Re: [DNSOP] new EDE draft with a few changes

Eric Orth <ericorth@google.com> Wed, 15 January 2020 17:17 UTC

Return-Path: <ericorth@google.com>
X-Original-To: dnsop@ietfa.amsl.com
Delivered-To: dnsop@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4799E1208A6 for <dnsop@ietfa.amsl.com>; Wed, 15 Jan 2020 09:17:57 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -17.5
X-Spam-Level:
X-Spam-Status: No, score=-17.5 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, ENV_AND_HDR_SPF_MATCH=-0.5, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5, USER_IN_DEF_SPF_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=google.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id HDGs4cJa1vvV for <dnsop@ietfa.amsl.com>; Wed, 15 Jan 2020 09:17:52 -0800 (PST)
Received: from mail-wr1-x433.google.com (mail-wr1-x433.google.com [IPv6:2a00:1450:4864:20::433]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AC9C412088B for <dnsop@ietf.org>; Wed, 15 Jan 2020 09:17:51 -0800 (PST)
Received: by mail-wr1-x433.google.com with SMTP id c14so16538624wrn.7 for <dnsop@ietf.org>; Wed, 15 Jan 2020 09:17:51 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=D6d8J620wK3TJ1dW+f2g7DP0M+sxE5aSPBGoi/uSLsk=; b=lmfiDUt6mDQ4w0ZrpO0uqjNt36rFINd6elP5tVeVMjhKIX9vOrqh9/3sbIPu5ss3HI H8/tkv6xlmAKmeJG5fkCtdgqd/A/jYJW8OQw8jjiOnhyfDso77OIqu1HyNwg3GxYFdTI gyNOMH7SYk59979TAliy1TSRPKD+94gyPmIB5oovAp6dmxNa6MLMWI//FfLcxs/MXYk5 4pt/xLOaj4q5id6NvyOM4VjHfIDTmFdx9P5vOVkSKY1g400gXLXa6UTPr8QEOVwAlFCE i4ng/j4JAKBUl9aWgF6i9+AWOoGLEFLHGVVyLY0RPo8NbexGfH2I00SaQTSct7+PXYqv NYaA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=D6d8J620wK3TJ1dW+f2g7DP0M+sxE5aSPBGoi/uSLsk=; b=UR9XeokuFMvXzQ0efHATdU98sAbCBODc24s/lfdfoqT93AdKxDYZZ0T5rEon3LL9gL WoLoKiP4jhzZIKYV28aZrj0HGpMm9y6dbcqDLhPHQ8eoHgUOw8Ah7xZSWScbblZFRrka 8iPMdJplz+Q6OygpMOI3gX4EFRsgKWIqCXtNzxIvWMCT9QFqJitKtE9q6vCa4rSvSlps GrntnrFOo0/NlWZRgKpo9Lc5h/yllph/djz1f0jtKSwKANn9BfrXMfuaD2XuUqynr0Uo HHh1lQth/w3Ejsd2tvUCorQGp1ZAbcMwQkwiX1C6prRr7nLtX+cvv4xloFsfLedB7z/r fxBA==
X-Gm-Message-State: APjAAAVu6D9c+qthfD0do33EZv9dZf6c+6WTWHv3z7LRc9NuDQBFkbdu nt7vD/Pjga79oK5BEAygBbfwkYNgbS12ZxENleLhQjHbKC8=
X-Google-Smtp-Source: APXvYqwEWMGjfPOK8kyBq6CNZfQchnluQ6w+ahB1p9PvTOUUPt1ZuRm+tHnpi+R8n8/26TVyDfM++PCkPd6wbsEvvmQ=
X-Received: by 2002:a5d:6ac5:: with SMTP id u5mr32450945wrw.271.1579108669815; Wed, 15 Jan 2020 09:17:49 -0800 (PST)
MIME-Version: 1.0
References: <ybl36dh5ogq.fsf@w7.hardakers.net> <CAMOjQcHECyrc1cyvev7zsCheXoU2YJjA2TKbrprywjHq6raA1g@mail.gmail.com> <ybleews4dt4.fsf@w7.hardakers.net> <CAMOjQcG1iXwHeNNYT0L0tS1shM7yTaHqoD=MYqSO30ZROfctRw@mail.gmail.com> <ybl36cgfye2.fsf@w7.hardakers.net>
In-Reply-To: <ybl36cgfye2.fsf@w7.hardakers.net>
From: Eric Orth <ericorth@google.com>
Date: Wed, 15 Jan 2020 12:17:38 -0500
Message-ID: <CAMOjQcE-P39TPRCo=Wp9Cd+mOREuYoUfyBThDLRmuK8QndEarg@mail.gmail.com>
To: Wes Hardaker <wjhns1@hardakers.net>
Cc: dnsop <dnsop@ietf.org>
Content-Type: multipart/alternative; boundary="00000000000053ed1c059c30e36f"
Archived-At: <https://mailarchive.ietf.org/arch/msg/dnsop/kSSYXXNeko4Qr9BoSz3SeDl3nf8>
Subject: Re: [DNSOP] new EDE draft with a few changes
X-BeenThere: dnsop@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnsop>, <mailto:dnsop-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dnsop/>
List-Post: <mailto:dnsop@ietf.org>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 15 Jan 2020 17:17:57 -0000

