Re: [dnssd] I-D Action: draft-ietf-dnssd-srp-23.txt

Alexander Clouter <alex+ietf@coremem.com> Wed, 01 November 2023 11:53 UTC

Return-Path: <alex+ietf@coremem.com>
X-Original-To: dnssd@ietfa.amsl.com
Delivered-To: dnssd@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3AFBCC151527 for <dnssd@ietfa.amsl.com>; Wed, 1 Nov 2023 04:53:21 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.107
X-Spam-Level:
X-Spam-Status: No, score=-2.107 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=coremem.com header.b="HwmpIiDp"; dkim=pass (2048-bit key) header.d=messagingengine.com header.b="Jv7R7OG+"
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id nb3BirjPwUE2 for <dnssd@ietfa.amsl.com>; Wed, 1 Nov 2023 04:53:15 -0700 (PDT)
Received: from out5-smtp.messagingengine.com (out5-smtp.messagingengine.com [66.111.4.29]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8BD62C151533 for <dnssd@ietf.org>; Wed, 1 Nov 2023 04:53:15 -0700 (PDT)
Received: from compute3.internal (compute3.nyi.internal [10.202.2.43]) by mailout.nyi.internal (Postfix) with ESMTP id BFA6A5C0509 for <dnssd@ietf.org>; Wed, 1 Nov 2023 07:53:14 -0400 (EDT)
Received: from imap46 ([10.202.2.96]) by compute3.internal (MEProxy); Wed, 01 Nov 2023 07:53:14 -0400
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=coremem.com; h= cc:content-type:content-type:date:date:from:from:in-reply-to :in-reply-to:message-id:mime-version:references:reply-to:sender :subject:subject:to:to; s=fm2; t=1698839594; x=1698925994; bh=HH wO52gANtlQ3Hs1qvkdSO6MvgGZpHn9uInnpfWeJ6c=; b=HwmpIiDp2hsK8TkMdO Xnsgdwi+n+iSIYUeKDKDE9/ZGlRzMubrcHs2+G4/2peC5+0gXiae+B0umTNMNEgZ NqSDR7/m21PWplgIqJK8hPk9MADjw79Ys4pflbcJFChoCuzDgSRQvEtDvX+75MHM omrBq8R1KAsi7LhN3/Fq2hSB5PaR584fdBJV8MU4wS1iWtyfAuoU/snDy20cw/Hu lQ8WCFh/9l5g5RuAEjmpGiW0DWSvwBF2H+9CZStYTRZEk71YU1kPeIIPVyEHVe0J +R/W/HedN0AaXJbDNMe+x4J3oMEtSPp0hReBTLa0mBdwUsHxkC9moRbckpGbtQAs AJoA==
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-type:content-type:date:date :feedback-id:feedback-id:from:from:in-reply-to:in-reply-to :message-id:mime-version:references:reply-to:sender:subject :subject:to:to:x-me-proxy:x-me-proxy:x-me-sender:x-me-sender :x-sasl-enc; s=fm3; t=1698839594; x=1698925994; bh=HHwO52gANtlQ3 Hs1qvkdSO6MvgGZpHn9uInnpfWeJ6c=; b=Jv7R7OG+8tyCC1hG+8EmmcTBowV4D 5/xaATLsemaIXZQOZkeC1uOhVnIVmDtXUdRTixrnPByrmshSgEw6quDxKNHC6ab8 Xnxkabaata2y6JvC9FcmpgoXIb+1knndB4OcrnHgdzQ9qw4Ndsqs8eEe5xWBs0Wg qF2kPblzNzdBgO3ioBGfiln1NzJ0eDn35ww+9C/Eikdyu4hClfQXSoqF8rKGtRXf L6xRNxN9aYmbbjEoKrnGimPZDj1lcCKht22d3c4DxBb276ezciVkKkpAtwVXjqNw dFstYAXa31vbXBe2w45Ls40uImbpdp8qpKg8XGhwVhaUTIGz2T1RzAJNQ==
X-ME-Sender: <xms:KjxCZREqVdA4Qd37mHZXJYZuzR4YadVLVYwfptNZIP0jvVku7CB3_A> <xme:KjxCZWVLsAXTCFau5do9b5_LwgfL5r15_TbgH49XzeDri172Rg1fwMboPrHFG0JWb GgFDcCm83uxuRn8pA>
