Re: Last Call: <draft-ietf-dnsop-onion-tld-00.txt> (The .onion Special-Use Domain Name) to Proposed Standard

Randy Bush <randy@psg.com> Wed, 15 July 2015 00:21 UTC

Return-Path: <randy@psg.com>
X-Original-To: ietf@ietfa.amsl.com
Delivered-To: ietf@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0A25A1B2FE2 for <ietf@ietfa.amsl.com>; Tue, 14 Jul 2015 17:21:36 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.31
X-Spam-Level:
X-Spam-Status: No, score=-1.31 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, J_CHICKENPOX_35=0.6, T_RP_MATCHES_RCVD=-0.01] autolearn=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2PsDZqQrsrNw for <ietf@ietfa.amsl.com>; Tue, 14 Jul 2015 17:21:35 -0700 (PDT)
Received: from ran.psg.com (ran.psg.com [IPv6:2001:418:8006::18]) (using TLSv1.2 with cipher DHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4D50D1B2FDD for <ietf@ietf.org>; Tue, 14 Jul 2015 17:21:29 -0700 (PDT)
Received: from localhost ([127.0.0.1] helo=ryuu.psg.com) by ran.psg.com with esmtp (Exim 4.82) (envelope-from <randy@psg.com>) id 1ZFARz-0003og-18; Wed, 15 Jul 2015 00:21:27 +0000
Date: Tue, 14 Jul 2015 17:21:24 -0700
Message-ID: <m2d1zujmnv.wl%randy@psg.com>
From: Randy Bush <randy@psg.com>
To: George Michaelson <ggm@algebras.org>
Subject: Re: Last Call: <draft-ietf-dnsop-onion-tld-00.txt> (The .onion Special-Use Domain Name) to Proposed Standard
In-Reply-To: <CAKr6gn0KTpdsbG67aUvnvSt833C+1kH8tB1PEZoksq6R+9FPNw@mail.gmail.com>
References: <20150714192438.1138.96059.idtracker@ietfa.amsl.com> <CAKr6gn0KTpdsbG67aUvnvSt833C+1kH8tB1PEZoksq6R+9FPNw@mail.gmail.com>
User-Agent: Wanderlust/2.15.9 (Almost Unreal) Emacs/22.3 Mule/5.0 (SAKAKI)
MIME-Version: 1.0 (generated by SEMI 1.14.7 - "Harue")
Content-Type: text/plain; charset="US-ASCII"
Archived-At: <http://mailarchive.ietf.org/arch/msg/ietf/9Fb4DFGSMdVqwhJTxH7hMh0FA4s>
Cc: IETF Discussion Mailing List <ietf@ietf.org>
X-BeenThere: ietf@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: IETF-Discussion <ietf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ietf>, <mailto:ietf-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ietf/>
List-Post: <mailto:ietf@ietf.org>
List-Help: <mailto:ietf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ietf>, <mailto:ietf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 15 Jul 2015 00:21:36 -0000

> But we do not exist in a vacuum and I think the combination of 'because we
> coded it that way'  and 'we want it' are really very poor reasons to enact
> the special-use domain name request.

i support the request, but not for the social and process reasons being
raised.

the onion. dns space is outside of the normal dns space we all use.  if
someone were to be allowed to register foo.onion. as a child of the iana
root, it could be used as an attack on the person clicking the link,
taking them to a malicious site as opposed to the tor site.  not good.

while the document may be more process and political than security, to
me it is all about security, the safety of the user clicking an
onion. fqdn when not using a tor browser.

i return you to all the process issues.  do we already miss the dui
discussion? :)

randy