IETF Logo Mail Archive

Re: [DNSOP] CPE devices doing DNSSEC

Jim Reid <jim@rfc1035.com> Sat, 08 March 2014 11:47 UTC

Return-Path: <jim@rfc1035.com>
X-Original-To: dnsop@ietfa.amsl.com
Delivered-To: dnsop@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4B0F41A012A for <dnsop@ietfa.amsl.com>; Sat, 8 Mar 2014 03:47:31 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.447
X-Spam-Level:
X-Spam-Status: No, score=-2.447 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RP_MATCHES_RCVD=-0.547] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id RE8UMxII_hPw for <dnsop@ietfa.amsl.com>; Sat, 8 Mar 2014 03:47:29 -0800 (PST)
Received: from shaun.rfc1035.com (shaun.rfc1035.com [93.186.33.42]) by ietfa.amsl.com (Postfix) with ESMTP id 9D45E1A0206 for <dnsop@ietf.org>; Sat, 8 Mar 2014 03:47:29 -0800 (PST)
Received: from gromit.rfc1035.com (gromit.rfc1035.com [195.54.233.69]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by shaun.rfc1035.com (Postfix) with ESMTPSA id 6EDAC24212F8; Sat, 8 Mar 2014 11:47:23 +0000 (UTC)
Content-Type: text/plain; charset="us-ascii"
Mime-Version: 1.0 (Mac OS X Mail 6.6 \(1510\))
From: Jim Reid <jim@rfc1035.com>
In-Reply-To: <20140308090009.5E51210D1595@rock.dv.isc.org>
Date: Sat, 08 Mar 2014 11:47:22 +0000
Content-Transfer-Encoding: quoted-printable
Message-Id: <936947DC-9567-45FE-A7E3-BF06AB8AAE64@rfc1035.com>
References: <20140307100524.2F42810CD58F@rock.dv.isc.org> <A0D47DA8-6E19-4A61-8A7C-FE960A0FA7E9@cybersecurity.org> <20140308090009.5E51210D1595@rock.dv.isc.org>
To: Mark Andrews <marka@isc.org>
X-Mailer: Apple Mail (2.1510)
Archived-At: http://mailarchive.ietf.org/arch/msg/dnsop/hJUMgiQPqSbcywwnrv3iRaBNmGU
Cc: dnsop@ietf.org, Paul Hoffman <paul.hoffman@cybersecurity.org>
Subject: Re: [DNSOP] CPE devices doing DNSSEC
X-BeenThere: dnsop@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnsop>, <mailto:dnsop-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dnsop/>
List-Post: <mailto:dnsop@ietf.org>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 08 Mar 2014 11:47:31 -0000

On 8 Mar 2014, at 09:00, Mark Andrews <marka@isc.org> wrote:

> But they get told to do EPP to talk to the registries.

Correction: some registrars are obliged to use EPP to talk to some registries.

The followup to that is all TLD registries are exactly the same. Except where they are different.

Even in ICANN gTLD-land where everything's supposedly only done with EPP, low-volume registrars tend to use a web GUI rather than bother with an EPP client. The web back-end speaks EPP for them.

That said, even if this WG can come up with a standard for CPE to upload DS records or whatever -- good luck with that -- I am sceptical it will get widespread acceptance or deployment. Just look at the DNS brokenness that's in existing CPE firmware. The vendors simply don't care. They won't care until their customers, the ISPs, make them. An RFC might help. Though let's be realistic in our expectations.

v2.23.0 | Report a Bug | By Email