Re: [dnssd] draft-sctl-service-registration call for adoption

[Toke Høiland-Jørgensen <[e-mail]>]

Ted Lemon <[e-mail]> writes:

> You actually talked in your presentation on the charter about an SRP
> relay. I think that is a good approach for Toke's use case.

I disagree. I don't want to run a relay.

> I don't think there is any way to do service registration across
> administrative boundaries without some kind of trust mechanism of this
> sort.

Sure there is: source address validation.

Say I run a dyndns service at dyndns.example.org. I provide an admin
interface where someone can register and pick a subdomain, say
myhome.dyndns.example.org, and register their IPv6 prefix. I then
configure my registration server to accept updates from that v6 prefix
for subdomains of myhome.dyndns.example.org on a TOFU basis. All the
user then has to do is add regserver.dynsdns.example.org as their
_dns-update._tcp.myhome.dynsdns.example.org SRV record on their home
network, and presto, all their devices can now register themselves in
global DNS.

-Toke