[Last-Call] Dnsdir last call review of draft-ietf-cdni-delegation-acme-03

Vladimír Čunát via Datatracker <noreply@ietf.org> Thu, 12 October 2023 14:35 UTC

Return-Path: <noreply@ietf.org>
X-Original-To: last-call@ietf.org
Delivered-To: last-call@ietfa.amsl.com
Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 5C3F3C1519B1; Thu, 12 Oct 2023 07:35:45 -0700 (PDT)
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 8bit
From: Vladimír Čunát via Datatracker <noreply@ietf.org>
To: dnsdir@ietf.org
Cc: cdni@ietf.org, draft-ietf-cdni-delegation-acme.all@ietf.org, last-call@ietf.org
X-Test-IDTracker: no
X-IETF-IDTracker: 11.12.1
Auto-Submitted: auto-generated
Precedence: bulk
Message-ID: <169712134536.27509.16148682380110792611@ietfa.amsl.com>
Reply-To: Vladimír Čunát <vladimir.cunat+ietf@nic.cz>
Date: Thu, 12 Oct 2023 07:35:45 -0700
Archived-At: <https://mailarchive.ietf.org/arch/msg/last-call/ZVi13eE_5z8jQvYvF6z3NXNadCI>
Subject: [Last-Call] Dnsdir last call review of draft-ietf-cdni-delegation-acme-03
X-BeenThere: last-call@ietf.org
X-Mailman-Version: 2.1.39
List-Id: IETF Last Calls <last-call.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/last-call>, <mailto:last-call-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/last-call/>
List-Post: <mailto:last-call@ietf.org>
List-Help: <mailto:last-call-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/last-call>, <mailto:last-call-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 12 Oct 2023 14:35:45 -0000

Reviewer: Vladimír Čunát
Review result: Ready

So, dnsdir assigned me reviewing this draft, but I basically failed to find DNS
in it :-)  And I'm afraid I don't know ACME well, so I'm marking this draft as
"Ready" just not to block it on DNS.  Maybe I've just missed it, so point me to
the DNS aspects, please.

Still, let me at least comment around this DNS redirection.  The parent RFC
9115 only considers CNAMEs, at a glance.  It feels like for future the
SVCB/HTTPS records should be considered a well (in a different draft/RFC). 
They were designed with modern web CDN needs in mind, and among other features
they support "redirecting" a zone apex, which seems practically important.  For
a trivial example, you can't put a CNAME at example.com, only at
www.example.com.

[SVCB/HTTPS] https://datatracker.ietf.org/doc/draft-ietf-dnsop-svcb-https/