Re: [DNSOP] ALT-TLD and (insecure) delgations.

Ray Bellis <ray@bellis.me.uk> Mon, 06 February 2017 16:25 UTC

Return-Path: <ray@bellis.me.uk>
X-Original-To: dnsop@ietfa.amsl.com
Delivered-To: dnsop@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 29E03129EE8 for <dnsop@ietfa.amsl.com>; Mon, 6 Feb 2017 08:25:01 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.901
X-Spam-Level:
X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Fk0Zv3zjN2kl for <dnsop@ietfa.amsl.com>; Mon, 6 Feb 2017 08:25:00 -0800 (PST)
Received: from hydrogen.portfast.net (hydrogen.portfast.net [188.246.200.2]) (using TLSv1 with cipher AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 34F2D129E8F for <dnsop@ietf.org>; Mon, 6 Feb 2017 08:24:59 -0800 (PST)
Received: from [46.227.151.81] (port=58832 helo=rays-mbp.local) by hydrogen.portfast.net ([188.246.200.2]:465) with esmtpsa (fixed_plain:ray@bellis.me.uk) (TLS1.0:DHE_RSA_AES_128_CBC_SHA1:16) id 1cam64-0004BH-8W (Exim 4.72) (return-path <ray@bellis.me.uk>); Mon, 06 Feb 2017 16:24:56 +0000
To: Suzanne Woolf <suzworldwide@gmail.com>
References: <6391B5BB-19BD-4717-B9BB-ECD145F7B4F6@fugue.com> <20170206040516.1701.qmail@ary.lan> <CAPt1N1mbzhS19G_uDA8HokVxXuHy5uA7F1c84-1yUUpqZ2ifJQ@mail.gmail.com> <alpine.OSX.2.20.1702052315130.13902@ary.qy> <CAPt1N1m2mowdCF6igU0TN-FCcjas9AaY-uGma4HgPGKx0Jg4Tw@mail.gmail.com> <4E481C14-1C2B-4A18-A4F2-582208C1DDE3@ogud.com> <6B4E9F56-1487-4E09-9245-167C4790AB3D@gmail.com> <EFFF717C-3A5A-4877-8B40-2D5DF42FD19C@ogud.com> <91527611-CBAE-4DFD-8086-5D6499594108@gmail.com> <c1af826c-899e-db90-f592-514874660d7a@bellis.me.uk> <BD4FBF8C-0185-47E7-8B81-C3D9B22BFFBA@gmail.com>
From: Ray Bellis <ray@bellis.me.uk>
Message-ID: <77e5c7ed-7900-3475-07ec-57eeb4400be6@bellis.me.uk>
Date: Mon, 06 Feb 2017 16:24:58 +0000
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.12; rv:45.0) Gecko/20100101 Thunderbird/45.7.0
MIME-Version: 1.0
In-Reply-To: <BD4FBF8C-0185-47E7-8B81-C3D9B22BFFBA@gmail.com>
Content-Type: text/plain; charset="windows-1252"
Content-Transfer-Encoding: 8bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/dnsop/p0qszxg2MG0JmSFl40rKJQ3NUL8>
Cc: dnsop@ietf.org
Subject: Re: [DNSOP] ALT-TLD and (insecure) delgations.
X-BeenThere: dnsop@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnsop>, <mailto:dnsop-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dnsop/>
List-Post: <mailto:dnsop@ietf.org>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 06 Feb 2017 16:25:01 -0000


On 06/02/2017 16:18, Suzanne Woolf wrote:

>> Yes, that's right, with the caveat that all existing locally
>> served zones are in the reverse space - there's no forward zones
>> registered (yet).
> 
> Could you clarify why that’s relevant?
> 
> Does it just come down to the assumption that reverse zones are not
> supposed to have human-visible/human-friendly names? Or is there some
> other characteristic of how those names are used that’s important
> here?

In the back of my mind I was recalling some conversations I've heard
that perhaps some other "reserved" forward names should be treated like
locally served zones (e.g. ".invalid") but currently aren't.

Ray