[DNSOP] Re: 4 documents for consideration about the future of LocalRoot behavior.

George Michaelson <ggm@algebras.org> Wed, 21 January 2026 23:00 UTC

Return-Path: <ggm@algebras.org>
X-Original-To: dnsop@mail2.ietf.org
Delivered-To: dnsop@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id A3CE9AB321EF for <dnsop@mail2.ietf.org>; Wed, 21 Jan 2026 15:00:52 -0800 (PST)
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -1.899
X-Spam-Level:
X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=algebras-org.20230601.gappssmtp.com
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id LRSUZ6FxCXwN for <dnsop@mail2.ietf.org>; Wed, 21 Jan 2026 15:00:51 -0800 (PST)
Received: from mail-ej1-x632.google.com (mail-ej1-x632.google.com [IPv6:2a00:1450:4864:20::632]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 5DEC3AB321E6 for <dnsop@ietf.org>; Wed, 21 Jan 2026 15:00:50 -0800 (PST)
Received: by mail-ej1-x632.google.com with SMTP id a640c23a62f3a-b86f3e88d4dso46063166b.0 for <dnsop@ietf.org>; Wed, 21 Jan 2026 15:00:50 -0800 (PST)
ARC-Seal: i=1; a=rsa-sha256; t=1769036450; cv=none; d=google.com; s=arc-20240605; b=SiiTV8K3ulJQziK+DOPKtpe6zqrv/V2T9V6hdZljeoEy5UhgDEolXzaRAiUMj1hA1G oukQ6xFkP++0c01TSr9awjfvbYwdavTTv5Ed7p8YU+jefJPCqEqEMgmr+8iZSAvF3oMg pCSQN5mR77XAMfnXOXWTu45vF5P6MGXBAlYe2LwPUubyrghjp0WasGwQ1wN1zyWcSG/a QyvnUJYd1FF7jX15M6QywGIEcD3S4bricD/vH1jQY99/oeOqLhGhxFrU02ngDaGIj9qC KrJGlhpNPzO+ZMAZ0p7cQ5KmwFw0JG5y4H8s9zAk6Rco4JncPECY+Vb/lRznU6ENsn5I rnXQ==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=to:subject:message-id:date:from:in-reply-to:references:mime-version :dkim-signature; bh=zyBC59eHXY3cRw7qo0G+a1DlvKzmQsplVOpjzT9IPOw=; fh=kgjmTvQRNHPqYD6Csqx8yKDZYbmQ6fBi/96fQxW+1XY=; b=ZI0lAmyNkIRGkgj1dJYTnmFVXbZ7vJpK8dKE691fkUYVoKwfi6juh2LmA4FDccZh7X EeS1V7EuhsqeimDahR/w9S6fobc9NGUurrXT9gFWSSdqXvuPikf+PyLA0FzjtoYpe2Mj Ui5WtsvBn3qkMQi4El3vXbLwmGvyJPqTk2p5J1YT5GzrWo/wRMDI8P/hlB67jWkgaa9R t3uovzTUxD37/jxl2o23oS1eYwsF0uxL/4jSAyPEW30Cpr/ox+jSJmch2fFvTH6bUY89 qE5BM0hoIkDxrBPA3RP/MRBUO+FHOkWxE+tcz1YR+GG/Ss3CprwyFF9xL8d5LZm9A320 IjJA==; darn=ietf.org
ARC-Authentication-Results: i=1; mx.google.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=algebras-org.20230601.gappssmtp.com; s=20230601; t=1769036450; x=1769641250; darn=ietf.org; h=to:subject:message-id:date:from:in-reply-to:references:mime-version :from:to:cc:subject:date:message-id:reply-to; bh=zyBC59eHXY3cRw7qo0G+a1DlvKzmQsplVOpjzT9IPOw=; b=Qr20gp8MPwy6ksr67ey/albHp5W2OVluXDogHUZu0lRQdIZF3J1RoHAM8Z//A5CmBB M8Jt2oC+/BBtIL1p1eaD0JQYCqPlzIMSLatfCZlynJs4Sphdmxx+JRpNaXyrMykZj808 0lSbx0iHXiuq676a2QOU8FqLlOq+eHtIm2tRfsSA5ZEwAU9GLmRZj5CIm5SbDghrX71F r7QTdAgyVvFYe9eTR4laIYw4OjlfcvHV9TuFEwADLhnCyPnP7tknJNAqCwP9YuaOYLWB 8hwVF86fAYRcxtM0yywkPJPSl41abL+hdGTnSCbTTFHyuk3Zxhw0CJM1jvtJXStSc/9C oYjQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1769036450; x=1769641250; h=to:subject:message-id:date:from:in-reply-to:references:mime-version :x-gm-gg:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=zyBC59eHXY3cRw7qo0G+a1DlvKzmQsplVOpjzT9IPOw=; b=RQiHKOrDKZe6P63/lr/8p04d4q3EzpztrfKTOmaMVz6x7pPTjOGgteEsd7kZeD1/vV o3RtMPINUxx58Jok/sUYvNJdUcMydpc+iLXXAIIWKGABDryhhGsX1BiePaghqtLuBVmg Yq4LPtIUmkFQwNU4eq9t/KD5IaJbfktUqBrmlmDA8taapTXfGr0K3b1vJuwfSkLow5FX 893tA0PsIF6sfxdV5MiyDn9WVhwzv7ljz1yst0HVxb9JICCTb3HbjGllCOS9aVRpD5jw Ct82lrj0QwZLnB6KduXQyP6y/RlGMInJr/cdKed4aBy8hT8/tY5SnggGBtXhH62It745 uj4Q==
