Re: [DNSOP] Some distinctions and a request - Have some class?

manning <bmanning@karoshi.com> Fri, 03 July 2015 15:50 UTC

Return-Path: <bmanning@karoshi.com>
X-Original-To: dnsop@ietfa.amsl.com
Delivered-To: dnsop@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 332631B300C for <dnsop@ietfa.amsl.com>; Fri, 3 Jul 2015 08:50:54 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.91
X-Spam-Level:
X-Spam-Status: No, score=-3.91 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_MED=-2.3, T_RP_MATCHES_RCVD=-0.01] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id CLdEpOQP2ig4 for <dnsop@ietfa.amsl.com>; Fri, 3 Jul 2015 08:50:52 -0700 (PDT)
Received: from vacation.karoshi.com (vacation.karoshi.com [198.32.6.68]) by ietfa.amsl.com (Postfix) with ESMTP id A90481B2FFB for <dnsop@ietf.org>; Fri, 3 Jul 2015 08:50:46 -0700 (PDT)
Received: from localhost (localhost [127.0.0.1]) by vacation.karoshi.com (Postfix) with ESMTP id 1CE09A17455; Fri, 3 Jul 2015 08:50:40 -0700 (PDT)
X-Virus-Scanned: amavisd-new at karoshi.com
Received: from vacation.karoshi.com ([127.0.0.1]) by localhost (vacation.karoshi.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id CHTJv20Dr86t; Fri, 3 Jul 2015 08:50:30 -0700 (PDT)
Received: from [192.168.0.12] (cpe-23-240-123-116.socal.res.rr.com [23.240.123.116]) by vacation.karoshi.com (Postfix) with ESMTPSA id 1642BA1744A; Fri, 3 Jul 2015 08:50:26 -0700 (PDT)
Mime-Version: 1.0 (Mac OS X Mail 7.3 \(1878.6\))
Content-Type: text/plain; charset="windows-1252"
From: manning <bmanning@karoshi.com>
In-Reply-To: <1A6EA045-998D-487D-821C-D96716756F91@frobbit.se>
Date: Fri, 03 Jul 2015 08:50:20 -0700
Content-Transfer-Encoding: quoted-printable
Message-Id: <8A25DC32-2ED0-4A4D-BEFF-050C29A996E5@karoshi.com>
References: <6CB05D82CE245B4083BBF3B97E2ED470C27498@ait-pex01mbx01.win.dtu.dk> <D1BAA21E.CA2E%edward.lewis@icann.org> <6CB05D82CE245B4083BBF3B97E2ED470C2759F@ait-pex01mbx01.win.dtu.dk> <6CB05D82CE245B4083BBF3B97E2ED470C275B2@ait-pex01mbx01.win.dtu.dk> <E225C721-7279-4053-97A2-2D63A155DA14@karoshi.com> <6CB05D82CE245B4083BBF3B97E2ED470C27602@ait-pex01mbx01.win.dtu.dk> <88E49F4B-64BD-4832-BD02-D1A882874E92@karoshi.com> <20150702234423.GB23022@mycre.ws> <EBDBDD70-046F-4E31-BDAC-A619EECD4F13@karoshi.com> <20150703012146.GA29948@mycre.ws> <DC13E07F-2203-4FE9-A67F-B5851A54298F@karoshi.com> <986E07DA-B174-4F81-BFB5-F5EAD46C506F@karoshi.com> <CAHw9_iJMZzrCM24gaMJpDNTHbKwF20DeVX7UszCMZuUvGnLaXw@mail.gmail.com> <BB0813DF-DF9D-4CD9-BDB8-26A437146986@karoshi.com> <1A6EA045-998D-487D-821C-D96716756F91@frobbit.se>
To: Patrik Fältström <paf@frobbit.se>
X-Mailer: Apple Mail (2.1878.6)
Archived-At: <http://mailarchive.ietf.org/arch/msg/dnsop/hauhQVlJ27SfYQykalNYpCy8DYE>
Cc: Robert Edmonds <edmonds@mycre.ws>, dnsop@ietf.org, Andrew Sullivan <ajs@anvilwalrusden.com>
Subject: Re: [DNSOP] Some distinctions and a request - Have some class?
X-BeenThere: dnsop@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnsop>, <mailto:dnsop-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dnsop/>
List-Post: <mailto:dnsop@ietf.org>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 03 Jul 2015 15:50:54 -0000

Perhaps.  The Domain Name System is just that.  A naming system for domains, one of which is the Internet.  Being lazy, and in the absence of significant development in other
domains (save the CHAOS domain), our community conflates the DNS(IN) as the entire DNS.  Which is false.  The DNS, class IN, is rooted at the root zone managed by the IANA.
The DNS, class CHAOS, is not.   The DNS, class ONION, may not.   

Legacy applications/browsers etc, are also lazy and have built in assumptions about DNS, class IN.

