Re: [DNSOP] Working Group Last Call for draft-ietf-dnsop-no-response-issue

"Wessels, Duane" <dwessels@verisign.com> Thu, 18 July 2019 22:02 UTC

Return-Path: <dwessels@verisign.com>
X-Original-To: dnsop@ietfa.amsl.com
Delivered-To: dnsop@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id ADAA2120099 for <dnsop@ietfa.amsl.com>; Thu, 18 Jul 2019 15:02:28 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.299
X-Spam-Level:
X-Spam-Status: No, score=-4.299 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=verisign.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9bYzZW7Cia2f for <dnsop@ietfa.amsl.com>; Thu, 18 Jul 2019 15:02:26 -0700 (PDT)
Received: from mail3.verisign.com (mail3.verisign.com [72.13.63.32]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 929BF120096 for <dnsop@ietf.org>; Thu, 18 Jul 2019 15:02:26 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=verisign.com; l=9691; q=dns/txt; s=VRSN; t=1563487349; h=from:to:cc:date:message-id:references:in-reply-to: mime-version:subject; bh=OTYmhyhBpzkOX11+3oMMA02SMn/DvhmWpIfTa0bNtzo=; b=OiSPc67eYaDi+O0JyWZYBAWcp03tLeMkRx3xhLje13Nd/uVMq6ppptOk 6y1k79re+hnUHvjZhnT1qKWkdITY4lqz8Ch9kG2VXkY8Gnb/Gqhw07qf+ Szq2dCAt6FOh+yfByyHUpHBGA8VbgWrFJsxof9/QJPCs/IxYul4HaOl5G m3a8iho7rzA1KQ0bWMghBrIhFySGwDOwXqp3C+pg1lzSC646H0bBH9OrF biQyI7qlvr2B5Lw8KPN7LIUTLbmDZRtaxzSwud4M7IS1ThZatzETN3SBI amnzOSFOIVczXLg9p5jzOZbYp33+mpwuSPY0Lwi/zJELGOlcYsFgPR27Q w==;
X-IronPort-AV: E=Sophos; i="5.64,279,1559520000"; d="p7s'?scan'208"; a="8766627"
IronPort-PHdr: 9a23:aCi6px0RuR8AWucZsmDT+DRfVm0co7zxezQtwd8ZseMULPad9pjvdHbS+e9qxAeQG9mCsbQa1qGP7v+ocFdDyK7JiGoFfp1IWk1NouQttCtkPvS4D1bmJuXhdS0wEZcKflZk+3amLRodQ56mNBXdrXKo8DEdBAj0OxZrKeTpAI7SiNm82/yv95HJbAhEmSSxbalzIRi2ogndq8kbjIl/Iast1xXFpWdFdf5Lzm1yP1KTmBj85sa0/JF99ilbpuws+c1dX6jkZqo0VbNXAigoPGAz/83rqALMTRCT6XsGU2UZiQRHDg7Y5xznRJjxsy/6tu1g2CmGOMD9UL45VSi+46ptVRTljjoMOTwk/2HNksF+jLxVrg+9pxJxwIDUboOaNPticazSZt4aSnZNXsNLWiBdHo+wcY0CBPcBM+ZCqIn9okMDoRW+CgayH+Pv0SFHhnvt3aEizu8vHxzG0xYmH90QvnjfsdL4O7ocUO+r16nI1ivMb/dN2Trm9ojHbAohofCXXbJxfsrRz1MjGB/CjlWVsIHoOS6e2OoKs2ie9eVgVOSvhnYmqw5vvjivyN0gio7ThoIazF3P6CZ3wJ4tKNGlVEJ3e8OoHZleui2AKod7Qs0vT3tntSs+0rEKpIK3cDIXxJkl2xLTceGLfoeL7x75SeqcIi90hHx7d7+8mxq/9E2txff/W8Swy1lHqyRInsfRuX0M0hHc8cyKR/p/80qk1zuC2QLe5fxCLEspj6TUMYQhzaQ1lpcLtETDGTL5l1vuga+Nc0Uk5vCo6+P6YrX6vpOcN5F7igX5Mqk2h8GxHfw2PhUOUGaD9uqz1aHv8VPjTLVUkvI2lbPZsIjAKcsBu6G1GRFV0pw46xa5FTupzNMYnXwfIFJEfhKIkZTpNknTLPzkF/uznlahnTlxy/zbPrDsDI/BI3fHnbv5eLZy8U9cyA49zdBF4JJUD6kML+/9W0Dvr9zYFQE2Mwivw+v8FtVyyJkeWWOUAq+YP6PSt0WE6f4oI+mJfIMVoiryK+A55/7yin80gUMdfaun3JcNaXC3AOhmI0uCbHrjh9cOC2YKvg4kQOP2j12CVCZZZ2yuUKIk+jE7FIWmAJ/eSYCrm7yB2z+7E4ZXZm9YFlCMH23kd4KeW/cDO2quJZpdkzlMarmqSok61hDm4BP41PxmI/ba0iIdvJPnktNy4ruAuws18Gk+MMmGyGyJVCU8sn4BQTJ8lPRzvkFm0VqHyoBmjuZZDt1c4bVCVQJsZs2U9PBzF92nAlGJRdyOUlvzGtg=
X-IPAS-Result: A2EoAAAe7DBd/zGZrQpcChwBAQEEAQEHBAEBgVMHAQELAYMDgS4KjC+LYCWDZIVwjyqBewkBAQEBAQEBAQEDBAEjDAEBAoQ+AoJwNAkOAQMBAQEEAQEBAQQBAQEChiUMgjoiHE1rAQEBAQEBIwJELAEBAQECAR1cBQsCAQgOCi4CHxElAgQOBQ6DFAGBagMOHqx0hEZBQIJMDYIXCgaBNAGBUIolgUE+gREnDBOBTn4+ghpHAgMBgTKDaIImBIwxnXJAAwYCghmDK4IggQ2JQIQPgi2HJYxngVGUfYF1jhMCBAIEBQIVgVCCEXAVGksBgkGCeIhOhT4Bco1VgSEBAQ
Received: from BRN1WNEX01.vcorp.ad.vrsn.com (10.173.153.48) by BRN1WNEX02.vcorp.ad.vrsn.com (10.173.153.49) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.1713.5; Thu, 18 Jul 2019 18:02:24 -0400
Received: from BRN1WNEX01.vcorp.ad.vrsn.com ([fe80::a89b:32d6:b967:337d]) by BRN1WNEX01.vcorp.ad.vrsn.com ([fe80::a89b:32d6:b967:337d%5]) with mapi id 15.01.1713.004; Thu, 18 Jul 2019 18:02:24 -0400
From: "Wessels, Duane" <dwessels@verisign.com>
To: Tim Wicinski <tjw.ietf@gmail.com>
CC: dnsop <dnsop@ietf.org>
Thread-Topic: [EXTERNAL] [DNSOP] Working Group Last Call for draft-ietf-dnsop-no-response-issue
Thread-Index: AQHVPJm7ul1EXMo03k+jDU6WYP9dU6bRMs6A
Date: Thu, 18 Jul 2019 22:02:24 +0000
Message-ID: <0012006B-B4B0-4334-8764-3840C7675C66@verisign.com>
References: <CADyWQ+G6Cyd+uKE8k8zfHXOv3o7bzDgBi7HsNCMkOqmnFUHnjA@mail.gmail.com>
In-Reply-To: <CADyWQ+G6Cyd+uKE8k8zfHXOv3o7bzDgBi7HsNCMkOqmnFUHnjA@mail.gmail.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: yes
X-MS-TNEF-Correlator:
x-originating-ip: [10.170.148.18]
Content-Type: multipart/signed; boundary="Apple-Mail=_82B4FB4D-82A8-4183-AD8C-C2F0AFF62016"; protocol="application/pkcs7-signature"; micalg="sha1"
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/dnsop/g5ZwM5IHdohPwO0zt3q_Iw___-Q>
Subject: Re: [DNSOP] Working Group Last Call for draft-ietf-dnsop-no-response-issue
X-BeenThere: dnsop@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnsop>, <mailto:dnsop-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dnsop/>
List-Post: <mailto:dnsop@ietf.org>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 18 Jul 2019 22:02:29 -0000


