Re: Thinking differently about the site local problem (was: RE: site local addresses (was Re: Fw: Welcome to the InterNAT...))

John C Klensin <john-ietf@jck.com> Wed, 02 April 2003 16:56 UTC

Received: from ran.ietf.org (ran.ietf.org [10.27.6.60]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id LAA17905; Wed, 2 Apr 2003 11:56:18 -0500 (EST)
Received: from majordomo by ran.ietf.org with local (Exim 4.10) id 190li6-0000CP-00 for ietf-list@ran.ietf.org; Wed, 02 Apr 2003 12:07:38 -0500
Received: from odin.ietf.org ([10.27.2.28] helo=ietf.org) by ran.ietf.org with esmtp (Exim 4.10) id 190lhJ-00009N-00 for ietf@ran.ietf.org; Wed, 02 Apr 2003 12:06:49 -0500
Received: from bs.jck.com (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id LAA17639 for <ietf@ietf.org>; Wed, 2 Apr 2003 11:49:57 -0500 (EST)
Received: from [209.187.148.215] (helo=p3.JCK.COM) by bs.jck.com with esmtp (Exim 4.10) id 190lTK-000CNR-00; Wed, 02 Apr 2003 11:52:22 -0500
Date: Wed, 02 Apr 2003 11:52:22 -0500
From: John C Klensin <john-ietf@jck.com>
To: Keith Moore <moore@cs.utk.edu>
cc: Bill Manning <bmanning@ISI.EDU>, "ietf@ietf.org" <ietf@ietf.org>
Subject: Re: Thinking differently about the site local problem (was: RE: site local addresses (was Re: Fw: Welcome to the InterNAT...))
Message-ID: <406328249.1049284342@p3.JCK.COM>
In-Reply-To: <20030402112356.2c156f87.moore@cs.utk.edu>
References: <20030402080933.608a4a9d.moore@cs.utk.edu> <200304021612.h32GCaU25262@boreas.isi.edu> <20030402112356.2c156f87.moore@cs.utk.edu>
X-Mailer: Mulberry/3.0.3 (Win32)
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"; format="flowed"
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
Content-Transfer-Encoding: 7bit
Sender: owner-ietf@ietf.org
Precedence: bulk
Content-Transfer-Encoding: 7bit


--On Wednesday, 02 April, 2003 11:23 -0500 Keith Moore 
<moore@cs.utk.edu> wrote:

>> 	Sounds like you both are arguing that the DNS has become
>> 	"embedded" and the applications that use IP are unusable
>> 	without a working DNS.
>
> as a practical matter, this was true even in IPv4.  yes, you
> can often use address literals in either v4 or v6 apps, but
> this isn't practical for ordinary users on an ordinary basis.
> and in both v4 and v6, several essential apps (e.g. email, the
> web) have explicit dependencies on DNS.  yes you can use
> address literals in email addresses and URLs but there is no
> assurance that an email address or URL with an address literal
> is equivalent to the same address or URL with a domain instead
> of the address. Both email and the web define their resources
> in relation to a DNS name, not relative to a host or address.

At least in the case of email, it is important to be precise 
about this, because we have a clear evolutionary trend:

	(i) RFC 2821 can be read (and was intended to be read)
	to prohibit the use of an address literal in a HELO or
	EHLO command unless the relevant host has no DNS name.
	(sections 3.6, 4.1.1.1, 4.1.4)
	
	(ii) The use of address literals is described as a
	mechanism to bypass a barrier, not one for normal use
	(RFC2821, section 4.1.3)
	
	(iii) On the other hand, the address literal "should"
	still be provided in the From clause of a Received
	field.  Received field information is expected to not be
	picked up by other software and protocols, but the
	inclusion of address information there is very
	leak-friendly.

Contrast this with RFC 821, which doesn't seem to strongly argue 
that explicit address use is undesirable.


> of course it is possible to write apps that do not use DNS,
> but this is rarely done.

Yep.  And as pointed out earlier, we have pushed back strongly 
against such protocol proposals and implementations.

     john