Re: [DNSOP] The Larger Discussion on Differences in Response Drafts

Matthew Pounsett <matt@conundrum.com> Thu, 18 August 2016 14:19 UTC

Return-Path: <matt@conundrum.com>
X-Original-To: dnsop@ietfa.amsl.com
Delivered-To: dnsop@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6F3B012DF26 for <dnsop@ietfa.amsl.com>; Thu, 18 Aug 2016 07:19:13 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.599
X-Spam-Level:
X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=conundrum-com.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WIZj2tXoKvwJ for <dnsop@ietfa.amsl.com>; Thu, 18 Aug 2016 07:19:11 -0700 (PDT)
Received: from mail-qk0-x22c.google.com (mail-qk0-x22c.google.com [IPv6:2607:f8b0:400d:c09::22c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E8C5612DF34 for <dnsop@ietf.org>; Thu, 18 Aug 2016 07:19:10 -0700 (PDT)
Received: by mail-qk0-x22c.google.com with SMTP id t7so17377064qkh.1 for <dnsop@ietf.org>; Thu, 18 Aug 2016 07:19:10 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=conundrum-com.20150623.gappssmtp.com; s=20150623; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=2vc9mk4Qs6mA+WijzewIA690dRo3vdW1OqWdjoddSfo=; b=MQQHstoWgcIcfHNiXXTd+voJYTLlmfXfUI3Al16kIZH6ux7wIYa9NimkDrjuO+YAGE tCEzmWTThjG+4GZJrHYvhULh+3e5tIThuCKN3f00PDJgxCEjFa8Y2yjSGWUANUrQb0E8 DPkCRf8qzXy+NldTIkExy2XtA9/gNgzU8krJT1J60K6gmMBHhOurvm8q2j7r49nBxDuK pdB7DuRai+VR8TyT7/CYNgxoKa+JcJdPhsvrTyCyanYN/FRYzeHKwdXpPXrt/yubyS5L lWU66ZSS7jHz3KQ+JqaWroNSgVVqGP5lxCKStxRmJds3EkRVymHUk/r6A1WE/2maIlZo JeDA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=2vc9mk4Qs6mA+WijzewIA690dRo3vdW1OqWdjoddSfo=; b=AkesXqO1QSQXbcKeNkcqcm8x3sNg1qS59liLtWxJN5DacfMhFWR5SVIoHRTVqXsQto Zkoy6n8IMdu/XVlfipzT2pviJZk9VrpgMJ6/wPy7GWk7BabMnV7zaV7PFW90leJaFUYI +JNXqUOvwDXUJdCV1TuSNWC9LPBz0UHJOKC9JDEqbQlh1L+9Th4g7q2jfynGyiYe2AMl dK0hlg0tgolfpf9x1b0CaLI9aVCHe4BH4JAjJuyu4b+Y0Gaa1fwwYoMiE6cbzTLtHQAg nzFfcniQHDz55K0JDcCuBGBw7R24qcLn5s25eALPHRV9STRJjo1SY2I7Kd1GmwvuSAEO 8dFQ==
X-Gm-Message-State: AE9vXwOBl3ozny6b9prNGTCDK43UYX5bXqqbmudHUdSK+SefazyyO0gcxG0RNPFy2Nd/4vuzSDXNExd7asU63A==
X-Received: by 10.55.24.149 with SMTP id 21mr2679376qky.232.1471529950072; Thu, 18 Aug 2016 07:19:10 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.237.46.194 with HTTP; Thu, 18 Aug 2016 07:19:09 -0700 (PDT)
X-Originating-IP: [216.235.10.37]
In-Reply-To: <CACfw2hh3OXw9Z7S8s3MSKwHMCEm=uUT03+tS0g1esMU0PULVqQ@mail.gmail.com>
References: <665d8bd3-4229-eb98-1688-2460dcb943b6@gmail.com> <CAAiTEH--d3J7E0kib6WedXKeuQKYcofaVZra5vuh2qpt8RUSHQ@mail.gmail.com> <CACfw2hh3OXw9Z7S8s3MSKwHMCEm=uUT03+tS0g1esMU0PULVqQ@mail.gmail.com>
From: Matthew Pounsett <matt@conundrum.com>
Date: Thu, 18 Aug 2016 10:19:09 -0400
Message-ID: <CAAiTEH-Q7_UHQQUQfiw8sEp3MsF8OSkq+MhoLtwt18-DjUu7Hw@mail.gmail.com>
To: william manning <chinese.apricot@gmail.com>
Content-Type: multipart/alternative; boundary="001a11441e5ef37073053a5943bd"
Archived-At: <https://mailarchive.ietf.org/arch/msg/dnsop/lfHNBHhfh2oaWZ7-LLn-7m9fA60>
Cc: Tim Wicinski <tjw.ietf@gmail.com>, dnsop <dnsop@ietf.org>
Subject: Re: [DNSOP] The Larger Discussion on Differences in Response Drafts
X-BeenThere: dnsop@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnsop>, <mailto:dnsop-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dnsop/>
List-Post: <mailto:dnsop@ietf.org>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 18 Aug 2016 14:19:13 -0000

