[DNSOP] 4 documents for consideration about the future of LocalRoot behavior.
Wes Hardaker <wjhns1@hardakers.net> Wed, 21 January 2026 17:12 UTC
Return-Path: <wjhns1@hardakers.net>
X-Original-To: dnsop@mail2.ietf.org
Delivered-To: dnsop@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 03268AB03A58 for <dnsop@mail2.ietf.org>; Wed, 21 Jan 2026 09:12:39 -0800 (PST)
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -0.699
X-Spam-Level:
X-Spam-Status: No, score=-0.699 tagged_above=-999 required=5 tests=[BAYES_05=-0.5, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, RCVD_IN_VALIDITY_SAFE_BLOCKED=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (1024-bit key) header.d=hardakers.net
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id engwP12IYQla for <dnsop@mail2.ietf.org>; Wed, 21 Jan 2026 09:12:37 -0800 (PST)
Received: from mail.hardakers.net (mail.hardakers.net [107.220.113.177]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 6F9CFAB03A53 for <dnsop@ietf.org>; Wed, 21 Jan 2026 09:12:37 -0800 (PST)
Received: from localhost (unknown [165.225.242.207]) by mail.hardakers.net (Postfix) with ESMTPA id C5D7420A5F for <dnsop@ietf.org>; Wed, 21 Jan 2026 09:12:36 -0800 (PST)
DKIM-Filter: OpenDKIM Filter v2.11.0 mail.hardakers.net C5D7420A5F
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hardakers.net; s=default; t=1769015556; bh=9Ks15xEDGVYGPQ+CZbrkV8ZlfIaKyIeTo3fV/y/KDbM=; h=From:To:Subject:Date:From; b=epZVTYETbtDTd075A0AMkhHX4/lWEXnmNCMQxL7vtzyuaqmCDZ4aQj4BHJ4od506/ eVHhysPKV7Lb2t7Sy50mAhADENugIXxb2Hy22+BVq9OeFuvgJwcXTp9UlwDLvUNx26 yaXCSjsMkZjdDLpufxXHFf/vBQqr+AZBWz9YS9HA=
From: Wes Hardaker <wjhns1@hardakers.net>
To: dnsop@ietf.org
Date: Wed, 21 Jan 2026 09:12:36 -0800
Message-ID: <ybla4y6lwjf.fsf@wx.hardakers.net>
User-Agent: Gnus/5.13 (Gnus v5.13)
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Message-ID-Hash: ALASVIVE4RLVDXJZCDIHS3XRYB5XO75X
X-Message-ID-Hash: ALASVIVE4RLVDXJZCDIHS3XRYB5XO75X
X-MailFrom: wjhns1@hardakers.net
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-dnsop.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [DNSOP] 4 documents for consideration about the future of LocalRoot behavior.
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/dnsop/fXTgjJyVUS-AOHF2MEEn2LTnjZs>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dnsop>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Owner: <mailto:dnsop-owner@ietf.org>
List-Post: <mailto:dnsop@ietf.org>
List-Subscribe: <mailto:dnsop-join@ietf.org>
List-Unsubscribe: <mailto:dnsop-leave@ietf.org>
Greetings DNSOP, 10 years has passed (!) since the publication of RFC7706 (later followed by RFC8806), which specified how resolvers can integrate a copy of the root zone into their local operational environment. A lot of experience has been gained since then, from a fair amount of implementation and deployment. A number of observations during this period have been made surrounding the feasibility of running an authoritative engine on the loopback like the current RFCs suggest, along with improvements to use other protocols like HTTP(S) for collecting data. Finally, the RFC7706 and RFC8806documents were published as Informational and it is now time to consider whether downloading and making use of root zone data directly during resolution should be a Proposed Standard or a BCP so that more resolvers gain the benefit from incorporating locally cached root zone data into their resolution processes. To this end, the following four documents have been published for consideration. They each discuss/solve a different piece of the problem space and certainly could be kept separated or combined further in the future if need be. - https://datatracker.ietf.org/doc/draft-wkumari-dnsop-localroot-bcp/ This document name is a misnomer at the moment as