Re: [DNSOP] [EXT] Re: draft-schanzen-gns and draft-ietf-dns-alt-tld

David Conrad <drc@virtualized.org> Thu, 04 August 2022 19:28 UTC

Return-Path: <drc@virtualized.org>
X-Original-To: dnsop@ietfa.amsl.com
Delivered-To: dnsop@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CEC43C14CF0B for <dnsop@ietfa.amsl.com>; Thu, 4 Aug 2022 12:28:44 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.907
X-Spam-Level:
X-Spam-Status: No, score=-1.907 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, T_SCC_BODY_TEXT_LINE=-0.01] autolearn=unavailable autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=virtualized-org.20210112.gappssmtp.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TW5qUw2_2ZzB for <dnsop@ietfa.amsl.com>; Thu, 4 Aug 2022 12:28:39 -0700 (PDT)
Received: from mail-pl1-x62c.google.com (mail-pl1-x62c.google.com [IPv6:2607:f8b0:4864:20::62c]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7AF89C157B4F for <dnsop@ietf.org>; Thu, 4 Aug 2022 12:28:37 -0700 (PDT)
Received: by mail-pl1-x62c.google.com with SMTP id m2so730484pls.4 for <dnsop@ietf.org>; Thu, 04 Aug 2022 12:28:37 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=virtualized-org.20210112.gappssmtp.com; s=20210112; h=to:references:message-id:cc:date:in-reply-to:from:mime-version :subject:from:to:cc; bh=yUaj8pj4dc7IaqKstqXoSLPAfvOS/Ahy0SsTkYC5i5Y=; b=MX6YDvmdc25FfUZK3xOTY0FwArB8N1iNVXdWxUPVOp0K1dp6GvTmrVkjM7lgOImtCW w0TMWZ0J9GmryjshyjSD1VGygNfaa5xXFzed1uxyybnjltAjBArGqNJm3pjRoPoy13iU nU4E8K3QeJbCI5q44KxtaFFWGWNcMwv9J2L8WWeBE3Xg2yr99Qe5YlLAj+D7Co+jZ8kn 3M5OEyYUvgwOeNos2pa6VOFBOYZoRwcHC9Poc6aaRqh94xyMXABAfu7gqSxYR9/QIku6 VELikBGSsZ32WcMVc8gIEScOQe6QsMKpOxY9/4UpPQr3+Nv1etfsWfgk52TAk33sRnFf AOcQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=to:references:message-id:cc:date:in-reply-to:from:mime-version :subject:x-gm-message-state:from:to:cc; bh=yUaj8pj4dc7IaqKstqXoSLPAfvOS/Ahy0SsTkYC5i5Y=; b=DXLV/SlydbuRWegO4p24qWCZzrg86LSv7vSzjbGEt78E3cjjxP92SIURspyhzq7ODF mvJaNeOxE9+7Blm1yxqifIqCGqNJf3abpKxCUrhngge362EgrYhXPPPpRt8RxbcYdMRC 89cd898ufkc8QGl4EDTFdw2fuUwlcnJZ3wsOXA8runbnteG52Y3CCAKx1WnFiywUpyIu 1c2R7olhZ6TiHJGL3Ph2ZnJorU0eFueLeTGVgNQdrw50Wy7ag09JT3MOMVzVbfM3wUKJ Mivjb72oPGIAOP6zv5fII6JPSZp914R7HCqFedNu44d8jwWTAR+ymNpZHVMcEdKtqudZ MDMA==
X-Gm-Message-State: ACgBeo2U+vRCuljcd+VFuKyUMxuMSpogldInQMWzNtIR1oQ7sYyTI5Jo WHp/RYQZvdJ3k1D0Xg+7lG4eHg==
X-Google-Smtp-Source: AA6agR5cTdBD487G7IFXJdDbgz9Tuf0kAPXo1nqAqUdj2TaYp73fsGk119WYHNKtQ202ONy9oPFYlA==
X-Received: by 2002:a17:902:ec8f:b0:16e:d8d8:c2ef with SMTP id x15-20020a170902ec8f00b0016ed8d8c2efmr3346292plg.62.1659641316658; Thu, 04 Aug 2022 12:28:36 -0700 (PDT)
Received: from smtpclient.apple ([135.84.167.9]) by smtp.gmail.com with ESMTPSA id v4-20020a622f04000000b0052dd7d0ad04sm1372440pfv.88.2022.08.04.12.28.31 (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128); Thu, 04 Aug 2022 12:28:32 -0700 (PDT)
Mime-Version: 1.0 (Mac OS X Mail 16.0 \(3696.120.41.1.1\))
Content-Type: multipart/signed; boundary="Apple-Mail=_D2E691E6-0052-468A-9832-18D1E6009736"; protocol="application/pgp-signature"; micalg="pgp-sha256"
From: David Conrad <drc@virtualized.org>
X-Priority: 3
In-Reply-To: <0F155C86-71D5-49AD-807F-D27314964574@posteo.de>
Date: Thu, 04 Aug 2022 15:28:26 -0400
Cc: Independent Submissions Editor <rfc-ise@rfc-editor.org>, dnsop <dnsop@ietf.org>
X-Mailbutler-Message-Id: 5DF092C8-9DA1-4ABA-A7D4-099C6983EF9E
Message-Id: <CB70361A-6B80-4DBF-B7EA-875A5DD9396C@virtualized.org>
References: <91abb9ac-9d3b-87bf-5639-174581d625fd@rfc-editor.org> <YufxYmxz9L8zG9hS@nic.fr> <1659368624-sup-8402@werkbank> <CAH1iCirbMBqSkE_+bTtWisEm_LxXj-3n2d1F1qL67_X+U7v7Jg@mail.gmail.com> <1659591584-sup-6027@werkbank> <39865554.5880.1659614798712@appsuite-gw2.open-xchange.com> <DEE9FECE-2647-4B8B-A64A-6D6E0E25F3FE@posteo.de> <595181228.6895.1659622649037@appsuite-gw2.open-xchange.com> <0F155C86-71D5-49AD-807F-D27314964574@posteo.de>
To: "Schanzenbach, Martin" <mschanzenbach@posteo.de>
X-Mailer: Apple Mail (2.3696.120.41.1.1)
Archived-At: <https://mailarchive.ietf.org/arch/msg/dnsop/x5BJhHNHtgVgNzWtXyukvG9udXw>
Subject: Re: [DNSOP] [EXT] Re: draft-schanzen-gns and draft-ietf-dns-alt-tld
X-BeenThere: dnsop@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnsop>, <mailto:dnsop-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dnsop/>
List-Post: <mailto:dnsop@ietf.org>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 04 Aug 2022 19:28:44 -0000

