Re: [Doh] Use of TXT records

"Hewitt, Rory" <rhewitt@akamai.com> Fri, 15 March 2019 19:47 UTC

Return-Path: <rhewitt@akamai.com>
X-Original-To: doh@ietfa.amsl.com
Delivered-To: doh@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 367071312F2 for <doh@ietfa.amsl.com>; Fri, 15 Mar 2019 12:47:39 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.85
X-Spam-Level:
X-Spam-Status: No, score=-1.85 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, KHOP_DYNAMIC=0.85, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=akamai.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Xkb7mU44tZEx for <doh@ietfa.amsl.com>; Fri, 15 Mar 2019 12:47:35 -0700 (PDT)
Received: from mx0a-00190b01.pphosted.com (mx0a-00190b01.pphosted.com [IPv6:2620:100:9001:583::1]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 63A7C1312D0 for <doh@ietf.org>; Fri, 15 Mar 2019 12:47:35 -0700 (PDT)
Received: from pps.filterd (m0050093.ppops.net [127.0.0.1]) by m0050093.ppops.net-00190b01. (8.16.0.27/8.16.0.27) with SMTP id x2FJbrkS004989; Fri, 15 Mar 2019 19:47:30 GMT
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=akamai.com; h=from : to : cc : subject : date : message-id : references : in-reply-to : content-type : mime-version; s=jan2016.eng; bh=t62VqZbtE9ENuY0nbMIe16d78YnpNOgkwlXXdYECfP8=; b=BLSS/mLiLhmqHj3l6QVH6V2f1mImy2Nzc77RKdmXVZsAtf7vrjB83pMNHz0Nyvdb+F3t 8nJahbDv3SRKuNH9hvTXMoHZpZj125q5zOVxj0wL+90JnvxE8mgRBIh+VbZz3kYlagbG Ci3mlfUXabbu0TPcaDdbXYy0rmnpAeYVuV8kVILIoH1ir/1657cPupUgKKMFPyTGdOu2 b7rae/JF7AcHJCkCLvS1XPTdtVDt9DuFogN1aGkT3oTeBHVKLipU7JLD4CQ9uMjBYDiJ GnPmQKBpNVAWzvHM6ihI/zQ11k5Xj5YAMMsw4PZDInyeMzIw5IGAjZNLdpscSMmG1NIs Dg==
Received: from prod-mail-ppoint4 (a96-6-114-87.deploy.static.akamaitechnologies.com [96.6.114.87] (may be forged)) by m0050093.ppops.net-00190b01. with ESMTP id 2r7xjwvd2c-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Fri, 15 Mar 2019 19:47:30 +0000
Received: from pps.filterd (prod-mail-ppoint4.akamai.com [127.0.0.1]) by prod-mail-ppoint4.akamai.com (8.16.0.27/8.16.0.27) with SMTP id x2FJku75029306; Fri, 15 Mar 2019 15:47:29 -0400
Received: from email.msg.corp.akamai.com ([172.27.25.31]) by prod-mail-ppoint4.akamai.com with ESMTP id 2r49q0yw8s-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-SHA384 bits=256 verify=NOT); Fri, 15 Mar 2019 15:47:29 -0400
Received: from USTX2EX-DAG1MB3.msg.corp.akamai.com (172.27.27.103) by ustx2ex-dag1mb3.msg.corp.akamai.com (172.27.27.103) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Fri, 15 Mar 2019 14:47:28 -0500
Received: from USTX2EX-DAG1MB3.msg.corp.akamai.com ([172.27.27.103]) by ustx2ex-dag1mb3.msg.corp.akamai.com ([172.27.27.103]) with mapi id 15.00.1473.003; Fri, 15 Mar 2019 14:47:28 -0500
From: "Hewitt, Rory" <rhewitt@akamai.com>
To: Ben Schwartz <bemasc@google.com>
CC: Paul Hoffman <paul.hoffman@icann.org>, DoH WG <doh@ietf.org>
Thread-Topic: [Doh] Use of TXT records
Thread-Index: AQHU20wb1BtgZuOodkiHHGX0BN4SLqYNPC0A//+s9ZCAAH10gP//razQ
Date: Fri, 15 Mar 2019 19:47:26 +0000
Message-ID: <5f96d208a4f144968eeabf26edb16627@ustx2ex-dag1mb3.msg.corp.akamai.com>
References: <CAHbrMsCNyeabhk0sVexOHVedVkgG2dvV9T8wWL++om5juAUvEw@mail.gmail.com> <D6D473EB-666A-45B1-9A59-0A7548E0A4DE@icann.org> <CAHbrMsDypWpr4Wz1VDtBhmoiZDTt=NrkK-9T15y69doz1CHA4Q@mail.gmail.com> <0e842b1edfe44bd69e1188e72b8f3873@ustx2ex-dag1mb3.msg.corp.akamai.com> <CAHbrMsAs+3rggoe8vNxjoFz5e+ziFFJG3rjpk8L9dZOVOoCfDw@mail.gmail.com>
In-Reply-To: <CAHbrMsAs+3rggoe8vNxjoFz5e+ziFFJG3rjpk8L9dZOVOoCfDw@mail.gmail.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-ms-exchange-transport-fromentityheader: Hosted
x-originating-ip: [172.28.212.170]
Content-Type: multipart/alternative; boundary="_000_5f96d208a4f144968eeabf26edb16627ustx2exdag1mb3msgcorpak_"
MIME-Version: 1.0
X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:, , definitions=2019-03-15_12:, , signatures=0
X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 suspectscore=0 malwarescore=0 phishscore=0 bulkscore=0 spamscore=0 mlxscore=0 mlxlogscore=999 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1810050000 definitions=main-1903150134
X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:, , definitions=2019-03-15_12:, , signatures=0
X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 priorityscore=1501 malwarescore=0 suspectscore=0 phishscore=0 bulkscore=0 spamscore=0 clxscore=1011 lowpriorityscore=0 mlxscore=0 impostorscore=0 mlxlogscore=999 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1810050000 definitions=main-1903150134
Archived-At: <https://mailarchive.ietf.org/arch/msg/doh/T2_YFymQWAfHkbuYQt1gI4torW0>
Subject: Re: [Doh] Use of TXT records
X-BeenThere: doh@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: DNS Over HTTPS <doh.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/doh>, <mailto:doh-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/doh/>
List-Post: <mailto:doh@ietf.org>
List-Help: <mailto:doh-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/doh>, <mailto:doh-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 15 Mar 2019 19:47:47 -0000

