Re: [DNSOP] Fwd: HTTPSSVC record draft

Paul Vixie <paul@redbarn.org> Wed, 10 July 2019 00:44 UTC

Return-Path: <paul@redbarn.org>
X-Original-To: dnsop@ietfa.amsl.com
Delivered-To: dnsop@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4CCE712030D for <dnsop@ietfa.amsl.com>; Tue, 9 Jul 2019 17:44:38 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.899
X-Spam-Level:
X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FEtUc78w1Tng for <dnsop@ietfa.amsl.com>; Tue, 9 Jul 2019 17:44:36 -0700 (PDT)
Received: from family.redbarn.org (family.redbarn.org [IPv6:2001:559:8000:cd::5]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B813E120286 for <dnsop@ietf.org>; Tue, 9 Jul 2019 17:44:35 -0700 (PDT)
Received: from [IPv6:2603:3024:2115:be00:5042:f33d:48b7:527f] (unknown [IPv6:2603:3024:2115:be00:5042:f33d:48b7:527f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client did not present a certificate) by family.redbarn.org (Postfix) with ESMTPSA id 85856892D3; Wed, 10 Jul 2019 00:44:35 +0000 (UTC)
To: Joe Abley <jabley@hopcount.ca>
Cc: Tim Wicinski <tjw.ietf@gmail.com>, Erik Nygren <erik+ietf@nygren.org>, dnsop@ietf.org, Ray Bellis <ray@bellis.me.uk>
References: <CAKC-DJikByP+wX-GoD6ntpUWTbr6ioJzB4i8nGQL4NtPWePL3g@mail.gmail.com> <CADyWQ+EA4e8ye9e8AWomrXko06cnT+izfqmK+fHLWGB5NBveLg@mail.gmail.com> <1845D2AE-4FF2-47B2-A01D-274401A23676@isc.org> <1745437.OzvAMyqktN@linux-9daj> <CAJhMdTPu68vbfReCDSftS9ywVbjaZmTTgNQOpemG2uk4UbQoOA@mail.gmail.com>
From: Paul Vixie <paul@redbarn.org>
Message-ID: <c026d8c7-3a72-cf07-c58a-7a05b860707c@redbarn.org>
Date: Tue, 09 Jul 2019 17:44:34 -0700
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 PostboxApp/6.1.18
MIME-Version: 1.0
In-Reply-To: <CAJhMdTPu68vbfReCDSftS9ywVbjaZmTTgNQOpemG2uk4UbQoOA@mail.gmail.com>
Content-Type: text/plain; charset="utf-8"; format="flowed"
Content-Language: en-US
Content-Transfer-Encoding: 7bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/dnsop/zGy15X8JYwlHan3x3UcZAaTc7cw>
Subject: Re: [DNSOP] Fwd: HTTPSSVC record draft
X-BeenThere: dnsop@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnsop>, <mailto:dnsop-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dnsop/>
List-Post: <mailto:dnsop@ietf.org>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 10 Jul 2019 00:44:40 -0000


Joe Abley wrote on 2019-07-09 17:35:
> On Jul 9, 2019, at 20:11, Paul Vixie <paul@redbarn.org> wrote:
> 
>> everything other than HTTPS can just use SRV.
>>
>> ANAME is (should be) toast(ed).
> 
> Didn't we get to this point by acknowledging that there was a gap
> between now and the glorious future where SRV and unnamed alternatives
> for HTTPS, and that the gap was already being filled by multiple,
> different, ANAME-looking things?

not i.

SRV was good enough for HTTP. it was designed after HTTP, for HTTP. the 
reason it wasn't deployed for HTTP has nothing to do with the things 
that make HTTPSSVC necessary for HTTPS. (we would still need HTTPSSVC 
for HTTPS even if HTTP had adopted SRV.)

> 
> The point of ANAME was to give us some multi-provider/Interop options
> while the trucks roll, I thought. They are not fast trucks. It has
> taken 23 years to get from RFC 2052 to here.

the web browsing community has very fast trucks. what was a concern for 
the older, larger application-independent "Internet" is not for this. if 
IETF and W3C agree that HTTPSSVC is the way forward, it'll be used for 
50% or more of all web transactions within a year, and 90% within five 
years.


-- 
P Vixie