On 18 August 2016 at 01:33, william manning <chinese.apricot@gmail.com>
wrote:

> please help me get over the feeling that this argument is founded on the
> same logic as that used by folks who "know" I might want, no NEED that
> extra bit of email in my inbox.  As I read it, it sounds like DNS Server
> Spam being "PUSHED" to the Resolver who may or may not want the data.
>

Pure hyperbole.

If a client is given a delegation today, you don't complain because glue is
supplied.  It's necessary for the obvious next step.   We already have
other records (e.g. SRV) which is many cases have data which are useless
without a followup query.  In what way is it like spam to supply those data
with the original query?


>
> Please advise.
>
> /Wm
>
> On Wed, Aug 17, 2016 at 8:35 AM, Matthew Pounsett <matt@conundrum.com>
> wrote:
>
>>
>> On 16 August 2016 at 08:57, Tim Wicinski <tjw.ietf@gmail.com> wrote:
>>
>>> All,
>>>
>>>
>>> In Berlin we had two presentations on different methods of returning
>>> multiple responses:
>>>
>>> https://datatracker.ietf.org/doc/draft-wkumari-dnsop-multiple-responses/
>>>
>>> https://datatracker.ietf.org/doc/draft-bellis-dnsext-multi-qtypes/
>>>
>>> and a presentation in Buenos Aires:
>>>
>>> https://datatracker.ietf.org/doc/draft-vavrusa-dnsop-aaaa-for-free/
>>>
>>> All of these documents are attempting to solve a larger problem in
>>> different ways.
>>> The end result is "Return Associated Answer" to the client.
>>>
>>> The question is starting to coalesce around these two premises:
>>>
>>> - Do we want to Server to PUSH any or all Associated Answers, or
>>>
>>
>>
>> - Do we want the Client to PULL any or all Associated Answers, or
>>>
>>
>> There are times when the server side of the communication will know what
>> the client needs next, much the same as following a CNAME chain.  This
>> might include records included automatically, such as returning the A/AAAA
>> records from the RDATA of a SRV record.  It might also include records
>> added by local policy, whether that's from configuration or learned by
>> heuristics.  In the future that might include things like returning an HTTP
>> SRV record for the apex (and associated address records) when a 'www' label
>> is queried for.
>>
>> There's a fair bit of overlap between the use cases for push and pull,
>> but I think more use cases are covered by push than pull.  It's possible
>> that the use cases for pull are a subset of the use cases for push.  I
>> haven't yet thought of any pull use cases that couldn't be covered by push.
>>
>> I think there's some flexibility to be gained from implementers having
>> both tools available, but I think if we were to only pursue one it should
>> be push.  I think the fears of providing a DDoS tool can be  assuaged by
>> requiring the use of things like cookies, or session signalling as a
>> prerequisite.
>>
>>
>>>
>>> - Do we want the Status Quo?
>>>
>>
>> The status quo works ... but I believe there are things to be gained by
>> moving forward.
>>
>> _______________________________________________
>> DNSOP mailing list
>> DNSOP@ietf.org
>> https://www.ietf.org/mailman/listinfo/dnsop
>>
>>
>