IETF Logo Mail Archive

Re: [DNSOP] Glue is not optional, but sometimes it *is* sufficient...

Shumon Huque <shuque@gmail.com> Fri, 22 May 2020 14:49 UTC

Return-Path: <shuque@gmail.com>
X-Original-To: dnsop@ietfa.amsl.com
Delivered-To: dnsop@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 26B723A0B8B for <dnsop@ietfa.amsl.com>; Fri, 22 May 2020 07:49:26 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.097
X-Spam-Level:
X-Spam-Status: No, score=-2.097 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3i6jAgzCSK_d for <dnsop@ietfa.amsl.com>; Fri, 22 May 2020 07:49:24 -0700 (PDT)
Received: from mail-oo1-xc2b.google.com (mail-oo1-xc2b.google.com [IPv6:2607:f8b0:4864:20::c2b]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 77F103A0B76 for <dnsop@ietf.org>; Fri, 22 May 2020 07:49:17 -0700 (PDT)
Received: by mail-oo1-xc2b.google.com with SMTP id i9so2213413ool.5 for <dnsop@ietf.org>; Fri, 22 May 2020 07:49:17 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=wZjKlDJwqPgApq7x2kZ6DP9s9PY5ong0mBT3CTxC6GU=; b=qH1eqisAMbNeTvlSXD0ScT1ScS7mAOmusyuto5MvG5hHuoRr0yZg5AOnS97IN+oU7E 9f5wDCvl60NYzVxRrug59wHgwynhuZ4irntPrC80YNaAYRSqX1S39JuNGdAe7YuQbH4S Ym6rVBc3Tw81zYFzd1smG07hVLxlAewRyUw7Rvb0atDnxehUmEjfl7rfh9vPEfHHQh+7 Qmug6zsBjQFeY9aWCjx/969ErJHBRj6bNaaYp0nN/DO1Z2R2FoN0rnSnu31+PwaUWIhy CQE6lHPd9SRlsU4OHMvwU2lWhgqVqO4m7eZljvSRPemOKd52GCFbvEhzMluhmDbHiYhM jlMw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=wZjKlDJwqPgApq7x2kZ6DP9s9PY5ong0mBT3CTxC6GU=; b=R6oXAELJq28lYgn31QBew3xcD0Ie/enebsgHYbHmwdv22+a5p0SmSuR05hNmkcBUwQ zJTCb5DGAZVtniwhKJLC4PkPujocP+PYpJ3pkcgC15wigoJAu4Z6MnpmTgCTHVziPFYj sOZUs7/vY3wCWN+WrEo5+XHaM2Gy1M7ztcRo4Ugxpk2RU9qNDsy3DElP16Lut1ljwlbd pDlq40XuFJIqd8d37iQAG4Y8Nmd6C95cQrYslpgiCuzw0SGKqcCG5I0ZBvPHC3ytNWcS 3AtLusg2zke+aREUI8/drEg8rV+2kdRviZVVR3BwkZtgclNJWynOyJMW5YFBq2E4Baj2 Za8Q==
X-Gm-Message-State: AOAM53089alsZuKZzfTLujOecM0r62OvwvRRJRyFsyRGh5Y7L8fA3B4x 0N3h1eGjoOEe481RCBDxTbd4NUe2QHdEIa5PwSo=
X-Google-Smtp-Source: ABdhPJznLOuojFVw+4filHuIYYAOX9WRQqRmhA3hOfjE/HnTLZ45AYerOyVoXMxuB+7CpZxGnQn7iSpOjbwBaUI/aBQ=
X-Received: by 2002:a4a:e795:: with SMTP id x21mr3205700oov.91.1590158956665; Fri, 22 May 2020 07:49:16 -0700 (PDT)
MIME-Version: 1.0
References: <CAHw9_i+UsV9NkuPM4KYBZhO7_J78MkUEyVR3fr=vOX-vsjJeUA@mail.gmail.com> <20200521214124.271EC197E0DF@ary.qy> <CAHw9_iKVkD4ORCc_DWSPXww6R43oL_N8TE3F6R-9YQuw1SAfjQ@mail.gmail.com> <alpine.OSX.2.22.407.2005211842300.6195@ary.qy> <alpine.DEB.2.20.2005221345180.25154@grey.csi.cam.ac.uk> <52A07992-DF42-4029-ADE7-E6B27BEBCA34@hopcount.ca>
In-Reply-To: <52A07992-DF42-4029-ADE7-E6B27BEBCA34@hopcount.ca>
From: Shumon Huque <shuque@gmail.com>
Date: Fri, 22 May 2020 10:49:04 -0400
Message-ID: <CAHPuVdUQNZv9AbtAdxtyiCa7Tb9ssrjs5NCnS_Cp1M=wTxY7Zg@mail.gmail.com>
To: Joe Abley <jabley@hopcount.ca>
Cc: Tony Finch <dot@dotat.at>, dnsop <dnsop@ietf.org>, John R Levine <johnl@taugh.com>
Content-Type: multipart/alternative; boundary="000000000000bf9feb05a63dbb04"
Archived-At: <https://mailarchive.ietf.org/arch/msg/dnsop/k9-iiD0agQeTsm_IMIeUmImm1IU>
Subject: Re: [DNSOP] Glue is not optional, but sometimes it *is* sufficient...
X-BeenThere: dnsop@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnsop>, <mailto:dnsop-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dnsop/>
List-Post: <mailto:dnsop@ietf.org>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 22 May 2020 14:49:34 -0000

On Fri, May 22, 2020 at 10:44 AM Joe Abley <jabley@hopcount.ca> wrote:

> Hi Tony,
>
> On 22 May 2020, at 08:47, Tony Finch <dot@dotat.at> wrote:
>
> > John R Levine <johnl@taugh.com> wrote:
> >>
> >> A week or two ago I scannned TLD zone files to see how many signed A
> and AAAA
> >> records there were.  Quite a lot, most looks to be orphan glue in
> Afilias
> >> zones that they didn't delete after the registered zone went away.
> >
> > I vaguely remember a policy change in .com and .net years ago when they
> > stopped including orphan glue in the zones. Was this to do with prep work
> > for DNSSEC? I'm slightly surprised .org didn't follow suit.
>
> I think the change you remember was a change in the way that responses
> were returned from the Atlas nameserver. Once upon a time, glue was
> returned in the answer section alongside a referral. The change I am
> thinking of changed that behaviour to follow other implementations,
> returning glue in the additional section instead.
>

Here's the announcement of that change from Verisign (January 2010):


https://lists.dns-oarc.net/pipermail/dns-operations/2010-January/004841.html

Shumon.

v2.23.0 | Report a Bug | By Email