Re: [DNSOP] I-D Action: draft-ietf-dnsop-refuse-any-04.txt
Ólafur Guðmundsson <olafur@cloudflare.com> Fri, 10 February 2017 18:44 UTC
Return-Path: <olafur@cloudflare.com>
X-Original-To: dnsop@ietfa.amsl.com
Delivered-To: dnsop@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 32CD8129A85 for <dnsop@ietfa.amsl.com>; Fri, 10 Feb 2017 10:44:21 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.74
X-Spam-Level:
X-Spam-Status: No, score=-1.74 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, HTML_OBFUSCATE_05_10=0.26, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cloudflare.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3cdkphoER4sU for <dnsop@ietfa.amsl.com>; Fri, 10 Feb 2017 10:44:18 -0800 (PST)
Received: from mail-wr0-x235.google.com (mail-wr0-x235.google.com [IPv6:2a00:1450:400c:c0c::235]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5EF68129A6F for <dnsop@ietf.org>; Fri, 10 Feb 2017 10:44:18 -0800 (PST)
Received: by mail-wr0-x235.google.com with SMTP id o16so114569230wra.1 for <dnsop@ietf.org>; Fri, 10 Feb 2017 10:44:18 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cloudflare.com; s=google; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=tsZt7BigDkZl8k8ZM/5Oe9crtyJcU/TLkT6LuM00Kiw=; b=oxzKk9HLPFztgPQu4R0xTuvhMlQZJ40Hca04hiL9WwHirjvRapM6x3ys1eYmbvmmv0 usLU2V5k8nXOcSFKc2sUiiJ8MwXSBY3zw6s721Hn5ANjheKx8sWiDyPnQfDAf70tgiKy s1BtYkSTo+XmnGeSwVXY4hJ7Q7V7dPCeLY1DI=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=tsZt7BigDkZl8k8ZM/5Oe9crtyJcU/TLkT6LuM00Kiw=; b=oA0LysodWRpchtaZ0IS7fieARDOxNPxxR2/gLv3XrZXdfMFX0LTWj7PxWqdNrbSSj5 IyZBOhUn9J7wNNpI/0UZbdFNGzTFbO/TSm5EFf/r09cDI9i7eEmGGoLSJXbdA6cP7YZZ pHeOgarzHjnpQ5Kn6FNj/x/UXK1VAMpoEu+pHz+9AZAq+x/COkd+7SR1JeGoKdE3Z9+0 Qtm1lYRSMnkGeN0teQlUKYzGkHSaohAI9iPiVqdmE8nVe600ZdhdjxpvWrYJRYGY6b2D mLMADn2zJNcqhvVMnYQwlL1NjcdIjoSmrj79gSMAaiD+Bxg2fV3aGi8LGT5D4nDmBMua EiIg==
X-Gm-Message-State: AMke39kUo8EgX/S+NBvEdN++mCpV+uj3g750hDt083kLEz6UKntp1tutWlPdR8IMflqvWGx40HF9n5XU8LsMXQ+y
X-Received: by 10.223.139.12 with SMTP id n12mr8954898wra.176.1486752256809; Fri, 10 Feb 2017 10:44:16 -0800 (PST)
MIME-Version: 1.0
Received: by 10.28.164.194 with HTTP; Fri, 10 Feb 2017 10:44:16 -0800 (PST)
In-Reply-To: <CAC94RYZM+KMS2c3CVx=8Q005XYGQqNRv--23H7_aTpuY05tEMQ@mail.gmail.com>
References: <148661979638.4286.4234665114055399732.idtracker@ietfa.amsl.com> <CAC94RYZM+KMS2c3CVx=8Q005XYGQqNRv--23H7_aTpuY05tEMQ@mail.gmail.com>
From: Ólafur Guðmundsson <olafur@cloudflare.com>
Date: Fri, 10 Feb 2017 10:44:16 -0800
Message-ID: <CAN6NTqy9_jKXT4Fc9KhmcW7Fq6DTiU2HmzBoWn+YA1fALOh5zA@mail.gmail.com>
To: Richard Gibson <rgibson@dyn.com>
Content-Type: multipart/alternative; boundary="f403045ea3e022f1a10548317c43"
Archived-At: <https://mailarchive.ietf.org/arch/msg/dnsop/rY8U8qlpCLS7pfdlULZ_-t73JiQ>
Cc: dnsop <dnsop@ietf.org>
Subject: Re: [DNSOP] I-D Action: draft-ietf-dnsop-refuse-any-04.txt
X-BeenThere: dnsop@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnsop>, <mailto:dnsop-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dnsop/>
List-Post: <mailto:dnsop@ietf.org>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 10 Feb 2017 18:44:21 -0000
Thank you for your comments Q: why do you think it is useful to complicate things with a EDNS0 flag ? Olafur On Thu, Feb 9, 2017 at 8:47 PM, Richard Gibson <rgibson@dyn.com> wrote: > With full realization that this is coming very late in the game, we had a > great deal of internal conversation within Dyn about implementing > refuse-any, and came away unsatisfied with both the "subset" and "HINFO" > approaches—the latter because of reasons that have already been covered, > and the former for lacking in-band signaling of non-"conventional" > incompleteness to aid legitimate use. > > I believe there is sufficient cause to reserve a new OPT record EDNS > header flag bit > <http://www.iana.org/assignments/dns-parameters/dns-parameters.xhtml#dns-parameters-13> > for indicating "partial response" (as distinct from "truncation"). It will > be safely ignored by current clients, but convey the desired information to > those in the know. > > P.S. Our discussion also raised some more minor points: > > - Insisting that the HINFO OS field SHOULD be empty ("set to the null > string") seems a little too strong; there's