Re: [DNSOP] moving forward on special use names

Alain Durand <alain.durand@icann.org> Sat, 17 September 2016 14:18 UTC

Return-Path: <alain.durand@icann.org>
X-Original-To: dnsop@ietfa.amsl.com
Delivered-To: dnsop@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E0DA612B24B for <dnsop@ietfa.amsl.com>; Sat, 17 Sep 2016 07:18:29 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -5.708
X-Spam-Level:
X-Spam-Status: No, score=-5.708 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-1.508, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DURJdO3WFxAY for <dnsop@ietfa.amsl.com>; Sat, 17 Sep 2016 07:18:28 -0700 (PDT)
Received: from out.west.pexch112.icann.org (pfe112-ca-1.pexch112.icann.org [64.78.40.7]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E625812B23E for <dnsop@ietf.org>; Sat, 17 Sep 2016 07:18:27 -0700 (PDT)
Received: from PMBX112-W1-CA-1.pexch112.icann.org (64.78.40.21) by PMBX112-W1-CA-1.pexch112.icann.org (64.78.40.21) with Microsoft SMTP Server (TLS) id 15.0.1178.4; Sat, 17 Sep 2016 07:18:25 -0700
Received: from PMBX112-W1-CA-1.pexch112.icann.org ([64.78.40.21]) by PMBX112-W1-CA-1.PEXCH112.ICANN.ORG ([64.78.40.21]) with mapi id 15.00.1178.000; Sat, 17 Sep 2016 07:18:25 -0700
From: Alain Durand <alain.durand@icann.org>
To: John Levine <johnl@taugh.com>
Thread-Topic: [DNSOP] moving forward on special use names
Thread-Index: AQHSDTMDDdCbyRJC+0a3dK+T8vJr6aB85x8AgAAMJQCAAAYCAIAAKKSAgAAD0YCAAAGnAIAAAbuAgAACJICAAA6/AIAAEMYAgADs4AA=
Date: Sat, 17 Sep 2016 14:18:25 +0000
Message-ID: <789E92DE-7B0A-477C-BC37-C56D380B5AF3@icann.org>
References: <20160917001036.71292.qmail@ary.lan>
In-Reply-To: <20160917001036.71292.qmail@ary.lan>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: yes
X-MS-TNEF-Correlator:
x-ms-exchange-messagesentrepresentingtype: 1
x-ms-exchange-transport-fromentityheader: Hosted
x-originating-ip: [192.0.47.234]
Content-Type: multipart/signed; boundary="Apple-Mail=_253383EB-C578-4C21-AD30-28327C56C60E"; protocol="application/pkcs7-signature"; micalg="sha1"
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/dnsop/ixLD5CZkqmkekHCFav5tJmx0_bE>
Cc: "dnsop@ietf.org" <dnsop@ietf.org>
Subject: Re: [DNSOP] moving forward on special use names
X-BeenThere: dnsop@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnsop>, <mailto:dnsop-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dnsop/>
List-Post: <mailto:dnsop@ietf.org>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 17 Sep 2016 14:18:30 -0000

What would really help here would be standardize a way to measure toxicity. We could then track a specific string toxicity over time, and maybe then define a threshold where it is OK or not OK to delegate that particular string.

I would personally agree with your assessment that maintaining this list in 6761 is problematic, for the reason mentioned in section 3.f of darft-adpkja:

"f.  [RFC6761] does not have provision for subsequent management of
       the registry, such as updates, deletions of entries, etc…”


Alain.


> On Sep 16, 2016, at 8:10 PM, John Levine <johnl@taugh.com> wrote:
> 
> This is the toxic waste bit.  The names don't make sense in the 6761
> special use registry, since they're not being used in any way that is
> or can be standardized, but they also aren't suitable for delegation
> due to widespread de facto use.  I also expect that if we redid last
> year's debate in anything like the same way, we'd have the same
> result, one or two highly motivated people who work for TLD applicants
> would sabotage it.
> 
> As I hardly need tell you, it is utterly unclear whether it makes more
> sense to have the IETF reserve them or, to switch hats and encourage
> ICANN to put them on a list of names that aren't in use but can't be
> delegated as SAC045 suggests.
> 
> One reason that the latter makes slightly more sense is that it's
> likely that some of those names will eventually become less polluted,
> so the list needs to be reconsidered every once in a while (years.)
> For example, I gather that it's been a decade since Belkin stopped
> making routers that leak .belkin traffic, and at some point most of
> them will be gone.