Re: the names that aren't DNS names problem, was Last Call: <draft-ietf-dnsop-onion-tld-00.txt>

David Conrad <drc@virtualized.org> Thu, 23 July 2015 23:52 UTC

Return-Path: <drc@virtualized.org>
X-Original-To: ietf@ietfa.amsl.com
Delivered-To: ietf@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 128E61ACD79 for <ietf@ietfa.amsl.com>; Thu, 23 Jul 2015 16:52:54 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.6
X-Spam-Level:
X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GxxFUAgTx07x for <ietf@ietfa.amsl.com>; Thu, 23 Jul 2015 16:52:51 -0700 (PDT)
Received: from mail-wi0-f182.google.com (mail-wi0-f182.google.com [209.85.212.182]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2663A1ACD71 for <IETF@ietf.org>; Thu, 23 Jul 2015 16:52:51 -0700 (PDT)
Received: by wibxm9 with SMTP id xm9so5849566wib.0 for <IETF@ietf.org>; Thu, 23 Jul 2015 16:52:50 -0700 (PDT)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:subject:mime-version:content-type:from :in-reply-to:date:cc:message-id:references:to; bh=1wTVddLpXg8kNDtAFS6QDXtgZgtE00Z1wzmZ0EOOkPY=; b=e01X2auDaiVqU+rnX9/Nxaw56YBHB/DEb+pV+VsgXmrH/4j0CR54cKA7IunB2iUUaH dFPB69PucTVfEWj/yDpCcRZ65KsjwDdwSllSFcGRUTRrVkiRa8c9/mNKW4Uhxy3xXVdC hkPlz6REeIslN8x4PqSTwLuxu1aNMVWeP2rXAhqzqcAW8Ns6WeNn2PPvFN9Vkq4xIl0A 3y6rDb2EWhtNwv9AwD1fqeHGTIw25djWl/rEquWwueOdVEjHqM2CXYf9GarBu4yc26YG FXxn6FgyaPx5iC2lIZaV2vACB+7cqZtIYt9x6GH8StYYLRX5Gxl4a0WWc1vgVq4WGaX8 TqEg==
X-Gm-Message-State: ALoCoQnxBB10TCAW9tPficv7oMCvtQL05E8z0BNTeRjr9MNh5vU2RSxgjLvoskuxuuVieVaGQUON
X-Received: by 10.194.2.228 with SMTP id 4mr19657553wjx.146.1437695569913; Thu, 23 Jul 2015 16:52:49 -0700 (PDT)
Received: from ?IPv6:2001:67c:370:136:8c92:1362:f0e7:43a5? ([2001:67c:370:136:8c92:1362:f0e7:43a5]) by smtp.gmail.com with ESMTPSA id bu12sm3038667wjb.44.2015.07.23.16.52.47 (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Thu, 23 Jul 2015 16:52:48 -0700 (PDT)
Subject: Re: the names that aren't DNS names problem, was Last Call: <draft-ietf-dnsop-onion-tld-00.txt>
Mime-Version: 1.0 (Mac OS X Mail 8.2 \(2102\))
Content-Type: multipart/signed; boundary="Apple-Mail=_646719A2-1AED-4A9F-8B5A-87B9CDC84E17"; protocol="application/pgp-signature"; micalg="pgp-sha512"
X-Pgp-Agent: GPGMail 2.5
From: David Conrad <drc@virtualized.org>
In-Reply-To: <6E97605B-C11E-4349-90FC-109E4983112C@istaff.org>
Date: Fri, 24 Jul 2015 01:52:45 +0200
Message-Id: <ACE7B6AF-8FDF-42F9-BE5A-8FB45FB64AE5@virtualized.org>
References: <20150720192219.53802.qmail@ary.lan> <55ADF2A7.3080403@cisco.com> <A0418F96-1D79-4BE9-A72A-7A47641E4AF3@gmail.com> <CAKr6gn1apWx2M7V-O6ea2kvor7Di6=jYMh-uY2ouTsgjkV6vLw@mail.gmail.com> <20150722084204.GA15378@laperouse.bortzmeyer.org> <CAKr6gn2413-2XW8d_stw0dTmP-KsmGgFgQ3tVXEgXrXmnCiQow@mail.gmail.com> <6E97605B-C11E-4349-90FC-109E4983112C@istaff.org>
To: John Curran <jcurran@istaff.org>
X-Mailer: Apple Mail (2.2102)
Archived-At: <http://mailarchive.ietf.org/arch/msg/ietf/NS-Ev33Oo5rvQCB4cRguxfwlIY0>
Cc: ietf <IETF@ietf.org>
X-BeenThere: ietf@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: IETF-Discussion <ietf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ietf>, <mailto:ietf-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ietf/>
List-Post: <mailto:ietf@ietf.org>
List-Help: <mailto:ietf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ietf>, <mailto:ietf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 23 Jul 2015 23:52:54 -0000

John,

On Jul 23, 2015, at 11:45 PM, John Curran <jcurran@istaff.org> wrote:
> On Jul 22, 2015, at 6:28 AM, George Michaelson <ggm@algebras.org> wrote:
>> I merely noted that there are voices (myself included) who think a revision might be most useful if it abnegated the right to make these decisions and said "the root zone vests with other people: ask other people to do things”
> A interesting assertion, given that the root zone is the entire top-level of the
> identifier space and would specifically include "assignments of domain names
> for technical uses”.

The root zone is NOT the entire top-level of the identifier space. It is the top-level of the subset of the identifier space that is comprised of (a) strings that are valid in the DNS protocol and (b) have been permitted by policies defined by (at least some portion of) the IETF community as documented in RFC 1591 and, later (post RFC 2860), the ICANN community through the various bottom-up, consensus-based processes that ultimately led to the Applicant's Guide Book.

Even if you meant "what could potentially be placed in the root zone", this would still be limited by (a) by the simple fact that the root zone is a DNS protocol implementation artifact, not a namespace artifact, and is thus constrained by the limitations of the DNS protocol.

> I will observe that the latter is a right which the IETF has
> already reserved for itself, ceding to ICANN the general purpose assignments,
> i.e. that which "present policy issues” (at least as described in the IETF/ICANN
> MOU [RFC2860])

Sure. Please define "technical uses". Or, more specifically, please describe how the IETF determines which string out of the universe that may potentially be placed into the root zone should be reserved and which shouldn't. That, AFAICT, is the key issue here.

Some are arguing that this should be done by ICANN (whether this means the ICANN community or ICANN staff is unclear). This seems a bit surprising to me, since the same folks are typically often highly critical of ICANN's technical competence but they are implicitly demanding the ICANN community make a determination as to what is a technical use and what is not. However, I'm sure I'm misunderstanding something.

Regardless, as Stephane points out, RFC 6761 is what we have now. That RFC has laid out a set of criteria by which, in most cases, the IESG (not ICANN) gets to choose whether a string should be removed from the potential universe of strings that may be eligible for allocation via the ICANN community defined processes. Given the 10+ years that it has taken the ICANN community to come up with the 300+ pages of policies detailing what are and are not eligible, I don't envy the IESG in their deliberations. However, perhaps the politics and economics that impacted the ICANN processes will be avoidable in this case.

> That’s not to say that the IETF can’t revise this position as desired, only that
> it should be recognized as a change from documented state.

My reading of RFC 6761 is that a change of state has already occurred and people are just now realizing the implications, prompted by ONION and other non-DNS names.

Regards,
-drc