[DNSOP] Re: Path Parameter Considerations for SVCB Records (rfc9460)
Mike Bishop <mbishop@evequefou.be> Tue, 19 August 2025 19:47 UTC
Return-Path: <mbishop@evequefou.be>
X-Original-To: dnsop@mail2.ietf.org
Delivered-To: dnsop@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 0BCBB5625EE4; Tue, 19 Aug 2025 12:47:51 -0700 (PDT)
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -1.897
X-Spam-Level:
X-Spam-Status: No, score=-1.897 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, RCVD_IN_VALIDITY_SAFE_BLOCKED=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (1024-bit key) header.d=evequefou.onmicrosoft.com
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id iA7V8yWyL4w2; Tue, 19 Aug 2025 12:47:50 -0700 (PDT)
Received: from NAM11-BN8-obe.outbound.protection.outlook.com (mail-bn8nam11on2106.outbound.protection.outlook.com [40.107.236.106]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-384) server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 54A3E5625EDD; Tue, 19 Aug 2025 12:47:50 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=E2tTu34MBWwJlOhQZ18S58I3QIaK0MlwG9Vo3HV1XyPejH7hn3VdZHQEdvfY3bBe1YcqxJ0Ey8xlpfTbwmvwJitj3YVrJSg6IaQR14NwbXFq7mni5I4eioOHzbyX1Cl799JBIbxkK65kh2jRqTW/t4EEwXZ2fwMu29ewmY5XlDlgArIwaytjZ0O7zHQv2n0NZvUh2visJsA3f5RfVJQRP2kYEnZ9axE6Q5GY/W3x2AeUhM+taJ7haUETbz3ke/gdhly++Cx7H2YDXPxsQo1YGMiirLTtYie5U9TTSh4dnTZNQb4IxOXiaTQXThHVjL0BQKwAd7M8WRUvnX2Uj4x5UQ==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=Iji4J6drteFPymECF/Fqq0vynoAhcdW4hIhE/tEXRr8=; b=gaX+t9y6uP2quMQVV1z/pxxSVfJZsVPF8V0uD53UGOd4nS/tPMYUu3RTE7wt2giayEEVrNGmL4G5fEg/EhnJ6UWeWikDqEsCQStWLuqBke2G4ubQnghjKt1igShInRSkK1VFwNpS1e2CKf+P0GfEqbauwddkvMb+MfzsiDiu5QgWiWjptFm/Hh8xXSWqYC7ONRBflFpWUvM+UVQmGtT+VX/c1arHSwxbqmul2mo7NmVYAuMih7+CRh+E15Bw9b/Ind2SHOlf0MRjRVo6qioU4U+F+JexEpyNd3K0JcfjFOhOLugnatwTRyDvaZ2RMILNJS9h6fE9hYTsFtD8cKu2QA==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=evequefou.be; dmarc=pass action=none header.from=evequefou.be; dkim=pass header.d=evequefou.be; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=evequefou.onmicrosoft.com; s=selector2-evequefou-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=Iji4J6drteFPymECF/Fqq0vynoAhcdW4hIhE/tEXRr8=; b=q4TxIAr4svLAhVEY1vfH03LbjQ2YeY7ZGBTQ2y0myRONtq/n+QtBa8rQeWUhHzMsxhbXskr6914pEf8FHMBjZIRpPWLVmqmX2d64NdDqaewNQ0zV0Mrdv/i1KwmrTT7dA4BEtVwa78HwesNXfwHenAnACTa4K5TG4gvx2C3tq/Q=
Received: from IA0PPF726CD7A1F.namprd22.prod.outlook.com (2603:10b6:20f:fc04::d2b) by SJ2PR22MB4457.namprd22.prod.outlook.com (2603:10b6:a03:562::20) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9031.24; Tue, 19 Aug 2025 19:47:45 +0000
Received: from IA0PPF726CD7A1F.namprd22.prod.outlook.com ([fe80::6c2e:9662:da13:59d2]) by IA0PPF726CD7A1F.namprd22.prod.outlook.com ([fe80::6c2e:9662:da13:59d2%7]) with mapi id 15.20.9031.024; Tue, 19 Aug 2025 19:47:45 +0000
From: Mike Bishop <mbishop@evequefou.be>
To: Michel Le Bihan <michel@lebihan.pl>, "dnsop@ietf.org" <dnsop@ietf.org>, "draft-ietf-dnsop-svcb-https@ietf.org" <draft-ietf-dnsop-svcb-https@ietf.org>
Thread-Topic: Path Parameter Considerations for SVCB Records (rfc9460)
Thread-Index: AQHcET0KJIlgfS6yPUqMiqKfZE3GSLRqWOga
Date: Tue, 19 Aug 2025 19:47:45 +0000
Message-ID: <IA0PPF726CD7A1FF3D66A706620B62FEA77DA30A@IA0PPF726CD7A1F.namprd22.prod.outlook.com>
References: <4c4958b8-2777-4852-8887-a97454efea9f@lebihan.pl>
In-Reply-To: <4c4958b8-2777-4852-8887-a97454efea9f@lebihan.pl>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
msip_labels:
authentication-results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=evequefou.be;
x-ms-publictraffictype: Email
x-ms-traffictypediagnostic: IA0PPF726CD7A1F:EE_|SJ2PR22MB4457:EE_
x-ms-office365-filtering-correlation-id: 35f9499e-b098-4bc4-be39-08dddf5944ab
x-ms-exchange-senderadcheck: 1
x-ms-exchange-antispam-relay: 0
x-microsoft-antispam: BCL:0;ARA:13230040|1800799024|10070799003|366016|376014|8096899003|13003099007|38070700018|7053199007;
x-microsoft-antispam-message-info: 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
x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:IA0PPF726CD7A1F.namprd22.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230040)(1800799024)(10070799003)(366016)(376014)(8096899003)(13003099007)(38070700018)(7053199007);DIR:OUT;SFP:1102;
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: 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
Content-Type: multipart/alternative; boundary="_000_IA0PPF726CD7A1FF3D66A706620B62FEA77DA30AIA0PPF726CD7A1F_"
