IETF Logo Mail Archive

Re: [homenet] [DNSOP] WG review of draft-ietf-homenet-dot-03

Ralph Droms <rdroms.ietf@gmail.com> Sat, 25 March 2017 11:40 UTC

Return-Path: <rdroms.ietf@gmail.com>
X-Original-To: homenet@ietfa.amsl.com
Delivered-To: homenet@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4289612741D for <homenet@ietfa.amsl.com>; Sat, 25 Mar 2017 04:40:35 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.699
X-Spam-Level:
X-Spam-Status: No, score=-2.699 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0YM7ipoawvfk for <homenet@ietfa.amsl.com>; Sat, 25 Mar 2017 04:40:33 -0700 (PDT)
Received: from mail-qk0-x22e.google.com (mail-qk0-x22e.google.com [IPv6:2607:f8b0:400d:c09::22e]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7DB6F128656 for <homenet@ietf.org>; Sat, 25 Mar 2017 04:40:33 -0700 (PDT)
Received: by mail-qk0-x22e.google.com with SMTP id f11so9377800qkb.0 for <homenet@ietf.org>; Sat, 25 Mar 2017 04:40:33 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=kQsDLZaAae6wNU3yxaXFBRxCjH/gQ+0uRO/PUGsmbCs=; b=QWxjiwB735LdmEmh1O0wHGVklUhoZn8w0ZKCxEy6FLiMMAhYGnmpMAp0t8JWCPYqaG z6q3omboVWPdyN5o9CArYyrp/IAyE8Tb19IYposSu8+JGCZhM7hK5L8NwjmDM9qa7wnh rocWzz+ZuyHcT9nvMu1cr+6ZWxPEXrvHfruJ5RDASkQ48QfZBZvsvyAmBqxc3VLvj9HF 5oVaJBpftZeOuu4z7HrvrI0w4AJFKUvGc4F17vB1rC+umV44rsMgC6MdPod1FX223PIo Nt9xWpU3BYSmZMK1RSvAzMi0+yaPuGHgANW2q4uL7cTkNEzz3Mj42pYjFPDw7bluojq6 OGzA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=kQsDLZaAae6wNU3yxaXFBRxCjH/gQ+0uRO/PUGsmbCs=; b=e1MsmP9/ZAGxhftHGrr+w8kVUEAt6TmDzkpQykevXaeJ5YFL+eIluC7htzNq7aZZih 2JWzu2W2gFggeXdUpMzVOGESpM/2IYFyE0AnHzP8VrX+ioPS8U/kQPZkVLgfbbq8Z0Zj ML+jFhw4klp4YKzPIEdb/wged7oOoGCoH9UN8z0WOrrSFJ6H2wUp7ZZzbPjucOpBJeQ+ y504MhTrAv2xTb18wjmC3V0XqSmRv5QIbhFwoq6OgbCk9iFiBrt5IDR5MRZ2mbQnJIIu 296HUKq68AJtlf89grJDW0Ty5y/tQmeCoLon97Lj6S1T4oa75yyvpS+a4rENAMU5lQ7+ TMZA==
X-Gm-Message-State: AFeK/H0/vQDKhAHItk3HSqaoakP7w/P5INMSCeLjrzqwfGJBwxsfuhe2n1i4ICHRc0b7fg==
X-Received: by 10.55.151.3 with SMTP id z3mr11899575qkd.79.1490442032651; Sat, 25 Mar 2017 04:40:32 -0700 (PDT)
Received: from ?IPv6:2601:18f:801:600:5121:50f3:95c6:b3af? ([2601:18f:801:600:5121:50f3:95c6:b3af]) by smtp.gmail.com with ESMTPSA id q145sm3492583qke.39.2017.03.25.04.40.31 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Sat, 25 Mar 2017 04:40:31 -0700 (PDT)
Content-Type: text/plain; charset="us-ascii"
Mime-Version: 1.0 (Mac OS X Mail 10.2 \(3259\))
From: Ralph Droms <rdroms.ietf@gmail.com>
In-Reply-To: <23193.1490382287@obiwan.sandelman.ca>
Date: Sat, 25 Mar 2017 07:40:27 -0400
Cc: HOMENET <homenet@ietf.org>
Content-Transfer-Encoding: quoted-printable
Message-Id: <5FA3E58B-A81B-42BB-8A38-9FAC886A0767@gmail.com>
References: <1E14B142-680B-4E30-809B-68E03EB6E326@gmail.com> <61FD3EE3-3043-4AB1-9823-6A9D61B1438C@vigilsec.com> <BE2A3845-D8AA-433A-9F00-1056ECFD335F@fugue.com> <21C8F856-FE3F-42A6-A8ED-888D0797B68B@vigilsec.com> <60C85486-E351-4C42-ADEB-FCBB56F4EA27@fugue.com> <AB11455F-7E43-4CB3-9F13-DB6A09F739EB@vigilsec.com> <CEC8CC6A-861A-471C-B7FA-4BB05C81CCF0@gmail.com> <F7AA49EF-2708-4948-9B60-6660DA6BC841@vigilsec.com> <734EC35A-4B1F-43EB-BE37-C34CA46BDA26@fugue.com> <203D2BEA-1008-48A0-9CE2-1FD621C6117F@shinkuro.com> <3134EDC2-FB00-41EA-8338-6E6B196137F1@fugue.com> <572B4EBA-F37F-4E92-A252-44BAF5DE7FF5@shinkuro.com> <95935A30-9B77-4B7A-A0CE-4409134B6163@fugue.com> <B5D3DF5D-BE54-4941-AAC1-8D99A16EADE8@gmail.com> <9768C77F-1993-4012-83B5-A077DF0C53A5@gmail.com> <23193.1490382287@obiwan.sandelman.ca>
To: Michael Richardson <mcr+ietf@sandelman.ca>
X-Mailer: Apple Mail (2.3259)
Archived-At: <https://mailarchive.ietf.org/arch/msg/homenet/3Z5h5CjdaRqPHjxthTQPSEmCrIo>
Subject: Re: [homenet] [DNSOP] WG review of draft-ietf-homenet-dot-03
X-BeenThere: homenet@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: IETF Homenet WG mailing list <homenet.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/homenet>, <mailto:homenet-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/homenet/>
List-Post: <mailto:homenet@ietf.org>
List-Help: <mailto:homenet-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/homenet>, <mailto:homenet-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 25 Mar 2017 11:40:35 -0000

