Re: [Gen-art] Gen-ART Last Call review of draft-ietf-dnsop-edns-chain-query-05

Brian E Carpenter <> Mon, 18 January 2016 19:10 UTC

Return-Path: <>
Received: from localhost ( []) by (Postfix) with ESMTP id C9A691B3BFB; Mon, 18 Jan 2016 11:10:19 -0800 (PST)
X-Virus-Scanned: amavisd-new at
X-Spam-Flag: NO
X-Spam-Score: -2
X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, SPF_PASS=-0.001] autolearn=ham
Received: from ([]) by localhost ( []) (amavisd-new, port 10024) with ESMTP id mgOAnzuiioQu; Mon, 18 Jan 2016 11:10:18 -0800 (PST)
Received: from ( [IPv6:2607:f8b0:400e:c00::230]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by (Postfix) with ESMTPS id 192DB1B3BFC; Mon, 18 Jan 2016 11:10:18 -0800 (PST)
Received: by with SMTP id n128so161818790pfn.3; Mon, 18 Jan 2016 11:10:18 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;; s=20120113; h=subject:to:references:from:organization:message-id:date:user-agent :mime-version:in-reply-to:content-type:content-transfer-encoding; bh=LKfRzYBYLoO449bp9xDuEwozNM0hu09t0NKHAEvj2o4=; b=VR+qrVU4F5VLHnvYjK1eyn8EPgyynrn6xhTP1AVztQsmytpkh+M5J3B7ALkUGYCb+5 C2w+b3ZBRENb3sok25DFRFDtEvFRLERaprYu1HYsHVrOnVzdf6NcCjpbiBMWlPoIHBnA dUqWtTb/HP00o5remXKI+U+TZryxYudAuZhpNMHC7LPnQMPCXMtlVl3mD1JRThlz1iof oHzmlH1+oD0gBbxBVdacbkHTEm+TG4uYdnhPmwMDv7Yu7Lk4WsO8ZmjOv5A2Hm7wAqF6 CoPgxb7tLBhLU8DX0Ou8FdYHevO/scfQXVupzAG/K3pUNlFGPdzAWSS+cqFXcnP9jtop PdeA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;; s=20130820; h=x-gm-message-state:subject:to:references:from:organization :message-id:date:user-agent:mime-version:in-reply-to:content-type :content-transfer-encoding; bh=LKfRzYBYLoO449bp9xDuEwozNM0hu09t0NKHAEvj2o4=; b=Dam/psp4iIiJX0a4VhTty7P3P7YAIK7pmW6oMnro4HZJbCLR/M+/szf1trtdtAogP4 ms6M1pj0ANGaMOoTVHk88xHN1Z9HuapWc69f7qMV1KlomCLaK87Azsqc5he3S/NbUY+6 xw0i5I4glyQ+o+CiUfX9R1y4FOjHl7I0un0XgofTHs6D+WhNAWl1pATCf0n7+p440XEM JaxTdTo2yZt0pGYMGVrrgeK/yMWGMOEcu6/naKPgfTXqIug1Zl276rmA0I4zKF5IBMOF GJRzjCnb9BuXbtJNy6TkThI7V8EWrRum4Ff9qMTlZbvCJb5LvAnovXxLou5dvaB+kvIg qayw==
X-Gm-Message-State: ALoCoQkayg2KJnlb4Ukj8VRuLvi7MtsyuQVwOtjcHvUQ1pMYOP+qSVuXJLDzFKuntCQlpNcyIBn8DqEvmqvLiEnx4mzd3jzHhQ==
X-Received: by with SMTP id m4mr38643752pfi.79.1453144217738; Mon, 18 Jan 2016 11:10:17 -0800 (PST)
Received: from ?IPv6:2406:e007:63e1:1:28cc:dc4c:9703:6781? ([2406:e007:63e1:1:28cc:dc4c:9703:6781]) by with ESMTPSA id k74sm35776350pfb.30.2016. (version=TLSv1/SSLv3 cipher=OTHER); Mon, 18 Jan 2016 11:10:16 -0800 (PST)
To: Paul Wouters <>,, General Area Review Team <>,
References: <> <>
From: Brian E Carpenter <>
Organization: University of Auckland
Message-ID: <>
Date: Tue, 19 Jan 2016 08:10:17 +1300
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:38.0) Gecko/20100101 Thunderbird/38.5.1
MIME-Version: 1.0
In-Reply-To: <>
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
Archived-At: <>
Subject: Re: [Gen-art] Gen-ART Last Call review of draft-ietf-dnsop-edns-chain-query-05
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: "GEN-ART: General Area Review Team" <>
List-Unsubscribe: <>, <>
List-Archive: <>
List-Post: <>
List-Help: <>
List-Subscribe: <>, <>
X-List-Received-Date: Mon, 18 Jan 2016 19:10:20 -0000

Hi Paul,

I glanced at the -06 version and (together with your previous
reply) it looks fine to me.


On 11/01/2016 17:32, Paul Wouters wrote:
> On 01/09/2016 11:21 PM, Brian E Carpenter wrote:
> (added dnsop to the CC: for some feedback)
> Thanks for the review Brian!
>> Summary: Almost ready
>> --------
>> Comment:
>> --------
>> As noted in the writeup, there was some WG controversy about this choice
>> of method, but since the proposed status is Experimental, that doesn't
>> seem to be an issue.
>> Minor Issues:
>> -------------
>> It might be better if the abstract didn't make a blunt claim about reduced
>> latency. "The reduction in queries potentially lowers the latency..." would
>> be safer.
> Added the word "potentially" as suggested.
>> Section 1, last paragraph:
>>> This EDNS0 extension is only intended to be sent by Forwarders to
>>> Recursive Resolvers.  It can (and should) be ignored by Authoritative
>>> Servers.
>> That "should" seems normative to me. In fact, it might even be a MUST.
> You are right. I've changed "can (and should)" to MUST.
>> The technical description of the option and how it's used seems fine
>> to me. Is a discussion of interaction with DNS64 (RFC6147) needed?
>> RFC6147 does not mention forwarders so I don't really understand
>> whether something needs to be said about this, but DNS64 does mess
>> up validation chains.
> That is a very good question!
> I don't think it would interfere with DNS64 any more than a regular query would. If the resolver doing the chain-query is the DNS64 resolver, then it will work
> fine, and only after it obtained the query-chain result will it rewrite the answer to an AAAA record if needed. If the client is a stub asking a chain-query,
> then it would have all the same DNS64 problems with the chain-query as with a regular query.
> The question is, should we write that up or not? I would lean towards not, as this is not something that affects chain-queries differently from regular queries.
>>> 7.  Implementation Status
>> In view of its final sentence, I doubt the value of this section.
>> Perhaps a short section on the goals and timeline of experiments
>> with this mechanism would be better.
> See
> The section will be removed before final publication. I will add a note to make this more explicit.
>>> 9.1.  Simple Query for
>>>   o  A web browser on a client machine asks the Forwarder running on
>>>      localhost to resolve the A record of "" by sending
>>>      a regular DNS UDP query on port 53 to
>> Why not use AAAA examples these days?
> I don't think this matters much, and there is still more operational experience with IPv4. If people think this is important, I have no problem changing it to AAAA.
> Paul