Both additions look good to me.  Thanks.

On Wed, Jan 15, 2020 at 12:00 PM Wes Hardaker <wjhns1@hardakers.net> wrote:

> Eric Orth <ericorth@google.com> writes:
>
> > Here is the text I suggested on 2019-12-02: "Long EXTRA-TEXT fields may
> cause truncation and bad
> > resolve performance, which is usually undesirable for the supplemental
> nature of EDE. Operators
> > setting the field SHOULD avoid setting unnecessarily long contents,
> especially when it can be
> > determined that doing so will cause truncation."
>
> Excellent, thanks.  I've adapted it to the following:
>
>     <section title="Extended DNS Error Processing">
>       <t>When the response grows beyond the requestor's UDP payload
>       size <xref target="RFC6891" />, servers SHOULD truncate messages
>       by dropping EDE options before dropping other data from packets.
>       Implementations SHOULD set the truncation bit when dropping EDE
>       options.  Long EXTRA-TEXT fields may trigger truncation, which
>       is usually undesirable for the supplemental nature of
>       EDE. Implementers and operators creating EDE options SHOULD avoid
>       setting unnecessarily long EXTRA-TEXT contents to avoid
>       truncation.</t>
>
> Hopefully you're ok with that?
>
> >     > Regarding forwarding: Making it implementer-choice generally seems
> >     > good to me.  But I am unsure what the current draft means by
> "properly
> >     > attributed".  What is the proper way to attribute an EDE?
> >
> >     Well, the wording there that we put is was designed to indicate you
> >     should somehow describe where you got the information from.  But
> we're
> >     not prescribing how, since that's implementation dependent.  Any
> >     suggested text you'd prefer?
> >
> > I think my concern comes from the word "properly" since that implies
> that there's a specific
> > prescribed way to do it.  Maybe change the sentence to something along
> the lines of "When doing so,
> > the source of the error SHOULD be attributed in EXTRA-TEXT if doing so
> is reasonable for the
> > contents of that field, since an EDNS0 [...]".  Gives a hint of how
> things can be attributed while
> > avoiding implying that there's a standardized way to do so.
> >
>
> I like that, but shortened it a bit to:
>
>       When doing so, the source of the error SHOULD be
>       attributed in the EXTRA-TEXT field, since an EDNS0 option
>       received by the original client will be perceived only to have
>       come from the resolver or forwarder sending it.
>
> Sound ok?
>
> --
> Wes Hardaker
> USC/ISI
>