Re: [DNSOP] new DNS classes

Nico Williams <> Fri, 07 July 2017 19:14 UTC

Return-Path: <>
Received: from localhost (localhost []) by (Postfix) with ESMTP id D6BC8131690; Fri, 7 Jul 2017 12:14:52 -0700 (PDT)
X-Virus-Scanned: amavisd-new at
X-Spam-Flag: NO
X-Spam-Score: -4.3
X-Spam-Status: No, score=-4.3 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-2.8, RCVD_IN_SORBS_SPAM=0.5] autolearn=ham autolearn_force=no
Authentication-Results: (amavisd-new); dkim=pass (1024-bit key)
Received: from ([]) by localhost ( []) (amavisd-new, port 10024) with ESMTP id N111kaPinebh; Fri, 7 Jul 2017 12:14:51 -0700 (PDT)
Received: from ( []) (using TLSv1.1 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by (Postfix) with ESMTPS id 15A0313168F; Fri, 7 Jul 2017 12:14:51 -0700 (PDT)
Received: from (localhost []) by (Postfix) with ESMTP id 7507EC086D10; Fri, 7 Jul 2017 12:14:50 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed;; h=date :from:to:cc:subject:message-id:references:mime-version :content-type:in-reply-to;; bh=ztW/XQD1COjUjI oAitweYzDMliw=; b=Gdnm8OVof5gmfRMLwF7naF5WA5RehNdzU0UC/9x71L/mtH AjYmeFuNb5Anx+0EMvJJrKVyXAJarwaxRNJlxL6jjuJS9Et6Zjy9douPUWeCIZH0 KZW0MIhm1IILGJGUvH2QOj6dw17ce/4pqarUA3ANGuu/2JeMQa+yC/vESyM4Q=
Received: from localhost ( []) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) (Authenticated sender: by (Postfix) with ESMTPSA id D49E1C086D0C; Fri, 7 Jul 2017 12:14:49 -0700 (PDT)
Date: Fri, 7 Jul 2017 14:14:47 -0500
From: Nico Williams <>
To: william manning <>
Cc: David Cake <>, Randy Bush <>, dnsop <>, Paul Vixie <>, IETF Rinse Repeat <>
Message-ID: <20170707191445.GH3393@localhost>
References: <> <> <> <> <> <> <> <> <20170707165513.GG3393@localhost> <>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <>
User-Agent: Mutt/1.5.24 (2015-08-30)
Archived-At: <>
Subject: Re: [DNSOP] new DNS classes
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: IETF DNSOP WG mailing list <>
List-Unsubscribe: <>, <>
List-Archive: <>
List-Post: <>
List-Help: <>
List-Subscribe: <>, <>
X-List-Received-Date: Fri, 07 Jul 2017 19:14:53 -0000

On Fri, Jul 07, 2017 at 11:27:45AM -0700, william manning wrote:
> You need a better imagination then.   mDNS is a crippled DNS implementation
> that was hobbled on purpose.   HS was/is an entirely different addressing
> scheme that emerged from project Athena @ MIT.  To the extent that when all
> you have been given is the IN class and it's associated rooted hierarchy,
> you first,second,&third inclination is to treat EVERYTHING as being easily
> integrated into that model.  And the ietf is going to go right along with
> you.   After all, when all you have is a hammer, everything looks like a
> nail.

Did you read what I wrote??

The thing I'm having trouble imagining is distinct from the things that
you list that I also listed (and then lecture about as if I had no idea
what they were).  A peer-to-peer DNS might be mDNS-like without whatever
crippling you have in mind, but it's still difficult to imagine how to
organize a coherent Internet around it.  And as to web of trust, I don't
see how that would work either.  You decry my lack of imagination but
provide none of your own.