Re: [DNSOP] Proposal: Whois over DNS

[John Bambenek <[e-mail]>]

The technical issue with whois is that its dark in many places and getting darker with minimal to no prospect of coming back (in a usable form). 

While GDPR applies only to EU natural persons because there is “no way” to distinguish between natural persons and legal persons and “no way” to distinguish EU from other countries, many have adopted applying strong redaction to all records. 

This proposal assumes the above remains true but it is an assumption. 

That said, no additional functionality is created with this proposal. Most, if not all, commercial auth DNS providers already support free form text fields so can support this with no additional work. The idea here was to develop something using services people already run with functionality that already exists. The only “new” here is a standard way to structure the information. 

—
John Bambenek

On July 1st, 2019, my DGA feeds are converting to a CC-BY-NC-SA 4.0 license which means commercial use will require a license. Contact [e-mail] for details

On Jul 10, 2019, at 08:24, Philip Homburg <[e-mail]> wrote:

>> Im not sure the point
>> aside of illustrating if there is no response for the domain records
>> by the auth server that there would also be no response for a _whois
>> record. Thats true.
>> 
>> 1) Using _whois is completely optional, like SPF or any other
>> record.  2) I cant envision much legitimate need to contact a domain
>> owner for something that doesnt exist (aside of domain renewal spam
>> or trying to buy the domain).
>> 
>> Am I missing something?
> 
> I read this discussion from the point of view of someone how is very happy
> with the result of GDRP in this area.
> 
> With that in mind, it seems that this proposal doesn't address any technical
> issues with whois.
> 
> Where whois allows for querying of contact information associated with a 
> domain, this proposal does something similar.
> 
> Of course, whois has various technical issues, but it makes sense to first
> try to solve those technical issues within the whois system. And only when 
> it is clear that certain issues cannot be solved look for a different
> protocol. (And I mean cannot be solved for technical reasons, but because 
> of lack of consensus)
> 
> As far as I know, there is no issue with whois and the GDRP when it comes
> to voluntarily publishing information in whois. This draft clearly 
> advocates voluntary sharing of this information. 
> 
> As the Section 1 suggests, whois works.
> 
> So it seems to me that this draft does not solve a technical problem
> (or at most a minor one, 'internationalization')
> 
>