> On Mar 24, 2017, at 3:04 PM, Michael Richardson <mcr+ietf@sandelman.ca> wrote:
> 
> 
> Ralph Droms <rdroms.ietf@gmail.com> wrote:
>>> Ted - has the operation of .homenet, as described in
>>> draft-ietf-homenet-dot-03, been demonstrated?
> 
>> Specifically, has the ability to validate queries to .homenet been
>> demonstrated with a simulated root zone including the entry for
>> .homenet, properly configured recursive resolvers and properly
>> configured clients (having received a list of the local recursive
>> resolvers through DHCP or ND)?
> 
> Are you asking this is in the context of a recursive resolver that speaks
> homenet (mDNS, etc.), or one that has no knowledge of .homenet.?

It would be interesting to test both scenarios - the former scenario will test whether the mechanism in homenet-dot works in practice and the latter will give some indication of how queries in the .homenet zone will be handled (e.g., leakage to root servers) in non-homenet networks.

> I note in the IANA considerations that the root will have an insecure
> delegation to a blackhole server.  So I think the simulation above would
> need to do that as well.

Yes.

- Ralph

> 
> --
> Michael Richardson <mcr+IETF@sandelman.ca>, Sandelman Software Works
> -= IPv6 IoT consulting =-
> 
> 
>

v2.23.0 | Report a Bug | By Email