IETF Logo Mail Archive

Re: [DNSOP] Fw: New Version Notification for draft-bellis-dns-recursive-discovery-00

Ray.Bellis@nominet.org.uk Wed, 21 October 2009 07:32 UTC

Return-Path: <Ray.Bellis@nominet.org.uk>
X-Original-To: dnsop@core3.amsl.com
Delivered-To: dnsop@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 9BF1E3A6988 for <dnsop@core3.amsl.com>; Wed, 21 Oct 2009 00:32:44 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -5.306
X-Spam-Level:
X-Spam-Status: No, score=-5.306 tagged_above=-999 required=5 tests=[AWL=0.692, BAYES_00=-2.599, HTML_MESSAGE=0.001, J_CHICKENPOX_54=0.6, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ybiRNcyOw1by for <dnsop@core3.amsl.com>; Wed, 21 Oct 2009 00:32:43 -0700 (PDT)
Received: from mx4.nominet.org.uk (mx4.nominet.org.uk [213.248.199.24]) by core3.amsl.com (Postfix) with ESMTP id 679023A6960 for <dnsop@ietf.org>; Wed, 21 Oct 2009 00:32:42 -0700 (PDT)
DomainKey-Signature: s=main.dk.nominet.selector; d=nominet.org.uk; c=nofws; q=dns; h=X-IronPort-AV:Received:In-Reply-To:References:To:Cc: Subject:MIME-Version:X-Mailer:Message-ID:From:Date: X-MIMETrack:Content-Type; b=ADquyQRJrbRo7Je1TK8ebAyHI/Lv5y4gdMugfJ2wsDm9DrFyKIbyZ08G mXHytNcHRjmbvR/OoB1X/KLiVPqyf6fVIp48cKGY8qCD3UsMHNrl8sPEh dxqQkxwvqTAk9BD;
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=nominet.org.uk; i=Ray.Bellis@nominet.org.uk; q=dns/txt; s=main.dkim.nominet.selector; t=1256110372; x=1287646372; h=from:sender:reply-to:subject:date:message-id:to:cc: mime-version:content-transfer-encoding:content-id: content-description:resent-date:resent-from:resent-sender: resent-to:resent-cc:resent-message-id:in-reply-to: references:list-id:list-help:list-unsubscribe: list-subscribe:list-post:list-owner:list-archive; z=From:=20Ray.Bellis@nominet.org.uk|Subject:=20Re:=20[DNSO P]=20Fw:=20New=20Version=20Notification=20for=0D=0A=20dra ft-bellis-dns-recursive-discovery-00|Date:=20Wed,=2021=20 Oct=202009=2008:32:49=20+0100|Message-ID:=20<OFD7B965B7.5 3CC1C17-ON80257656.0028D85C-80257656.002974DF@nominet.org .uk>|To:=20Florian=20Weimer=20<fweimer@bfk.de>|Cc:=20Alex =20Bligh=20<alex@alex.org.uk>,=0D=0A=09dnsop@ietf.org,=0D =0A=09Joe=20Abley=20<jabley@hopcount.ca>,=0D=0A=09Mark=20 Andrews=20<marka@isc.org>|MIME-Version:=201.0 |In-Reply-To:=20<8263a9xnem.fsf@mid.bfk.de>|References: =20<OFA656600E.F5229B3D-ON80257650.005247BF-80257650.0052 7644@nominet.org.uk>=0D=0A=09<82skde36c9.fsf@mid.bfk.de> =20<DE23E9BF50E437E2D5CA65C8@Ximines.local>=09<82ljj61gle .fsf@mid.bfk.de>=0D=0A=09<200910202329.n9KNT56j048843@dru gs.dv.isc.org>=09<1F61DD04-14A6-4349-8650-9CF27D27C3BC@ho pcount.ca>=0D=0A=09<200910210145.n9L1j8of033780@drugs.dv. isc.org>=20<8263a9xnem.fsf@mid.bfk.de>; bh=94df690bSKnwSFjkwh7nG2tjQYwilcSIvDQ9gHexEbA=; b=g6cOi9OklqJmbBHYTYHqOEOQHSjl2aCvhAp+zPuMJERn31dvtoB0gNzL mFeksZWNOHHm3lgNpDZAzPq0Ld4IXS5IV2NYlWPq507PiNd1xX1+mLv8W eSOuPXAdE7f7fSG;
X-IronPort-AV: E=Sophos;i="4.44,595,1249254000"; d="scan'208";a="13797297"
Received: from notes1.nominet.org.uk ([213.248.197.128]) by mx4.nominet.org.uk with ESMTP; 21 Oct 2009 08:32:50 +0100
In-Reply-To: <8263a9xnem.fsf@mid.bfk.de>
References: <OFA656600E.F5229B3D-ON80257650.005247BF-80257650.00527644@nominet.org.uk> <82skde36c9.fsf@mid.bfk.de> <DE23E9BF50E437E2D5CA65C8@Ximines.local> <82ljj61gle.fsf@mid.bfk.de> <200910202329.n9KNT56j048843@drugs.dv.isc.org> <1F61DD04-14A6-4349-8650-9CF27D27C3BC@hopcount.ca> <200910210145.n9L1j8of033780@drugs.dv.isc.org> <8263a9xnem.fsf@mid.bfk.de>
To: Florian Weimer <fweimer@bfk.de>
MIME-Version: 1.0
X-Mailer: Lotus Notes Release 8.5 December 05, 2008
Message-ID: <OFD7B965B7.53CC1C17-ON80257656.0028D85C-80257656.002974DF@nominet.org.uk>
From: Ray.Bellis@nominet.org.uk
Date: Wed, 21 Oct 2009 08:32:49 +0100
X-MIMETrack: Serialize by Router on notes1/Nominet(Release 7.0.1FP1 | May 25, 2006) at 21/10/2009 08:32:50 AM, Serialize complete at 21/10/2009 08:32:50 AM
Content-Type: multipart/alternative; boundary="=_alternative 002974DD80257656_="
Cc: dnsop@ietf.org, Joe Abley <jabley@hopcount.ca>, Alex Bligh <alex@alex.org.uk>
Subject: Re: [DNSOP] Fw: New Version Notification for draft-bellis-dns-recursive-discovery-00
X-BeenThere: dnsop@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dnsop>
List-Post: <mailto:dnsop@ietf.org>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 21 Oct 2009 07:32:44 -0000

> Mark, I din't think this is true given how the proposed protocol
> works.  For a start, you often cannot fetch the DNSKEY RR for ARPA
> before running the protocol.

Indeed LOCAL.ARPA would need to be unsigned.  That needs to be added to 
the draft.

Since (as Bill points out) LOCAL.ARPA would be served much like RFC 1918 
space there's no way it could be signed and have the DS key present in the 
parent, because there will be numerous separate instances of LOCAL.ARPA. 

In any event the seeding query needs to be sent without the DO bit set, 
since (some) CPE proxies are known to interfere with that.

Ray

v2.38.3 | Report a Bug | By Email | System Status