[DNSOP] Re: draft-ietf-dnsop-delext and early allocation of DELEG code points

Philip Homburg <pch-dnsop-7@u-1.phicoh.com> Fri, 10 April 2026 14:15 UTC

Return-Path: <pch-b55F8B228@u-1.phicoh.com>
X-Original-To: dnsop@mail2.ietf.org
Delivered-To: dnsop@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 8B807D97F124 for <dnsop@mail2.ietf.org>; Fri, 10 Apr 2026 07:15:31 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1775830531; bh=UUhq7wVY3eTdCw8oM2wc0dOenKpjMs6DlLTflH0pSOM=; h=To:Cc:Subject:From:References:In-reply-to:Date; b=rO1DrOyfvnJFh4B+ahaLeZSB13o8iIKL2WekMGUTLWrjH70qEOcJBDPcedHoFvCkQ TWY7jDOd5BRPVlRZ5HFXKXh/JhOmfXzWFR/lmiq8WaAi8zeDjURjcESI5VB1icMmOt anDiqflzRt1XEdCl9TQWXwDIKMkrikbduDa4kFL4=
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -1.898
X-Spam-Level:
X-Spam-Status: No, score=-1.898 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=ham autolearn_force=no
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id MPm1bvzOwvxS for <dnsop@mail2.ietf.org>; Fri, 10 Apr 2026 07:15:31 -0700 (PDT)
Received: from stereo.hq.phicoh.net (stereo.hq.phicoh.net [IPv6:2a10:3781:2413:1:2a0:c9ff:fe9f:17a9]) (using TLSv1.2 with cipher ECDHE-ECDSA-CHACHA20-POLY1305 (256/256 bits)) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 10553D97F104 for <dnsop@ietf.org>; Fri, 10 Apr 2026 07:15:11 -0700 (PDT)
Received: from stereo.hq.phicoh.net (localhost [::ffff:127.0.0.1]) by stereo.hq.phicoh.net with esmtp (TLS version=TLSv1.2 cipher=ECDHE-ECDSA-CHACHA20-POLY1305) (Smail #158) id m1wBCdT-0000OPC; Fri, 10 Apr 2026 16:15:03 +0200
Message-Id: <m1wBCdT-0000OPC@stereo.hq.phicoh.net>
To: dnsop@ietf.org
From: Philip Homburg <pch-dnsop-7@u-1.phicoh.com>
Sender: pch-b55F8B228@u-1.phicoh.com
References: <4EA70AC4-C168-4635-B1A9-B50C826B8125@verisign.com> <0C6CE5A3-FF05-49C3-A5FB-D116070361F3@dnss.ec> <715220aa-7f84-4065-ac9d-f1b8b392481a@isc.org> <D89C0014-89CD-4DB6-8255-B70786744469@dnss.ec> <20260408194923.D229110177F2F@ary.local>
In-reply-to: Your message of "8 Apr 2026 15:49:23 -0400 ." <20260408194923.D229110177F2F@ary.local>
Date: Fri, 10 Apr 2026 16:15:02 +0200
Message-ID-Hash: T2VLGGB4TWGXO5SNP5BRA2T3HGLUQSPZ
X-Message-ID-Hash: T2VLGGB4TWGXO5SNP5BRA2T3HGLUQSPZ
X-MailFrom: pch-b55F8B228@u-1.phicoh.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-dnsop.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: John Levine <johnl@ietf.email>
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [DNSOP] Re: draft-ietf-dnsop-delext and early allocation of DELEG code points
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/dnsop/ksuWVdqqqQz4oeW8TsmCtCNF-8M>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dnsop>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Owner: <mailto:dnsop-owner@ietf.org>
List-Post: <mailto:dnsop@ietf.org>
List-Subscribe: <mailto:dnsop-join@ietf.org>
List-Unsubscribe: <mailto:dnsop-leave@ietf.org>

> How about flipping it around saying that records in the range cause
> special processing in response to queries with the DE bit set, with
> the details of the processing specified in the document(s) that
> define each record.
> 
> While I don't immediately see a DELEGPLUSPLUS that has different
> or more complicated behavior than DELEG, I don't see any reason to
> assume that will never happen. Iit'd be unfortunate if we came back
> next year and said oops it'd be great if we had a DELEGPLUSPLUS
> that in addition does X, but we can't.

For a server, DE=1 tells that the client has DELEG support. DE=0 means that
the client has no DELEG support.

However, in the future we cannot use the DE bit to distinguish between DELEG
and DELEGPLUSPLUS. So the current definition of DE needs to be forward
compatible enough that we can support DELEGPLUSPLUS without changes to the
meaning of de DE bit.

For example, if a delegation has both NS and DELEG records then DE=0 means
the client will get the NS RRset. And with DE=1 the client with get a
DELEG RRset.

In the future with DELEGPLUSPLUS, DE=1 has to have the effect that
the client with get both the DELEG RRset and the DELEGPLUSPLUS RRset
(or we have to allocate yet another bit.).

We can define DELEGPLUSPLUS in any way we want. Want we can't do is use
the DE bit to distinguish between a client that understands DELEGPLUSPLUS
and one that only supports DELEG.