based on discussions the authors have had to date we have actually targeted it as proposed standard instead. This document is functionally a complete replacement of RFC8806 (more than just a bis), based on the experiences and deployment discussed above. Specifically, it relaxes the requirement for running as an authoritative engine on the loopback in parallel with a resolver, and instead describes the requirements of an implementation rather than a specific required implementation mechanism (actual implementations varied code base to code base). The new document also discusses the larger aspects of being configured with or gathering a list of publication points and some guidelines and requirements around querying multiple publication points for the IANA root zone data. - https://datatracker.ietf.org/doc/draft-hardaker-dnsop-root-zone-publication-points/ This document should be considered a starting discussion around how a list of publication points can be gathered and consumed for where root zone data is available. Right now the list of available sources are only available in Appendix A of RFC8806, but this document discusses how to make a real list and its format published by IANA containing URLs of publication points. Note: the format in this draft is just a starting point for discussion – I honestly expect something like signed json to win in the end. - https://datatracker.ietf.org/doc/draft-hardaker-dnsop-dns-xfr-scheme/ If we have URLs for publication points, then we need to be able to refer to targets of axfr, ixfr, and xot appropriately. Thus this short document specifies new URLs schemes for zone transfers over DNS. - https://datatracker.ietf.org/doc/draft-hardaker-dnsop-root-zone-publ-list-guidelines This document may or may not be needed based on WG and IANA opinions. Fundamentally, it outlines guidelines for what the minimum operational requirements are for being listed on the IANA publication point list above. It may be that if all these documents go forward in one way or another, this one gets dropped to letting IANA just do whatever it deems best, or the IETF may want to provide some minimal guidance. The authors will certainly be having discussions with IANA and ICANN about the documents that directly affect them. —-- We look forward to the discussion within DNSOP about each of these topics. I’d suggest for now that we concentrate on whether or not each is needed, and not whether or not they’re best kept in 4 documents vs a smaller number. And certainly the author/editors list of all documents is likely to change as well as time goes on. (and with that, I'm going to lose internet connectivity for a day while I wiggle into my flame retardant suit) -- Wes Hardaker Google
- [DNSOP] 4 documents for consideration about the f… Wes Hardaker
- [DNSOP] Re: DNSOP4 documents for consideration ab… Wes Hardaker
- [DNSOP] Re: 4 documents for consideration about t… George Michaelson
- [DNSOP] Re: 4 documents for consideration about t… Wes Hardaker
- [DNSOP] Re: DNSOP4 documents for consideration ab… Wes Hardaker
- [DNSOP] Re: 4 documents for consideration about t… John Levine
- [DNSOP] Re: 4 documents for consideration about t… George Michaelson
- [DNSOP] Re: 4 documents for consideration about t… Michael Richardson
- [DNSOP] Re: 4 documents for consideration about t… Ralf Weber
- [DNSOP] Re: DNSOP4 documents for consideration ab… George Michaelson
- [DNSOP] Re: DNSOP4 documents for consideration ab… Wes Hardaker
- [DNSOP] Re: DNSOP4 documents for consideration ab… Michael Richardson
- [DNSOP] Re: 4 documents for consideration about t… Wes Hardaker
- [DNSOP] Re: DNSOP4 documents for consideration ab… Ben Schwartz
- [DNSOP] Re: DNSOP4 documents for consideration ab… Michael Richardson
- [DNSOP] Re: DNSOP4 documents for consideration ab… Wes Hardaker
