Re: [Gen-art] Genart last call review of draft-ietf-dnsop-multi-provider-dnssec-04

Shumon Huque <shuque@gmail.com> Tue, 31 March 2020 22:44 UTC

Return-Path: <shuque@gmail.com>
X-Original-To: gen-art@ietfa.amsl.com
Delivered-To: gen-art@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5908B3A0C23; Tue, 31 Mar 2020 15:44:29 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.197
X-Spam-Level:
X-Spam-Status: No, score=-0.197 tagged_above=-999 required=5 tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7ZhXgVQYj504; Tue, 31 Mar 2020 15:44:27 -0700 (PDT)
Received: from mail-ot1-x32d.google.com (mail-ot1-x32d.google.com [IPv6:2607:f8b0:4864:20::32d]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id F13D93A0C1C; Tue, 31 Mar 2020 15:44:23 -0700 (PDT)
Received: by mail-ot1-x32d.google.com with SMTP id x11so23926035otp.6; Tue, 31 Mar 2020 15:44:23 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=ikIV2pE6XH8b7NU2DO+9u8AOc2iscVZFRKXpK6/tL/c=; b=RdZoJCeEfmFfgQWvCRtBL8BaiHSUBm4gh7Kw6gyVjsa9bJuimKBccrE/j9/jpEPHA/ lw6Vju4l+KuTSWUHjpU5bRfstPuK5KaEYMHzL9il+uVLQ7/Muc1bSBCejusuZogCkoPz urGRIv8Jh6Md8c0QhxK/Qv6PcO6cqtuLQj3Q8Bo87C7pxzbD8mexRIDZG4xBaSxxVn2E bvuiq0oWYLrO7DYw01VbAKZSbMsZDiqSO3f3qA7BGZmIKczuLDYscew0Gmlk0nuPo9sw 9yTcZfy2GcT3rL6KoLrzfYQfycmYx6WRV5WyWfy4EIqCHunOxktdATUw2b9mzGmfchhu 8qMg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=ikIV2pE6XH8b7NU2DO+9u8AOc2iscVZFRKXpK6/tL/c=; b=F2Teww+WdVE7r7Dl77aHBDiZ6kWsNNR6+yqxtKRLdu1GPG4Z4Tka7eQbBEjaTdZ2bk IebHgeBeqZm7Bs0SQ1KOKUIaZqzVY0rkGNzFhA6r4NFmWmOBpVKZxm+ruxbaPASuoyXk GoSINU82+Zd4qwuLsK3v4HnIAzMGuvH31Qgm1kK/ui8VZTttoqDkMQBzPAvYTjKLWBy9 b4qjkG90O6Fn3/GsW9IEIGk98AKJem7vAPWXs7lg3uge0LmXDDazA3yQ2qIQSS3EilrL WFkH/gtkWLi8sGC6EIZBe72XrrnG2cxm0b9D8V7+1leYwDcxW1ENtBygcvZa0xiJGd07 lFLw==
X-Gm-Message-State: ANhLgQ2rwQRT79XBV0rvcrC0UXOEhovA8ddCJNwEF/rEuA0tV4SV9AWq b7kk8xb4wlXHg5er/sIxekHfdOEr/OH8WWu5f6Y=
X-Google-Smtp-Source: ADFU+vu/kUEbBPyi/XgFHsNV5n/GfhsHHdhqKqZv5FYTvMDe5bavMGVXqFMKeAR3+8h54dcwL9Mx0fV31CSQl68aaIc=
X-Received: by 2002:a05:6830:1bef:: with SMTP id k15mr14147145otb.372.1585694663015; Tue, 31 Mar 2020 15:44:23 -0700 (PDT)
MIME-Version: 1.0
References: <158569260730.28393.8480449586046870268@ietfa.amsl.com>
In-Reply-To: <158569260730.28393.8480449586046870268@ietfa.amsl.com>
From: Shumon Huque <shuque@gmail.com>
Date: Tue, 31 Mar 2020 18:44:11 -0400
Message-ID: <CAHPuVdWbd1_m2T5V9SYSrPVHC=EUfqdheWzXO_+DZBt0qx1ZpA@mail.gmail.com>
To: Pete Resnick <resnick@episteme.net>
Cc: gen-art@ietf.org, last-call@ietf.org, draft-ietf-dnsop-multi-provider-dnssec.all@ietf.org, "dnsop@ietf.org WG" <dnsop@ietf.org>
Content-Type: multipart/alternative; boundary="0000000000001c839205a22e4fdd"
Archived-At: <https://mailarchive.ietf.org/arch/msg/gen-art/IpTVMMpkuYZ2ZnWyNcpPMtOl9bs>
Subject: Re: [Gen-art] Genart last call review of draft-ietf-dnsop-multi-provider-dnssec-04
X-BeenThere: gen-art@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "GEN-ART: General Area Review Team" <gen-art.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/gen-art>, <mailto:gen-art-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/gen-art/>
List-Post: <mailto:gen-art@ietf.org>
List-Help: <mailto:gen-art-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/gen-art>, <mailto:gen-art-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 31 Mar 2020 22:44:29 -0000

On Tue, Mar 31, 2020 at 6:10 PM Pete Resnick via Datatracker <
noreply@ietf.org> wrote:

> Document: draft-ietf-dnsop-multi-provider-dnssec-04
> Reviewer: Pete Resnick
> Review Date: 2020-03-31
> Summary: Ready.
>
> Good to go. A straightforward document easy enough for this non-expert to
> get.
> Thanks to the shepherd for a straightforward writeup; it made the review
> even
> easier.
>

Hi Pete,

Thanks for your review.


> Major issues: None
>
> Minor issues: None
>
> Nits/editorial comments:
>
> Just two comments, neither of them should stop progress on the document in
> any
> way:
>
> 1. I could see this document being a BCP, since the advice in here seems
> pretty
> prescriptive. I think it will still be perfectly useful as an Informational
> document, but it does seem to have important operational advice.
>

When we first brought this work to DNSOP, I actually asked the same
question.

The general consensus at that time was that since no-one had yet deployed
these models in production, it was probably premature to portray it as a BCP
(since the practice did not yet exist :-).

By now, we have had a number of prototype/test implementations, a
production implementation by one major DNS vendor, as well 2 others in
the pipeline. So there is more confidence that these models will be
successfully
deployed.

The easiest course of action in my view is to push it out as Informational,
and
as more operational experience is gained in the field, produce an updated
document as a BCP.

2. In section 3, it occurs to me that another thing you might add to the
> problem list is the issue of some servers caching BAD Data. Paul Hoffman
> was
> nice enough to point me to section 4.7 of RFC 4035. Perhaps a reference to
> there from this document would be useful.
>

I'm pondering a bit more about what to do with this suggestion. I agree it
might
be worth mentioning. Although I'm not sure there is any new behavior w.r.t.
these
models that needs to be highlighted.

Again, take them for what they're worth. If you decide not to do either, I
> feel
> the document could go forward as-is without a problem.
>

Thanks!
Shumon Huque