Re: [kitten] Fwd: New Version Notification for draft-vanrein-dnstxt-krb1-05.txt

[Rick van Rein <[e-mail]>]

Hello,

> There seems to be some level of consensus settling around using PTR for
> _kerberos.fqdn to point to a realm name, with the concordant implications
> for the case of the realm name.  Since that is using a existing DNS record
> type and making backward-incompatible changes to the Kerberos standard,

Or, we could simply say

   "All retrieved _kerberos PTR data MUST be cast to all-uppercase characters
   before processing with Kerberos and/or GSS-API.  This compensates for the
   uncertainty of case mappings in DNS.  Kerberos realms that want to be
   reachable through these PTR records MUST accept requests with the
   realm name in all-uppercase form."

This does not change the semantics of Kerberos AFAIK, and it remains open to
future changes in case handling in the KDC.  The mapping to uppercase is not
a compensation for a temporary condition, but for the permanent uncertainty
around case handling of PTR record data.

> (It is not really appropriate
> for individual submissions to make changes to Proposed Standards with
> still-extant working groups.)

Shall I formulate the above in an individual submission and leave it to Kitten
whether they want to lift it up the a WG spec?  That way we'd at least be out
of the current impasse on this matter.

Thanks,
 -Rick