Martin,

On Aug 4, 2022, at 12:01 PM, Schanzenbach, Martin <mschanzenbach@posteo.de> wrote:
> But the resolution protocol is technology-neutral. I invite you to re-read the draft. We are not proposing a namespace.

Right. If I understand correctly, you are proposing to use the existing domain name namespace, and that’s where the problem lies.

Because of the way applications have been written and users have been trained, there is precisely one global "domain name” namespace.  It is a series of labels separated by ‘.’s” at the presentation layer. As applications and end users cannot distinguish the underlying protocol by which names are resolved simply from the name, the fact that the protocol is “technology-neutral” (whatever that means) is irrelevant. Since the domain name namespace is hierarchical, there can be only one designated administrator for each branch of the global name space. Note that that administration can be centralized or decentralized, but if it is decentralized, it must be coordinated, i.e., the multiple authorities can’t just go off and partition the namespace by themselves and expect those partitions to have global uniqueness.

> The possibility for the user to modify local configurations is as benign as a modification of /etc/hosts or Nsswitch.

Sure. And to what will those users/applications that do not modify /etc/hosts or use nsswitch, which will undoubtedly be the vast majority, send their queries?  And what happens when someone who “plays by the rules” and goes through the ICANN “global multi-stakeholder defined" process (e.g., the folks who obtained .pet) obtains the same portion of the domain name namespace you have chosen for GNS?

I believe (and I’m sure I’ll be corrected if I’m wrong) a major reason there is a moratorium on the process defined in RFC 6761 is because of a lack of clarity about who has authority over the administration of the single, global domain name namespace that you want to insert a name into. Some believe that authority is ICANN and others believe your usage would fall under “technical use” (whatever that means) and thus, be in the realm of the IETF. Complicating matters, the existing processes for TLD allocation at ICANN simply did not envision this particular usage and even if it did, the "new round”, known in ICANNland as “Subsequent Procedures”, is still (probably) years off.

The implication of all of this is the quagmire you find yourself in. In my view, you should be commended for trying to do “the right thing” but that doesn’t solve your problem. Pragmatically speaking, and to perhaps state the obvious, I see 4 options:

1) Wait for ICANN to fix their processes
2) Wait for the IETF to figure out whether/how to reopen the “Special Use Domains” registry
3) Try to bypass (1) and/or (2) by publishing through the ISE (I don’t know enough about the ISE process to guess whether this is appropriate or feasible)
4) Squat on a name like various other folks (Unstoppable Domains, Handshake, Butterfly, Namecoin, etc.) have done and hope (1) or (2) will happen and recognize the name you squatted on.

Did I miss anything?

Thanks,
-drc