Re: [DNSOP] [Ext] WGLC rfc8499bis one week extension for lame delegation definition

Frederico A C Neves <fneves@registro.br> Tue, 02 May 2023 12:19 UTC

Return-Path: <fneves@registro.br>
X-Original-To: dnsop@ietfa.amsl.com
Delivered-To: dnsop@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B7BF6C1522D3 for <dnsop@ietfa.amsl.com>; Tue, 2 May 2023 05:19:35 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.097
X-Spam-Level:
X-Spam-Status: No, score=-2.097 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=unavailable autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=registro.br
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id gNU8tCa3u5cI for <dnsop@ietfa.amsl.com>; Tue, 2 May 2023 05:19:31 -0700 (PDT)
Received: from clone.registro.br (clone.registro.br [IPv6:2001:12ff:0:2::4]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E17D7C1524BC for <dnsop@ietf.org>; Tue, 2 May 2023 05:19:30 -0700 (PDT)
Received: by clone.registro.br (Postfix, from userid 1000) id 7C1E04CEED; Tue, 2 May 2023 09:19:26 -0300 (-03)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=registro.br; s=clone; t=1683029966; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=Ryq41YsOAIlE6HJmHHPBb8AoGvlZ+CdbPOmKjWF2RTE=; b=aUBp8PstNTBmG2J5RxVUuYywDcW8q6KfhzU03+BmYhQdWgsciak9sK8WLGBFFiOVYtJOkw kIJt3ulH1IOsX9d1CPDLZiqFRbNRoIRloP4tZvEiSczs9xttvnrogu8DDULpeSYvOUyKDr l7zhEcOgMw0uRSJ68DkWqNG6nVVSCV11+p8nkIhvrZfjW5tumVUWOV0BETmjPgBcJJXyCO mA2Cns88lCO1DN9Wqr5QGj38qEjflMHf8nXjURgmpndJ4hpTO9i4srgpo32cZ2SPWKeNxb YlBL1PBaNwTCa0iPNvwownSos2IF88kQ7Wq3382vE7+L+YOesFfSDaaKtaCYJQ==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=registro.br; s=clone; t=1683029966; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=Ryq41YsOAIlE6HJmHHPBb8AoGvlZ+CdbPOmKjWF2RTE=; b=ZplQcJbclUhegPQBwIBTeDXYxfr4lUCciGEz0c+VkCifsSrMZyv5NdEf41qOdd3d5Y7Q7o NfwGWuJMfvD2UXGDI5AGcKhgXgnvO7G9nv53BdUGjyfjzxZGrBewxdWfmxNIPMxJJjaycD P9XYNLbjSPVWzk4cUn9e4XTgbLXJTnzofhZ7rC+DqpYgF1ThD6yRVTv3wviIkpuMJ8IQbw lL4N4RNUB7fcQ2IYviAwBf2JVyQE4jrs4tGePwTZfgY4PQEc5Rm53QZBEBYzVtLXwA6172 /iAgXcnxNYTCz7v0XJvh1NnNtynn7oIpU9652EdqSEUQ944X5suUANRaJlGT5g==
ARC-Authentication-Results: i=1; clone.registro.br; none
ARC-Seal: i=1; s=clone; d=registro.br; t=1683029966; a=rsa-sha256; cv=none; b=iSxOktlPn6V7socvrJ93CmHzD37CWWh3KqC0CzRruDYty+p9ICoW7QKqaH5eBlIhfRcXzF MoGbTPFaJvvKal1igV1oKAGQPrm3C1fWth7FkC5vF0OPlb+E/t2dIAHK00s2dBXH4ufrze sttE4CQt1iwcKBfP76SwQMIX6XzNgsgImwF2P6rjvRAQP8AfrkfMatiT3lpmpV88Hv5ptt lIfIrAj2FxMPUF9chUhLRvfkbvzepxkYGAwR4xVf+nOUBNv2xHzwV+IvlkZvvPqLOAOWFt FOHYz3DpcNzfg5FJZZdIEwPnqzKDMbzE9kCOCvl7KWIMGUzM3fNl6O5ptEZdkg==
Date: Tue, 02 May 2023 09:19:26 -0300
From: Frederico A C Neves <fneves@registro.br>
To: "Wessels, Duane" <dwessels=40verisign.com@dmarc.ietf.org>
Cc: Paul Hoffman <paul.hoffman@icann.org>, DNSOP Working Group <dnsop@ietf.org>
Message-ID: <ZFD/zr7Qse5WzIQZ@registro.br>
References: <f5757414-dd3b-8a09-f945-d73cecf556a3@NLnetLabs.nl> <40C193AF-938C-418F-924E-94F4DD358164@icann.org> <B93A0E80-08F8-4FDB-81C2-47C465D8DDB4@verisign.com>
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
In-Reply-To: <B93A0E80-08F8-4FDB-81C2-47C465D8DDB4@verisign.com>
X-Rspamd-Queue-Id: 7C1E04CEED
X-Rspamd-Server: clone.registro.br
X-Spamd-Result: default: False [-3.10 / 15.00]; BAYES_HAM(-3.00)[100.00%]; MIME_GOOD(-0.10)[text/plain]; TO_DN_ALL(0.00)[]; RCVD_COUNT_ZERO(0.00)[0]; MIME_TRACE(0.00)[0:+]; FROM_EQ_ENVFROM(0.00)[]; MID_RHS_MATCH_FROM(0.00)[]; DKIM_SIGNED(0.00)[registro.br:s=clone]; TO_MATCH_ENVRCPT_ALL(0.00)[]; ARC_SIGNED(0.00)[registro.br:s=clone:i=1]; FROM_HAS_DN(0.00)[]; RCPT_COUNT_THREE(0.00)[3]; ARC_NA(0.00)[]
X-Rspamd-Action: no action
Archived-At: <https://mailarchive.ietf.org/arch/msg/dnsop/tAYReziNu7ok0QucAv5OvZgKLnA>
Subject: Re: [DNSOP] [Ext] WGLC rfc8499bis one week extension for lame delegation definition
X-BeenThere: dnsop@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnsop>, <mailto:dnsop-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dnsop/>
List-Post: <mailto:dnsop@ietf.org>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 02 May 2023 12:19:35 -0000

