Re: Last Call: <draft-iab-2870bis-01.txt> (DNS Root Name Service Protocol and Deployment Requirements) to Best Current Practice

Patrik Fältström <paf@frobbit.se> Thu, 29 May 2014 09:41 UTC

Return-Path: <paf@frobbit.se>
X-Original-To: ietf@ietfa.amsl.com
Delivered-To: ietf@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 120E01A03E7 for <ietf@ietfa.amsl.com>; Thu, 29 May 2014 02:41:43 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.902
X-Spam-Level:
X-Spam-Status: No, score=-1.902 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HELO_EQ_SE=0.35, MIME_8BIT_HEADER=0.3, RP_MATCHES_RCVD=-0.651, SPF_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id mFhmqntzZ15O for <ietf@ietfa.amsl.com>; Thu, 29 May 2014 02:41:41 -0700 (PDT)
Received: from mail.frobbit.se (mail.frobbit.se [IPv6:2a02:80:3ffe::176]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 232251A03D1 for <ietf@ietf.org>; Thu, 29 May 2014 02:41:41 -0700 (PDT)
Received: from [192.165.72.22] (unknown [192.165.72.22]) by mail.frobbit.se (Postfix) with ESMTPSA id 3A6DD1FF88; Thu, 29 May 2014 11:41:36 +0200 (CEST)
Content-Type: multipart/signed; boundary="Apple-Mail=_831D3B3A-B3CA-42D1-B929-D18FDA77E9BE"; protocol="application/pgp-signature"; micalg="pgp-sha1"
Mime-Version: 1.0 (Mac OS X Mail 7.3 \(1878.2\))
Subject: Re: Last Call: <draft-iab-2870bis-01.txt> (DNS Root Name Service Protocol and Deployment Requirements) to Best Current Practice
From: Patrik Fältström <paf@frobbit.se>
In-Reply-To: <850B843A-3346-408B-9D8B-65D0879A2498@virtualized.org>
Date: Thu, 29 May 2014 11:41:39 +0200
Message-Id: <C8E791BD-E0A6-437E-B531-A1274DAED970@frobbit.se>
References: <20140520204238.21772.64347.idtracker@ietfa.amsl.com> <6.2.5.6.2.20140521194638.06eaf508@resistor.net> <1111FB79-012A-414B-B8CD-0BBDAE8BD6A8@hopcount.ca> <6.2.5.6.2.20140522095317.0c5fd648@elandnews.com> <5C02BCCA-79D7-40A5-BFB0-26284A667E78@vpnc.org> <DC9ED318-2352-4AF0-8A43-29D237C32B64@vigilsec.com> <924045CD-DC34-423B-8702-CD99CF687D46@vpnc.org> <31344.1401304682@sandelman.ca> <850B843A-3346-408B-9D8B-65D0879A2498@virtualized.org>
To: David Conrad <drc@virtualized.org>
X-Mailer: Apple Mail (2.1878.2)
Archived-At: http://mailarchive.ietf.org/arch/msg/ietf/h0JFB0A6JryhUWBf0_6je2E5P5M
Cc: Michael Richardson <mcr+ietf@sandelman.ca>, IETF discussion list <ietf@ietf.org>
X-BeenThere: ietf@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: IETF-Discussion <ietf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ietf>, <mailto:ietf-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/ietf/>
List-Post: <mailto:ietf@ietf.org>
List-Help: <mailto:ietf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ietf>, <mailto:ietf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 29 May 2014 09:41:43 -0000

On 28 May 2014, at 21:43, David Conrad <drc@virtualized.org> wrote:

>> I would like every A-M.root-servers.net have an A and AAAA record.
> [...]
>>  The root name service:
>>     ...
>>     MUST support IPv4[RFC0791] and IPv6[RFC2460] transport of DNS
>>     queries and responses.
> 
> And if they don't?
> 
> Just for clarity, the root server operators are under no obligation to do anything. The whole "MUST" bit is actually sort of misplaced since it isn't like people are going to wave a RFC (BCP or otherwise) at the root operators and change will magically happen. Root server operators will do what they want according to their own requirements/business drivers. In an ideal world, what the community wants and what the root server operators' requirements/business drivers are correspond, but people shouldn't be under any illusion that an RFC will make this happen.

But that is not the problem of the IETF. If the IETF come to conclusion that root server services "must" support IPv4 and IPv6, so be it. It should be in the RFC. It is then up to whoever is policing the services (the root server operator themselves, their owner, the regulator in the jurisdiction they are within or whatever) to do the policing.

Policing will not happen without a spec that services can be compared against.

And lack of policing (which seems to be what you talk about) is I think a separate issue.

I think IETF should do a darn good job here. As IETF can do. And then other open issues have to be taken care of elsewhere.

Sure, it might be that some of the requirements are hard to enforce, and that IETF will be frustrated, but that is not worse than support for new RR Types, IPv6, DNSSEC and about a thousand other things IETF think is very important.

IETF should lead. Not follow.

I think personally a lot of the discussions for example in ICANN related to the new gTLDs would have been easier if IETF had had a clear lead on various issues related to the root zone. Like charset, strings etc that "are ok". Now a lot of that discussion has happened elsewhere, and even if of course some of that is more policy/business (and because of that fit in ICANN environment) it would have been easier if that discussion had a stable solid technical ground to stand on.

   Patrik