Re: [DNSOP] Genart last call review of draft-ietf-dnsop-rfc7816bis-09

Stephane Bortzmeyer <bortzmeyer@nic.fr> Mon, 07 June 2021 08:49 UTC

Return-Path: <bortzmeyer@nic.fr>
X-Original-To: dnsop@ietfa.amsl.com
Delivered-To: dnsop@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5FF963A3D0A; Mon, 7 Jun 2021 01:49:37 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.899
X-Spam-Level:
X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id cAs-8FrJGgmO; Mon, 7 Jun 2021 01:49:33 -0700 (PDT)
Received: from mx4.nic.fr (mx4.nic.fr [IPv6:2001:67c:2218:2::4:12]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9FD803A3D09; Mon, 7 Jun 2021 01:49:32 -0700 (PDT)
Received: from mx4.nic.fr (localhost [127.0.0.1]) by mx4.nic.fr (Postfix) with SMTP id 101E9280DD3; Mon, 7 Jun 2021 10:49:27 +0200 (CEST)
Received: by mx4.nic.fr (Postfix, from userid 500) id 0891C281520; Mon, 7 Jun 2021 10:49:27 +0200 (CEST)
Received: from relay01.prive.nic.fr (unknown [10.1.50.11]) by mx4.nic.fr (Postfix) with ESMTP id 00A5F280DD3; Mon, 7 Jun 2021 10:49:27 +0200 (CEST)
Received: from b12.nic.fr (b12.tech.ipv6.nic.fr [IPv6:2001:67c:1348:7::86:133]) by relay01.prive.nic.fr (Postfix) with ESMTP id F042C6071EA6; Mon, 7 Jun 2021 10:49:26 +0200 (CEST)
Received: by b12.nic.fr (Postfix, from userid 1000) id E205D3FF3C; Mon, 7 Jun 2021 10:49:26 +0200 (CEST)
Date: Mon, 07 Jun 2021 10:49:26 +0200
From: Stephane Bortzmeyer <bortzmeyer@nic.fr>
To: Suhas Nandakumar <suhasietf@gmail.com>
Cc: gen-art@ietf.org, dnsop@ietf.org, draft-ietf-dnsop-rfc7816bis.all@ietf.org, last-call@ietf.org
Message-ID: <20210607084926.GA30724@nic.fr>
References: <162304640334.30281.17125627583762005846@ietfa.amsl.com>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Disposition: inline
In-Reply-To: <162304640334.30281.17125627583762005846@ietfa.amsl.com>
X-Operating-System: Debian GNU/Linux 10.9
X-Kernel: Linux 4.19.0-16-amd64 x86_64
X-Charlie: Je suis Charlie
Organization: NIC France
X-URL: http://www.nic.fr/
User-Agent: Mutt/1.10.1 (2018-07-13)
X-Bogosity: No, tests=bogofilter, spamicity=0.000000, version=1.2.2
X-PMX-Version: 6.4.9.2830568, Antispam-Engine: 2.7.2.2107409, Antispam-Data: 2021.6.7.83316, AntiVirus-Engine: 5.83.0, AntiVirus-Data: 2021.6.6.5830001
Archived-At: <https://mailarchive.ietf.org/arch/msg/dnsop/una2xhE4CkmTgfNdQKTVkUjt2k0>
Subject: Re: [DNSOP] Genart last call review of draft-ietf-dnsop-rfc7816bis-09
X-BeenThere: dnsop@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnsop>, <mailto:dnsop-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dnsop/>
List-Post: <mailto:dnsop@ietf.org>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 07 Jun 2021 08:49:38 -0000

On Sun, Jun 06, 2021 at 11:13:23PM -0700,
 Suhas Nandakumar via Datatracker <noreply@ietf.org> wrote 
 a message of 72 lines which said:

> I am the assigned Gen-ART reviewer for this draft

Thanks for the review.

> Section 2.3
> 1. MAX_MINIMISE_COUNT and MINIMISE_ONE_LAB - are the values for these constants
> normatively defined or are they just recommendations ? Can the same be
> clarified in the document ?

The sentence "a good value is 10" seems to me indicating that it is
just a possible value. The important thing is to have a limit. Do we
think it should be rewritten with RFC 2119 words? MUST have a limit
and the RECOMMENDED value is 10?

> Section 4.
> The section starts with query for "foo.bar.baz.example" and walk through refers
> to a.b.example.org  as query input.  Also no reference to ns1.nic.example seems
> to be appear in the detailed flows.
>  Can this be updated it to match overall ?

Actually, there are *two* independant requests. One for
foo.bar.baz.example and one afterwards ("Here are more detailed
examples") for a.b.example.org. In the first one, ns1.nic.example is
indeed used.

Should we use the same QNAME for both?

> Section 5
> "QNAME minimisation may also improve lookup performance for TLD
>    operators.  For a TLD that is delegation-only, a two-label QNAME
>    query may be optimal for finding the delegation owner name, depending
>    on the way domain matching is implemented."
> This para doesn't clarify how the performance will be improved.  Can it
> be extended with some context around the same.

With QNAME minimisation, an authoritative name server MAY use exact
matching ("do I know foobar.example?") while without it, it MUST use
tree matching ("do I know thing.stuff.foobar.example or an ancestor of
it?") and tree matching is typically slower.