Re: [DNSOP] I-D Action: draft-ietf-dnsop-dnssec-bcp-02.txt

Chris Box <chris.box.ietf@gmail.com> Thu, 28 July 2022 18:49 UTC

Return-Path: <chris.box.ietf@gmail.com>
X-Original-To: dnsop@ietfa.amsl.com
Delivered-To: dnsop@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 65E83C185719 for <dnsop@ietfa.amsl.com>; Thu, 28 Jul 2022 11:49:49 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.106
X-Spam-Level:
X-Spam-Status: No, score=-2.106 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_FONT_FACE_BAD=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xAUw52q9tWVM for <dnsop@ietfa.amsl.com>; Thu, 28 Jul 2022 11:49:45 -0700 (PDT)
Received: from mail-oi1-x234.google.com (mail-oi1-x234.google.com [IPv6:2607:f8b0:4864:20::234]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9773AC16ED0C for <dnsop@ietf.org>; Thu, 28 Jul 2022 11:49:45 -0700 (PDT)
Received: by mail-oi1-x234.google.com with SMTP id s204so3386785oif.5 for <dnsop@ietf.org>; Thu, 28 Jul 2022 11:49:45 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=mime-version:references:in-reply-to:from:date:message-id:subject:to; bh=L8v7Nuq4VLvP0Fcvg2CuufUeX1n3CmiujYyjXUVpsnk=; b=qFdopjz+9FR+woMt90bIKr9WNJPjjt9Fnl/Igj/rtp5KMgnax6zq7JfebbJ/0wouN0 3abdSmhKF/9FBkMJ0MJNiIUq3yF5h+222Dv8rby5WwV2B+Me93kl/1ighmz+MSX+E/ja RXYne3MivVzhDlUhlmCOsMZ925FxmBVIH/93RL1xfkHNDRMfpNgaNuuZVG1NjbnQzd0j WCwlBLDzA4+na4a+1tUOAoM1gNj9APHvE2NfuoLZC6MU1EeWEU4twPOVZmUO6E7l1ceJ 0z/AYxRRxZM4JAWlaueeBth+ltmNbgmbkikJVehspYqzCy4UPI27qvC8GrdX7epKkOtH WbbA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to; bh=L8v7Nuq4VLvP0Fcvg2CuufUeX1n3CmiujYyjXUVpsnk=; b=xu/zCSXiqLxOAXOfHXZnvlLOtJpscXH3VPb4qtJL6H3VJLuUdQ+Bv+N2UsQotNyBIa aqYzt5Po2sjQTUbO/xQqfCdvRPaz/AIjvCxdhFEcloaNzRZqzLl93MHAS63QMUHoaO7R 8k6hidWprxC2MLs8dHuJ9iitjFD42CssqZgns0yCW/q+ooWPvELgPwu2mR9zg1Ep6eWZ guX6w/GFipSbsXWO+ig0byvEMmsugwIqFdHdKPkc4jvXU69ifvDkTgslHWvYmJRftSXD uy2P8p+VWiIRWYSmNbQou5FOtRdRbkHNiuXsxQvCkUVPVOx645hBXaEzRSd+V39xqSFb NXxg==
X-Gm-Message-State: AJIora/puYHwok7lFdJEdgrhoaVp1UXgmwYKnOLCxOMNKost/iSY7jAA w6LjGovXnrMVGEwX1OmVo9HN61dJz0iyIpqHqcrjpUYTSSyGfg==
X-Google-Smtp-Source: AGRyM1uQq5H3luVlFAyvydpRKYcn7eCwvcI4EEB/EswE5HK4Qd7jlZt9Woe8n7SMOViPt9EynbOO4W1fQZaREqgh2Mk=
X-Received: by 2002:a05:6808:f8e:b0:33b:2156:e741 with SMTP id o14-20020a0568080f8e00b0033b2156e741mr337703oiw.256.1659034184479; Thu, 28 Jul 2022 11:49:44 -0700 (PDT)
MIME-Version: 1.0
References: <165746361363.38418.17515857796332844891@ietfa.amsl.com>
In-Reply-To: <165746361363.38418.17515857796332844891@ietfa.amsl.com>
From: Chris Box <chris.box.ietf@gmail.com>
Date: Thu, 28 Jul 2022 14:49:33 -0400
Message-ID: <CACJ6M16meLMYJwDRZH7ef6in_h9kDEK+=xqJt=k3wBvyEuDh_A@mail.gmail.com>
To: dnsop@ietf.org
Content-Type: multipart/alternative; boundary="0000000000003c766305e4e1ff8e"
Archived-At: <https://mailarchive.ietf.org/arch/msg/dnsop/wqN-nsJfTcew6YTfj_AKuqKj58c>
Subject: Re: [DNSOP] I-D Action: draft-ietf-dnsop-dnssec-bcp-02.txt
X-BeenThere: dnsop@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnsop>, <mailto:dnsop-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dnsop/>
List-Post: <mailto:dnsop@ietf.org>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 28 Jul 2022 18:49:49 -0000

