Re: [dnsoverhttp] New draft: draft-hoffman-dns-over-http-00.txt

Paul Hoffman <paul.hoffman@icann.org> Wed, 21 September 2016 15:12 UTC

Return-Path: <paul.hoffman@icann.org>
X-Original-To: dnsoverhttp@ietfa.amsl.com
Delivered-To: dnsoverhttp@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D8F9912B4BB for <dnsoverhttp@ietfa.amsl.com>; Wed, 21 Sep 2016 08:12:22 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.517
X-Spam-Level:
X-Spam-Status: No, score=-6.517 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-2.316, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id OLyD-82gkPgJ for <dnsoverhttp@ietfa.amsl.com>; Wed, 21 Sep 2016 08:12:21 -0700 (PDT)
Received: from out.west.pexch112.icann.org (pfe112-ca-2.pexch112.icann.org [64.78.40.10]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B16B812B4D5 for <dnsoverhttp@ietf.org>; Wed, 21 Sep 2016 08:12:15 -0700 (PDT)
Received: from PMBX112-W1-CA-1.pexch112.icann.org (64.78.40.21) by PMBX112-W1-CA-2.pexch112.icann.org (64.78.40.23) with Microsoft SMTP Server (TLS) id 15.0.1178.4; Wed, 21 Sep 2016 08:12:13 -0700
Received: from PMBX112-W1-CA-1.pexch112.icann.org ([64.78.40.21]) by PMBX112-W1-CA-1.PEXCH112.ICANN.ORG ([64.78.40.21]) with mapi id 15.00.1178.000; Wed, 21 Sep 2016 08:12:13 -0700
From: Paul Hoffman <paul.hoffman@icann.org>
To: Martin Thomson <martin.thomson@gmail.com>
Thread-Topic: [dnsoverhttp] New draft: draft-hoffman-dns-over-http-00.txt
Thread-Index: AQHSE07kDK2wJtUwEEi0lLnNJpT1/qCDrHqAgADXToA=
Date: Wed, 21 Sep 2016 15:12:12 +0000
Message-ID: <F5B939A3-4AB8-4174-837C-35906F4382BC@icann.org>
References: <147438228195.28999.4355943522486567954.idtracker@ietfa.amsl.com> <D1E3CC44-FE5A-4ACE-90A1-EF9B5EE975D7@icann.org> <CABkgnnW5kOQGhZ59MevLuck_B7pBrDHRdUvQ-SyiA+JSNwHv9w@mail.gmail.com>
In-Reply-To: <CABkgnnW5kOQGhZ59MevLuck_B7pBrDHRdUvQ-SyiA+JSNwHv9w@mail.gmail.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-ms-exchange-messagesentrepresentingtype: 1
x-ms-exchange-transport-fromentityheader: Hosted
x-originating-ip: [192.0.32.234]
Content-Type: text/plain; charset="us-ascii"
Content-ID: <904FDAF3D266F74D8FEBAA1009CE3893@pexch112.icann.org>
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/dnsoverhttp/KRSZVclRJLDKenTKKzUkVWET0fg>
Cc: "dnsoverhttp@ietf.org" <dnsoverhttp@ietf.org>
Subject: Re: [dnsoverhttp] New draft: draft-hoffman-dns-over-http-00.txt
X-BeenThere: dnsoverhttp@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: Discussion of DNS over HTTP <dnsoverhttp.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnsoverhttp>, <mailto:dnsoverhttp-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dnsoverhttp/>
List-Post: <mailto:dnsoverhttp@ietf.org>
List-Help: <mailto:dnsoverhttp-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsoverhttp>, <mailto:dnsoverhttp-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 21 Sep 2016 15:12:23 -0000

On Sep 20, 2016, at 7:21 PM, Martin Thomson <martin.thomson@gmail.com> wrote:
> 1. caching is not discussed, seems like it might relate to TTL somehow

We certainly meant to: it's an important part of HTTP. In the section on responses, we say:

In the HTTP responses, the HTTP cache headers are set to shortest DNS TTL in the response.
The HTTP responses SHOULD set the HTTP ETag headers as described in {{RFC7232}}.

Suggestions of what more we should say are greatly encouraged.

> 2. .invalid might be a poor choise:
> https://tools.ietf.org/html/rfc6761#section-6.4

Very good point. If we keep with the "send this special name" scheme, we'll pick another.

> 3. do we really need "id"?  adding extra correlators invites all sorts of crazy

One of our stated goals was to allow any real DNS query. Although it would be bad practice, some servers might treat certain IDs as special.

> The format is important: we should not just bungle a DNS message in a
> response, for example, additionalRRs is an area that might be
> addressed with server push.  

Joe and I purposely kept this document agnostic to the response format. There will be different formats for different use cases, as Shane's draft shows.

> The JSON format is somewhat in the right
> direction, but it needs a lot of work (this is my go native comment,
> consistent with your stated goal to be native).

As a side note, I'm in an informal "last call" for draft-hoffman-dns-in-json with the intention of sending it to the ISE for Experimental status in a few weeks. There is some traffic about that on the DNSOP WG mailing list, and I'm happy to take offline comments as well. I'll be putting out a revised version in the next few days.

--Paul Hoffman