Re: [DNSOP] I-D Action: draft-ietf-dnsop-glue-is-not-optional-02.txt

Paul Wouters <paul@nohats.ca> Wed, 28 July 2021 03:10 UTC

Return-Path: <paul@nohats.ca>
X-Original-To: dnsop@ietfa.amsl.com
Delivered-To: dnsop@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DFB743A18B6 for <dnsop@ietfa.amsl.com>; Tue, 27 Jul 2021 20:10:39 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.097
X-Spam-Level:
X-Spam-Status: No, score=-2.097 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=nohats.ca
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lzQGnaz7oOlN for <dnsop@ietfa.amsl.com>; Tue, 27 Jul 2021 20:10:35 -0700 (PDT)
Received: from mx.nohats.ca (mx.nohats.ca [IPv6:2a03:6000:1004:1::68]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3953A3A18B5 for <dnsop@ietf.org>; Tue, 27 Jul 2021 20:10:35 -0700 (PDT)
Received: from localhost (localhost [IPv6:::1]) by mx.nohats.ca (Postfix) with ESMTP id 4GZJZJ5Wswzrl; Wed, 28 Jul 2021 05:10:32 +0200 (CEST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nohats.ca; s=default; t=1627441832; bh=cVejJWqSZk995131rQRdO4N+efLLnBzvhfGKKkwy0g0=; h=Date:From:To:cc:Subject:In-Reply-To:References; b=qcNxwHun9AXYsJGjpc7pfTfxcYNkp3FdKcoXq0+Yt752WNnboFgg/xnhNRJvujzk8 sUYAl8Yz+4KpoRMm5xWIvQ94Uz+q7a/jVzwJgB8RV9FLVz3K6mmj53muGxjqZjUw2y a8A1hp4f0wlf9i3KiiSL2roHDPJ6U6AunTbGR9M8=
X-Virus-Scanned: amavisd-new at mx.nohats.ca
Received: from mx.nohats.ca ([IPv6:::1]) by localhost (mx.nohats.ca [IPv6:::1]) (amavisd-new, port 10024) with ESMTP id LkokPmVLY5Gr; Wed, 28 Jul 2021 05:10:31 +0200 (CEST)
Received: from bofh.nohats.ca (bofh.nohats.ca [193.110.157.194]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mx.nohats.ca (Postfix) with ESMTPS; Wed, 28 Jul 2021 05:10:31 +0200 (CEST)
Received: by bofh.nohats.ca (Postfix, from userid 1000) id E9157D1ED1; Tue, 27 Jul 2021 23:10:29 -0400 (EDT)
Received: from localhost (localhost [127.0.0.1]) by bofh.nohats.ca (Postfix) with ESMTP id E5D27D1ED0; Tue, 27 Jul 2021 23:10:29 -0400 (EDT)
Date: Tue, 27 Jul 2021 23:10:29 -0400 (EDT)
From: Paul Wouters <paul@nohats.ca>
To: Ralf Weber <dns@fl1ger.de>
cc: dnsop <dnsop@ietf.org>
In-Reply-To: <6A6C1BAF-9640-4A6C-9220-3B0A97209C93@fl1ger.de>
Message-ID: <f4e1d24-730-e06d-925-b8f5a9225a84@nohats.ca>
References: <20210727201504.2939B25365A4@ary.qy> <D6F6C939-5FD2-4687-8D73-E4F03181C566@isc.org> <6A6C1BAF-9640-4A6C-9220-3B0A97209C93@fl1ger.de>
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII; format=flowed
Archived-At: <https://mailarchive.ietf.org/arch/msg/dnsop/io1nAEVXiyQosKU7swnkldceKJ0>
Subject: Re: [DNSOP] I-D Action: draft-ietf-dnsop-glue-is-not-optional-02.txt
X-BeenThere: dnsop@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnsop>, <mailto:dnsop-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dnsop/>
List-Post: <mailto:dnsop@ietf.org>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 28 Jul 2021 03:10:40 -0000

On Wed, 28 Jul 2021, Ralf Weber wrote:

> However requiring authorities to put unnecessary data in the additional section
> (the sibbling glue) is not something I support.

First, as Mark said, sibling glue is sometimes needed.

Second, the server will most likely not know whether or not the glue
is needed, it will just include it so it does not have to follow the
complicated looping zones to determine if it is needed or not. Since it
does not know if it is needed or not, it cannot make a smart decision
on whether setting TC=1 is overkill or not. Thus the document saying
"also for sibling glue, just set TC=1 if it does not fit".

Paul