[DNSOP] Re: Path Parameter Considerations for SVCB Records (rfc9460)

Mike Bishop <mbishop@evequefou.be> Tue, 19 August 2025 19:47 UTC

Return-Path: <mbishop@evequefou.be>
X-Original-To: dnsop@mail2.ietf.org
Delivered-To: dnsop@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 0BCBB5625EE4; Tue, 19 Aug 2025 12:47:51 -0700 (PDT)
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -1.897
X-Spam-Level:
X-Spam-Status: No, score=-1.897 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, RCVD_IN_VALIDITY_SAFE_BLOCKED=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (1024-bit key) header.d=evequefou.onmicrosoft.com
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id iA7V8yWyL4w2; Tue, 19 Aug 2025 12:47:50 -0700 (PDT)
Received: from NAM11-BN8-obe.outbound.protection.outlook.com (mail-bn8nam11on2106.outbound.protection.outlook.com [40.107.236.106]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-384) server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 54A3E5625EDD; Tue, 19 Aug 2025 12:47:50 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=E2tTu34MBWwJlOhQZ18S58I3QIaK0MlwG9Vo3HV1XyPejH7hn3VdZHQEdvfY3bBe1YcqxJ0Ey8xlpfTbwmvwJitj3YVrJSg6IaQR14NwbXFq7mni5I4eioOHzbyX1Cl799JBIbxkK65kh2jRqTW/t4EEwXZ2fwMu29ewmY5XlDlgArIwaytjZ0O7zHQv2n0NZvUh2visJsA3f5RfVJQRP2kYEnZ9axE6Q5GY/W3x2AeUhM+taJ7haUETbz3ke/gdhly++Cx7H2YDXPxsQo1YGMiirLTtYie5U9TTSh4dnTZNQb4IxOXiaTQXThHVjL0BQKwAd7M8WRUvnX2Uj4x5UQ==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=Iji4J6drteFPymECF/Fqq0vynoAhcdW4hIhE/tEXRr8=; b=gaX+t9y6uP2quMQVV1z/pxxSVfJZsVPF8V0uD53UGOd4nS/tPMYUu3RTE7wt2giayEEVrNGmL4G5fEg/EhnJ6UWeWikDqEsCQStWLuqBke2G4ubQnghjKt1igShInRSkK1VFwNpS1e2CKf+P0GfEqbauwddkvMb+MfzsiDiu5QgWiWjptFm/Hh8xXSWqYC7ONRBflFpWUvM+UVQmGtT+VX/c1arHSwxbqmul2mo7NmVYAuMih7+CRh+E15Bw9b/Ind2SHOlf0MRjRVo6qioU4U+F+JexEpyNd3K0JcfjFOhOLugnatwTRyDvaZ2RMILNJS9h6fE9hYTsFtD8cKu2QA==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=evequefou.be; dmarc=pass action=none header.from=evequefou.be; dkim=pass header.d=evequefou.be; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=evequefou.onmicrosoft.com; s=selector2-evequefou-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=Iji4J6drteFPymECF/Fqq0vynoAhcdW4hIhE/tEXRr8=; b=q4TxIAr4svLAhVEY1vfH03LbjQ2YeY7ZGBTQ2y0myRONtq/n+QtBa8rQeWUhHzMsxhbXskr6914pEf8FHMBjZIRpPWLVmqmX2d64NdDqaewNQ0zV0Mrdv/i1KwmrTT7dA4BEtVwa78HwesNXfwHenAnACTa4K5TG4gvx2C3tq/Q=
Received: from IA0PPF726CD7A1F.namprd22.prod.outlook.com (2603:10b6:20f:fc04::d2b) by SJ2PR22MB4457.namprd22.prod.outlook.com (2603:10b6:a03:562::20) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9031.24; Tue, 19 Aug 2025 19:47:45 +0000
Received: from IA0PPF726CD7A1F.namprd22.prod.outlook.com ([fe80::6c2e:9662:da13:59d2]) by IA0PPF726CD7A1F.namprd22.prod.outlook.com ([fe80::6c2e:9662:da13:59d2%7]) with mapi id 15.20.9031.024; Tue, 19 Aug 2025 19:47:45 +0000
From: Mike Bishop <mbishop@evequefou.be>
To: Michel Le Bihan <michel@lebihan.pl>, "dnsop@ietf.org" <dnsop@ietf.org>, "draft-ietf-dnsop-svcb-https@ietf.org" <draft-ietf-dnsop-svcb-https@ietf.org>
Thread-Topic: Path Parameter Considerations for SVCB Records (rfc9460)
Thread-Index: AQHcET0KJIlgfS6yPUqMiqKfZE3GSLRqWOga
Date: Tue, 19 Aug 2025 19:47:45 +0000
Message-ID: <IA0PPF726CD7A1FF3D66A706620B62FEA77DA30A@IA0PPF726CD7A1F.namprd22.prod.outlook.com>
References: <4c4958b8-2777-4852-8887-a97454efea9f@lebihan.pl>
In-Reply-To: <4c4958b8-2777-4852-8887-a97454efea9f@lebihan.pl>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
msip_labels:
authentication-results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=evequefou.be;
x-ms-publictraffictype: Email
x-ms-traffictypediagnostic: IA0PPF726CD7A1F:EE_|SJ2PR22MB4457:EE_
x-ms-office365-filtering-correlation-id: 35f9499e-b098-4bc4-be39-08dddf5944ab
x-ms-exchange-senderadcheck: 1
x-ms-exchange-antispam-relay: 0
x-microsoft-antispam: BCL:0;ARA:13230040|1800799024|10070799003|366016|376014|8096899003|13003099007|38070700018|7053199007;
x-microsoft-antispam-message-info: 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
x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:IA0PPF726CD7A1F.namprd22.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230040)(1800799024)(10070799003)(366016)(376014)(8096899003)(13003099007)(38070700018)(7053199007);DIR:OUT;SFP:1102;
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: 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
Content-Type: multipart/alternative; boundary="_000_IA0PPF726CD7A1FF3D66A706620B62FEA77DA30AIA0PPF726CD7A1F_"
MIME-Version: 1.0
X-OriginatorOrg: evequefou.be
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: IA0PPF726CD7A1F.namprd22.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 35f9499e-b098-4bc4-be39-08dddf5944ab
X-MS-Exchange-CrossTenant-originalarrivaltime: 19 Aug 2025 19:47:45.3262 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 41eaf50b-882d-47eb-8c4c-0b5b76a9da8f
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: qI8IORXy0EnETOZP6KuVW3TRJYQjXMTKeYIZS8vQsJ1vWcmgbC8xImH84RaCBY06SJsyZLrOvuvsOSy/KB1tlg==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: SJ2PR22MB4457
Message-ID-Hash: NSV5DVFGM25J6E4ASWIIP22OCZRI7CSU
X-Message-ID-Hash: NSV5DVFGM25J6E4ASWIIP22OCZRI7CSU
X-MailFrom: mbishop@evequefou.be
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-dnsop.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [DNSOP] Re: Path Parameter Considerations for SVCB Records (rfc9460)
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/dnsop/xqbiU4QLNMlg9jOdRJEKkger3pw>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dnsop>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Owner: <mailto:dnsop-owner@ietf.org>
List-Post: <mailto:dnsop@ietf.org>
List-Subscribe: <mailto:dnsop-join@ietf.org>
List-Unsubscribe: <mailto:dnsop-leave@ietf.org>

