[DNSOP] Re: John Scudder's Discuss on draft-ietf-dnsop-generalized-notify-07: (with DISCUSS and COMMENT)

Peter Thomassen <peter@desec.io> Thu, 06 March 2025 12:55 UTC

Return-Path: <peter@desec.io>
X-Original-To: dnsop@mail2.ietf.org
Delivered-To: dnsop@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 8711882E310; Thu, 6 Mar 2025 04:55:16 -0800 (PST)
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -2
X-Spam-Level:
X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_SBL_A=0.1] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=desec.io
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id YP66pTt_ZWVv; Thu, 6 Mar 2025 04:55:11 -0800 (PST)
Received: from mail.a4a.de (mail.a4a.de [IPv6:2a01:4f8:10a:1d5c:8000::8]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-256) server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 2208982E2A7; Thu, 6 Mar 2025 04:55:11 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=desec.io; s=20170825; h=Content-Transfer-Encoding:Content-Type:In-Reply-To:From: References:Cc:To:Subject:MIME-Version:Date:Message-ID:Sender:Reply-To: Content-ID:Content-Description:Resent-Date:Resent-From:Resent-Sender: Resent-To:Resent-Cc:Resent-Message-ID:List-Id:List-Help:List-Unsubscribe: List-Subscribe:List-Post:List-Owner:List-Archive; bh=/sGzIDDRuBgAOQS6XqSl+DbPEuCf7a8UmCmtsTJFsmU=; b=T6olH3t6DRb4MO/Jl4d867O+LB 1E3S219VsTVaCvxJ9zYfxu7fqlOEO/ejliupjhtLGFkba5xEEUQjQHMfyLwKBidin6ORbTcrCXrTK R3K6vvK37AwuE7qqrpqwW24n/eXLhZBiZqO9AVhfjPz+6W2Fp30dU12rl6wo9F3nf3BI8JZALZYOo i4KjGFvBKeXivMI0yg4M8csumVd/w4GBkASL+wo0dD+X9q8MRwdt7I7+M2zhv23rICUWyPpLVYfen hU1h/1f6n1wwvft6SmdLuFuDgwN1M+GH+x95viW8xIKTYzu9t9jvykWtACGrA+QKc3sJxv3RYm4IL a4V51+8Q==;
Received: from business-90-187-67-221.pool2.vodafone-ip.de ([90.187.67.221] helo=[192.168.75.127]) by mail.a4a.de with esmtpsa (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (Exim 4.97) (envelope-from <peter@desec.io>) id 1tqAkm-00000007ils-3cCH; Thu, 06 Mar 2025 13:55:09 +0100
Message-ID: <bd33ae33-6d25-42a5-9e00-33b60f87552f@desec.io>
Date: Thu, 06 Mar 2025 13:55:07 +0100
MIME-Version: 1.0
User-Agent: Mozilla Thunderbird
To: John Scudder <jgs@juniper.net>, The IESG <iesg@ietf.org>
References: <174114148941.684703.11258441365595447924@dt-datatracker-5dd67b77bb-4k4zh>
Content-Language: en-US, de-DE
From: Peter Thomassen <peter@desec.io>
Autocrypt: addr=peter@desec.io; keydata= xsFNBFRjVn0BEADXqtra70yxQrT4MQ9DEhN0mxG6XRAOHE6nP18mqxwSlcET7D6w+z3h4ole v0tyvUU02c2wg04X8WVfjoHnAvIa1dfUcNpB1+QmfFsw0xIJlbT1ogHkMiPQqR4ChDvE3ND/ 6YCS5+HT6hY+tfU+hpLsKw4l+u1Pg2NPVLYosET1jU84b7xhFnoicnCV3kUNltLtxLKSBAfk AXtp1AWWKJbfCr3y0qKElMriicoe5DUZfLrZK2iPcWBxh+n7KMO2g7aqx3aQqwW1+S7Sq7Is l6iSurYfIcHb4AfUy4o5nPB8kKACR6BuJmkEQ5WLuTGruWA2fcxaNpICmolMinTzW1CrIjgN PoskMYCNIZ2uWxS6LN8hBiGCRL4h9aL4wuT09SvR13oAPI1HD5ph+mH6wD37/ONBXrdjcFNb 1l/uVkHU/SwwcKDJOsX18T60Ao00fciTbFHgmKtFube0xGK/vjh461TyU+xKD8Orvyeovvxy MzCwM3UVq/dkdG2Ys/7Qy/4bUC1nJEwKlLv7ZTdtSckdoU2M6JpPX6i4KDB2YCMbwtqJ842z 8A/UuE2bL9aDimh/sF8WgPIhlxqF1STNqW1JTIbDPv8HeZnM4nyJOUWStj4uRiETQhBClPLz YWtnR+EUsfbSLy81vfupbMqRasDlt6aASobgn+K7Rb1Xs/mDnwARAQABzSBQZXRlciBUaG9t YXNzZW4gPHBldGVyQGRlc2VjLmlvPsLBeAQTAQIAIgUCVGNWfQIbIwYLCQgHAwIGFQgCCQoL