This would only be true for globally scoped name spaces,  (so not .LOCAL)

And I would be happy to write up something about name spaces, partitions, etc.  

manning
bmanning@karoshi.com
PO Box 12317
Marina del Rey, CA 90295
310.322.8102



On 3July2015Friday, at 8:18, Patrik Fältström <paf@frobbit.se> wrote:

> Unfortunately I think we all in this discussion [again] mix up discussion about DNS with the discussion about the name space that is in use for example by what we know as "the domain name system rooted at the root zone managed by IANA".
> 
> I think we just must force ourselves to stay focused on namespace management. A portion of that name space is to be accessed using DNS. Some other portions of that very same name space is access using other mechanisms.
> 
> This is not easy, but I think that is the way to attack the problem.
> 
> And given such a view, IETF is to decide what strings are to be used "by other mechanisms" so that [for example] they can and should never ever be accessed by the domain name system.
> 
> This while ICANN have processes for deciding what string should be TLDs, based on the standards created by for example the IETF.
> 
> Maybe a document is needed that describes that namespace? How it is partitioned?
> 
>  Patrik
> 
> On 3 Jul 2015, at 16:21, manning wrote:
> 
>> Thanks for that.  The original claim was that these name spaces were global in scope, but not part of the Internet.
>> So I took that as face value.  Your example, while perhaps a valid interpretation, is not what was asked for.
>> If it is, then namespace/class specific applications/extentions need to be developed/deployed, OR folks need to suck it up and just use the Internet portion of the DNS (and its associated rules, e.g. new TLDs are defined by ICANN)
>> 
>> /bill
>> 
>> 
>> On 3July2015Friday, at 7:01, Warren Kumari <warren@kumari.net> wrote:
>> 
>>> On Fri, Jul 3, 2015 at 9:43 AM, manning <bmanning@karoshi.com> wrote:
>>>> Actually, there IS an escape method already defined.  We just don’t use it much these days.
>>>> It’s called  “class”
>>>> 
>>>> There is no reason these alternate namespaces should sit in the IN class.  they could/should be in their
>>>> own class, like the old CHAOS protocols.   So  a class  “ONION” or “P2P” would work out very nicely.
>>> 
>>> Yup, but the problem is that people want to be able to enter the
>>> alternate namespace names into existing applications (like browsers,
>>> ssh, etc), just like a "normal" DNS name. They want to be able to
>>> email links around (like https://facebookcorewwwi.onion/ ) and have
>>> others click on them, etc.
>>> 
>>> There is no way that I know of to tell e.g Safari to look this up in a
>>> different class... and, even if there were, they would *still* leak,
>>> because people are lazy...
>>> 
>>> W
>>> 
>>>> 
>>>> After all it’s the Domain Name System.  (can comprehend names in multiple domains, not just the Internet)
>>>> 
>>>> manning
>>>> bmanning@karoshi.com
>>>> PO Box 12317
>>>> Marina del Rey, CA 90295
>>>> 310.322.8102
>>>> 
>>>> 
>>>> 
>>>> On 2July2015Thursday, at 20:56, manning <bmanning@karoshi.com> wrote:
>>>> 
>>>>> 
>>>>> On 2July2015Thursday, at 18:21, Robert Edmonds <edmonds@mycre.ws> wrote:
>>>>> 
>>>>>> manning wrote:
>>>>>>> There in lies the problem.  These systems have no way to disambiguate a local v. global scope.
>>>>>>>   It seems like the obvious solution is to ensure that these nodes do NOT have global scope, i.e. No connection to the Internets
>>>>>>>   and no way to attempt DNS resolution.   Or they need to ensure that DNS resolution occurs after every other “name lookup technology”
>>>>>>>   which is not global in scope.
>>>>>> 
>>>>>> I don't understand this point.  Since Onion hidden service names are
>>>>>> based on hashes derived from public keys surely they're globally scoped
>>>>>> (barring hash collisions)?
>>>>>> 
>>>>>> --
>>>>>> Robert Edmonds
>>>>> 
>>>>> If they _are_ globally scoped,  what part of the local system decides which namespace to use, the ONION, the LOCAL, the P2P, the BIT, the BBSS, the DECnetV, the IXP, or the DNS…
>>>>> where is search order determined?  Does first match in any namespace win?  What is the tiebreaker when there are label collisions between namespaces?
>>>>> 
>>>>> 
>>>>> /bill
>>>> 
>>>> _______________________________________________
>>>> DNSOP mailing list
>>>> DNSOP@ietf.org
>>>> https://www.ietf.org/mailman/listinfo/dnsop
>>> 
>>> 
>>> 
>>> -- 
>>> I don't think the execution is relevant when it was obviously a bad
>>> idea in the first place.
>>> This is like putting rabid weasels in your pants, and later expressing
>>> regret at having chosen those particular rabid weasels and that pair
>>> of pants.
>>> ---maf
>>> 
>>> _______________________________________________
>>> DNSOP mailing list
>>> DNSOP@ietf.org
>>> https://www.ietf.org/mailman/listinfo/dnsop
>> 
>> _______________________________________________
>> DNSOP mailing list
>> DNSOP@ietf.org
>> https://www.ietf.org/mailman/listinfo/dnsop