Re: [dnsext] downcasing of names in IPSECKEY and HIP?

In message <7D06DD86-7FF8-467E-B320-32B525C72B9C@netherlabs.nl>, Peter van Dijk
 writes:
> Dear colleagues,
> 
> working from dnssec-bis-updates-16 section 5.1, and 6.2 of 4034, I gather tha
> t the rule for downcasing names in RDATA is not simply "downcase everything t
> hat is a name", but that the RRtypes listed have been selected for a reason. 

To make those types work as the rdata can be compressed and there is no
requirement for the compression to preserve case.

> I am also under the impression that new RRtypes are excluded from the downcas
> ing rules.
> 
> Now, types like IPSECKEY and HIP have appeared during , and their RFCs do not
> explicitly state whether the names appearing in their RDATA should be lowerc
> ased in their canonical form for DNSSEC. 
> 
> My questions:
> - is the exclusion of newer types from these rules intentional? (I could thin
> k of a few reasons)
> - shouldn't we expect RFCs/drafts for new RRtypes to be explicit about downca
> sing and perhaps other aspects of canonicalisation?

No.  We have rules for how to validate data that you don't know the
internal structure of.  All new RR 's need to be compatible with
those rules.  That is the *entire* system needs to preserve case
of domain names in all new records.  If compression is used it MUST
be done in a case preserving manner.  It would also require signaling
that the client understands the internal structure of the record.
This could be done with EDNS.

> My apologies if answers to these questions are in the archives; I did a curso
> ry search but did not find anything.

The answers are in the RFCs.  http://www.ietf.org/rfc/rfc3597.txt

The discussion about downcasing was triggered because the new rules were not
followed and as they were DNSSEC records it wasn't noticed.

> Kind regards,
> Peter van Dijk
> 
> _______________________________________________
> dnsext mailing list
> dnsext@ietf.org
> https://www.ietf.org/mailman/listinfo/dnsext
-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: marka@isc.org
_______________________________________________
dnsext mailing list
dnsext@ietf.org
https://www.ietf.org/mailman/listinfo/dnsext