Re: [DNSOP] Last Call: <draft-ietf-dnsop-resolver-priming-09.txt> (Initializing a DNS Resolver with Priming Queries) to Best Current Practice

william manning <chinese.apricot@gmail.com> Thu, 03 November 2016 12:16 UTC

Return-Path: <chinese.apricot@gmail.com>
X-Original-To: ietf@ietfa.amsl.com
Delivered-To: ietf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3FE0812946B for <ietf@ietfa.amsl.com>; Thu, 3 Nov 2016 05:16:17 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.699
X-Spam-Level:
X-Spam-Status: No, score=-2.699 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3gYsw7H1m_Bd for <ietf@ietfa.amsl.com>; Thu, 3 Nov 2016 05:16:15 -0700 (PDT)
Received: from mail-oi0-x22d.google.com (mail-oi0-x22d.google.com [IPv6:2607:f8b0:4003:c06::22d]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0D3DB129450 for <ietf@ietf.org>; Thu, 3 Nov 2016 05:16:15 -0700 (PDT)
Received: by mail-oi0-x22d.google.com with SMTP id x4so82546721oix.2 for <ietf@ietf.org>; Thu, 03 Nov 2016 05:16:15 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:from:date:message-id:subject:to; bh=MGVUZN7BFRTL0jW4BN+obnAF5pLd1BpDCKc80QPscWc=; b=zc6nOS2J83hcIMRdoGIh0Pd7r+M13p96O5WqPYZjXELT6o5c/Enug+S3HH+AR/LIlc IW9AkCmkxDRgMtzz/Dao5tk8tVnYdPURwXIhhWf0pHfOTT5H/zFFxmNLefQSeNHFy3pG gbcsX9J2pVc3GzBI6seyhvh76fzCm4RtYs3cG6fnJxnXhlSFIGI1ctnJxkeBpgGKBxAf ojdP9M/v9orGOYprFi2W96JqTRp5RQh9q7LKjKlVfIF6aMaEhWr4JWn4uDOTUzytCWVU LrjEeXFwndNaCySGyhde7orJhxnoP2eyiwor4iOEc3OYWF9TndSe5RwUPHCO4R/tdAtD llzQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to; bh=MGVUZN7BFRTL0jW4BN+obnAF5pLd1BpDCKc80QPscWc=; b=VBzXYh4LNp8/A+Zer70iZjTlZqHkC8dv/gzJt2UiLxlQfv5RQ9c9RsLLAlv+HLapap 2ax/o78Q15ojNPA8Q/MALGjeqqhZHg/OmwcLstsn4ahqL+xJ9mhMq/Z1rtbpd4oW4yIL QDgNWJNdu38IiaR0AwixirkTghwL5t5wRuOmB9REPNFi52lkpVVCVmlDGq9ft5e4h7WQ UUnVC9Q44l//r+d/ti2xA7L5UgUVJfvJ0uwjqgRrsmUSO7Uc5cQTek8MuCXh48IlVO0S KlMaSaQwQzZTJqS7xbLYOaYQRbpzxkKaZ/7qDP6tCrh/weT8ODqSyjML3P//+bxprR/5 cdzw==
X-Gm-Message-State: ABUngvfRwmYKEFX83JlTHbxwoG5OdNhQr97cJKHPL1irXbiWYIQuh/t2ApsV5kpRwy1G2T/T1hi1I6ieJ7ktfg==
X-Received: by 10.107.164.144 with SMTP id d16mr1573307ioj.0.1478175373780; Thu, 03 Nov 2016 05:16:13 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.107.38.207 with HTTP; Thu, 3 Nov 2016 05:16:13 -0700 (PDT)
In-Reply-To: <147758022943.24671.1643494998130945117.idtracker@ietfa.amsl.com>
References: <147758022943.24671.1643494998130945117.idtracker@ietfa.amsl.com>
From: william manning <chinese.apricot@gmail.com>
Date: Thu, 03 Nov 2016 05:16:13 -0700
Message-ID: <CACfw2hgdRw+VAVAX2RFFF9uhYz7JsLihSJ5RQWBaPg3txmbXqw@mail.gmail.com>
Subject: Re: [DNSOP] Last Call: <draft-ietf-dnsop-resolver-priming-09.txt> (Initializing a DNS Resolver with Priming Queries) to Best Current Practice
To: ietf@ietf.org
Content-Type: multipart/alternative; boundary="001a114223ae11ead10540648615"
Archived-At: <https://mailarchive.ietf.org/arch/msg/ietf/B23VlatWiVW6Z8DXiaZVUT5xiOc>
X-BeenThere: ietf@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: IETF-Discussion <ietf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ietf>, <mailto:ietf-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ietf/>
List-Post: <mailto:ietf@ietf.org>
List-Help: <mailto:ietf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ietf>, <mailto:ietf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 03 Nov 2016 12:16:17 -0000

What method is in place to ensure that the cache is, #1, checked before
emitting priming queries, #2, that if there is already data (complete or
partial) in the cache, how is the client supposed to determine if the
cached data is preferred over unverified, remote data?  Or does the client
operate with the presumption that local data is always wrong and the best
data is always external?

Inquiring Minds want to know.

/Wm

On Thu, Oct 27, 2016 at 7:57 AM, The IESG <iesg-secretary@ietf.org> wrote:

>
> The IESG has received a request from the Domain Name System Operations WG
> (dnsop) to consider the following document:
> - 'Initializing a DNS Resolver with Priming Queries'
>   <draft-ietf-dnsop-resolver-priming-09.txt> as Best Current Practice
>
> The IESG plans to make a decision in the next few weeks, and solicits
> final comments on this action. Please send substantive comments to the
> ietf@ietf.org mailing lists by 2016-11-10. Exceptionally, comments may be
> sent to iesg@ietf.org instead. In either case, please retain the
> beginning of the Subject line to allow automated sorting.
>
> Abstract
>
>
>    This document describes the queries that a DNS resolver should emit
>    to initialize its cache.  The result is that the resolver gets both a
>    current NS RRSet for the root zone and the necessary address
>    information for reaching the root servers.
>
>
>
>
> The file can be obtained via
> https://datatracker.ietf.org/doc/draft-ietf-dnsop-resolver-priming/
>
> IESG discussion can be tracked via
> https://datatracker.ietf.org/doc/draft-ietf-dnsop-resolver-priming/ballot/
>
>
> No IPR declarations have been submitted directly on this I-D.
>
>
> The document contains these normative downward references.
> See RFC 3967 for additional information:
>     rfc5452: Measures for Making DNS More Resilient against Forged Answers
> (Proposed Standard - IETF stream)
>     rfc4033: DNS Security Introduction and Requirements (Proposed Standard
> - IETF stream)
>     rfc3226: DNSSEC and IPv6 A6 aware server/resolver message size
> requirements (Proposed Standard - IETF stream)
> Note that some of these references may already be listed in the acceptable
> Downref Registry.
>
>
> _______________________________________________
> DNSOP mailing list
> DNSOP@ietf.org
> https://www.ietf.org/mailman/listinfo/dnsop
>