[DNSOP] draft-fujiwara-dnsop-nsec-aggressiveuse-00.txt

fujiwara@jprs.co.jp Tue, 10 March 2015 10:38 UTC

Return-Path: <fujiwara@jprs.co.jp>
X-Original-To: dnsop@ietfa.amsl.com
Delivered-To: dnsop@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 221701A00CF for <dnsop@ietfa.amsl.com>; Tue, 10 Mar 2015 03:38:26 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: 0.598
X-Spam-Level:
X-Spam-Status: No, score=0.598 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HELO_EQ_JP=1.244, HOST_EQ_JP=1.265, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ECzs6XVCx_oA for <dnsop@ietfa.amsl.com>; Tue, 10 Mar 2015 03:38:24 -0700 (PDT)
Received: from off-send01.osa.jprs.co.jp (off-send01.osa.jprs.co.jp [117.104.133.132]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7F62E1A90AA for <dnsop@ietf.org>; Tue, 10 Mar 2015 03:38:24 -0700 (PDT)
Received: from off-sendsmg01.osa.jprs.co.jp (off-sendsmg01.osa.jprs.co.jp [172.23.8.61]) by off-send01.osa.jprs.co.jp (8.14.4/8.14.4) with ESMTP id t2AAFhZv030096 for <dnsop@ietf.org>; Tue, 10 Mar 2015 19:15:43 +0900
Received: from off-sendsmg01.osa.jprs.co.jp (localhost [127.0.0.1]) by postfix.imss71 (Postfix) with ESMTP id 0071A180060 for <dnsop@ietf.org>; Tue, 10 Mar 2015 19:15:42 +0900 (JST)
Received: from localhost (unknown [172.23.4.14]) by off-sendsmg01.osa.jprs.co.jp (Postfix) with ESMTP id DE6D918005F for <dnsop@ietf.org>; Tue, 10 Mar 2015 19:15:41 +0900 (JST)
Date: Tue, 10 Mar 2015 19:15:41 +0900
Message-Id: <20150310.191541.52184726.fujiwara@jprs.co.jp>
To: dnsop@ietf.org
From: fujiwara@jprs.co.jp
X-Mailer: Mew version 6.5 on Emacs 22.1 / Mule 5.0 (SAKAKI)
Mime-Version: 1.0
Content-Type: Text/Plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
X-TM-AS-MML: disable
X-TM-AS-Product-Ver: IMSS-7.1.0.1690-7.5.0.1018-21388.006
X-TM-AS-Result: No--5.361-5.0-31-10
X-imss-scan-details: No--5.361-5.0-31-10
X-TMASE-MatchedRID: XCX1jWV9QFNhFLyjeksJVco3MPo0IsVYYawhvkuLgj4g2yVdj3LARFiq Ayk7LkbkrDucSD1tFqgutBJd3EU/b+pla2Pf53gCHDC6a94U1AAt0t+aIVLt+/gnJH5vm2+gcUP QjSOUQN2Qm6BojE/Wzy5ShDQVR9yTRF8J0whn5t1CvapcIkxJX/ioIsi7Sa0g1jpotO/+/6J2Dl SzgrllsB2tThSvD6i6GGwOeddsWERlIwlFGla3IX7siEtWY367FTmqwD90nsKsafcFLFlU1AGuF 1ezBIz5Yea1QvSvmQDmukeH3LzSoWvjg/Lc03C/Zg1i2wTmScODwLTbOQjvDjERi1haWZ7I0Dga R5Nqry/i8zVgXoAltlwtzewu2M63qvILxFLnbfhnPQAAZZiCogTiDlAm2HlkhzImjrjZJG3dB/C xWTRRu25FeHtsUoHuqYSsnoevpIZNPvnBE0RoArJsmdmTCiQv2o6b1Qk8TqMfwV6sBPR0lg==
Archived-At: <http://mailarchive.ietf.org/arch/msg/dnsop/odT9WgW1eyd_KLP1glRl6cG9D_g>
Subject: [DNSOP] draft-fujiwara-dnsop-nsec-aggressiveuse-00.txt
X-BeenThere: dnsop@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnsop>, <mailto:dnsop-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dnsop/>
List-Post: <mailto:dnsop@ietf.org>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 10 Mar 2015 10:38:26 -0000

Akira Kato and I submitted draft-fujiwara-dnsop-nsec-aggressiveuse.

If you have interests, please comment.

 Subject: New Version Notification for draft-fujiwara-dnsop-nsec-aggressiveuse-00.txt
 From: internet-drafts@ietf.org
 Date: Mon, 09 Mar 2015 10:20:47 -0700

A new version of I-D, draft-fujiwara-dnsop-nsec-aggressiveuse-00.txt
has been successfully submitted by Kazunori Fujiwara and posted to the
IETF repository.

Name:		draft-fujiwara-dnsop-nsec-aggressiveuse
Revision:	00
Title:		Aggressive use of NSEC/NSEC3
Document date:	2015-03-10
Group:		Individual Submission
Pages:		6
URL:            http://www.ietf.org/internet-drafts/draft-fujiwara-dnsop-nsec-aggressiveuse-00.txt
Status:         https://datatracker.ietf.org/doc/draft-fujiwara-dnsop-nsec-aggressiveuse/
Htmlized:       http://tools.ietf.org/html/draft-fujiwara-dnsop-nsec-aggressiveuse-00


Abstract:
   DNS highly depends on cache, however, cache usage of non-existence
   information was limited to exact matching.  This draft proposes the
   aggressive use of NSEC/NSEC3 resource record, which is able to
   express non-existence of range of names authoritatively.  With this
   proposal, shorter latency to many of negative response is expected as
   well as some level of mitigation of random sub-domain attacks
   (referred to as "Water Torture" attacks).  And more, non-existent TLD
   queries to Root DNS servers will decrease.

                                                                                  


Please note that it may take a couple of minutes from the time of submission
until the htmlized version and diff are available at tools.ietf.org.

The IETF Secretariat

--
Kazunori Fujiwara, JPRS <fujiwara@jprs.co.jp>