Understood.

Well presumably TXT records (given their name) were ORIGINALLY INTENDED to only store human-readable text. But what defines human-readable? I mean, it's all ASCII characters (no binary data), so it's all "human-readable" to some extent.

The problem is surely that because there is no standard that says "The first X characters in a TXT record must be one of the following IANA-registered types, and the subsequent data must follow the related IANA format", then ANYTHING which reads a TXT record must do some (possibly complex) processing to determine what sort of TXT record it is?

For instance, SPF records just start with v=spf1 followed by a blank, which REALLY bugs me, because there's nothing that defines what 'type' of TXT record it is. But the subsequent text is 'kinda' human-readable - you just need to know its format.

I'm fine with using TXT records for DoH, but I would love them to start with type=DOH followed by a blank. Whatever format beyond that is used doesn't matter, as long as it's consistent. Since it's going to be IP addresses, what's the concern - it wouldn't even need to be Base64-encoded, would it?

If you use a new RRTYPE, then every single document ever written about DNS record types will have to be updated to include the new RRTYPE.

Maybe a little hyperbolic, but only a little...

LSS; Use TXT records.

Rory

From: Ben Schwartz <bemasc@google.com>
Sent: Friday, March 15, 2019 12:24 PM
To: Hewitt, Rory <rhewitt@akamai.com>
Cc: Paul Hoffman <paul.hoffman@icann.org>rg>; DoH WG <doh@ietf.org>
Subject: Re: [Doh] Use of TXT records

On Fri, Mar 15, 2019 at 12:57 PM Hewitt, Rory <rhewitt@akamai.com<mailto:rhewitt@akamai.com>> wrote:
Ben,

How has the use of TXT been a point of controversy in the past?

See for example https://mailarchive.ietf.org/arch/msg/tls/b0DQpCStJ4RSlp7uVXSobS-ssjA

Is it a general "TXT records are bad" or "Adding new TXT records is bad" or "TXT records have never been standardized or formatted consistently among their various uses, so there's always the possibility of clashes".

My understanding is that some DNS experts believe that TXT records should be reserved for human-readable comments, while others believe that it is more expedient to store data in TXT records than to define a new RRTYPE for each new usage.

Because I, for one, would agree with the last.

Rory

From: Ben Schwartz <bemasc=40google.com@dmarc.ietf.org<mailto:40google.com@dmarc.ietf.org>>
Sent: Friday, March 15, 2019 9:53 AM
To: Paul Hoffman <paul.hoffman@icann.org<mailto:paul.hoffman@icann.org>>
Cc: DoH WG <doh@ietf.org<mailto:doh@ietf.org>>
Subject: Re: [Doh] Use of TXT records

To be clear, I'm not objecting to this choice.  I'm merely noting that use of TXT has been a point of controversy in other discussions at the IETF.  Some groups have decided to proceed with TXT, some have preferred to use different or new RRTYPEs, and some have not yet decided.  I would like the working group to consider this question soon so it doesn't delay consensus later.

On Fri, Mar 15, 2019 at 12:27 PM Paul Hoffman <paul.hoffman@icann.org<mailto:paul.hoffman@icann.org>> wrote:
On Mar 15, 2019, at 6:12 AM, Ben Schwartz <bemasc=40google.com@dmarc.ietf..org<mailto:bemasc=40google.com@dmarc.ietf..org>> wrote:
> 5. Machine-readable content in a TXT record

This is the first I had heard that people objected to using a TXT record, but I might have missed that part of the discussion. Given that this query is for a newly-created SUDN that is only used for looking up DoH information, there is no chance that the TXT record would be in use for anything else.

Having said that, it would be quite easy for this document to create a new RRtype for this particular query. (I would not want to re-use the URI RRtype because it would take more effort to explain the priority and weight, as well as dealing with the common error of people not put the URI in quotations marks as is required for the URI RRtype.)

--Paul Hoffman