MIME-Version: 1.0
X-OriginatorOrg: evequefou.be
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: IA0PPF726CD7A1F.namprd22.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 35f9499e-b098-4bc4-be39-08dddf5944ab
X-MS-Exchange-CrossTenant-originalarrivaltime: 19 Aug 2025 19:47:45.3262 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 41eaf50b-882d-47eb-8c4c-0b5b76a9da8f
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: qI8IORXy0EnETOZP6KuVW3TRJYQjXMTKeYIZS8vQsJ1vWcmgbC8xImH84RaCBY06SJsyZLrOvuvsOSy/KB1tlg==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: SJ2PR22MB4457
Message-ID-Hash: NSV5DVFGM25J6E4ASWIIP22OCZRI7CSU
X-Message-ID-Hash: NSV5DVFGM25J6E4ASWIIP22OCZRI7CSU
X-MailFrom: mbishop@evequefou.be
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-dnsop.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [DNSOP] Re: Path Parameter Considerations for SVCB Records (rfc9460)
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/dnsop/xqbiU4QLNMlg9jOdRJEKkger3pw>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dnsop>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Owner: <mailto:dnsop-owner@ietf.org>
List-Post: <mailto:dnsop@ietf.org>
List-Subscribe: <mailto:dnsop-join@ietf.org>
List-Unsubscribe: <mailto:dnsop-leave@ietf.org>
Responding with no hats, but off the top of my head, DNS-over-CoAP defines a similar-in-spirit but different-in-format "docpath" element. (See https://datatracker.ietf.org/doc/html/draft-ietf-core-dns-over-coap.) I think there could be some value in a more generic "protocol endpoint represented by a URI path, not just a host:port tuple" SvcParam, but no one has defined one yet. However, note that it's possible for one SVCB record to indicate multiple protocol options, and those multiple protocols might reside at differing paths, as in this example indicating colocated DoC and DoH support: _dns.example.org. 429 IN SVCB 1 dns.example.org ( alpn=h3,co dohpath=/{?dns} docpath ) So such a SvcParam would probably need the ability to represent a dictionary of ALPNs and the paths associated with each. At that point, it could be simpler to define a SvcParam per protocol as has already been done for DoH/DoC. However, if you have a suite of related protocols where you can be confident the path would be the same, you could certainly define a SvcParam which applied to all of those at once. ________________________________ From: Michel Le Bihan <michel@lebihan.pl> Sent: Tuesday, August 19, 2025 3:11 PM To: dnsop@ietf.org <dnsop@ietf.org>; draft-ietf-dnsop-svcb-https@ietf.org <draft-ietf-dnsop-svcb-https@ietf.org> Subject: Path Parameter Considerations for SVCB Records (rfc9460) Dear IETF DNSOP Working Group, Thank you for your response to my previous inquiry regarding ALPN identifier requirements in RFC 9460. I would like to raise a related question concerning path parameters in SVCB records. In addition to the TLS/TCP and QUIC transports discussed in my previous email, XMPP also supports WebSocket (RFC 7395) and BOSH (XEP-0206) as transport mechanisms. These protocols require path information that is currently discovered through well-known URIs (e.g., https://im.example.org/.well-known/host-meta <https://im.example.org/.well-known/host-meta>). I note that DNS over HTTPS addressed a similar requirement by introducing the "dohpath" SvcParamKey (RFC 9461). However, creating protocol-specific path parameters for each application protocol that requires them seems to present scalability concerns. My questions are: 1. Has consideration been given to a generic path parameter that could be used across multiple protocols, rather than protocol-specific keys like "dohpath"? 2. What is the recommended approach for protocols that require path information when using SVCB records? Should each protocol: * Define its own path SvcParamKey (following the DoH precedent)? * Continue relying on well-known URIs for path discovery? * Consider an alternative mechanism? 3. Are there architectural reasons for preferring protocol-specific path parameters over a generic solution? Your guidance on this matter would be valuable for ensuring consistent implementation approaches across protocols that require path information in their service bindings. Best regards, Michel Le Bihan
- [DNSOP] Path Parameter Considerations for SVCB Re… Michel Le Bihan
- [DNSOP] Re: Path Parameter Considerations for SVC… Mike Bishop
- [DNSOP] Re: Path Parameter Considerations for SVC… Ben Schwartz