Re: [DNSOP] I-D Action: draft-wessels-dns-zone-digest-06.txt

"Wessels, Duane" <dwessels@verisign.com> Wed, 13 February 2019 21:55 UTC

Return-Path: <dwessels@verisign.com>
X-Original-To: dnsop@ietfa.amsl.com
Delivered-To: dnsop@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7D2D012F18C for <dnsop@ietfa.amsl.com>; Wed, 13 Feb 2019 13:55:55 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2
X-Spam-Level:
X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=verisign.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id I4MHgHAykBLo for <dnsop@ietfa.amsl.com>; Wed, 13 Feb 2019 13:55:52 -0800 (PST)
Received: from mail6.verisign.com (mail6.verisign.com [69.58.187.32]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8E5DA12D861 for <dnsop@ietf.org>; Wed, 13 Feb 2019 13:55:52 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=verisign.com; l=7380; q=dns/txt; s=VRSN; t=1550094952; h=from:to:date:message-id:references:in-reply-to: mime-version:subject; bh=Jdk8LjJQDrDHt270PUluRNznJdybLOhV+ipnXJwUjys=; b=V5IgTlORBEV3DZT2d31qWBbaim/Whw44NBlzbkKSVrYJgGTs7tdIqXOp 6UDRPkpdqA3K7HmxuEb0ve4RjkDqcKYGnz9B39BtN+FN/6F0bXbiFyRYJ OIp5f+JADnPWznb1Jc8730GJFqUwkBGi8HShDkcbG+0yg1CUlccRwhhSx Egkm+UdyaYY5343BWK9baPZPgAugmhD9LZ2+qVlAhQTUPVT3EUzur0tJU 8DLVyvu4Fh7x8Z/QAW3UFdJioTuXayhlAJ7mXCnz8jowOFe7xbvBUPi9L kztOltImZ35oxS9fisvLz8rNXIsLfxwnJtQkLVzV2fviA7kCQ1WpHYKIg Q==;
X-IronPort-AV: E=Sophos; i="5.58,366,1544504400"; d="p7s'?scan'208"; a="6956880"
IronPort-PHdr: =?us-ascii?q?9a23=3A3mfXUR1TsJv8gQU2smDT+DRfVm0co7zxezQtwd?= =?us-ascii?q?8ZseIQKPad9pjvdHbS+e9qxAeQG9mDu7Qc06L/iOPJYSQ4+5GPsXQPItRndi?= =?us-ascii?q?QuroEopTEmG9OPEkbhLfTnPGQQFcVGU0J5rTngaRAGUMnxaEfPrXKs8DUcBg?= =?us-ascii?q?vwNRZvJuTyB4Xek9m72/q99pHPYAhEniaxba9vJxiqsAvdsdUbj5F/Iagr0B?= =?us-ascii?q?vJpXVIe+VSxWx2IF+Yggjx6MSt8pN96ipco/0u+dJOXqX8ZKQ4UKdXDC86PG?= =?us-ascii?q?Av5c3krgfMQA2S7XYBSGoWkx5IAw/Y7BHmW5r6ryX3uvZh1CScIMb7S60/Vz?= =?us-ascii?q?a/4KdxUBLmiDkJOSMl8G/ZicJwgqBUoBO9qBNw2IPUb52ZNP9kc6/BYd8WW2?= =?us-ascii?q?xMVdtRWSxbBYO8apMCA+QBMulGtIn9vEUBrR+lBQW0GejhxCJIiWXw3aIk3e?= =?us-ascii?q?gqDAbL0xEuHt0Qq3TUt8v6NKMJUe2u0qnH0y/Db/JN2Tf854jIdAotru2LXb?= =?us-ascii?q?J1aMfcz1QkGQ3CjlWVs4PlPjWV2/wMs2eF8+pgW/iji2k9qwF+pDWk28Qiip?= =?us-ascii?q?HRi44I1lzI7zh1zYQ7KNGiVUJ2YdCpHIFfuiyZL4d6X98uT3t1tCs41rEKo4?= =?us-ascii?q?O3cScJxZg92hLSaOSLc4aW7R/gSOqcJDJ1i2hmdb+7nBm/9EatxvPhWcS11V?= =?us-ascii?q?tFtS5In9jOu30I2RHe5MqKReZ780y8wziAzRrT5ftBIU0skKrbLIMuzaAom5?= =?us-ascii?q?oItETDAjf2mELrjK+Kbkkk+van6+DgYrj+u5KSK5d6hhz+Pao2lcKwAPg0Ph?= =?us-ascii?q?UUU2iF5eu806fj/VXjTLpQk/I6iLfZsIrBJcQdvKK2HwhV0oM75xa+CTepzs?= =?us-ascii?q?gYkGEaIF5ZYh6LkorkNl/ULPzlDfqyjU6gnThoyvzeO73uGJTNLnzNkLf7er?= =?us-ascii?q?Z97lZRxxc9zN9B/JJUEa8OIPboWkLqqtzXEAU5Mw2vw+bmB9V90JkSVn6IAq?= =?us-ascii?q?+cKK/Sq0OH5vozI+mQY48YoCvyK/4+5/7plX80gl4dcre13ZsZcny4Ge5mI0?= =?us-ascii?q?rKKUbr150NF3wNpiI/QfDkzlqYXnQbM3q0RKUkzjA2FIzgCp3MENODmruEiW?= =?us-ascii?q?2EE4ZNa2RdThigDH7ues/MD/sTZTmJL8t6uiIJT7m6SoAnkxqpsVmpmPJcMu?= =?us-ascii?q?PI93hA5trY399v6riLmA=3D=3D?=
X-IPAS-Result: =?us-ascii?q?A2EmAABKkWRc/zCZrQpjHAEBAQQBAQcEAQGBUQcBAQsBg?= =?us-ascii?q?mqBKgqMFY1bJYNalDmBcQoIBAEYCwuEPgKDfDQJDQEDAQEBAQEBAgEBAoEFA?= =?us-ascii?q?QuCOiIcMRw+AQEBAQEBJwEBAQEBASMCRCwBAQEBAgEBAWkDEAsCAQgYLgIlC?= =?us-ascii?q?yUCBBMOgxYBgXkXrAOEMwIOQUCEXw+CbYlugUE+gREnDBOCTIMeAQECAQEWh?= =?us-ascii?q?QGCJgKQPZJqAwYChEeCBG2LMoFtVYR9izCKNYVBjCcCBAIEBQIUgUaCD3AVG?= =?us-ascii?q?iEqAYJBCYsVhT9yjlmBHwEB?=
Received: from BRN1WNEX01.vcorp.ad.vrsn.com (10.173.153.48) by BRN1WNEX01.vcorp.ad.vrsn.com (10.173.153.48) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.1531.3; Wed, 13 Feb 2019 16:55:50 -0500
Received: from BRN1WNEX01.vcorp.ad.vrsn.com ([fe80::a89b:32d6:b967:337d]) by BRN1WNEX01.vcorp.ad.vrsn.com ([fe80::a89b:32d6:b967:337d%5]) with mapi id 15.01.1531.003; Wed, 13 Feb 2019 16:55:50 -0500
From: "Wessels, Duane" <dwessels@verisign.com>
To: "dnsop@ietf.org" <dnsop@ietf.org>
Thread-Topic: [EXTERNAL] [DNSOP] I-D Action: draft-wessels-dns-zone-digest-06.txt
Thread-Index: AQHUw+Z8cdj2yj8GekCjccUjd6ELxqXemceA
Date: Wed, 13 Feb 2019 21:55:50 +0000
Message-ID: <923006F8-EB5A-4098-81A2-782BC90BF220@verisign.com>
References: <155009468256.9559.12509906855495134896@ietfa.amsl.com>
In-Reply-To: <155009468256.9559.12509906855495134896@ietfa.amsl.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: yes
X-MS-TNEF-Correlator:
x-originating-ip: [10.170.148.18]
Content-Type: multipart/signed; boundary="Apple-Mail=_F2CDCC37-AB20-4EF7-8BCD-45CC90A3C0C4"; protocol="application/pkcs7-signature"; micalg=sha1
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/dnsop/ywEQjg9Anc4gJA0wxaZkeEWAQWM>
Subject: Re: [DNSOP] I-D Action: draft-wessels-dns-zone-digest-06.txt
X-BeenThere: dnsop@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnsop>, <mailto:dnsop-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dnsop/>
List-Post: <mailto:dnsop@ietf.org>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 13 Feb 2019 21:55:56 -0000

