Re: [DNSOP] Comments on draft-livingood-dns-redirect-00

Tony Finch <dot@dotat.at> Wed, 15 July 2009 13:26 UTC

Return-Path: <fanf2@hermes.cam.ac.uk>
X-Original-To: dnsop@core3.amsl.com
Delivered-To: dnsop@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id C1D553A6B56 for <dnsop@core3.amsl.com>; Wed, 15 Jul 2009 06:26:09 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.363
X-Spam-Level:
X-Spam-Status: No, score=-6.363 tagged_above=-999 required=5 tests=[AWL=0.236, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bVN0flMby13L for <dnsop@core3.amsl.com>; Wed, 15 Jul 2009 06:26:07 -0700 (PDT)
Received: from ppsw-5.csi.cam.ac.uk (ppsw-5.csi.cam.ac.uk [131.111.8.135]) by core3.amsl.com (Postfix) with ESMTP id 5F8D23A687E for <dnsop@ietf.org>; Wed, 15 Jul 2009 06:26:07 -0700 (PDT)
X-Cam-AntiVirus: no malware found
X-Cam-SpamDetails: not scanned
X-Cam-ScannerInfo: http://www.cam.ac.uk/cs/email/scanner/
Received: from hermes-2.csi.cam.ac.uk ([131.111.8.54]:44484) by ppsw-5.csi.cam.ac.uk (smtp.hermes.cam.ac.uk [131.111.8.155]:25) with esmtpa (EXTERNAL:fanf2) id 1MR48X-0000d4-GE (Exim 4.70) (return-path <fanf2@hermes.cam.ac.uk>); Wed, 15 Jul 2009 14:03:05 +0100
Received: from fanf2 (helo=localhost) by hermes-2.csi.cam.ac.uk (hermes.cam.ac.uk) with local-esmtp id 1MR48X-000637-0Q (Exim 4.67) (return-path <fanf2@hermes.cam.ac.uk>); Wed, 15 Jul 2009 14:03:05 +0100
Date: Wed, 15 Jul 2009 14:03:05 +0100
From: Tony Finch <dot@dotat.at>
X-X-Sender: fanf2@hermes-2.csi.cam.ac.uk
To: SM <sm@resistor.net>
In-Reply-To: <6.2.5.6.2.20090714124754.030b6bc0@elandnews.com>
Message-ID: <alpine.LSU.2.00.0907151355190.30197@hermes-2.csi.cam.ac.uk>
References: <6.2.5.6.2.20090714124754.030b6bc0@elandnews.com>
User-Agent: Alpine 2.00 (LSU 1167 2008-08-23)
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset="US-ASCII"
Sender: Tony Finch <fanf2@hermes.cam.ac.uk>
Cc: Ralf Weber <rw@hohensolms.de>, Tom Creighton <tom_creighton@cable.comcast.com>, dnsop@ietf.org, Chris Griffiths <chris_griffiths@cable.comcast.com>, Jason Livingood <jason_livingood@cable.comcast.com>
Subject: Re: [DNSOP] Comments on draft-livingood-dns-redirect-00
X-BeenThere: dnsop@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dnsop>
List-Post: <mailto:dnsop@ietf.org>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 15 Jul 2009 13:26:10 -0000

On Tue, 14 Jul 2009, SM wrote:
>
> Could one of the authors of the document clarify off-list whether the
> connectivity provided by an ISP using DNS redirect services is labelled as
> Full Internet connectivity?

According to the definitions in RFC 4084, the only one that applies to an
ISP with lying resolvers as described in this draft is "web connectivity".
This could be extended to other protocols, but that depends on explicit
support from the landing server. In some respects the service model
described in the draft is less than web connectivity, because it doesn't
support https.

> Domain registrants will probably want to enable DNS wildcards to get
> around DNS redirects, if the practice of DNS redirects by ISPs is
> widespread. TLDs without DNS wildcards might resort to it too. The
> authors of this document may wish to consider the long term effects.

Yuck.

Tony.
-- 
f.anthony.n.finch  <dot@dotat.at>  http://dotat.at/
GERMAN BIGHT HUMBER: SOUTHWEST 5 TO 7. MODERATE OR ROUGH. SQUALLY SHOWERS.
MODERATE OR GOOD.