Re: [IPsec] Benjamin Kaduk's Yes on draft-ietf-ipsecme-split-dns-14: (with COMMENT)

"Waltermire, David A. (Fed)" <david.waltermire@nist.gov> Fri, 16 November 2018 21:29 UTC

Return-Path: <david.waltermire@nist.gov>
X-Original-To: ipsec@ietfa.amsl.com
Delivered-To: ipsec@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D8B4D12007C; Fri, 16 Nov 2018 13:29:00 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.471
X-Spam-Level:
X-Spam-Status: No, score=-2.471 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.47, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=nist.gov
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xIHKckF-1usa; Fri, 16 Nov 2018 13:28:59 -0800 (PST)
Received: from GCC01-DM2-obe.outbound.protection.outlook.com (mail-eopbgr840105.outbound.protection.outlook.com [40.107.84.105]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D80FA127332; Fri, 16 Nov 2018 13:28:55 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nist.gov; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=rQNlWN0LbUwTtRKn2eRxaoC2PXKTHBpcPsELo02NObo=; b=W3EKwdhfAH7ypk1xhDTeFmsREcVSeg/Qj7Bp9Oa71z4kmVdhcH174WnE/j1y+Wv9unYU5OtIL4sSUbfhO4nzNmChI4L9ZjCQyuw3S03AECSqTodkC60so+T25M47iV8vmy94qGQQU4+cMV+BkVdI33wPJLM7kM1TnNiKDlsHEkY=
Received: from SN6PR09MB3264.namprd09.prod.outlook.com (20.177.251.21) by SN6PR09MB3261.namprd09.prod.outlook.com (20.177.251.18) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1339.23; Fri, 16 Nov 2018 21:28:54 +0000
Received: from SN6PR09MB3264.namprd09.prod.outlook.com ([fe80::6551:3ad2:eea0:8080]) by SN6PR09MB3264.namprd09.prod.outlook.com ([fe80::6551:3ad2:eea0:8080%5]) with mapi id 15.20.1339.021; Fri, 16 Nov 2018 21:28:54 +0000
From: "Waltermire, David A. (Fed)" <david.waltermire@nist.gov>
To: Benjamin Kaduk <kaduk@mit.edu>, The IESG <iesg@ietf.org>
CC: "draft-ietf-ipsecme-split-dns@ietf.org" <draft-ietf-ipsecme-split-dns@ietf.org>, "ipsecme-chairs@ietf.org" <ipsecme-chairs@ietf.org>, "ipsec@ietf.org" <ipsec@ietf.org>
Thread-Topic: Benjamin Kaduk's Yes on draft-ietf-ipsecme-split-dns-14: (with COMMENT)
Thread-Index: AQHUfUotpNKLOyDJ4UeRIV78y/cJhaVS6paw
Date: Fri, 16 Nov 2018 21:28:54 +0000
Message-ID: <SN6PR09MB326474D2688D48194948243BF0DD0@SN6PR09MB3264.namprd09.prod.outlook.com>
References: <154233104861.10051.7593212496190352066.idtracker@ietfa.amsl.com>
In-Reply-To: <154233104861.10051.7593212496190352066.idtracker@ietfa.amsl.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: spf=none (sender IP is ) smtp.mailfrom=david.waltermire@nist.gov;
x-originating-ip: [129.6.224.58]
x-ms-publictraffictype: Email
x-microsoft-exchange-diagnostics: 1; SN6PR09MB3261; 6:FE526O9SCxeHr6noeTW23rnBLpj2uKy5dUYbRZ4zCoCYjl11NTVgGbSna9WDFOPcwuJxlxjNDotw7qiPtsE5TvgEpyiNUo76gfLVf/tsfDmEPCA517p2jnyrg4uoIclj4+lnr5zxuLi3IYSvDn1eFshdN6pQfHMXVZRyePsrHV1dYH3xThjE7xrEtWqzTQzEbeilJMvBvaMTH63IlI/rG7imi7DjIp2NC9ODuwPIwvOIYt4skkgLbJsW58wewt5iEmzJ5Bskj/t7p0lTuMJ9DNoQ7ioIL5n2Ka+bTfqq5M5f7YDayCkRU2TtwUxrU0uGtAMlNwuOwVCx6hDAotQV/pqxowLRU4Upx659SOECbmAATenjLO6cyY1D1hpifs/x/o1NE3i/NH6BWXBbSfbwIHsv1dK2ihJkWfhKz+y0XoWluP4OiDK9z/bJQoJTtKdWZkH5TRiK3ClEbuYSyf2YWw==; 5:2NLOKl/XkkuggQzNGJbWTSq8Sawmwj7eXI0Y2LnPD8StKS/pyZN75T4DJWra+a1Oeit4wYZ28jrnxJ/y1ilcTUlQUdpsBWXE0A4C8BPHUGgZcGwwI8gE06PEVa0kkqBHxzWgNgbHp5ybcSZRllkDAbhEvlVtAvdteW55xgmuPqQ=; 7:UTSAxkMi8IW/eCvFLW6svf50EpRky7Ew6W7eY64lAAbofx26mxe5tJGwZs9rsr5mL8KmBKpJBrHaiepcXW6bEIKfV55ReDx89Ygi6vEoy1jX3n4s3om6qEgT5Ou6mKCTnxzADCC/FEFWD9rmBnBtVw==
x-ms-exchange-antispam-srfa-diagnostics: SOS;
x-ms-office365-filtering-correlation-id: b8587da3-87f6-45e2-6274-08d64c0a827a
