[DNSOP] 4 documents for consideration about the future of LocalRoot behavior.

Wes Hardaker <wjhns1@hardakers.net> Wed, 21 January 2026 17:12 UTC

Return-Path: <wjhns1@hardakers.net>
X-Original-To: dnsop@mail2.ietf.org
Delivered-To: dnsop@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 03268AB03A58 for <dnsop@mail2.ietf.org>; Wed, 21 Jan 2026 09:12:39 -0800 (PST)
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -0.699
X-Spam-Level:
X-Spam-Status: No, score=-0.699 tagged_above=-999 required=5 tests=[BAYES_05=-0.5, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, RCVD_IN_VALIDITY_SAFE_BLOCKED=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (1024-bit key) header.d=hardakers.net
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id engwP12IYQla for <dnsop@mail2.ietf.org>; Wed, 21 Jan 2026 09:12:37 -0800 (PST)
Received: from mail.hardakers.net (mail.hardakers.net [107.220.113.177]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 6F9CFAB03A53 for <dnsop@ietf.org>; Wed, 21 Jan 2026 09:12:37 -0800 (PST)
Received: from localhost (unknown [165.225.242.207]) by mail.hardakers.net (Postfix) with ESMTPA id C5D7420A5F for <dnsop@ietf.org>; Wed, 21 Jan 2026 09:12:36 -0800 (PST)
DKIM-Filter: OpenDKIM Filter v2.11.0 mail.hardakers.net C5D7420A5F
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hardakers.net; s=default; t=1769015556; bh=9Ks15xEDGVYGPQ+CZbrkV8ZlfIaKyIeTo3fV/y/KDbM=; h=From:To:Subject:Date:From; b=epZVTYETbtDTd075A0AMkhHX4/lWEXnmNCMQxL7vtzyuaqmCDZ4aQj4BHJ4od506/ eVHhysPKV7Lb2t7Sy50mAhADENugIXxb2Hy22+BVq9OeFuvgJwcXTp9UlwDLvUNx26 yaXCSjsMkZjdDLpufxXHFf/vBQqr+AZBWz9YS9HA=
From: Wes Hardaker <wjhns1@hardakers.net>
To: dnsop@ietf.org
Date: Wed, 21 Jan 2026 09:12:36 -0800
Message-ID: <ybla4y6lwjf.fsf@wx.hardakers.net>
User-Agent: Gnus/5.13 (Gnus v5.13)
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Message-ID-Hash: ALASVIVE4RLVDXJZCDIHS3XRYB5XO75X
X-Message-ID-Hash: ALASVIVE4RLVDXJZCDIHS3XRYB5XO75X
X-MailFrom: wjhns1@hardakers.net
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-dnsop.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [DNSOP] 4 documents for consideration about the future of LocalRoot behavior.
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/dnsop/fXTgjJyVUS-AOHF2MEEn2LTnjZs>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dnsop>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Owner: <mailto:dnsop-owner@ietf.org>
List-Post: <mailto:dnsop@ietf.org>
List-Subscribe: <mailto:dnsop-join@ietf.org>
List-Unsubscribe: <mailto:dnsop-leave@ietf.org>

Greetings DNSOP,

10 years has passed (!) since the publication of RFC7706 (later followed by RFC8806), which specified how resolvers can integrate a copy of the root zone into their local operational environment.  A lot of experience has been gained since then, from a fair amount of implementation and deployment.  A number of observations during this period have been made surrounding the feasibility of running an authoritative engine on the loopback like the current RFCs suggest, along with improvements to use other protocols like HTTP(S) for collecting data.  
Finally, the RFC7706 and RFC8806documents were published as Informational and it is now time to consider whether downloading and making use of root zone data directly during resolution should be a Proposed Standard or a BCP so that more resolvers gain the benefit from incorporating locally cached root zone data into their resolution processes.  To this end, the following four documents have been published for consideration.  They each discuss/solve a different piece of the problem space and certainly could be kept separated or combined further in the future if need be.

- https://datatracker.ietf.org/doc/draft-wkumari-dnsop-localroot-bcp/

This document name is a misnomer at the moment as based on discussions the authors have had to date we have actually targeted it as proposed standard instead.  This document is functionally a complete replacement of RFC8806 (more than just a bis), based on the experiences and deployment discussed above.  Specifically, it relaxes the requirement for running as an authoritative engine on the loopback in parallel with a resolver, and instead describes the requirements of an implementation rather than a specific required implementation mechanism (actual implementations varied code base to code base). The new document also discusses the larger aspects of being configured with or gathering a list of publication points and some guidelines and requirements around querying multiple publication points for the IANA root zone data.


- https://datatracker.ietf.org/doc/draft-hardaker-dnsop-root-zone-publication-points/

This document should be considered a starting discussion around how a list of publication points can be gathered and consumed for where root zone data is available.  Right now the list of available sources are only available in Appendix A of RFC8806, but this document discusses how to make a real list and its format published by IANA containing URLs of publication points.

Note: the format in this draft is just a starting point for discussion – I honestly expect something like signed json to win in the end.

- https://datatracker.ietf.org/doc/draft-hardaker-dnsop-dns-xfr-scheme/

If we have URLs for publication points, then we need to be able to refer to targets of axfr, ixfr, and xot appropriately.  Thus this short document specifies new URLs schemes for zone transfers over DNS.

- https://datatracker.ietf.org/doc/draft-hardaker-dnsop-root-zone-publ-list-guidelines

This document may or may not be needed based on WG and IANA opinions.  Fundamentally, it outlines guidelines for what the minimum operational requirements are for being listed on the IANA publication point list above.  It may be that if all these documents go forward in one way or another, this one gets dropped to letting IANA just do whatever it deems best, or the IETF may want to provide some minimal guidance.

The authors will certainly be having discussions with IANA and ICANN about the documents that directly affect them.

—--

We look forward to the discussion within DNSOP about each of these topics.  I’d suggest for now that we concentrate on whether or not each is needed, and not whether or not they’re best kept in 4 documents vs a smaller number.  And certainly the author/editors list of all documents is likely to change as well as time goes on.

(and with that, I'm going to lose internet connectivity for a day while I wiggle into my flame retardant suit)
-- 
Wes Hardaker
Google