BBYCAwECHgECF4AACgkQ79YUOj7yLS88Dg//SbHnFGrtaImEiM69wyj4GzWnuGk9/upCym/R RzdBALCYHU9FUFFHwusiO9A0pnO8qv/GEtqqTHrcL205a6FTivkdZmOsWuN4oo7r4HBc/taI FLLUDg2wd8q4m4387sYEqrc3olGfyRB6hrMtEWVJLXHJmpcrxAaI1F2QO4Bu7kcdTnyGFz/p ZD8XAof2TWHqJb2ux69DFhiAJeAZlV+h9QrxTedL84l4hq3x1VWsnOEFaCJiThDX920kTnhJ ijrDocgAbmQBCniPACpPHYhBhmCJxfVqgfMuLMNsukOmKxsGcGV6rO1zB5ZUhm3O/Ixk6ow3 6FDKALWihg6Z4P/cJYySMn0iqvHkO8ryT9oJKX//mKaYoF6henXDRLCcRjKwGxFQTEgX+6yc pjgvX3rlypjkPT5ho4yEc5ePkQ2gIIHhvZburm1Zr4nDPx6v8+3XUjpXBRTWQ8/0/h0rtLJe yOPwGJxcfKf/GutTCqiio0mS01mIY9c2i7JWcljlIuSEUit6CHotc5lBOm2GJwguRJG6cXPY SQecwBdcjH3RTzBOv/DN6xWAIV7BmbX/e7DSGAc60mBO1/M0ut+a6CkxRQK8TaE3B3zh1/QO nG0XvtZfIY8ZYdTrdEDSV1Pj5pof/fqhhegHRxN2qi4qIuVcrW0jsUsx10IgAynHR7qQKsvO wU0EVGNWfQEQAPBA8iPCS4ZRX8stW0WuW7579axSq/Luyik4MWDFalt68lzvUbV0f6faN15+ aV7VwMTw3rSa2tP0U8crYAAAZ5NrRHXlYms5BK9vsi1322dAvhyNRawdprP627SO+Ez/84tY xz1X3M9esbN7gpJtHP6mHW76zYpT447v6c2qlbldjobZTDb6kKSGFCIrPJz9M4jVfya+ovxe 2Ab7hn2R0CcyMHATV5g1Ry0XXaj5y3bWypActbG9nflRn3NjhHZynu+WEPDUJCO8kNVNYKOw HObNTeaLvgvU0ONB8pYJv35kDXMhZLwo5MJuJd5i54CXwpo9mECwLJT1RpJi7u98nBrWyyaH s2brG9LPCRKBKOhiHFu57H+cElh+kOvehuS7DFTzjqDwJlkQzP5Hq0G++hZxfdYocKdcdFoh RP3dtDAe+Lfiy9qzJicZ6ACbzoQIN58xj0VWAn1W7SuMErOjv84D/FiXHD2Kxtx09wQl8vH0 Nbh9UgyDBNupToM0ixT+8Ko8eBuYHR53RPxshQhFw4EMIhXiOaxNe1W2Z95QPnYhUGOMoy3I v4fxMQUHa4kZSF2qxsFB1Cxol/aBPGwkwoqUvzp23pLQtJ6youYXtLgvx3pR4L52Q5CUzHMa HvM67XWgW1KqtnvNBXN9PwtDz/a9fQX1YO4CegrXv8C9Ro+LABEBAAHCwV8EGAECAAkFAlRj Vn0CGwwACgkQ79YUOj7yLS8rXA/9EGX2QRfJS94JTdtseu7saTK9a3IKwk6E33GpfXyUVpMt sOqV756XQwULZSWoxInRQtWojA8pQxDUYrbA4MpX0Efr2Dx1xIsJ5F3JajOqViB1SbOD2m0f bxXbcoWKitsKoag2SlvNOd8rD9FcgDvrkacnaQZcZE8DyyGx0JU451tfoD/igu85NZpTDaWG 6fth7QRlxmdGWrGXRdXAP29jq1n0I1wIyF/bXlZ7MXjOSsfyPddzsnHFTvNMZKps0QXNF+hi ESg9chIeo/IFDDVu6pCtm6mftojx84rczTZiNk8r2T3TU4N8uwWtXn/nj9xd61pnxD0xkTPH zxJrCs59WSfYqj3aFNkWO3Lg0/HGnO9wHQKMXcGPsnKITHVzxCNBQtVHomNA7ds6Kt3/WJgS pU2ciICvrpvKgPNWQ0d/SeY3vYIRvDLZ12Svx6M3eXDrsgZOT5be7kGVr3t7dBOYKcRHkZUq kU1kCcgp0vetISVDOc5fkpdUkAtd5/13pIpz4ikVR3OM4Br4XMVShm6RvoP4pyA+ftCi1+bw 0UbRCrnHgnG+wtCf5nMDGVLc04vITnII+ESZqlF02a1IFj0Z2MuQK2Oszl2Nsx/LG60G1e/R pzKEXIIJgHfbwUCWtV1zQu6v9Ng5H8EqVeWcdaPUwSQMGcDg/sPa4s/OxhgrYBg=
In-Reply-To: <174114148941.684703.11258441365595447924@dt-datatracker-5dd67b77bb-4k4zh>
Content-Type: text/plain; charset="UTF-8"; format="flowed"
Content-Transfer-Encoding: 7bit
Message-ID-Hash: IHYNBYABABR3MRWSIJM2CSJVKAY2FWU2
X-Message-ID-Hash: IHYNBYABABR3MRWSIJM2CSJVKAY2FWU2
X-MailFrom: peter@desec.io
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-dnsop.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: draft-ietf-dnsop-generalized-notify@ietf.org, dnsop-chairs@ietf.org, dnsop@ietf.org, tjw.ietf@gmail.com
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [DNSOP] Re: John Scudder's Discuss on draft-ietf-dnsop-generalized-notify-07: (with DISCUSS and COMMENT)
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/dnsop/gjSBKHNujKIqrOywtyqEy_uQdjo>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dnsop>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Owner: <mailto:dnsop-owner@ietf.org>
List-Post: <mailto:dnsop@ietf.org>
List-Subscribe: <mailto:dnsop-join@ietf.org>
List-Unsubscribe: <mailto:dnsop-leave@ietf.org>

