Re: [eppext] New draft for keyrelay available

["Hollenbeck, Scott" <[e-mail]>]

> -----Original Message-----
> From: EppExt [mailto:[e-mail]] On Behalf Of Rik Ribbers
> Sent: Tuesday, January 20, 2015 3:02 AM
> To: 'Maarten Bosteels'; Miek Gieben; Gould, James; [e-mail]
> Subject: Re: [eppext] New draft for keyrelay available
> 
> Hello Maarten,
> 
> Thx for the feedback, I hope more people with experience on extending
> EPP will state their opinion on the list.
> 
> We have implemented the functionality in our registration system, but
> it is not very actively used. What we see is that most registrars go
> insecure. Most of the time we see a transfer command followed (some
> time later in time) by a domain update to remove the old key material
> and add new key material. There is even a losing registrar that removes
> all DNS key data when a registrant requests its authorization token
> before the actual transfer.

One more opinion:

After reading through the draft again I believe I would have designed this differently. EPP commands typically act on or read data from objects, and if I'm reading keyrelay correctly the <relay> command isn't doing either of those things. It's pushing information to the server to be stored temporarily (in what?) so that it can be retrieved with a <poll> command. It would be more architecturally consistent to create a temporary relay object with the needed information and use an <info> command to retrieve the data. <poll> can be used to notify the receiving client that the information is there to be retrieved. Anyway, that's my two cents.

Rik's "not very actively used" comment is telling. DNSSEC isn't widely supported by registrars, so it makes sense that we're not seeing a lot of use. I don't have an issue with continuing work on this draft if the intention is to document the existing practice of one operator in an informational way, but I'm not comfortable with pursuing the current approach on the standards track. We should confirm the need before doing standards track work.

Scott