Re: [ire] Extended Verification Process

Francisco Obispo <fobispo@isc.org> Sat, 16 March 2013 17:23 UTC

Return-Path: <fobispo@isc.org>
X-Original-To: ire@ietfa.amsl.com
Delivered-To: ire@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8D13A21F8900 for <ire@ietfa.amsl.com>; Sat, 16 Mar 2013 10:23:35 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.693
X-Spam-Level:
X-Spam-Status: No, score=-1.693 tagged_above=-999 required=5 tests=[AWL=0.906, BAYES_00=-2.599]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 30JYzP3HfLGA for <ire@ietfa.amsl.com>; Sat, 16 Mar 2013 10:23:34 -0700 (PDT)
Received: from mx.ams1.isc.org (mx.ams1.isc.org [IPv6:2001:500:60::65]) by ietfa.amsl.com (Postfix) with ESMTP id C508321F88F1 for <ire@ietf.org>; Sat, 16 Mar 2013 10:23:33 -0700 (PDT)
Received: from bikeshed.isc.org (bikeshed.isc.org [IPv6:2001:4f8:3:d::19]) (using TLSv1 with cipher DHE-RSA-CAMELLIA256-SHA (256/256 bits)) (Client CN "mail.isc.org", Issuer "RapidSSL CA" (not verified)) by mx.ams1.isc.org (Postfix) with ESMTPS id 2D4D85F98EB; Sat, 16 Mar 2013 17:23:20 +0000 (UTC) (envelope-from fobispo@isc.org)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=isc.org; s=dkim2012; t=1363454613; bh=rPZMS2sF0DUAL66lLVbB4T8sWa6FSly/VuYyozg+TZw=; h=Subject:From:In-Reply-To:Date:Cc:References:To; b=iGSMnFzFBOGK0xbRNlobJH3wA/Rn/JbSihn5mm6X63DIAsnpGu98XiOsdXjJXE41d EFl35VjJRvak7ZWNkertdlxd4n9XvecvbyyIK1KKbegiaGIEFoQIL3gsKWbxfMvQrR sEOtpH4nhoVFoAzEAi1d+wD+hRWiChO+0Bz32/j0=
Received: from [192.168.255.120] (c-24-7-39-79.hsd1.ca.comcast.net [24.7.39.79]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (Client did not present a certificate) by bikeshed.isc.org (Postfix) with ESMTPSA id EF113216C3B; Sat, 16 Mar 2013 17:23:18 +0000 (UTC) (envelope-from fobispo@isc.org)
Content-Type: text/plain; charset="windows-1252"
Mime-Version: 1.0 (Mac OS X Mail 6.3 \(1503\))
From: Francisco Obispo <fobispo@isc.org>
In-Reply-To: <CD6ABFF5.654F1%james.mitchell@ausregistry.com.au>
Date: Sat, 16 Mar 2013 10:23:19 -0700
Content-Transfer-Encoding: quoted-printable
Message-Id: <F740E1A8-E975-40A4-97CA-E0996D557856@isc.org>
References: <CD6ABFF5.654F1%james.mitchell@ausregistry.com.au>
To: James Mitchell <james.mitchell@ausregistry.com.au>
X-Mailer: Apple Mail (2.1503)
Cc: "ire@ietf.org" <ire@ietf.org>
Subject: Re: [ire] Extended Verification Process
X-BeenThere: ire@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: "Internet Registration Escrow discussion list." <ire.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ire>, <mailto:ire-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/ire>
List-Post: <mailto:ire@ietf.org>
List-Help: <mailto:ire-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ire>, <mailto:ire-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 16 Mar 2013 17:23:35 -0000

It shouldn't be a problem, because he must've used xmlns declarations in the root, and the parser will simply use that as a reference, internally XML parsers will expand the prefix to '{namespace-uri}attribute' form, so regardless of what the prefix was, as long as the namespace declarations are good, it should all work as expected.



On Mar 16, 2013, at 7:39 AM, James Mitchell <james.mitchell@ausregistry.com.au> wrote:

> Worried.
> 
> Are we going to assume that every validator has to map the prefixes rde and rdeDomain to "urn:ietf:params:xml:ns:rde-1.0" and "urn:ietf:params:xml:ns:rdeDomain-1.0" respectively? What happens when I use namespace prefixes other than those used in the examples (e.g. bind rde to default and rdeDomain to "d")? I assume that I would not change the Xpath query because I would guess that I would break validator implementations…
> 
> I note also the inconsistent use of namespace prefixes for the RDE Domain namespace, with the document referring to both rdeDom and rdeDomain.
> 
> Regards,
> James
> 
> From: David Kipling <David.Kipling@nccgroup.com>
> Date: Friday, 15 March 2013 9:21 PM
> To: "gustavo.lozano@icann.org" <gustavo.lozano@icann.org>, "ire@ietf.org" <ire@ietf.org>
> Subject: [ire] Extended Verification Process
> 
> Hi Gustavo,
>  
> At NCC Group we are working on the extended verification process and have noted a query around the RDE policy rule.  The element allows you to specify required fields such as “<rdePolicy:policy element="rdeDom:registrant" />” as required.  The issue I have with this is that the scope of the element needs to be known to be able to perform the check e.g. is it :
>  
> ·        one registrant per deposit?
> ·        one registrant per domain record?
> ·        one registrant per postalInfo element in each contact record?
>  
> You have the namespace, though I would suggest to be clear that the policy element is altered to include the scope of the parent element as an XPath query:
>  
> “<rdePolicy:policy scope=”{XPath query}” element="{qualified element name}" />”
> “<rdePolicy:policy scope=”//rde:deposit/rde:contents/rdeDomain:domain” element="rdeDomain:registrant" />”
>  
> What are your thoughts?
>  
> Regards
>  
> David Kipling
>  
>  
>  
>  
>  
>  
> 1.      I have some really easy XPath queries etc. setup to handle the extended validation though my issue is with the CSV files.  Looks like I’m going to have to build a module to load all the csv elements into the same XML file for me to process.  It’s a shame it isn’t just XML as the process would be a lot easier including the Open Source Tool.
>  
> Regards
>  
> David
> David Kipling
> IT Service Desk Analyst
> NCC Group
> Manchester Technology Centre, Oxford Road
> Manchester, M1 7EF
> 
> Telephone: +44 161 209 5430
> Mobile: 
> Fax: 
> Website: www.nccgroup.com
> Email:  David.Kipling@nccgroup.com
> 
> 
> This email is sent for and on behalf of NCC Group. NCC Group is the trading name of NCC Services Limited (Registered in England CRN: 2802141). Registered Office: Manchester Technology Centre, Oxford Road, Manchester, M1 7EF. The ultimate holding company is  NCC Group plc (Registered in England CRN: 4627044). 
> 
> Confidentiality: This e-mail contains proprietary information, some or all of which may be confidential and/or legally privileged. It is for the intended recipient only. If an addressing or transmission error has misdirected this e-mail, please notify the author by replying to this e-mail and then delete the original. If you are not the intended recipient you may not use, disclose, distribute, copy, print or rely on any information contained in this e-mail. You must not inform any other person other than NCC Group or the sender of its existence. 
> 
> For more information about NCC Group please visit www.nccgroup.com
> 
> P Before you print think about the ENVIRONMENT
> 
> 
> _______________________________________________
> ire mailing list
> ire@ietf.org
> https://www.ietf.org/mailman/listinfo/ire

Francisco Obispo 
Director of Applications and Services - ISC
email: fobispo@isc.org
Phone: +1 650 423 1374 || INOC-DBA *3557* NOC
PGP KeyID = B38DB1BE