Re: [hrpc] [DNSOP] Proposal for a side-meeting on services centralization at IETF 104 Prague

Paul Vixie <paul@redbarn.org> Tue, 12 March 2019 18:52 UTC

Return-Path: <paul@redbarn.org>
X-Original-To: hrpc@ietfa.amsl.com
Delivered-To: hrpc@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9BC001312D8 for <hrpc@ietfa.amsl.com>; Tue, 12 Mar 2019 11:52:46 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.9
X-Spam-Level:
X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id PXF4mvjtkzpA for <hrpc@ietfa.amsl.com>; Tue, 12 Mar 2019 11:52:44 -0700 (PDT)
Received: from family.redbarn.org (family.redbarn.org [IPv6:2001:559:8000:cd::5]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 91D6C1312DC for <hrpc@irtf.org>; Tue, 12 Mar 2019 11:52:44 -0700 (PDT)
Received: from linux-9daj.localnet (vixp1.redbarn.org [24.104.150.140]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by family.redbarn.org (Postfix) with ESMTPSA id 70691892C6; Tue, 12 Mar 2019 18:52:44 +0000 (UTC)
From: Paul Vixie <paul@redbarn.org>
To: dnsop@ietf.org
Cc: Stephane Bortzmeyer <bortzmeyer@nic.fr>, Vittorio Bertola <vittorio.bertola@open-xchange.com>, dns-privacy@ietf.org, doh@ietf.org, hrpc@irtf.org
Date: Tue, 12 Mar 2019 18:52:43 +0000
Message-ID: <2044747.4WdMZHU4Qz@linux-9daj>
Organization: Vixie Freehold
In-Reply-To: <20190312090142.s32hdimbozsrbovt@nic.fr>
References: <20190311170218.o5hitvysuefhjjxk@nic.fr> <1829067625.16839.1552327024048@appsuite.open-xchange.com> <20190312090142.s32hdimbozsrbovt@nic.fr>
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset="us-ascii"
Archived-At: <https://mailarchive.ietf.org/arch/msg/hrpc/tWrSqBlgoIa8TB5ReFtQEsYLLBM>
Subject: Re: [hrpc] [DNSOP] Proposal for a side-meeting on services centralization at IETF 104 Prague
X-BeenThere: hrpc@irtf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "mail@nielstenoever.net" <hrpc.irtf.org>
List-Unsubscribe: <https://www.irtf.org/mailman/options/hrpc>, <mailto:hrpc-request@irtf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/hrpc/>
List-Post: <mailto:hrpc@irtf.org>
List-Help: <mailto:hrpc-request@irtf.org?subject=help>
List-Subscribe: <https://www.irtf.org/mailman/listinfo/hrpc>, <mailto:hrpc-request@irtf.org?subject=subscribe>
X-List-Received-Date: Tue, 12 Mar 2019 18:52:47 -0000

On Tuesday, 12 March 2019 09:01:42 UTC Stephane Bortzmeyer wrote:
> On Mon, Mar 11, 2019 at 06:57:03PM +0100,
>  Vittorio Bertola <vittorio.bertola@open-xchange.com> wrote
> 
>  a message of 18 lines which said:
> > Moreover, centralization is not the only Do*-related problem
> > category that has been raised (my draft alone lists eight others).
> 
> IMHO, this is precisely the biggest problem with these three drafts:
> they accumulate a lot of unrelated rants, and it is important to split
> between issues that are really DoH-specific from more general issues.

when you refer to something as a rant, you diminish and disrespect it.

any concern about the inability of a network operator to maintain possession 
of their RDNS control plane is on-topic for DoH, simply because RFC 8484's 
stated goal is to prevent on-path interference with DNS operations.

please do not relegate discussions about the loss of operator control over the 
RDNS control plane to some mailing list where DoH is not front-and-center. 
their intentions were clear. therefore they should participate in the results.

> 
> Warren Kumari did a good job of sorting that out in
> <https://mailarchive.ietf.org/arch/msg/dnsop/GaO9UDiVCeAzCKxbPt5V1D9N450>. I
> quote him:
> 
> 1: the protocol,
> 2: the deployment concerns,
> 3: "resolverless DNS",
> 4: the loss of visibility from encrypting the DNS

that is a useless distinction.

> 
> IMHO, this makes several side meetings. People are welcome to organize
> more.

in usenet, we used to say "please take this to some mailing list" by which we 
meant "...that i won't be joining, so that i no longer have to listen to you."

so far, most responses to RDNS control plane ownership issues have received a 
similar response. "please find someone who cares, and talk to them about it."

that's going to make the coming fight harder. we should be looking to make it 
easier.

vixie