- [DNSOP] Re: DNSOP4 documents for consideration ab… John Levine
- [DNSOP] Re: DNSOP4 documents for consideration ab… Wes Hardaker
- [DNSOP] Re: DNSOP4 documents for consideration ab… George Michaelson
- [DNSOP] Re: DNSOP4 documents for consideration ab… Wes Hardaker
- [DNSOP] Re: DNSOP4 documents for consideration ab… Ben Schwartz
- [DNSOP] Re: 4 documents for consideration about t… Wes Hardaker
- [DNSOP] Re: DNSOPDNSOP4 documents for considerati… Wes Hardaker
- [DNSOP] Re: DNSOPDNSOP4 documents for considerati… Mark Andrews
- [DNSOP] Re: 4 documents for consideration about t… John R Levine
- [DNSOP] Re: DNSOPDNSOP4 documents for considerati… Wes Hardaker
- [DNSOP] Re: 4 documents for consideration about t… Benno Overeinder
- [DNSOP] Re: root zone transfers and CDNs Jared Mauch
- [DNSOP] Re: DNSOPDNSOP4 documents for considerati… Ben Schwartz
- [DNSOP] Re: optimisng root zone signing for iXFR Paul Vixie
- [DNSOP] Re: DNSOP4 documents for consideration ab… Michael Richardson
- [DNSOP] Re: DNSOP4 documents for consideration ab… Warren Kumari
- [DNSOP] Re: root zone transfers and CDNs Warren Kumari
- [DNSOP] optimisng root zone signing for iXFR Jim Reid
- [DNSOP] Re: optimisng root zone signing for iXFR Steve Crocker
- [DNSOP] Re: DNSOP4 documents for consideration ab… Libor Peltan
- [DNSOP] Re: DNSOPDNSOP4 documents for considerati… Wes Hardaker
- [DNSOP] Re: DNSOPDNSOP4 documents for considerati… Wes Hardaker
- [DNSOP] Re: DNSOPDNSOP4 documents for considerati… Wes Hardaker
- [DNSOP] Re: optimisng root zone signing for iXFR Willem Toorop
- [DNSOP] Re: 4 documents for consideration about t… Florian Obser
- [DNSOP] Re: DNSOPDNSOP4 documents for considerati… Petr Špaček
- [DNSOP] Re: DNSOPDNSOP4 documents for considerati… Wes Hardaker
- [DNSOP] Re: DNSOPDNSOP4 documents for considerati… Philip Homburg
- [DNSOP] root zone transfers and CDNs Jim Reid
- [DNSOP] Re: root zone transfers and CDNs Philip Homburg
- [DNSOP] Re: DNSOProot zone transfers and CDNs Wes Hardaker
- [DNSOP] Re: root zone transfers and CDNs Florian Obser
- [DNSOP] Re: DNSOP4 documents for consideration ab… Joe Abley
- [DNSOP] Re: DNSOP4 documents for consideration ab… Petr Špaček
- [DNSOP] Re: DNSOP4 documents for consideration ab… Michael Richardson
- [DNSOP] Re: DNSOP4 documents for consideration ab… Petr Špaček
- [DNSOP] Re: DNSOPDNSOPDNSOP4 documents for consid… Wes Hardaker
- [DNSOP] Re: DNSOPDNSOP4 documents for considerati… Ben Schwartz
- [DNSOP] Re: DNSOPDNSOP4 documents for considerati… Petr Špaček
- [DNSOP] Re: optimisng root zone signing for iXFR Geoff Huston
- [DNSOP] Re: optimisng root zone signing for iXFR Petr Špaček
- [DNSOP] Re: DNSOPDNSOP4 documents for considerati… Wes Hardaker
- [DNSOP] Re: DNSOP4 documents for consideration ab… Geoff Huston
- [DNSOP] Re: 4 documents for consideration about t… Wes Hardaker
- [DNSOP] Re: 4 documents for consideration about t… Florian Obser
- [DNSOP] Re: 4 documents for consideration about t… Wes Hardaker
- [DNSOP] actual expire time for http-based xfrs Jim Reid
- [DNSOP] Re: [Ext] actual expire time for http-bas… Paul Hoffman
- [DNSOP] Re: DNSOP[Ext] actual expire time for htt… Wes Hardaker
- [DNSOP] Re: DNSOP[Ext] actual expire time for htt… Wes Hardaker
- [DNSOP] Re: actual expire time for http-based xfrs Florian Obser
- [DNSOP] Re: [Ext] actual expire time for http-bas… marka
- [DNSOP] Re: actual expire time for http-based xfrs marka
- [DNSOP] Re: 4 documents for consideration about t… marka
- [DNSOP] Re: 4 documents for consideration about t… marka
- [DNSOP] Re: 4 documents for consideration about t… Robert Edmonds
- [DNSOP] Re: 4 documents for consideration about t… marka
- [DNSOP] Re: 4 documents for consideration about t… Robert Edmonds
- [DNSOP] Re: DNSOP4 documents for consideration ab… Ben Schwartz
