Re: [kitten] Fwd: New Version Notification for draft-vanrein-dnstxt-krb1-05.txt

[Rick van Rein <[e-mail]>]

Hi,

Greg> I do not agree.  RFC 4120 says, "Before sending a request to the
Greg> ticket-granting service, the client MUST determine in which realm the
Greg> application server is believed to be registered."


Yes, this is clear enough.  Although "believed" leaves some room for
wiggling, I agree that this text should not be taken as far as I was
hoping to get.  So then, we cannot handle undeterministic names (such as
potentially case-mangled names) when we "believe" in the realm for the
application server.

There are now two ways out; one is to continue with PTR and then fixate
one realm casing (presumably uppercase) and live with this forevermore. 
The other is to go back to TXT or KREALM RR, of which TXT is widely
preferred.  Given that it is acceptable to the DNS community, TXT is my
(light) preference too.  The historic use of the _kerberos prefix should
distinguish it well enough from other uses of TXT.  Perhaps we should
give it another try in that form, and fallback to KREALM if that is
rejected by DNS people.

If nobody objects, I will soon update my draft text to the TXT form,
limiting to only one <character-string> in the TXT field, and not
constraining it to be domain-style.  I will continue to be strong in
requiring DNSSEC, of course.

-Rick