[drinks] Regarding domains in usecases-02

Otmar Lendl <lendl@nic.at> Thu, 26 February 2009 21:14 UTC

Return-Path: <lendl@nic.at>
X-Original-To: drinks@core3.amsl.com
Delivered-To: drinks@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 0F4AF3A680E for <drinks@core3.amsl.com>; Thu, 26 Feb 2009 13:14:24 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.272
X-Spam-Level:
X-Spam-Status: No, score=-2.272 tagged_above=-999 required=5 tests=[AWL=0.157, BAYES_00=-2.599, HELO_EQ_AT=0.424, HOST_EQ_AT=0.745, RCVD_IN_DNSWL_LOW=-1]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5nKm8XKFisnY for <drinks@core3.amsl.com>; Thu, 26 Feb 2009 13:14:18 -0800 (PST)
Received: from mail.bofh.priv.at (fardach.bofh.priv.at [88.198.34.164]) by core3.amsl.com (Postfix) with ESMTP id B5C623A6892 for <drinks@ietf.org>; Thu, 26 Feb 2009 13:14:18 -0800 (PST)
Received: from [213.129.239.197] (dhcp2.bofh.priv.at [213.129.239.197]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mail.bofh.priv.at (Postfix) with ESMTP id 4D9E74CCBF for <drinks@ietf.org>; Thu, 26 Feb 2009 22:14:38 +0100 (CET)
Message-ID: <49A7063C.6080503@nic.at>
Date: Thu, 26 Feb 2009 22:14:36 +0100
From: Otmar Lendl <lendl@nic.at>
User-Agent: Thunderbird 2.0.0.19 (Windows/20081209)
MIME-Version: 1.0
To: IETF DRINKS WG <drinks@ietf.org>
Content-Type: text/plain; charset="ISO-8859-1"
Content-Transfer-Encoding: 7bit
Subject: [drinks] Regarding domains in usecases-02
X-BeenThere: drinks@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: IETF DRINKS WG <drinks.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/drinks>, <mailto:drinks-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/drinks>
List-Post: <mailto:drinks@ietf.org>
List-Help: <mailto:drinks-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/drinks>, <mailto:drinks-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 26 Feb 2009 21:14:24 -0000

I've written about this already a few times in various IETF / RIPE lists,
but it seems to be relevant to the current draft as well, so here is
a repeat:

According to the usecases draft, SSPs report the public identities of their
customers to the registry so that the registry can store the mapping to
destination groups. All fine and dandy for TN based public identities, but
what about sip:user@domain?

These URIs come in (at least) two flavors:

a) the domain is the provider's domain (e.g. "verizon.com")
b) the domain is owned by the customer (e.g. "shockey.us")

The first one makes it easy for the SSP to authoritatively tell the
registry that it provides service for whatever URI it is going to
provision. So from the point of drinks, this is easy.

[I still very much doubt that solely offering such PIs to customer is
dangerous to the SSPs as they might be forced to offer PI portability,
which would really mess up a lot of assumptions.]

So what about b)? Portability is a given, and ISPs are used to deal with
customer-owned domains for email and web. Good. So what's the authorization
mechanism? For email and the web it's simple: the entity which controls the
domain must set the respective MX and CNAME/A records so that the rest of
the world know who provides email/web services for this domain. If the
control over the domain changes, so does instantly change the control over
email and the website.

Now, if a SSP can provision any URI regardless of the domain ownership
status / domain content, this opens up a pandora's box of interesting
errors. We now duplicate who operates SIP service for a domain in two
databases which can and will run out of sync with each other.

I consider it thus a lot more in line with the rest of the Internet
protocols to store the mapping domain -> destination group in the DNS and
not some other registry.

/ol
-- 
// Otmar Lendl <lendl@nic.at>, T: +43 1 5056416 - 33, F: - 933 //