Re: [Gen-art] Gen-ART Review of draft-ietf-dnsop-edns-client-subnet-04

David C Lawrence <tale@akamai.com> Tue, 15 December 2015 16:50 UTC

Return-Path: <tale@akamai.com>
X-Original-To: gen-art@ietfa.amsl.com
Delivered-To: gen-art@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BE02A1A8860; Tue, 15 Dec 2015 08:50:31 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.011
X-Spam-Level:
X-Spam-Status: No, score=-2.011 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id cfqAJgwStzEp; Tue, 15 Dec 2015 08:50:29 -0800 (PST)
Received: from prod-mail-xrelay07.akamai.com (prod-mail-xrelay07.akamai.com [23.79.238.175]) by ietfa.amsl.com (Postfix) with ESMTP id 6688D1A8A78; Tue, 15 Dec 2015 08:50:25 -0800 (PST)
Received: from prod-mail-xrelay07.akamai.com (localhost.localdomain [127.0.0.1]) by postfix.imss70 (Postfix) with ESMTP id A39DD43343C; Tue, 15 Dec 2015 16:50:24 +0000 (GMT)
Received: from prod-mail-relay10.akamai.com (prod-mail-relay10.akamai.com [172.27.118.251]) by prod-mail-xrelay07.akamai.com (Postfix) with ESMTP id 8D787433437; Tue, 15 Dec 2015 16:50:24 +0000 (GMT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=akamai.com; s=a1; t=1450198224; bh=9bvQP3zgbAiOpGqQgA8BfZj+5k22CwoBKm0TAw1Q7Tg=; l=1690; h=Date:From:To:Cc:In-Reply-To:References:From; b=TAVKgIHO5euNlKXWBaqH/cpT5o8nRwd5xRybFqVM/b03FxKvg9VW9ojF2S2uoFWxf a+Qnr7Z1djbhKNbLjaRYFkoMtP/lZDYkdf1+ygAtbkZKbJ1eYMwy57JdKtw2SnVI2s 6a9A7qgZaOx1Eel+rlDk98mQcCrege+97G0uLdq8=
Received: from tale.kendall.corp.akamai.com (tale.kendall.corp.akamai.com [172.28.11.100]) by prod-mail-relay10.akamai.com (Postfix) with ESMTP id 4EC1B2035; Tue, 15 Dec 2015 16:50:24 +0000 (GMT)
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Message-ID: <22128.17616.221208.762937@tale.kendall.corp.akamai.com>
Date: Tue, 15 Dec 2015 11:50:24 -0500
From: David C Lawrence <tale@akamai.com>
To: Warren Kumari <warren@kumari.net>
In-Reply-To: <CAHw9_iJYtAC1mB2YixiYsYHXe+ioa94yk9Tru8TB0GduO-P2eQ@mail.gmail.com>
References: <46A1A261-E9F4-414D-AAD8-9C85A8B53283@vigilsec.com> <A886238F-FC46-47BD-AD86-B48D8BC42C47@vigilsec.com> <CAHw9_iJYtAC1mB2YixiYsYHXe+ioa94yk9Tru8TB0GduO-P2eQ@mail.gmail.com>
Archived-At: <http://mailarchive.ietf.org/arch/msg/gen-art/RdvxC147Ht9vZLTHp7gMhs6-DC0>
Cc: IETF Gen-ART <gen-art@ietf.org>, draft-ietf-dnsop-edns-client-subnet.all@ietf.org, IETF <ietf@ietf.org>
Subject: Re: [Gen-art] Gen-ART Review of draft-ietf-dnsop-edns-client-subnet-04
X-BeenThere: gen-art@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: "GEN-ART: General Area Review Team" <gen-art.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/gen-art>, <mailto:gen-art-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/gen-art/>
List-Post: <mailto:gen-art@ietf.org>
List-Help: <mailto:gen-art-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/gen-art>, <mailto:gen-art-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 15 Dec 2015 16:50:31 -0000

> > In Section 7.1.1, can you add a sentence or reference to explain "lame
> > delegation"?  I recognize that this type of error results when a name
> > server is designated as the authoritative server for a domain name and
> > that server does not have authoritative data.
> 
> [ AUTHORS: This was a term that was left out of the terminology draft. Do
> you have any suggestions for how we can reword this to remove the need for
> the term? ]

"... to distinguish the respone from one where the Authoritative
Nameserver is not responsible for the name, which is a common
convention for the REFUSED status."

> > Section 7.4 says: "Several other implementations, however, do not
> > support being able to mix positive and negative answers, and thus
> > interoperability is a problem."  Then, the next paragraph says that
> > this topic will be revisited in a future specification.  Is there any
> > advice that the authors can share as a step toward interoperability
> > that would be useful for implementers until the future specification
> > comes about?
> 
> [ AUTHORS: Any text for here? ]

The current situation is such that I think it is best just to say only
something like, "It is recommended that no specific behaviour
regarding negative answers be relied upon."

Personally my proposal is going to be that negative answers be allowed
to be scoped the same way that positive answers can be, but I don't
expect it to be without some controversy and it wouldn't be right for
me to insert by own bias into this document -- especially since Wilmer
is one of the people who has said that he doesn't think ECS should be
able to be used with negative answers.