X-Gm-Message-State: AOJu0YyTUovAHCovQ8T8kcbrrqY40oYv1mzGpKOxwHq056DQSufUW7Tc x9uajwuGBGgALlF+4/OdB2zr3HzQotVlIUzOfo2kk+1pOIH2AcjM5mjIolTp0dQo7iFZ9PNL+VR 5/t3rJk+0IaIBGyk27HPf1HIPjHYnn1lXc/ePV156BtLAT+yHE1j1
X-Gm-Gg: AZuq6aIpe2FoP0CfaRW0jQ35QL558FiJgUeuHnMl8ULqDg2mndV8TuFmI2sORYzk/x7 qJLQTQN8ZHWejCfto3S4d9iXeteVCa76uoJ33gBKI2p2+hLge+tfeWrRaEiQVyoVMRStgrf+qj5 K82z5xhVRsPKxN9vE9VbwgeThS7/fjZW+aXRw2ujH3D15Yt2+5/2ppU3vnThPXfowciKzqZrKm1 on9HR/A+pX1EN4dTWXM38lNbfi3yy08s4yy3EzkuzxCyHf2f5zA8FcNeMAr2PbtBfejex1+drKy CMUpaFrNyAHZIQICR5vug+Z/fdgGSUma4LtypUQPt5jA07c1GcfG1w//XSIKKU4fzvpc17WlIr4 54IAgMvW+cPQ2dwPRgpKdLk+kKWdV
X-Received: by 2002:a17:907:70c:b0:b87:1ca0:4a12 with SMTP id a640c23a62f3a-b8793029236mr1653255566b.64.1769036447401; Wed, 21 Jan 2026 15:00:47 -0800 (PST)
MIME-Version: 1.0
References: <ybla4y6lwjf.fsf@wx.hardakers.net>
In-Reply-To: <ybla4y6lwjf.fsf@wx.hardakers.net>
From: George Michaelson <ggm@algebras.org>
Date: Thu, 22 Jan 2026 09:00:36 +1000
X-Gm-Features: AZwV_Qj_f3q9EjDK3RG5_PSrItxuD8n_drkO5kkNFNQXP6YAMUCd_HQRd8P4DU0
Message-ID: <CAKr6gn0yUL1X87+BavA569LGMaWe2VY4a6-iqTAmzwdrZVPx_g@mail.gmail.com>
To: dnsop@ietf.org
Content-Type: multipart/alternative; boundary="0000000000000ad4990648ede58b"
Message-ID-Hash: N2V2I5QXZRJDERJK4BOVB26JHMMNVXSS
X-Message-ID-Hash: N2V2I5QXZRJDERJK4BOVB26JHMMNVXSS
X-MailFrom: ggm@algebras.org
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-dnsop.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [DNSOP] Re: 4 documents for consideration about the future of LocalRoot behavior.
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/dnsop/qTWrKLXkfylCtHlEwzfdjPcFOv0>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dnsop>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Owner: <mailto:dnsop-owner@ietf.org>
List-Post: <mailto:dnsop@ietf.org>
List-Subscribe: <mailto:dnsop-join@ietf.org>
List-Unsubscribe: <mailto:dnsop-leave@ietf.org>

I'm broadly comfortable with the document separation but it does beg the
question what is the impact of one or other of them being blocked, or left
to rot? Because if we're in an all-or-nothing world it needs to be called
out (I am pretty sure we aren't btw)

I am least comfortable with the last one. I think IANA would not want to be
given the task of judging suitability to list. The constraints behind when
you are added and why you had to be removed are all pretty torrid. Not that
I don't think there ARE minimum operational requirements but like "lameness
checks" in WHOIS I can't see they have strong force, can be enforced, or
that IANA could welcome being asked to enforce them.

