Re: [DNSOP] reservations on reservations, was Barry Leiba's Abstain

David Cake <dave@difference.com.au> Tue, 01 September 2015 03:17 UTC

Return-Path: <dave@difference.com.au>
X-Original-To: dnsop@ietfa.amsl.com
Delivered-To: dnsop@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 889831B7957 for <dnsop@ietfa.amsl.com>; Mon, 31 Aug 2015 20:17:07 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.212
X-Spam-Level:
X-Spam-Status: No, score=-0.212 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HELO_EQ_AU=0.377, HOST_EQ_AU=0.327, LOTS_OF_MONEY=0.001, RELAY_IS_203=0.994, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id PnuNtuP_79gh for <dnsop@ietfa.amsl.com>; Mon, 31 Aug 2015 20:17:05 -0700 (PDT)
Received: from legba.difference.com.au (legba.difference.com.au [203.56.168.25]) by ietfa.amsl.com (Postfix) with ESMTP id B26A01B7954 for <dnsop@ietf.org>; Mon, 31 Aug 2015 20:17:03 -0700 (PDT)
Received: from localhost (localhost [127.0.0.1]) by legba.difference.com.au (Postfix-vscanned) with ESMTP id 89B4041318; Mon, 31 Aug 2015 18:15:36 +0800 (AWST)
Received: from legba.difference.com.au ([127.0.0.1]) by localhost (legba.difference.com.au [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id YODc6Njatn6T; Mon, 31 Aug 2015 18:15:36 +0800 (AWST)
Received: from [192.168.1.6] (58-7-107-162.dyn.iinet.net.au [58.7.107.162]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by legba.difference.com.au (Postfix-smtp) with ESMTPSA id B971841315; Mon, 31 Aug 2015 18:15:35 +0800 (AWST)
Mime-Version: 1.0 (Mac OS X Mail 8.2 \(2104\))
Content-Type: multipart/signed; boundary="Apple-Mail=_850DDB01-26AA-45CC-ADD5-87AF730BB7B1"; protocol="application/pgp-signature"; micalg="pgp-sha256"
X-Pgp-Agent: GPGMail 2.5
From: David Cake <dave@difference.com.au>
In-Reply-To: <20150901021345.69577.qmail@ary.lan>
Date: Tue, 01 Sep 2015 11:16:59 +0800
Message-Id: <07E3B065-F809-4D89-A348-417B3B3AE2C8@difference.com.au>
References: <20150901021345.69577.qmail@ary.lan>
To: John Levine <johnl@taugh.com>
X-Mailer: Apple Mail (2.2104)
Archived-At: <http://mailarchive.ietf.org/arch/msg/dnsop/xz2xJgtPki5m6zFqnxJUwP-dmxw>
Cc: dnsop@ietf.org, ajs@anvilwalrusden.com
Subject: Re: [DNSOP] reservations on reservations, was Barry Leiba's Abstain
X-BeenThere: dnsop@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnsop>, <mailto:dnsop-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dnsop/>
List-Post: <mailto:dnsop@ietf.org>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 01 Sep 2015 03:17:07 -0000

I’d add that ICANN has no mechanism for specifying how a top level domain should be handled other than the simple delegation/non-delegation binary (it can specify how certain sub-domains should be handled as a condition of delegation). It cannot, as the .onion proposal does, specify that the domain be handled differently by resolvers without delegation.
This alone justifies an IETF mechanism that goes outside ICANNs processes.

David

> On 1 Sep 2015, at 10:13 am, John Levine <johnl@taugh.com> wrote:
> 
>> It seems to me that ICANN could well decide that certain names are
>> just not going to be delegated in the DNS root, and could do that on
>> the understanding that it is because of existing deployments.  There
>> is an argument to ne made that the "corp" and "mail" examples are of
>> this sort, although John Levine might point out that they haven't made
>> this permanent.
> 
> Well, since I've been dragged in here ...
> 
> The ICANN new TLD process had a step that looked at DNS Stability (see
> pages 2-11 - 2-15 of the applicant guidebook), but the text in the AGB
> makes it clear that the issues they were contemplating were things
> like IDN names that aren't valid U-labels.  The issue of collisions
> with existing use wasn't seriously addressed until Verisign made an
> issue about it, notably with their March 2014 name collision workshop.
> 
> It is quite true that while ICANN has said they're not planning to
> delegate .corp, .mail, and .home, they still have several million
> dollars of unrefunded application fees for those names.  It is not
> necessarily bad that the names aren't reserved forever -- for example,
> a lot of the informal use of .corp depended on CAs signing .corp
> names, which they don't do any more.  It's plausible the enough of the
> existing .corp names will eventually move elsewhere that it'd be OK to
> delegate it.  The problem is that there is no process, inside or
> outside of ICANN, to make that decision.
> 
> Applicants call up ICANN every day and scream about how much money
> they're losing because they can't implement their business plans.  If
> they hear there's collision problems, they say fine, whatever, just
> tell us what we have to do to make the collisions go away so we can
> start collecting rent.  This has led to some rather odd things.  For
> some TLDs, there's a long list of reserved names that look like and
> probably are noise, apparently ones that showed up in one of the DITL
> snapshots.  Or now there's "controlled interruption", wildcards
> installed in a TLD for a few months with 127.53.53.53 A records they
> hope people will see in their logs.  That's a perfectly reasonable
> experiment, but by itself it's not going to tell anyone whether it's
> safe to delegate domains with a lot of prior use.  I don't see ICANN
> being opposed to sensible collision management, but I don't see
> how to get from here to there.
> 
> So anyway, I agreee with everyone else that .onion is odd enough that
> it's worth reserving in an RFC, but beyond that, we're in the
> uncharted territory between the IETF and ICANN.
> 
> R's,
> John
> 
> _______________________________________________
> DNSOP mailing list
> DNSOP@ietf.org
> https://www.ietf.org/mailman/listinfo/dnsop