Responding with no hats, but off the top of my head, DNS-over-CoAP defines a similar-in-spirit but different-in-format "docpath" element. (See https://datatracker.ietf.org/doc/html/draft-ietf-core-dns-over-coap.)

I think there could be some value in a more generic "protocol endpoint represented by a URI path, not just a host:port tuple" SvcParam, but no one has defined one yet. However, note that it's possible for one SVCB record to indicate multiple protocol options, and those multiple protocols might reside at differing paths, as in this example indicating colocated DoC and DoH support:


  _dns.example.org.   429  IN SVCB 1 dns.example.org (
      alpn=h3,co dohpath=/{?dns} docpath )

So such a SvcParam would probably need the ability to represent a dictionary of ALPNs and the paths associated with each. At that point, it could be simpler to define a SvcParam per protocol as has already been done for DoH/DoC. However, if you have a suite of related protocols where you can be confident the path would be the same, you could certainly define a SvcParam which applied to all of those at once.

________________________________
From: Michel Le Bihan <michel@lebihan.pl>
Sent: Tuesday, August 19, 2025 3:11 PM
To: dnsop@ietf.org <dnsop@ietf.org>; draft-ietf-dnsop-svcb-https@ietf.org <draft-ietf-dnsop-svcb-https@ietf.org>
Subject: Path Parameter Considerations for SVCB Records (rfc9460)

Dear IETF DNSOP Working Group,

Thank you for your response to my previous inquiry regarding ALPN
identifier requirements in RFC 9460.

I would like to raise a related question concerning path parameters in
SVCB records. In addition to the TLS/TCP and QUIC transports discussed
in my previous email, XMPP also supports WebSocket (RFC 7395) and BOSH
(XEP-0206) as transport mechanisms. These protocols require path
information that is currently discovered through well-known URIs (e.g.,
https://im.example.org/.well-known/host-meta
<https://im.example.org/.well-known/host-meta>).

I note that DNS over HTTPS addressed a similar requirement by
introducing the "dohpath" SvcParamKey (RFC 9461). However, creating
protocol-specific path parameters for each application protocol that
requires them seems to present scalability concerns.

My questions are:

 1. Has consideration been given to a generic path parameter that could
    be used across multiple protocols, rather than protocol-specific
    keys like "dohpath"?
 2. What is the recommended approach for protocols that require path
    information when using SVCB records? Should each protocol:
      * Define its own path SvcParamKey (following the DoH precedent)?
      * Continue relying on well-known URIs for path discovery?
      * Consider an alternative mechanism?
 3. Are there architectural reasons for preferring protocol-specific
    path parameters over a generic solution?

Your guidance on this matter would be valuable for ensuring consistent
implementation approaches across protocols that require path information
in their service bindings.

Best regards,
Michel Le Bihan