On Mon, May 01, 2023 at 04:43:11PM +0000, Wessels, Duane wrote:
> My preferred definition is the one originally given by Paul Vixie, amended by myself, and further amended by Peter Thomassen:
> 
> A lame delegation is said to exist when one or more authoritative
> servers designated by the delegating NS rrset or by the child's apex NS
> rrset answers non-authoritatively for a zone.

+1 for this one.

Fred

> 
> I don’t think it is perfect, but it is an improvement.  I don’t think perfection will be achievable.  
> 
> IMO “[or not at all]” does not belong in the definition.  I don’t think we should allow timeouts to be confused for or considered as lame delegation.
> 
> If something like the above definition is adopted then the document can note there is some historical lack of agreement or consistency in use of the term.
> 
> DW
>  
> 
> 
> > On May 1, 2023, at 9:09 AM, Paul Hoffman <paul.hoffman@icann.org> wrote:
> > 
> > Caution: This email originated from outside the organization. Do not click links or open attachments unless you recognize the sender and know the content is safe. 
> > 
> > It would be grand if a bunch more people would speak up on this thread.
> > 
> > --Paul Hoffman, wearing my co-author hat
> > 
> > On Apr 27, 2023, at 1:05 PM, Benno Overeinder <benno@nlnetlabs.nl> wrote:
> >> 
> >> Dear WG,
> >> 
> >> The WGLC was closed for draft-ietf-dnsop-rfc8499bis, and the discussion
> >> on lame delegation did not find consensus, but two specific suggestions
> >> were put forward.  We would like to include one of them in rfc8499bis if
> >> we can get consensus to do so.
> >> 
> >> The chairs are seeking input on the following two suggestions:
> >> 
> >> * Either we leave the definition of “lame delegation” as it is with the
> >> comment that no consensus could be found, or
> >> 
> >> * alternatively, we include a shorter definition without specific
> >> examples.
> >> 
> >> 1) Leaving the definition of lame delegation as in the current
> >>  draft-ietf-dnsop-rfc8499bis, and including the addition by the
> >>  authors that:
> >> 
> >>  "These early definitions do not match current use of the term "lame
> >>  delegation", but there is also no consensus on what a lame delegation
> >>  is."  (Maybe change to ... no consensus what *exactly* a lame
> >>  delegation is.)
> >> 
> >> 2) Update the definition as proposed by Duane and with the agreement of
> >>  some others (see mailing list https://secure-web.cisco.com/1X5AMTQJt2cXj7u31WPDppT_N_lSyi56z_C_stVVEipVVZkqvDApuQPa0iKxw5z8KkYh6lUYaa8WwEbu1lbUw_3U3-oCZDRWfYload0wQnMB3d76sNuzWFVBh7JB6a-2AOK0wOchJz8ErMhve7dpEUAX3u3v-rv-1jqen-3Ar6uMAJe4pFpHNVMWX8RyUI7uPYRUghgCekgBWibFm6LiPtCBLmTeUAdGkHdbCvCQ-SgAe56iNE4EwIGnrBWJTVJZlM-Dv3FrK04mE2gMsQs6HDzz40kt4871oRIkuNMadfKo/https%3A%2F%2Fmailarchive.ietf.org%2Farch%2Fmsg%2Fdnsop%2F4E1AQKGivEHtJDB85gSNhofRuyM%2F):
> >> 
> >>  "A lame delegation is said to exist when one or more authoritative
> >>  servers designated by the delegating NS RRset or by the child's apex
> >>  NS RRset answers non-authoritatively [or not at all] for a zone".
> >> 
> >> The chairs ask the WG to discuss these two alternative definitions of
> >> the term "lame delegation".  We close the consultation period on
> >> Thursday 4 May.
> >> 
> >> Regards,
> >> 
> >> Benno
> > 
> > _______________________________________________
> > DNSOP mailing list
> > DNSOP@ietf.org
> > https://secure-web.cisco.com/1XVxOCcNMkTcMeadUBQk9SlINRiQvUqtUMpxSKIOYBnT1ERKTnDtcFN1UjyDbfzk5FQqhfy31BXnCbOKFunIXd_OgZghAR9dJnnqlAmKIktWHve95FPY6YA3UinPiPabOUAEi7sOIwtzoF6rScnH_ml4EN5VeCkDj_DbUdU1FINNiKRFrKNlopElAMuHQoV1jehl-oCQtlNNopUy_X-mm_fPAbRNsYgc4S411S5vVePb4M-3xft1EktHXfsQNSe-y_vNR947juf5DmA2OYgq3gw0Efu3o0GxuyisOZ23nNj0/https%3A%2F%2Fwww.ietf.org%2Fmailman%2Flistinfo%2Fdnsop
> 
> _______________________________________________
> DNSOP mailing list
> DNSOP@ietf.org
> https://www.ietf.org/mailman/listinfo/dnsop