room in it for (and value > from) a short explanation (e.g., cloudflare.com. 3789 IN HINFO "Please > stop asking for ANY" "See draft-ietf-dnsop-refuse-any"). I'd prefer > text like "The OS field of the HINFO RDATA SHOULD be short to minimize > the size of the response, and MAY be empty or MAY include a summarized > description of local policy." > - "Conventional [ANY] response" is used but not defined. > - "ANY does not mean ALL" is misleading—RFC 1035 > <https://tools.ietf.org/html/rfc1035#section-3.2.3> is clear about > QTYPE=255 being "a request for *all* records" (emphasis mine). That > said, the proposed *response* behavior is consistent with that RFC. > > > On Thu, Feb 9, 2017 at 12:56 AM, <internet-drafts@ietf.org> wrote: > >> >> A New Internet-Draft is available from the on-line Internet-Drafts >> directories. >> This draft is a work item of the Domain Name System Operations of the >> IETF. >> >> Title : Providing Minimal-Sized Responses to DNS >> Queries that have QTYPE=ANY >> Authors : Joe Abley >> Olafur Gudmundsson >> Marek Majkowski >> Filename : draft-ietf-dnsop-refuse-any-04.txt >> Pages : 10 >> Date : 2017-02-08 >> >> Abstract: >> The Domain Name System (DNS) specifies a query type (QTYPE) "ANY". >> The operator of an authoritative DNS server might choose not to >> respond to such queries for reasons of local policy, motivated by >> security, performance or other reasons. >> >> The DNS specification does not include specific guidance for the >> behaviour of DNS servers or clients in this situation. This document >> aims to provide such guidance. >> >> >> The IETF datatracker status page for this draft is: >> https://datatracker.ietf.org/doc/draft-ietf-dnsop-refuse-any/ >> >> There's also a htmlized version available at: >> https://tools.ietf.org/html/draft-ietf-dnsop-refuse-any-04 >> >> A diff from the previous version is available at: >> https://www.ietf.org/rfcdiff?url2=draft-ietf-dnsop-refuse-any-04 >> >> >> Please note that it may take a couple of minutes from the time of >> submission >> until the htmlized version and diff are available at tools.ietf.org. >> >> Internet-Drafts are also available by anonymous FTP at: >> ftp://ftp.ietf.org/internet-drafts/ >> >> _______________________________________________ >> DNSOP mailing list >> DNSOP@ietf.org >> https://www.ietf.org/mailman/listinfo/dnsop >> > > > _______________________________________________ > DNSOP mailing list > DNSOP@ietf.org > https://www.ietf.org/mailman/listinfo/dnsop > >
- [DNSOP] I-D Action: draft-ietf-dnsop-refuse-any-0… internet-drafts
- Re: [DNSOP] I-D Action: draft-ietf-dnsop-refuse-a… Ólafur Guðmundsson
- [DNSOP] Review of draft [draft-ietf-dnsop-refuse-… Woodworth, John R
- Re: [DNSOP] Review of draft [draft-ietf-dnsop-ref… Ólafur Guðmundsson
- Re: [DNSOP] I-D Action: draft-ietf-dnsop-refuse-a… Richard Gibson
- Re: [DNSOP] I-D Action: draft-ietf-dnsop-refuse-a… Ólafur Guðmundsson
- Re: [DNSOP] I-D Action: draft-ietf-dnsop-refuse-a… Richard Gibson
- Re: [DNSOP] I-D Action: draft-ietf-dnsop-refuse-a… Woodworth, John R
- Re: [DNSOP] I-D Action: draft-ietf-dnsop-refuse-a… Tony Finch
- Re: [DNSOP] I-D Action: draft-ietf-dnsop-refuse-a… Richard Gibson
- Re: [DNSOP] I-D Action: draft-ietf-dnsop-refuse-a… Tony Finch
- Re: [DNSOP] I-D Action: draft-ietf-dnsop-refuse-a… Richard Gibson
- Re: [DNSOP] I-D Action: draft-ietf-dnsop-refuse-a… Robert Edmonds
- Re: [DNSOP] I-D Action: draft-ietf-dnsop-refuse-a… Richard Gibson
- Re: [DNSOP] I-D Action: draft-ietf-dnsop-refuse-a… Wessels, Duane
- Re: [DNSOP] I-D Action: draft-ietf-dnsop-refuse-a… Ólafur Guðmundsson
- Re: [DNSOP] I-D Action: draft-ietf-dnsop-refuse-a… Richard Gibson
- Re: [DNSOP] I-D Action: draft-ietf-dnsop-refuse-a… Richard Gibson
- Re: [DNSOP] I-D Action: draft-ietf-dnsop-refuse-a… Wessels, Duane
- Re: [DNSOP] I-D Action: draft-ietf-dnsop-refuse-a… Mark Andrews
- Re: [DNSOP] I-D Action: draft-ietf-dnsop-refuse-a… Tony Finch
- Re: [DNSOP] I-D Action: draft-ietf-dnsop-refuse-a… Vernon Schryver
- Re: [DNSOP] I-D Action: draft-ietf-dnsop-refuse-a… Mark Andrews
- Re: [DNSOP] I-D Action: draft-ietf-dnsop-refuse-a… Tony Finch
- Re: [DNSOP] I-D Action: draft-ietf-dnsop-refuse-a… Brian Dickson
- Re: [DNSOP] I-D Action: draft-ietf-dnsop-refuse-a… Tony Finch