Re: [DNSOP] I-D Action: draft-ietf-dnsop-edns-key-tag-02.txt

tjw ietf <tjw.ietf@gmail.com> Fri, 15 July 2016 04:10 UTC

Return-Path: <tjw.ietf@gmail.com>
X-Original-To: dnsop@ietfa.amsl.com
Delivered-To: dnsop@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 49FB312D539 for <dnsop@ietfa.amsl.com>; Thu, 14 Jul 2016 21:10:53 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.699
X-Spam-Level:
X-Spam-Status: No, score=-2.699 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id eYzjV3e9Oupg for <dnsop@ietfa.amsl.com>; Thu, 14 Jul 2016 21:10:52 -0700 (PDT)
Received: from mail-io0-x22c.google.com (mail-io0-x22c.google.com [IPv6:2607:f8b0:4001:c06::22c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D33AA12B01F for <dnsop@ietf.org>; Thu, 14 Jul 2016 21:10:51 -0700 (PDT)
Received: by mail-io0-x22c.google.com with SMTP id m101so94046637ioi.2 for <dnsop@ietf.org>; Thu, 14 Jul 2016 21:10:51 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=Cpb+v79SYqe/bEQ427rwRcHQq7zPldTcsRYawkOcutQ=; b=qWbSaDHStiHbizx170rP8elBAIskSqeeFUK6hlIiJaliZSiAQvgZ6q36ZqmTdqQN1y GBMJJxgjQ1U1+mOz2nJ89IUcl8Kv1ElJKTem1F9pMfgKoh9LSDdbX9ngyekBzrueUjcX vFNqdVlM4tuZySXvwdv4CqIF+K039s5vOAKRxtk+FCDTzTinlYel6qvfu3IawrGzkfIs LODSSk+MlwudxqstzQIsvMd6dTsul8TU3JuXL4GLxHl3a9ijXhUZ9+06tgHDnhFsJmbx w+jfsFGRF045sI94DFPCBpCwaudLKP33dU/NNudUhhkNUnuJSU1BVZ2KOVEhaDDqWQe2 wVgw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=Cpb+v79SYqe/bEQ427rwRcHQq7zPldTcsRYawkOcutQ=; b=AFhYV+oq294P6EiEMFL6/kNYfwI4fBPqZRz7t0x4QydcVCJf826pQEWaJ5896UK5D6 uSVL7f/RbphvCD72y58JDzayYO/r0wrxwhsVK2WFmWIb96hekIvsLvB2B4lrkw7rvL4W CaVn7s1Pt7/BL+tgYF7W0F1zNaaMd5y4I94Hj25WMv+j/eanSTclPlaPMQ8mCPDamlW1 AO4CzXJ89BISgdlYmKoZ961I3p7YxYP7JrmTaFMxdoszH/raBVvlMLboceqdJyUv8od+ zD8nXJ54M+FX8Ak1UZJtEU+fQm+67FcJsuqN5D5VZ+RtDt1e6+nhsBnIgDaYQVZnL1tX fspg==
X-Gm-Message-State: ALyK8tJzNcXDcWsw4VwgEPRv6eTTmGtpLafZoc/UVKqee6K4kBle1gEHKOIGGFtZWIUvK7iTfg0bJtPY6V562A==
X-Received: by 10.107.135.24 with SMTP id j24mr17412955iod.158.1468555850373; Thu, 14 Jul 2016 21:10:50 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.79.84.135 with HTTP; Thu, 14 Jul 2016 21:10:49 -0700 (PDT)
In-Reply-To: <A48F0CA0-A2A3-444D-8CE8-2FB63D718AEA@vpnc.org>
References: <20160708223044.32131.72663.idtracker@ietfa.amsl.com> <8FD4B2FF-9E51-4FF3-829A-1D4D7CFAB19E@vpnc.org> <CA+nkc8C7kwSBADqo32p3nBf1_BLH9NptNpDbqG4Hrg+M8V4ovA@mail.gmail.com> <A48F0CA0-A2A3-444D-8CE8-2FB63D718AEA@vpnc.org>
From: tjw ietf <tjw.ietf@gmail.com>
Date: Fri, 15 Jul 2016 00:10:49 -0400
Message-ID: <CADyWQ+EqWYbTQnEVHPfrMFRdaUKy=f+-h7hRbVV-8Av2FoNTTA@mail.gmail.com>
To: Paul Hoffman <paul.hoffman@vpnc.org>
Content-Type: multipart/alternative; boundary="001a113f9138cb65100537a4cd27"
Archived-At: <https://mailarchive.ietf.org/arch/msg/dnsop/d6oQrrXAA9ZiBqYGRtis48PlXrg>
Cc: Bob Harold <rharolde@umich.edu>, IETF DNSOP WG <dnsop@ietf.org>
Subject: Re: [DNSOP] I-D Action: draft-ietf-dnsop-edns-key-tag-02.txt
X-BeenThere: dnsop@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnsop>, <mailto:dnsop-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dnsop/>
List-Post: <mailto:dnsop@ietf.org>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 15 Jul 2016 04:10:53 -0000

(speaking for myself only)

In 5.1, I would think that I'd prefer a standard size, but that doesn't
mean I should rely on it.

For the moment on 5.3.1 . Maybe some text that "an implementer SHOULD sort
their tags" but that mean that one can expect them that way.

tim

On Thu, Jul 14, 2016 at 10:02 PM, Paul Hoffman <paul.hoffman@vpnc.org>
wrote:

> On 11 Jul 2016, at 7:50, Bob Harold wrote:
>
> 5.1. Query Format
>> What if the key tag is less than 0x1000 hex or 4096 decimal - Should the
>> resulting hex have leading zeros (always 4 characters?) or not?
>> For example, would 4095 decimal be _ta-0fff or _ta-fff  ?  (I prefer
>> always
>> 4 characters hex, but it is your doc.)
>>
>
> It is a WG doc, not our doc. Do others have a preference on this?
>
> 5.3.1. Interaction With Aggressive Negative Caching
>> I would prefer that the tags always be sorted.  No big deal for two tags,
>> but if there was a compromise or mistake during a rollover, there might be
>> three keys and the savings in records might be significant.  If you decide
>> to specify sorting, I think it would go in section 5.1 and not in 5.3.1.
>>
>
> Would the "savings in records" really be significant? The problems caused
> by people not consistently sorting could make things worse, not better.
> Related: there might be other reasons for three tags, such as during an
> algorithm rollover.
>
> --Paul Hoffman
>
>
> _______________________________________________
> DNSOP mailing list
> DNSOP@ietf.org
> https://www.ietf.org/mailman/listinfo/dnsop
>