnsop@ietf.org>
Content-Type: multipart/alternative; boundary="000000000000211c9605faa78d5e"
Archived-At: <https://mailarchive.ietf.org/arch/msg/dnsop/bDqtDD7CpNjykic5UP0DELa8LVQ>
Subject: Re: [DNSOP] [Ext] WGLC rfc8499bis one week extension for lame delegation definition
X-BeenThere: dnsop@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnsop>, <mailto:dnsop-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dnsop/>
List-Post: <mailto:dnsop@ietf.org>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 01 May 2023 20:20:22 -0000

On Mon, May 1, 2023 at 12:55 PM libor.peltan <libor.peltan=
40nic.cz@dmarc.ietf.org> wrote:

> Hi Paul,
>
> if you really ask for opinions, here is mine.
>
> Considering the recent voluminous discussion about the meaning of Lame
> delegation, it seems to me that there are at least several people being
> more-or-less sure what the term means, with the issue that everyone
> thinks something slightly (or less slightly) different.
>
> A word that means something different according to each speaker is not a
> good communication tool. I'm afraid (but not sure) that we should rather
> avoid it to prevent present and future misunderstanding.
>
> In order to do so, I'd suggest treating it similalrly as the term
> Bailiwick: abandon the word and make up a new, precisely defined term
> that means the same for everyone. But I don't insist.
>
>
Libor has a good point (and similarly, I don't insist.)

I think, in fact, more than one term may be needed, since there are
distinct situations involved:

   - One situation is where at least one (but not all) parent-child NS
   targets do not respond authoritatively.
   - Another situation is where none of the parent-child NS targets respond
   authoritatively.


The latter is something I think that needs to be addressed, separately, by
the DNSOP WG.
(I have some ideas around that, but won't clutter this discussion with
those.)

Brian


> Dne 01. 05. 23 v 18:09 Paul Hoffman napsal(a):
> > It would be grand if a bunch more people would speak up on this thread.
> >
> > --Paul Hoffman, wearing my co-author hat
> >
> > On Apr 27, 2023, at 1:05 PM, Benno Overeinder <benno@nlnetlabs.nl>
> wrote:
> >> Dear WG,
> >>
> >> The WGLC was closed for draft-ietf-dnsop-rfc8499bis, and the discussion
> >> on lame delegation did not find consensus, but two specific suggestions
> >> were put forward.  We would like to include one of them in rfc8499bis if
> >> we can get consensus to do so.
> >>
> >> The chairs are seeking input on the following two suggestions:
> >>
> >> * Either we leave the definition of “lame delegation” as it is with the
> >>   comment that no consensus could be found, or
> >>
> >> * alternatively, we include a shorter definition without specific
> >>   examples.
> >>
> >> 1) Leaving the definition of lame delegation as in the current
> >>    draft-ietf-dnsop-rfc8499bis, and including the addition by the
> >>    authors that:
> >>
> >>    "These early definitions do not match current use of the term "lame
> >>    delegation", but there is also no consensus on what a lame delegation
> >>    is."  (Maybe change to ... no consensus what *exactly* a lame
> >>    delegation is.)
> >>
> >> 2) Update the definition as proposed by Duane and with the agreement of
> >>    some others (see mailing list
> https://mailarchive.ietf.org/arch/msg/dnsop/4E1AQKGivEHtJDB85gSNhofRuyM/):
> >>
> >>    "A lame delegation is said to exist when one or more authoritative
> >>    servers designated by the delegating NS RRset or by the child's apex
> >>    NS RRset answers non-authoritatively [or not at all] for a zone".
> >>
> >> The chairs ask the WG to discuss these two alternative definitions of
> >> the term "lame delegation".  We close the consultation period on
> >> Thursday 4 May.
> >>
> >> Regards,
> >>
> >> Benno
> > _______________________________________________
> > DNSOP mailing list
> > DNSOP@ietf.org
> > https://www.ietf.org/mailman/listinfo/dnsop
>
> _______________________________________________
> DNSOP mailing list
> DNSOP@ietf.org
> https://www.ietf.org/mailman/listinfo/dnsop
>