Re: [DNSOP] [EXT] Re: draft-schanzen-gns and draft-ietf-dns-alt-tld

Paul Wouters <paul@nohats.ca> Mon, 08 August 2022 12:25 UTC

Return-Path: <paul@nohats.ca>
X-Original-To: dnsop@ietfa.amsl.com
Delivered-To: dnsop@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 33731C13CCE5 for <dnsop@ietfa.amsl.com>; Mon, 8 Aug 2022 05:25:44 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.103
X-Spam-Level:
X-Spam-Status: No, score=-2.103 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_BLOCKED=0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=nohats.ca
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id iteUzC_0yDYP for <dnsop@ietfa.amsl.com>; Mon, 8 Aug 2022 05:25:38 -0700 (PDT)
Received: from mx.nohats.ca (mx.nohats.ca [193.110.157.85]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 29C58C13CCEE for <dnsop@ietf.org>; Mon, 8 Aug 2022 05:25:07 -0700 (PDT)
Received: from localhost (localhost [IPv6:::1]) by mx.nohats.ca (Postfix) with ESMTP id 4M1b4f2J35zCLG; Mon, 8 Aug 2022 14:25:06 +0200 (CEST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nohats.ca; s=default; t=1659961506; bh=Kx/hXwQNG8ySaS7XKH+9JvZ+1uMAO0YzMb4lrI/YQZk=; h=From:Subject:Date:References:Cc:In-Reply-To:To; b=MniOyXMwEiiTEO2z9TS9S2IBqnaMzzm8GVHC9+2wuYSRZ1VPp3ftOrf3GnTHLl8yH JcCl7Z0NjvFUKuVyFJuu7SAqFRIWjy2uksm/sBzsSZrU+SaMsYRmPiTnpu6q3PkyY0 KGxt4JBlLK1HjWNk9Wresf4IlueUBDDSAZos7nzU=
X-Virus-Scanned: amavisd-new at mx.nohats.ca
Received: from mx.nohats.ca ([IPv6:::1]) by localhost (mx.nohats.ca [IPv6:::1]) (amavisd-new, port 10024) with ESMTP id dGkENfg5yBm6; Mon, 8 Aug 2022 14:25:05 +0200 (CEST)
Received: from bofh.nohats.ca (bofh.nohats.ca [193.110.157.194]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mx.nohats.ca (Postfix) with ESMTPS; Mon, 8 Aug 2022 14:25:05 +0200 (CEST)
Received: from smtpclient.apple (unknown [193.110.157.208]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by bofh.nohats.ca (Postfix) with ESMTPSA id 3BCFC3B40C0; Mon, 8 Aug 2022 08:25:04 -0400 (EDT)
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
From: Paul Wouters <paul@nohats.ca>
Mime-Version: 1.0 (1.0)
Date: Mon, 08 Aug 2022 08:25:02 -0400
Message-Id: <072B42AB-9746-4B47-A808-12B65BA0A0C2@nohats.ca>
References: <59965e06-b0bc-5cff-98c8-4809b2d7ff39@huitema.net>
Cc: George Michaelson <ggm@algebras.org>, John Levine <johnl@taugh.com>, dnsop@ietf.org
In-Reply-To: <59965e06-b0bc-5cff-98c8-4809b2d7ff39@huitema.net>
To: Christian Huitema <huitema@huitema.net>
X-Mailer: iPhone Mail (19G71)
Archived-At: <https://mailarchive.ietf.org/arch/msg/dnsop/zjNeHY3JxUPRm4AOSPE9phqaPWo>
Subject: Re: [DNSOP] [EXT] Re: draft-schanzen-gns and draft-ietf-dns-alt-tld
X-BeenThere: dnsop@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnsop>, <mailto:dnsop-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dnsop/>
List-Post: <mailto:dnsop@ietf.org>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 08 Aug 2022 12:25:44 -0000

On Aug 8, 2022, at 02:08, Christian Huitema <huitema@huitema.net> wrote:
> 
> 
> 
> The name space is "almost" unitary. People deploy things like domain suffix search lists so that users can type "mailserver" and arrive at "mailserver.corp.example.com" --

That use is basically dead. It might sort of work at an enterprise or university but try typing in a single word in any browser and it will “smartly” turn it into a search engine key word.


>> If GNS is glued into DNS as a sub-arc over a label we understand, the
>> possibility of some unity, fusion of purpose exists. If it squats, or
>> is pushed aside, then that possibility disappears.

Again, if they were okay with such names, they would have already picked ._gns or something. Alternative schemes want the same easy mnemonics as regular DNS.

>> 
>> If users could be trained to type "!example.pet" or "..example.pet" to explicitly require resolution of a GNS name, then John's proposal would work. I am not sure that this can such training would work.

For one, I don’t think it works. Second, if !bigbank.com can end up at an alternative entity that is not bigbank, we have a new problem that the IETF and ICANN have very valid reasons for to try and prevent - it would harm the security and stability of the internet.

 Having an alternative namespace is similar to DNS having classes. We could have had these and then GNS could have been a class. But the billions of internet users think of the namespace as one thing - you can’t overload it via classes or clever nerdy character prefixes.


>> Now, it may well be that training users to type "example.pet.arpa" or "example.test" is just as hard. Design proper user interactions is hard. I would much rather let the GNS developers make these decisions rather than have the IETF try to engineer user interactions on their behalf. If they have concluded that they just need a name suffix, I think we should take that at face value.

From an end user point of view, a different app would be more understandable, eg how @foo has come to mean the twitter or Instagram username namespace. But that process was the reverse of what GNS is attempting (app->namespace, not namespace->app)

Paul