Re: [DNSOP] New Version Notification - draft-ietf-dnsop-dns-catalog-zones-09.txt

Willem Toorop <willem@nlnetlabs.nl> Thu, 09 February 2023 11:38 UTC

Return-Path: <willem@nlnetlabs.nl>
X-Original-To: dnsop@ietfa.amsl.com
Delivered-To: dnsop@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CA09FC1782A2 for <dnsop@ietfa.amsl.com>; Thu, 9 Feb 2023 03:38:11 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.853
X-Spam-Level:
X-Spam-Status: No, score=-0.853 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, NICE_REPLY_A=-0.001, NORMAL_HTTP_TO_IP=0.001, NUMERIC_HTTP_ADDR=1.242, RCVD_IN_DNSWL_BLOCKED=0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=unavailable autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=nlnetlabs.nl
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WM_WqYAsP9bw for <dnsop@ietfa.amsl.com>; Thu, 9 Feb 2023 03:38:07 -0800 (PST)
Received: from mail-il1-x130.google.com (mail-il1-x130.google.com [IPv6:2607:f8b0:4864:20::130]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2EA22C151534 for <dnsop@ietf.org>; Thu, 9 Feb 2023 03:38:06 -0800 (PST)
Received: by mail-il1-x130.google.com with SMTP id u8so684178ilq.13 for <dnsop@ietf.org>; Thu, 09 Feb 2023 03:38:06 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nlnetlabs.nl; s=google; h=content-transfer-encoding:in-reply-to:from:references:cc:to :content-language:subject:user-agent:mime-version:date:message-id :from:to:cc:subject:date:message-id:reply-to; bh=cp62RAHVJRJEUtxyB7p4huU/gm2T9sDcz8HG82D9/Ps=; b=f79yKP0YZ3I9BkUn1gRwsnCXysVDJh8ubTaF9EFsauuBOatCbrvLsMjwOzvm40HNpB qSNrMJ2Z1DrLKmZ1HmdOb51vRLuWVYB0gmvMt8kJ0C8II1pW9+TkIIWTFUo8dX2vb4bU NXQRRiXrvuTxtOIVvPUJV8+9EGH2QZSl/yl65Crlprclb9kC8tx4Qse23oNKIpiFG4wB jLKsn6zLqhrAbTcP5JaL8MQiFUHGtpR76un4J688lItesW6S6wR0qv+iITfd0vSl6I3z zcNFPtcdoqlDja4EUGWiLo+pR+bxhQWmJyJYV4RwH9htI5h09OG83pVPrWII9YwjiVDr 3Izg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=content-transfer-encoding:in-reply-to:from:references:cc:to :content-language:subject:user-agent:mime-version:date:message-id :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to; bh=cp62RAHVJRJEUtxyB7p4huU/gm2T9sDcz8HG82D9/Ps=; b=cAQ8XZAMpjy+412/QJpgy/IAASaRggC6roB+kIRsFEpFYcHSA7Xc/szqmfXkNdb7QD Ek0Bx9/z+P7RG2Sg4Te1OBfj+AmvJYrm94w6Lohx8w/WdY5cVJXSCk5YJrBCoPxsQSQ1 HXgkvf0KeudM0FneDVSVpTFKM35QNTGZImiGQjV5+U37OV1S0CjGfpoldYvA6lGPFF7T yIx0a3enUHboY1sH84FZRFoSCZRQW2LnP/05LoI6ipTPGvUyRQDh2KmwuoB/4T+gh7rG Qbp2Nxf4UxprriYyEfIeqbdj+Vhk/BWxwbe6jvAL5U15EyCwMxOCdkZ9R6rKIPOqIsHJ og+Q==
X-Gm-Message-State: AO0yUKVC9Sh9Jn9/vbJmLdGc3D/d4NOdSVeFnlc6OixC0OGNhCwgkECF Gvl8DnJ5MDyqGU+Vnqv3/0wBrLe3ckr1HQKK
X-Google-Smtp-Source: AK7set9jBrG05WEYJGCs3sJWbnhPoF9E8ETNZvz0dhoSsp1+3snUAKz3Ti4j4rfEd5f5Jg/tpcoKFQ==
X-Received: by 2002:a92:1944:0:b0:313:c32b:de26 with SMTP id e4-20020a921944000000b00313c32bde26mr3878292ilm.9.1675942686047; Thu, 09 Feb 2023 03:38:06 -0800 (PST)
Received: from ?IPV6:2a04:b900::7d0? ([2a04:b900::7d0]) by smtp.gmail.com with ESMTPSA id j1-20020a02cb01000000b0039e98b2fe5dsm351106jap.179.2023.02.09.03.38.04 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Thu, 09 Feb 2023 03:38:05 -0800 (PST)
Message-ID: <9b5d95f0-3b45-28cf-5d17-b4816516a8d8@nlnetlabs.nl>
Date: Thu, 09 Feb 2023 12:38:03 +0100
MIME-Version: 1.0
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101 Thunderbird/102.7.1
Content-Language: en-US
To: Paul Wouters <paul.wouters=40aiven.io@dmarc.ietf.org>, Kees Monshouwer <keesm=40monshouwer.eu@dmarc.ietf.org>
Cc: draft-ietf-dnsop-dns-catalog-zones.authors@ietf.org, "dnsop@ietf.org WG" <dnsop@ietf.org>, Tim Wicinski <tjw.ietf@gmail.com>, "Murray S. Kucherawy" <superuser@gmail.com>
References: <167577800490.53807.9257358286100121972@ietfa.amsl.com> <CAGL5yWZNzyJWcZ2eLL6Yw0JFNusPQo2AQHr678C8kXGHio4-Lw@mail.gmail.com> <edcd7b0c-e47d-e2bd-8932-d50dbdfd0f23@monshouwer.eu> <CAGL5yWZU7oKCuLqH_6yfb6Qo2u-GsuuaSwZ1KsPcVYmQM+tF5w@mail.gmail.com>
From: Willem Toorop <willem@nlnetlabs.nl>
In-Reply-To: <CAGL5yWZU7oKCuLqH_6yfb6Qo2u-GsuuaSwZ1KsPcVYmQM+tF5w@mail.gmail.com>
Content-Type: text/plain; charset="UTF-8"; format="flowed"
Content-Transfer-Encoding: 8bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/dnsop/nSNe5R6bNKMqwd_k-H6rTkJsFi8>
Subject: Re: [DNSOP] New Version Notification - draft-ietf-dnsop-dns-catalog-zones-09.txt
X-BeenThere: dnsop@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnsop>, <mailto:dnsop-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dnsop/>
List-Post: <mailto:dnsop@ietf.org>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 09 Feb 2023 11:38:11 -0000

Op 08-02-2023 om 14:27 schreef Paul Wouters:
> While re-reading the properties / version bits, I noticed this text in 
> section 4.3.2.1 <http://4.3.2.1>:
> 
>        In this scenario, consumer(s) shall, by agreement, not sign the 
> member zone "example.com <http://example.com>." with DNSSEC.
> 
> Since the "nodnssec" got removed, this sentence makes no more sense to 
> me. How does the example "show" the
> meaning of "not sign the member zone" ?

We changed that text line into:

    ``By agreement, "foo" could in this scenario indicate that the 
consumer(s) shall not sign the member zone "example.com." with DNSSEC.''

in commit:

https://github.com/NLnetLabs/draft-toorop-dnsop-dns-catalog-zones/commit/a253f82