Re: domain names that are not DNS names, was Last Call: <draft-ietf-dnsop-onion-tld-00.txt>

Ted Lemon <ted.lemon@nominum.com> Tue, 21 July 2015 18:17 UTC

Return-Path: <Ted.Lemon@nominum.com>
X-Original-To: ietf@ietfa.amsl.com
Delivered-To: ietf@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DB2231A8A8E for <ietf@ietfa.amsl.com>; Tue, 21 Jul 2015 11:17:06 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.909
X-Spam-Level:
X-Spam-Status: No, score=-1.909 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wPxFBtejXxRm for <ietf@ietfa.amsl.com>; Tue, 21 Jul 2015 11:17:05 -0700 (PDT)
Received: from sjc1-mx02-inside.nominum.com (sjc1-mx02-inside.nominum.com [64.89.234.25]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 76D6B1A8971 for <ietf@ietf.org>; Tue, 21 Jul 2015 11:17:05 -0700 (PDT)
Received: from webmail.nominum.com (cas-03.win.nominum.com [64.89.235.66]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (Client CN "mail.nominum.com", Issuer "Go Daddy Secure Certificate Authority - G2" (verified OK)) by sjc1-mx02-inside.nominum.com (Postfix) with ESMTPS id 34CB1DA009C; Tue, 21 Jul 2015 18:17:05 +0000 (UTC)
Received: from [10.0.20.218] (71.233.41.235) by CAS-03.WIN.NOMINUM.COM (192.168.1.100) with Microsoft SMTP Server (TLS) id 14.3.224.2; Tue, 21 Jul 2015 11:17:04 -0700
Content-Type: multipart/alternative; boundary="Apple-Mail=_77A8CDFA-F90D-4851-AB23-1F2C78756600"
MIME-Version: 1.0 (Mac OS X Mail 8.2 \(2102\))
Subject: Re: domain names that are not DNS names, was Last Call: <draft-ietf-dnsop-onion-tld-00.txt>
From: Ted Lemon <ted.lemon@nominum.com>
In-Reply-To: <20150721180413.58215.qmail@ary.lan>
Date: Tue, 21 Jul 2015 14:17:03 -0400
Message-ID: <56DCD51A-F676-46A2-AC69-37606402ECFA@nominum.com>
References: <20150721180413.58215.qmail@ary.lan>
To: John Levine <johnl@taugh.com>
X-Mailer: Apple Mail (2.2102)
X-Originating-IP: [71.233.41.235]
Archived-At: <http://mailarchive.ietf.org/arch/msg/ietf/HwUkhoKzbXRC5oj6Lu5mKfSliPY>
Cc: ietf@ietf.org
X-BeenThere: ietf@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: IETF-Discussion <ietf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ietf>, <mailto:ietf-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ietf/>
List-Post: <mailto:ietf@ietf.org>
List-Help: <mailto:ietf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ietf>, <mailto:ietf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 21 Jul 2015 18:17:07 -0000

On Jul 21, 2015, at 2:04 PM, John Levine <johnl@taugh.com> wrote:
> Right.  But connect_to_name is just what SOCKS does.  I agree that
> SOCKS has its problems, but in this case its API is pretty good for
> name-that-is-not-in-the-DNS-for-service-that-is-not-TCP.

Okay, that’s an interesting point, but the way it works is that you have a switch based on the TLD.   There is no other way to make it work.   So this is basically orthogonal to the question we are discussing.

> Even if we posit a cleaner connect_to_name than SOCKS, and an extended
> nsswitch.conf that handles mappings from names to libraries that
> implenent various non-TCP transports, we're still back to the question
> of where does the list of names and libraries come from.

Happily, there is an IANA registry for special-use domain names!   :)

But if you mean “should we have some other process,” the answer may be yes, but I don’t see how to get there from here.   In order for us to have a process that could work, we’d need for it to be the case that ICANN doesn’t allocate new TLDs under some other process, and that ship has, for better or for worse, sailed.   I don’t see any way to put the toothpaste back in the tube.   I wish that the terms of service for ICANN back when we gave them authority over the namespace were that TLDs had to be allocated through an IETF process.   That would make a lot more sense than the status quo.   But the status quo is, by some strange definitional twist of fate, what we have.