X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgedvkedruddtgedgfeefucetufdoteggodetrfdotf fvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdfqfgfvpdfurfetoffkrfgpnffqhgen uceurghilhhouhhtmecufedttdenucenucfjughrpefofgggkfgjfhffhffvufgtsehttd ertderredtnecuhfhrohhmpedftehlvgigrghnuggvrhcuvehlohhuthgvrhdfuceorghl vgigodhivghtfhestghorhgvmhgvmhdrtghomheqnecuggftrfgrthhtvghrnhepgfejke egteduhfdtuefhieetkedtgedvueehfeekueffkeehgefhteejtdekgfeinecuffhomhgr ihhnpehgihhthhhusgdrtghomhdpughnshhphihthhhonhdrohhrghenucevlhhushhtvg hrufhiiigvpedtnecurfgrrhgrmhepmhgrihhlfhhrohhmpegrlhgvgidoihgvthhfsegt ohhrvghmvghmrdgtohhm
X-ME-Proxy: <xmx:KjxCZTIwSd5MTnmY0-s2QM2ejMiTaHoUCAx7P7LwuMC3ErGNmLO5uw> <xmx:KjxCZXHdcXXY7efNybfCD76tNy6M_fjW2lJqFtTvNm8zhKp8OlHCYg> <xmx:KjxCZXWT3qx1sJbRmHlIznc_nkKWaAtpl-i5YlIGAkHbcWgrGPM2ng> <xmx:KjxCZfhl4O_tDuoXoR1nNlXk_Jv0ELV09inuStWhW_ZJ3hGdG5yGjQ>
Feedback-ID: ie3614602:Fastmail
Received: by mailuser.nyi.internal (Postfix, from userid 501) id 6336C2A20085; Wed, 1 Nov 2023 07:53:14 -0400 (EDT)
X-Mailer: MessagingEngine.com Webmail Interface
User-Agent: Cyrus-JMAP/3.9.0-alpha0-1048-g9229b632c5-fm-20231019.001-g9229b632
MIME-Version: 1.0
Message-Id: <40b877cd-8b62-4919-b042-4fd61e44d39e@app.fastmail.com>
In-Reply-To: <8e212aa0-dd57-4733-8992-6d4f9b5aa3a5@app.fastmail.com>
References: <169118866241.13601.15936262706231533955@ietfa.amsl.com> <8e212aa0-dd57-4733-8992-6d4f9b5aa3a5@app.fastmail.com>
Date: Wed, 01 Nov 2023 11:52:54 +0000
From: Alexander Clouter <alex+ietf@coremem.com>
To: dnssd@ietf.org
Content-Type: text/plain
Archived-At: <https://mailarchive.ietf.org/arch/msg/dnssd/rf8god-8DfkN0ZSA_ogYbs89Ehk>
Subject: Re: [dnssd] I-D Action: draft-ietf-dnssd-srp-23.txt
X-BeenThere: dnssd@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: "Discussion of extensions to DNS-based service discovery for routed networks." <dnssd.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnssd>, <mailto:dnssd-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dnssd/>
List-Post: <mailto:dnssd@ietf.org>
List-Help: <mailto:dnssd-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnssd>, <mailto:dnssd-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 01 Nov 2023 11:53:21 -0000

On Tue, 31 Oct 2023, at 16:13, Alexander Clouter wrote:
>
> I've been working on my own implementation and stumbled onto some 
> greyness around the KEY RR.

Another sketchy implementation to throw around, I managed to persuade dnspython[1] to cough up something usable and look like a SRP client:

https://gist.github.com/jimdigriz/6ded4c013c277d0d3e1931980165a5cf

Uncomment the 'print(key)` to obtain a KEY to paste into your zone file.

Needed this as openthread/mdnsresponder is not exactly a standalone CLI tool or straight forward to bake in the oven :)

...now to grind out the SRP registrar...but in typical yak fashion, Erlang does not support SIG(0) so got to fix that bit first.

Cheers

[1] https://www.dnspython.org/