The only change to this document since -05 is to note that ZONEMD has been allocated RR type code 63 by IANA following an expert review back in December.

DW


> On Feb 13, 2019, at 1:51 PM, internet-drafts@ietf.org wrote:
> 
> 
> A New Internet-Draft is available from the on-line Internet-Drafts directories.
> This draft is a work item of the Domain Name System Operations WG of the IETF.
> 
>        Title           : Message Digest for DNS Zones
>        Authors         : Duane Wessels
>                          Piet Barber
>                          Matt Weinberg
>                          Warren Kumari
>                          Wes Hardaker
> 	Filename        : draft-wessels-dns-zone-digest-06.txt
> 	Pages           : 27
> 	Date            : 2019-02-13
> 
> Abstract:
>   This document describes an experimental protocol and new DNS Resource
>   Record that can be used to provide a message digest over DNS zone
>   data.  The ZONEMD Resource Record conveys the message digest data in
>   the zone itself.  When a zone publisher includes an ZONEMD record,
>   recipients can verify the zone contents for accuracy and
>   completeness.  This provides assurance that received zone data
>   matches published data, regardless of how the zone data has been
>   transmitted and received.
> 
>   ZONEMD is not designed to replace DNSSEC.  Whereas DNSSEC protects
>   individual RRSets (DNS data with fine granularity), ZONEMD protects
>   protects a zone's data as a whole, whether consumed by authoritative
>   name servers, recursive name servers, or any other applications.
> 
>   As specified at this time, ZONEMD is not designed for use in large,
>   dynamic zones due to the time and resources required for digest
>   calculation.  The ZONEMD record described in this document includes
>   fields reserved for future work to support large, dynamic zones.
> 
> 
> The IETF datatracker status page for this draft is:
> https://datatracker.ietf.org/doc/draft-wessels-dns-zone-digest/
> 
> There are also htmlized versions available at:
> https://tools.ietf.org/html/draft-wessels-dns-zone-digest-06
> https://datatracker.ietf.org/doc/html/draft-wessels-dns-zone-digest-06
> 
> A diff from the previous version is available at:
> https://www.ietf.org/rfcdiff?url2=draft-wessels-dns-zone-digest-06
> 
> 
> Please note that it may take a couple of minutes from the time of submission
> until the htmlized version and diff are available at tools.ietf.org.
> 
> Internet-Drafts are also available by anonymous FTP at:
> ftp://ftp.ietf.org/internet-drafts/
> 
> _______________________________________________
> DNSOP mailing list
> DNSOP@ietf.org
> https://www.ietf.org/mailman/listinfo/dnsop