Re: [domainrep] JSON namespace administration

Dave CROCKER <dhc@dcrocker.net> Mon, 14 November 2011 00:53 UTC

Return-Path: <dhc@dcrocker.net>
X-Original-To: domainrep@ietfa.amsl.com
Delivered-To: domainrep@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2284C11E8099 for <domainrep@ietfa.amsl.com>; Sun, 13 Nov 2011 16:53:40 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.599
X-Spam-Level:
X-Spam-Status: No, score=-6.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id V-rNkybO12Zs for <domainrep@ietfa.amsl.com>; Sun, 13 Nov 2011 16:53:39 -0800 (PST)
Received: from sbh17.songbird.com (sbh17.songbird.com [72.52.113.17]) by ietfa.amsl.com (Postfix) with ESMTP id 93DEA11E8090 for <domainrep@ietf.org>; Sun, 13 Nov 2011 16:53:39 -0800 (PST)
Received: from [130.129.82.22] (dhcp-5216.meeting.ietf.org [130.129.82.22]) (authenticated bits=0) by sbh17.songbird.com (8.13.8/8.13.8) with ESMTP id pAE0rT8R026877 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Sun, 13 Nov 2011 16:53:37 -0800
Message-ID: <4EC06687.3090706@dcrocker.net>
Date: Mon, 14 Nov 2011 08:53:27 +0800
From: Dave CROCKER <dhc@dcrocker.net>
Organization: Brandenburg InternetWorking
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:8.0) Gecko/20111105 Thunderbird/8.0
MIME-Version: 1.0
To: Peter Saint-Andre <stpeter@stpeter.im>
References: <4EBC5F42.3040903@dcrocker.net> <CB8A1285-136D-4147-BB5D-8C9C54051794@tid.es> <4EC024AC.4000907@dcrocker.net> <2D1E0054-5620-4535-81C8-EA7F775B1CF1@tid.es> <4EC05598.4020303@dcrocker.net> <4EC05ED3.4010402@stpeter.im>
In-Reply-To: <4EC05ED3.4010402@stpeter.im>
Content-Type: text/plain; charset="ISO-8859-1"; format="flowed"
Content-Transfer-Encoding: 7bit
X-Greylist: Sender succeeded SMTP AUTH, not delayed by milter-greylist-4.0 (sbh17.songbird.com [72.52.113.17]); Sun, 13 Nov 2011 16:53:39 -0800 (PST)
Cc: "domainrep@ietf.org" <domainrep@ietf.org>
Subject: Re: [domainrep] JSON namespace administration
X-BeenThere: domainrep@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
Reply-To: dcrocker@bbiw.net
List-Id: Domain Reputation discussion list <domainrep.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/domainrep>, <mailto:domainrep-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/domainrep>
List-Post: <mailto:domainrep@ietf.org>
List-Help: <mailto:domainrep-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/domainrep>, <mailto:domainrep-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 14 Nov 2011 00:53:40 -0000

(re-send.  not sure how the partial draft got posted.)


And it occurs to me that I should make clear that I'm wearing my participant hat 
for this thread, not chair...



On 11/14/2011 8:20 AM, Peter Saint-Andre wrote:
> On 11/14/11 7:41 AM, Dave CROCKER wrote:
>> On 11/14/2011 7:38 AM, DIEGO LOPEZ GARCIA wrote:
>>> The usual practice for Java class naming prefixes: "com.sun.javax"
>>
>> 1. Java has nothing to do with the activities in this working group.
>
> True, but there is a convention behind Java class naming, called "reverse domain
> name" (wherein the class "foo" developed by the folks at example.com is
> disambiguated as "com.example.foo"). We mention this in
> draft-ietf-appsawg-xdash, and draft-saintandre-json-namespaces will talk about
> this in the next version.

This is, of course, the same set of naming issues as the DNS.  The #2 point, 
below, applies to this as well as the DNS.

Yes, having different branches helps, but you still need an authority for each 
node, to ensure no name collisions for that sub-tree.


>> 2. The essence of name disambiguation is a function that operates during
>> name assignment to ensure no collisions.
>>
>> Your reference does not ensure that #2 is satisfied.
>
> Dave, could you explain that a bit further?

The issue has been confusing to many folk active in ICANN-related DNS debates, too.

To be clear, the core rule is:

      For any (sub-) namespace, the mechanism of assigning names
      MUST have a means of ensuring that name collisions do not occur.

The premise behind the original statement in the earlier message was that merely 
having the hierarchy fixes the problem.  It doesn't.

Having a hierarchy creates many, smaller namespaces, each of which needs a means 
of protecting against collisions!

That is, for any node in the tree, there can be sub-nodes.  Sub-nodes under the 
same node can have colliding names.  Some mechanism -- whether a naming rule or 
a registry function -- is needed for that node to ensure that sub-node names are 
not multiply assigned.

Usually, the implicit thinking behind the assumption that sub-names "fixes" the 
problem is actually that the sub-name assignment activity is extremely local and 
therefore a single person or tiny group is doing the assignment.  This local 
scope assume that assignments won't step on each other's naming choices.

In practical terms, this often works well, but it does not contradict the core 
rule stated above.

To the extent that name hierarchy are used, to create local names spaces with a 
simpler basis for avoiding conflicts, there of course needs to be a means of 
creating the naming hierarchy (without name conflicts.)  It's fine to import an 
existing means of doing this, but that important needs to be part of the full 
specification for naming.


d/
-- 

   Dave Crocker
   Brandenburg InternetWorking
   bbiw.net