x-ms-office365-filtering-ht: Tenant
x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390098)(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600074)(711020)(4618075)(2017052603328)(7153060)(7193020); SRVR:SN6PR09MB3261;
x-ms-traffictypediagnostic: SN6PR09MB3261:
x-microsoft-antispam-prvs: <SN6PR09MB326100AD819FA0A1AF37BB05F0DD0@SN6PR09MB3261.namprd09.prod.outlook.com>
x-ms-exchange-senderadcheck: 1
x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(6040522)(2401047)(5005006)(8121501046)(3231415)(944501410)(52105112)(93006095)(93001095)(10201501046)(3002001)(6055026)(148016)(149066)(150057)(6041310)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123560045)(20161123564045)(20161123562045)(20161123558120)(201708071742011)(7699051)(76991095); SRVR:SN6PR09MB3261; BCL:0; PCL:0; RULEID:; SRVR:SN6PR09MB3261;
x-forefront-prvs: 0858FF8026
x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(136003)(39860400002)(366004)(396003)(346002)(376002)(199004)(189003)(97736004)(106356001)(6506007)(71200400001)(71190400001)(102836004)(33656002)(105586002)(76176011)(7696005)(25786009)(66066001)(68736007)(26005)(186003)(8936002)(81166006)(2906002)(4326008)(8676002)(3846002)(14454004)(6116002)(99286004)(5660300001)(54906003)(110136005)(229853002)(316002)(6246003)(81156014)(2171002)(478600001)(6436002)(446003)(53936002)(476003)(305945005)(55016002)(9686003)(86362001)(2900100001)(486006)(256004)(7736002)(74316002)(11346002); DIR:OUT; SFP:1102; SCL:1; SRVR:SN6PR09MB3261; H:SN6PR09MB3264.namprd09.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1;
received-spf: None (protection.outlook.com: nist.gov does not designate permitted sender hosts)
x-microsoft-antispam-message-info: mOCnfTW4UObBe1fcAeGxePGQTBaDi3CE/SOS7ziPXlnE/XmjOJ56GO8Fh7Wtzr7e0CjP4ttLyud3m7aSvAxoAIadU80rZpbtyyC1khVAChqw4wD65v/lZF86GCxOCvH+u1CUk/6aCjpzORkQoPa3HjFtIHTlIiHPJYf6bpYkQcfzNg9LBbc7v8M0Or6k2RyYT11dF3faGYwAmnVIj+il+vO5Hf05qMP7sl7fB0fVDa71iqh5xGZ/5X7WWVakTXDso0WfGQu4WZQw53S++gbJBugwJpYrG4IFKaOfcTIZnZ/MzB1Ccce+YFhnZTmhi63gYOJgv3xod8hTTaZFco1BJpXZqfPYSiIwEt1Zz8fTiF0=
spamdiagnosticoutput: 1:99
spamdiagnosticmetadata: NSPM
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-OriginatorOrg: nist.gov
X-MS-Exchange-CrossTenant-Network-Message-Id: b8587da3-87f6-45e2-6274-08d64c0a827a
X-MS-Exchange-CrossTenant-originalarrivaltime: 16 Nov 2018 21:28:54.1065 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 2ab5d82f-d8fa-4797-a93e-054655c61dec
X-MS-Exchange-Transport-CrossTenantHeadersStamped: SN6PR09MB3261
Archived-At: <https://mailarchive.ietf.org/arch/msg/ipsec/0mSCpqgREc27NTz4JD5Ewcff0eU>
Subject: Re: [IPsec] Benjamin Kaduk's Yes on draft-ietf-ipsecme-split-dns-14: (with COMMENT)
X-BeenThere: ipsec@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Discussion of IPsec protocols <ipsec.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ipsec>, <mailto:ipsec-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ipsec/>
List-Post: <mailto:ipsec@ietf.org>
List-Help: <mailto:ipsec-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipsec>, <mailto:ipsec-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 16 Nov 2018 21:29:01 -0000

Ben,

One comment on your COMMENT wearing chair and shepherd hats:

> We have to use DNS presentation format for the DS records and not wire
> format?

The group was "split" on this question. We did a hum, with most responding in the room that they either did not care or had a slight preference for presentation format. This is why it is this way.

Regards,
Dave