- [DNSOP] Re: actual expire time for http-based xfrs Florian Obser
- [DNSOP] Re: DNSOP4 documents for consideration ab… Paul Vixie
- [DNSOP] Re: DNSOP4 documents for consideration ab… George Michaelson
- [DNSOP] Re: DNSOP4 documents for consideration ab… Joe Abley
- [DNSOP] Re: 4 documents for consideration about t… George Michaelson
- [DNSOP] Re: DNSOP[Ext] actual expire time for htt… Paul Hoffman
- [DNSOP] Re: DNSOP4 documents for consideration ab… Philip Homburg
- [DNSOP] Re: DNSOP4 documents for consideration ab… Florian Obser
- [DNSOP] Re: DNSOP4 documents for consideration ab… Philip Homburg
- [DNSOP] Re: DNSOP4 documents for consideration ab… Joe Abley
- [DNSOP] Re: DNSOPDNSOP4 documents for considerati… Ben Schwartz
- [DNSOP] Re: DNSOP4 documents for consideration ab… Philip Homburg
- [DNSOP] Re: DNSOP4 documents for consideration ab… Florian Obser
- [DNSOP] Re: DNSOP4 documents for consideration ab… Philip Homburg
- [DNSOP] Re: 4 documents for consideration about t… Wes Hardaker
- [DNSOP] Re: 4 documents for consideration about t… Florian Obser
- [DNSOP] Re: DNSOP4 documents for consideration ab… Ray Bellis
- [DNSOP] Re: DNSOPDNSOP4 documents for considerati… Wes Hardaker
- [DNSOP] Re: DNSOP4 documents for consideration ab… Philip Homburg
- [DNSOP] Re: DNSOPDNSOP4 documents for considerati… Philip Homburg
- [DNSOP] Re: DNSOPDNSOP4 documents for considerati… Florian Obser
- [DNSOP] Re: DNSOPDNSOP4 documents for considerati… Philip Homburg
- [DNSOP] Re: DNSOPDNSOPDNSOP4 documents for consid… Wes Hardaker
- [DNSOP] Re: DNSOPDNSOPDNSOP4 documents for consid… Philip Homburg
- [DNSOP] Re: 4 documents for consideration about t… Michael Richardson
- [DNSOP] Pushing items out of cache Paul Hoffman
- [DNSOP] Re: Pushing items out of cache Philip Homburg
- [DNSOP] Re: 4 documents for consideration about t… John Levine
- [DNSOP] Re: [Ext] Pushing items out of cache Mukund Sivaraman
- [DNSOP] Re: [Ext] Pushing items out of cache Mukund Sivaraman
- [DNSOP] Re: [Ext] Pushing items out of cache Philip Homburg
- [DNSOP] Re: DNSOPDNSOPDNSOP4 documents for consid… Florian Obser
- [DNSOP] Re: [Ext] Pushing items out of cache Otto Moerbeek
- [DNSOP] Re: [Ext] Pushing items out of cache Philip Homburg
- [DNSOP] Re: 4 documents for consideration about t… Ralf Weber
- [DNSOP] Re: 4 documents for consideration about t… Michael Richardson
- [DNSOP] Re: 4 documents for consideration about t… George Michaelson
- [DNSOP] Re: DNSOP4 documents for consideration ab… Wes Hardaker
- [DNSOP] Re: DNSOP[Ext] Pushing items out of cache Wes Hardaker
- [DNSOP] Re: DNSOPDNSOPDNSOP4 documents for consid… Wes Hardaker
- [DNSOP] Re: 4 documents for consideration about t… John Levine
- [DNSOP] Re: DNSOPDNSOPDNSOP4 documents for consid… Philip Homburg
- [DNSOP] Re: DNSOP[Ext] Pushing items out of cache Wes Hardaker
- [DNSOP] Re: optimisng root zone signing for iXFR Willem Toorop
- [DNSOP] Re: DNSOPDNSOP4 documents for considerati… Florian Obser
- [DNSOP] Re: DNSOP[Ext] Pushing items out of cache Ray Bellis
- [DNSOP] Re: DNSOPDNSOP4 documents for considerati… Wes Hardaker
- [DNSOP] Re: 4 documents for consideration about t… Wes Hardaker
- [DNSOP] Re: 4 documents for consideration about t… Robert Edmonds
- [DNSOP] Re: optimisng root zone signing for iXFR Peter Thomassen
- [DNSOP] Re: DNSOP[Ext] Pushing items out of cache Philip Homburg
- [DNSOP] Re: DNSOPDNSOP[Ext] Pushing items out of … Wes Hardaker
- [DNSOP] Re: optimisng root zone signing for iXFR Willem Toorop
- [DNSOP] Re: sign the whole zone, was optimisng ro… John Levine
- [DNSOP] Re: DNSOP4 documents for consideration ab… Willem Toorop
- [DNSOP] Re: [Ext] Pushing items out of cache Paul Hoffman
- [DNSOP] Re: DNSOPDNSOP[Ext] Pushing items out of … Ray Bellis
- [DNSOP] Re: DNSOPDNSOP4 documents for considerati… Wes Hardaker