> On Jul 17, 2019, at 5:17 AM, Tim Wicinski <tjw.ietf@gmail.com> wrote:
> 
> All
> 
> Since it seems that everyone is now getting their own Flag Day, this document's time is 
> now to be published.   I want to thank Mark for being so patient with me as I've
> sat through several review sessions, and addressing all the early feedback.   
> 
> Please note that the document is now marked as BCP.  If you feel this should not be 
> the case, please speak up. 
> 
> The chairs will be looking to hear from folks during this WGLC as well as during
> the meeting. So Flag Day People, please make yourself heard!
> 
> This starts a Working Group Last Call for draft-ietf-dnsop-no-response-issue
> 
> Current versions of the draft is available here:
> https://datatracker.ietf.org/doc/draft-ietf-dnsop-no-response-issue/
> 
> The Current Intended Status of this document is: Best Current Practice 
> 
> Please review the draft and offer relevant comments.
> If this does not seem appropriate please speak out. 
> If someone feels the document is *not* ready for publication, please speak out with your reasons.


Regarding intended status as BCP, I think thats fine, but I find it somewhat strange
that the title and abstract frames these as problems and failures.  Maybe as a BCP it would
be better to phrase it as something like "Identifying problems..." or "Testing for failures..."

Also if 2019 flag day was a great success, is this still such a "common" problem?



> Abstract
> 
>    The DNS is a query / response protocol.  Failing to respond to
>    queries, or responding incorrectly, causes both immediate operational
>    problems and long term problems with protocol development.
> 
>    This document identifies a number of common kinds of queries to which
>    some servers either fail to respond or else respond incorrectly.
>    This document also suggests procedures for TLD and other zone
>    operators to apply to mitigate the problem.


I'm not sure why TLDs are called out specifically here.  "TLD" appears only
one other time in the document.

Maybe instead of "mitigate" it would be better to say "identify and remediate"?



> 
> 
> 3.  Common queries kinds that result in no or bad responses.
> 
>    This section is broken down into Basic DNS requests and EDNS
>    requests.

> 
> 3.1.  Basic DNS Queries
> 
> 3.1.1.  Zone Existence
> 
>    Initially, to test existence of the zone, an SOA query should be
>    made.  If the SOA record is not returned but some other response is
>    returned, this is an indication of a bad delegation.


Some of the text in these subsections talk about tests or testing, which
is either repeated or more appropriately placed in section 8 I think.

DW