Re: the names that aren't DNS names problem, was Last Call: <draft-ietf-dnsop-onion-tld-00.txt>

Suzanne Woolf <suzworldwide@gmail.com> Tue, 21 July 2015 07:45 UTC

Return-Path: <suzworldwide@gmail.com>
X-Original-To: ietf@ietfa.amsl.com
Delivered-To: ietf@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 703FA1AD259 for <ietf@ietfa.amsl.com>; Tue, 21 Jul 2015 00:45:22 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.999
X-Spam-Level:
X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hstUaCEwMjDW for <ietf@ietfa.amsl.com>; Tue, 21 Jul 2015 00:45:20 -0700 (PDT)
Received: from mail-wi0-x22b.google.com (mail-wi0-x22b.google.com [IPv6:2a00:1450:400c:c05::22b]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 296051AD255 for <IETF@ietf.org>; Tue, 21 Jul 2015 00:45:17 -0700 (PDT)
Received: by wibxm9 with SMTP id xm9so47984475wib.1 for <IETF@ietf.org>; Tue, 21 Jul 2015 00:45:16 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=content-type:mime-version:subject:from:in-reply-to:date:cc :message-id:references:to; bh=GXxf4CuA4ziAymkl8FCBRcc3hd3mk3vOCWs1Aldt5Bk=; b=m/1UlQJ7lgJsTq3Xz98XxtIeKaadjTo36w32Lazn4RdM+pjeDym8p3giao/zzkA84P GdKNSjr97N1X1xFLXI18bxpwT5/EP3u++tetKSvRw0JLvwqLsogSklY1CaVdT38OHa4N ud7d+N4MCYM3yVmapiY9+GaJNZdxswnTfH8UBV1l0n50GmtCdSDUTJpMW+PCmJ4NN7h0 TlutPSofC3Zh6ks/HKZQPoVVvmMMxqRx+sm45oy3pqSjj7fu6m7tj9yPG2JKZDnOG5Qh NhB/C49PMp0pu/tcrzmFCKhm5cehic1mtMzpvmzc+aELfJpBZyETVUnIyYN5DnSBq63A +i6g==
X-Received: by 10.194.120.198 with SMTP id le6mr64562731wjb.133.1437464715783; Tue, 21 Jul 2015 00:45:15 -0700 (PDT)
Received: from dhcp-b410.meeting.ietf.org (dhcp-b410.meeting.ietf.org. [31.133.180.16]) by smtp.gmail.com with ESMTPSA id gb16sm15411757wic.5.2015.07.21.00.45.14 (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Tue, 21 Jul 2015 00:45:15 -0700 (PDT)
Content-Type: multipart/alternative; boundary="Apple-Mail=_36F1B759-8BC8-40EC-BCF4-D4F4E3ECCB61"
Mime-Version: 1.0 (Mac OS X Mail 8.2 \(2102\))
Subject: Re: the names that aren't DNS names problem, was Last Call: <draft-ietf-dnsop-onion-tld-00.txt>
From: Suzanne Woolf <suzworldwide@gmail.com>
In-Reply-To: <55ADF2A7.3080403@cisco.com>
Date: Tue, 21 Jul 2015 03:46:31 -0400
Message-Id: <A0418F96-1D79-4BE9-A72A-7A47641E4AF3@gmail.com>
References: <20150720192219.53802.qmail@ary.lan> <55ADF2A7.3080403@cisco.com>
To: Eliot Lear <lear@cisco.com>
X-Mailer: Apple Mail (2.2102)
Archived-At: <http://mailarchive.ietf.org/arch/msg/ietf/Z0NbSA6dYdIsqtXWB1IxX-r6PEI>
Cc: ietf <IETF@ietf.org>
X-BeenThere: ietf@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: IETF-Discussion <ietf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ietf>, <mailto:ietf-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ietf/>
List-Post: <mailto:ietf@ietf.org>
List-Help: <mailto:ietf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ietf>, <mailto:ietf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 21 Jul 2015 07:45:22 -0000

Eliot,

> On Jul 21, 2015, at 3:20 AM, Eliot Lear <lear@cisco.com> wrote:
> 
> That's exactly it.  Some mechanism is needed to address pragmatics of a
> situation, something that the IETF has a pretty good (albeit not
> perfect) record on addressing.  That mechanism could sit at ICANN, the
> IETF, or even both organizations.  No matter what one's opinion of Tor
> is, the fact is that it's out there and in use.  They don't intend that
> the DNS be used, and yet there is clearly an interaction between the two
> namespaces at the CA level.  It's possible that the CA people could have
> created a new usage constraint, but history shows that the extension
> isn't well accepted, and that could actually hinder secure deployment.

FWIW— DNSOP has discussed these issues at some length, and to the extent that an answer to the interesting questions here lie within what the WG can do, we’re forming a design team to examine them and consider the possibility the community needs to work on a revision to RFC 6761.

For some of the questions pulled from discussion on .onion (WG and IETF LC) and other internet-drafts proposing special-use names registry additions, see the slides as included in the meeting materials, https://www.ietf.org/proceedings/93/slides/slides-93-dnsop-7.pdf <https://www.ietf.org/proceedings/93/slides/slides-93-dnsop-7.pdf>.


best,
Suzanne