Hi John,

Thank you for re-raising this! We've been waiting for it :)

On 3/5/25 03:24, John Scudder via Datatracker wrote:
> ----------------------------------------------------------------------
> DISCUSS:
> ----------------------------------------------------------------------
> 
> Thanks for this document. While my knowledge of the subject area is limited, it
> seems clear and well-written.
> 
> I have one point to DISCUSS. Actually, we already are discussing it, in my
> follow-up to Roman's ballot,
> https://mailarchive.ietf.org/arch/msg/dnsop/0T2AHx1K8M8U0tc7Ec0AIoEphoo/ et
> seq. (we wandered off of the public mailing list archive after that one
> though). The reason I'm capturing this as a DISCUSS point is that I think, as
> we discussed, what's in 07 isn't OK -- either there needs to be some kind of
> guidance to the Designated Expert(s), or the policy needs to be changed to one
> that doesn't require such guidance. I don't mind what solution is chosen, as
> long as there is one.

The authors opted for adding more useful guidance for experts. We now have:

NEW
    [...] Expert reviewers should take into consideration the
    following points, but are being designated as experts for a reason,
    so they should be given substantial latitude:

    *  Point squatting should be discouraged.  Reviewers are encouraged
       to get sufficient information for registration requests to ensure
       that the usage is not going to duplicate one that is already
       registered and that the point is likely to be used in deployments.
       The code points tagged as "Private Use" are intended for testing
       purposes and closed environments.  Code points in other ranges
       should not be assigned for testing.

    *  A specification of a scheme is desirable, but early assignment
       before a specification is available is also possible.  When
       specifications are not provided, the description provided needs to
       have sufficient information to identify what the point is being
       used for.

    *  Experts should take into account that field values are fit for
       purpose.  For example, the mnemonic should be indicative and and
       have a plausible connection to the scheme's notification
       mechanism.

If this looks OK to you, we'll submit a new revision with it once the submission cut-off is over. Meanwhile, here's the diff:

https://author-tools.ietf.org/api/iddiff?url_1=https://peterthomassen.github.io/draft-ietf-dnsop-generalized-notify/20250305_dnsdir/draft-ietf-dnsop-generalized-notify.txt&url_2=https://peterthomassen.github.io/draft-ietf-dnsop-generalized-notify/20250306_iesg/draft-ietf-dnsop-generalized-notify.txt

> ----------------------------------------------------------------------
> COMMENT:
> ----------------------------------------------------------------------
> 
> I have only one other point to raise -- In Section 4.3 you have "NOTIFY(CDS)
> messages carrying notification payloads (records) for several child zones MUST
> be discarded, as sending them is an error." Shouldn't that be "more than one
> child zone" instead of "several" (which my dictionary defines as "more than two
> but not many")?

Yes, probably; shall fix. (TIL!)

Best,
Peter + co-authors