That said, I do think there should be a published list. perhaps like the
OID registry, it's light touch management?

That aside, I like the intent. I would like to see resolver code developers
normalise the enabling of this feature. in fact I'd like to make the
operational norm.

-G (personal opinion only, no structural roles occupied whilst typing this
response)

On Thu, Jan 22, 2026 at 3:12 AM Wes Hardaker <wjhns1@hardakers.net> wrote:

>
> Greetings DNSOP,
>
> 10 years has passed (!) since the publication of RFC7706 (later followed
> by RFC8806), which specified how resolvers can integrate a copy of the root
> zone into their local operational environment.  A lot of experience has
> been gained since then, from a fair amount of implementation and
> deployment.  A number of observations during this period have been made
> surrounding the feasibility of running an authoritative engine on the
> loopback like the current RFCs suggest, along with improvements to use
> other protocols like HTTP(S) for collecting data.
> Finally, the RFC7706 and RFC8806documents were published as Informational
> and it is now time to consider whether downloading and making use of root
> zone data directly during resolution should be a Proposed Standard or a BCP
> so that more resolvers gain the benefit from incorporating locally cached
> root zone data into their resolution processes.  To this end, the following
> four documents have been published for consideration.  They each
> discuss/solve a different piece of the problem space and certainly could be
> kept separated or combined further in the future if need be.
>
> - https://datatracker.ietf.org/doc/draft-wkumari-dnsop-localroot-bcp/
>
> This document name is a misnomer at the moment as based on discussions the
> authors have had to date we have actually targeted it as proposed standard
> instead.  This document is functionally a complete replacement of RFC8806
> (more than just a bis), based on the experiences and deployment discussed
> above.  Specifically, it relaxes the requirement for running as an
> authoritative engine on the loopback in parallel with a resolver, and
> instead describes the requirements of an implementation rather than a
> specific required implementation mechanism (actual implementations varied
> code base to code base). The new document also discusses the larger aspects
> of being configured with or gathering a list of publication points and some
> guidelines and requirements around querying multiple publication points for
> the IANA root zone data.
>
>
> -
> https://datatracker.ietf.org/doc/draft-hardaker-dnsop-root-zone-publication-points/
>
> This document should be considered a starting discussion around how a list
> of publication points can be gathered and consumed for where root zone data
> is available.  Right now the list of available sources are only available
> in Appendix A of RFC8806, but this document discusses how to make a real
> list and its format published by IANA containing URLs of publication points.
>
> Note: the format in this draft is just a starting point for discussion – I
> honestly expect something like signed json to win in the end.
>
> - https://datatracker.ietf.org/doc/draft-hardaker-dnsop-dns-xfr-scheme/
>
> If we have URLs for publication points, then we need to be able to refer
> to targets of axfr, ixfr, and xot appropriately.  Thus this short document
> specifies new URLs schemes for zone transfers over DNS.
>
> -
> https://datatracker.ietf.org/doc/draft-hardaker-dnsop-root-zone-publ-list-guidelines
>
> This document may or may not be needed based on WG and IANA opinions.
> Fundamentally, it outlines guidelines for what the minimum operational
> requirements are for being listed on the IANA publication point list
> above.  It may be that if all these documents go forward in one way or
> another, this one gets dropped to letting IANA just do whatever it deems
> best, or the IETF may want to provide some minimal guidance.
>
> The authors will certainly be having discussions with IANA and ICANN about
> the documents that directly affect them.
>
> —--
>
> We look forward to the discussion within DNSOP about each of these
> topics.  I’d suggest for now that we concentrate on whether or not each is
> needed, and not whether or not they’re best kept in 4 documents vs a
> smaller number.  And certainly the author/editors list of all documents is
> likely to change as well as time goes on.
>
> (and with that, I'm going to lose internet connectivity for a day while I
> wiggle into my flame retardant suit)
> --
> Wes Hardaker
> Google
>
> _______________________________________________
> DNSOP mailing list -- dnsop@ietf.org
> To unsubscribe send an email to dnsop-leave@ietf.org
>