Hi everyone

Referring back to a little earlier in today's agenda, I've just raised a
two-word PR #9 <https://github.com/paulehoffman/draft-hoffman-dnssec/pull/9>
which
aims to remove a possible misinterpretation of the BCP text by a less
experienced reader.

The PR says:

The current text can be interpreted incorrectly. It essentially says "*DNSSEC
is formally version 3 .... however, earlier versions of DNSSEC were ...
significantly less visible ... Here DNSSEC means the version of the
protocol initially defined in ...*"

The use of the word "*initially*" in the last sentence, in conjunction with
some low-numbered RFC numbers, can lead the reader to think that you are
referring to version 1.

This PR aims to make it clearer that we are pointing to version 3.


Current text:

What we today call "DNSSEC" is formally version 3 of the DNSSEC
specification.

However, earlier versions of DNSSEC were thinly deployed and significantly
less

visible than the current DNSSEC specification. Throughout this document,
"DNSSEC"

means the version of the protocol initially defined in {{RFC4033}},
{{RFC4034}}, and {{RFC4035}}.


Proposed text for the last line:

means version 3 of the protocol initially defined in {{RFC4033}},
{{RFC4034}}, and {{RFC4035}}.


Is this better?


Chris




On Sun, 10 Jul 2022 at 10:33, <internet-drafts@ietf.org> wrote:

>
> A New Internet-Draft is available from the on-line Internet-Drafts
> directories.
> This draft is a work item of the Domain Name System Operations WG of the
> IETF.
>
>         Title           : DNS Security Extensions (DNSSEC)
>         Author          : Paul Hoffman
>   Filename        : draft-ietf-dnsop-dnssec-bcp-02.txt
>   Pages           : 10
>   Date            : 2022-07-10
>
> Abstract:
>    This document describes the DNS security extensions (commonly called
>    "DNSSEC") that are specified RFCs 4033, 4034, 4035, and a handful of
>    others.  One purpose is to introduce all of the RFCs in one place so
>    that the reader can understand the many aspects of DNSSEC.  This
>    document does not update any of those RFCs.  Another purpose is to
>    move DNSSEC to Best Current Practice status.
>
>    This document is currently maintained at
>    https://github.com/paulehoffman/draft-hoffman-dnssec.  Issues and
>    pull requests are welcomed.
>
>
> The IETF datatracker status page for this draft is:
> https://datatracker.ietf.org/doc/draft-ietf-dnsop-dnssec-bcp/
>
> There is also an htmlized version available at:
> https://datatracker.ietf.org/doc/html/draft-ietf-dnsop-dnssec-bcp-02
>
> A diff from the previous version is available at:
> https://www.ietf.org/rfcdiff?url2=draft-ietf-dnsop-dnssec-bcp-02
>
>
> Internet-Drafts are also available by rsync at rsync.ietf.org:
> :internet-drafts
>
>
> _______________________________________________
> DNSOP mailing list
> DNSOP@ietf.org
> https://www.ietf.org/mailman/listinfo/dnsop
>