IETF Logo Mail Archive

Re: [dnsext] What is indeterminate

Paul Hoffman <paul.hoffman@vpnc.org> Wed, 08 February 2012 00:55 UTC

Return-Path: <dnsext-bounces@ietf.org>
X-Original-To: namedroppers-archive-gleetwall6@lists.ietf.org
Delivered-To: ietfarch-namedroppers-archive-gleetwall6@ietfa.amsl.com
Received: from ietfa.amsl.com (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CF1D411E8098; Tue, 7 Feb 2012 16:55:51 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1328662551; bh=HoJwu9NA05u95njC+A/wRpkw2lC9WaWI/mC1Kp27nz0=; h=Mime-Version:From:In-Reply-To:Date:Message-Id:References:To:Cc: Subject:List-Id:List-Unsubscribe:List-Archive:List-Post:List-Help: List-Subscribe:Content-Type:Content-Transfer-Encoding:Sender; b=cksA/tbMwxAtukeBIYL9p+UoMYnTR950nhNdxmT6nDA936tZuUuBjmCgJ0gcHq21w VzYzaPHZt/9+BTM3BhZXlsdPQprEZFFy4En2tAiGrNLHpqlogqbpavEqgneHhJHR9r 0OVYcm4ooGGTIHl09eqqbPkpwdMSAapwfLrGfU0I=
X-Original-To: dnsext@ietfa.amsl.com
Delivered-To: dnsext@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A01EB11E8098 for <dnsext@ietfa.amsl.com>; Tue, 7 Feb 2012 16:55:49 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -102.559
X-Spam-Level:
X-Spam-Status: No, score=-102.559 tagged_above=-999 required=5 tests=[AWL=0.040, BAYES_00=-2.599, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wkfEckXfIIxZ for <dnsext@ietfa.amsl.com>; Tue, 7 Feb 2012 16:55:49 -0800 (PST)
Received: from hoffman.proper.com (IPv6.Hoffman.Proper.COM [IPv6:2605:8e00:100:41::81]) by ietfa.amsl.com (Postfix) with ESMTP id 37AB911E8089 for <dnsext@ietf.org>; Tue, 7 Feb 2012 16:55:49 -0800 (PST)
Received: from [10.20.30.100] (50-0-66-4.dsl.dynamic.fusionbroadband.com [50.0.66.4]) (authenticated bits=0) by hoffman.proper.com (8.14.5/8.14.3) with ESMTP id q180tjni002574 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=NO); Tue, 7 Feb 2012 17:55:46 -0700 (MST) (envelope-from paul.hoffman@vpnc.org)
Mime-Version: 1.0 (Apple Message framework v1251.1)
From: Paul Hoffman <paul.hoffman@vpnc.org>
In-Reply-To: <20120207233108.1A38B1CF75E6@drugs.dv.isc.org>
Date: Tue, 07 Feb 2012 16:55:44 -0800
Message-Id: <69BA3AE6-AB79-4AE1-A054-35BC172CAFC8@vpnc.org>
References: <20120207151820.GE9478@crankycanuck.ca> <E59CC699-741A-4815-B4CD-D0781420072E@vpnc.org> <20120207233108.1A38B1CF75E6@drugs.dv.isc.org>
To: Mark Andrews <marka@isc.org>
X-Mailer: Apple Mail (2.1251.1)
Cc: DNSEXT Working Group <dnsext@ietf.org>
Subject: Re: [dnsext] What is indeterminate
X-BeenThere: dnsext@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: DNS Extensions working group discussion list <dnsext.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnsext>, <mailto:dnsext-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dnsext>
List-Post: <mailto:dnsext@ietf.org>
List-Help: <mailto:dnsext-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsext>, <mailto:dnsext-request@ietf.org?subject=subscribe>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Sender: dnsext-bounces@ietf.org
Errors-To: dnsext-bounces@ietf.org

On Feb 7, 2012, at 3:31 PM, Mark Andrews wrote:

> This really is a "how many angels can you fit on a pin head" argument.

No, it is not, and please don't try to dissuade people from answering. There are two different definitions in the respective RFCs. You may not care which is right, but the rest of us do.

> You can prove a answer is secure with respect to the trust anchors you have.
> You can determine that you can't validate as secure with the trust anchors
> you have.
> Everything else is indeterminate/insecure as far as the application is
> concerned.


Is that proposed text for the dnssec-bis document?

--Paul Hoffman

_______________________________________________
dnsext mailing list
dnsext@ietf.org
https://www.ietf.org/mailman/listinfo/dnsext

v2.23.0 | Report a Bug | By Email