Re: [DNSOP] DNS privacy and AS 112: the case of home.arpa

Joe Abley <jabley@hopcount.ca> Thu, 14 December 2017 01:25 UTC

Return-Path: <jabley@hopcount.ca>
X-Original-To: dnsop@ietfa.amsl.com
Delivered-To: dnsop@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D4C9A12421A for <dnsop@ietfa.amsl.com>; Wed, 13 Dec 2017 17:25:42 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.699
X-Spam-Level:
X-Spam-Status: No, score=-2.699 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_LOW=-0.7, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=hopcount.ca
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ehoCabfI6hqn for <dnsop@ietfa.amsl.com>; Wed, 13 Dec 2017 17:25:41 -0800 (PST)
Received: from mail-lf0-x22f.google.com (mail-lf0-x22f.google.com [IPv6:2a00:1450:4010:c07::22f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 44E8D1200F1 for <dnsop@ietf.org>; Wed, 13 Dec 2017 17:25:41 -0800 (PST)
Received: by mail-lf0-x22f.google.com with SMTP id g80so333859lfg.0 for <dnsop@ietf.org>; Wed, 13 Dec 2017 17:25:41 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hopcount.ca; s=google; h=from:mime-version:references:in-reply-to:date:message-id:subject:to :cc:content-transfer-encoding; bh=qfZWxtDbNk85JdKMZVsPONmprTK+lIix8pz6kMtsNS0=; b=FbJ52mnxl9XqDupDrZEI5hHzu0ddOuU1N0JF1NgrJS2GX8y3hI85Ti/L4WEqzzOx/V 6EQedxjNIpRJwka22t+JVvpWwyTb3cnCXo9PGrm5t5kwAzOE4PkodE0UDE39COFTf3eU qwzhUqEmQYayTwIPYPUtWsB0Y6vGd9UfI91Vc=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:mime-version:references:in-reply-to:date :message-id:subject:to:cc:content-transfer-encoding; bh=qfZWxtDbNk85JdKMZVsPONmprTK+lIix8pz6kMtsNS0=; b=VVL1mfMkC9WQfziRDi/KGCdLKnrA2eQLg2G6Let+0CHg+vrjjptO8PP/4i1t7m9fyf GgLj6vHLpArM9Xk7FNx23Tb2KYmkgReQMUx+Dg98Gch2PmNu0zFTBfCH4aXfMXiBfJHs thewuX4HirvwYaZx33f4WXfCFWWBunLOzkqMXM4KTfe0NyoOKaB3yphkMSt/n5Ivm4kl 48Bh22Pc+K0GpmUZj868k4Hdc8Axo1MdjNjZ2YwP41zSXhzHYlVtsMqQxwTQdsjv+5bN pvsSki6rOmXzlvlNZtVFerFr1s+us8S3jD9mxJARk8rWJwjkrVls4qgC/2gyLpmDoZXX 4brA==
X-Gm-Message-State: AKGB3mJ7ZuoJ2bjPbpn7c3xz+ForwQRv6fU2QjdtPjTmYJz2065HWHwQ JIHU7+MVOLCnXPi3cZ6ap/ESjbGzChOzjfrA4BhA4A==
X-Google-Smtp-Source: ACJfBovAnDPrPxdpzRxrf2segWm12qqn6HjBIbzFtxWf7HgivYHAwDLVOLls0V69tptUjfgTjjojsRV3JR50Rtrc4z0=
X-Received: by 10.46.92.9 with SMTP id q9mr2549757ljb.78.1513214739473; Wed, 13 Dec 2017 17:25:39 -0800 (PST)
From: Joe Abley <jabley@hopcount.ca>
Mime-Version: 1.0 (1.0)
References: <20171211090051.qjoruin7nkdjsnvd@nic.fr> <5A2E4B7C.50509@redbarn.org> <20171211091800.wonjnvhl3xrx6r4s@nic.fr> <118C37A8-0DEF-460B-8A79-AAE470D3CED8@hopcount.ca> <1B37BBA1-D141-441A-855E-1ACFF2DC15BD@fugue.com> <EC253232-3713-426E-9300-20AE38C8BE4F@hopcount.ca> <C5CC943C-8ABF-45C9-AC3A-606B4F4A99FE@isc.org> <4F78AA27-9D66-4921-AB44-62EB01148B1D@hopcount.ca> <5D14A9E9-2B1E-45E7-B7FC-C355A6FA7145@isc.org>
In-Reply-To: <5D14A9E9-2B1E-45E7-B7FC-C355A6FA7145@isc.org>
Date: Wed, 13 Dec 2017 20:25:38 -0500
Message-ID: <6866658498418370982@unknownmsgid>
To: Mark Andrews <marka@isc.org>
Cc: Ted Lemon <mellon@fugue.com>, Paul Vixie <paul@redbarn.org>, "dnsop@ietf.org" <dnsop@ietf.org>
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Archived-At: <https://mailarchive.ietf.org/arch/msg/dnsop/gS-geUCXnZI0vF_Zc4ro4ivjqlI>
Subject: Re: [DNSOP] DNS privacy and AS 112: the case of home.arpa
X-BeenThere: dnsop@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnsop>, <mailto:dnsop-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dnsop/>
List-Post: <mailto:dnsop@ietf.org>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 14 Dec 2017 01:25:43 -0000

Hi Mark,

[I'm typing this on a phone. It's going to look horrible in a real
mail client. Sorry about that.]

On Dec 13, 2017, at 20:19, Mark Andrews <marka@isc.org> wrote:

> Looks like we need to open a ticket for those.  But the ones people actually have internal zones in are correct.  Check the RFC 1918 delegations.  I know these started out being delegated to blackhole servers before the parent zones were signed by this isn’t rocket science.


The zones originally delegated are not rocket science, agreed. The
others are difficult to do unless you don't mind them being lame for a
hard-to-measure population of end-users. Isn't that what we are
talking about?

I can't tell whether you disagree with that or whether you think lame is ok.


Joe