IETF Logo Mail Archive

Re: [dnsext] draft-mohan-dns-query-xml-00.txt

Alex Bligh <alex@alex.org.uk> Sat, 01 October 2011 21:00 UTC

Return-Path: <dnsext-bounces@ietf.org>
X-Original-To: namedroppers-archive-gleetwall6@lists.ietf.org
Delivered-To: ietfarch-namedroppers-archive-gleetwall6@ietfa.amsl.com
Received: from ietfa.amsl.com (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5CAFA21F8F80; Sat, 1 Oct 2011 14:00:07 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1317502807; bh=xRYSEmQBX/EgT0LM8R4ygg9ZmBZEthHWLp65JMwK+Vs=; h=Date:From:To:Message-ID:In-Reply-To:References:MIME-Version:Cc: Subject:Reply-To:List-Id:List-Unsubscribe:List-Archive:List-Post: List-Help:List-Subscribe:Content-Transfer-Encoding:Content-Type: Sender; b=X0Lzq79Elzi4WkKocxwiaBzbGnQ+7Ux6DmMlD2CnsOtLstTkGktNIL3SQjf7o6kh9 113cfuftFxDGDtFhK/c4BfADds+d4m0KueIjfP/r7laagQhk+khreVpBLjbqnfufRs xRYKCpU18UQKquDJb/kAUGU60DYAunBPOti4U7TE=
X-Original-To: dnsext@ietfa.amsl.com
Delivered-To: dnsext@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D987C21F8F80 for <dnsext@ietfa.amsl.com>; Sat, 1 Oct 2011 14:00:05 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.562
X-Spam-Level:
X-Spam-Status: No, score=-2.562 tagged_above=-999 required=5 tests=[AWL=0.038, BAYES_00=-2.599]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id yalBWXv7TroR for <dnsext@ietfa.amsl.com>; Sat, 1 Oct 2011 14:00:05 -0700 (PDT)
Received: from mail.avalus.com (mail.avalus.com [IPv6:2001:41c8:10:1dd::10]) by ietfa.amsl.com (Postfix) with ESMTP id 6292E21F8F7F for <dnsext@ietf.org>; Sat, 1 Oct 2011 14:00:04 -0700 (PDT)
Received: from [192.168.100.16] (87-194-71-186.bethere.co.uk [87.194.71.186]) by mail.avalus.com (Postfix) with ESMTPSA id 785FCC56103; Sat, 1 Oct 2011 22:02:59 +0100 (BST)
Date: Sat, 01 Oct 2011 22:02:58 +0100
From: Alex Bligh <alex@alex.org.uk>
To: Nicholas Weaver <nweaver@ICSI.Berkeley.EDU>, Paul Hoffman <paul.hoffman@vpnc.org>
Message-ID: <33BA32D8CFF5BCB5D2895142@nimrod.local>
In-Reply-To: <66077D12-F568-426A-8E5C-CC077CC24622@ICSI.Berkeley.EDU>
References: <CACU5sDnBx5AijEgFXKNPjtcVdtBnBJamsn-f_ye0Jm3TQq0mvw@mail.gmail.com> <0394FB3B-6C2B-4D47-B1FA-AA54B7EB1053@kirei.se> <DDD7529C-9EF3-427F-AF90-2872CCD71ECF@cisco.com> <201110010458.26859.vixie@isc.org> <D3890C96-DA07-4BA1-AB57-1A81EA2ED477@icsi.berkeley.edu> <5C4E07BC-E6CC-45A6-8018-10C2A799A55E@vpnc.org> <66077D12-F568-426A-8E5C-CC077CC24622@ICSI.Berkeley.EDU>
X-Mailer: Mulberry/4.0.8 (Mac OS X)
MIME-Version: 1.0
Content-Disposition: inline
Cc: DNSEXT Working Group <dnsext@ietf.org>
Subject: Re: [dnsext] draft-mohan-dns-query-xml-00.txt
X-BeenThere: dnsext@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
Reply-To: Alex Bligh <alex@alex.org.uk>
List-Id: DNS Extensions working group discussion list <dnsext.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnsext>, <mailto:dnsext-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dnsext>
List-Post: <mailto:dnsext@ietf.org>
List-Help: <mailto:dnsext-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsext>, <mailto:dnsext-request@ietf.org?subject=subscribe>
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset="us-ascii"; Format="flowed"
Sender: dnsext-bounces@ietf.org
Errors-To: dnsext-bounces@ietf.org

--On 1 October 2011 11:25:22 -0700 Nicholas Weaver 
<nweaver@ICSI.Berkeley.EDU> wrote:

>> -.5. You are assuming that a bad HTTP cache will be bad in a predictable
>> fashion. I'm not against using nonces to bust caches, but I don't think
>> we should rely on it.
>
> No, what I'm assuming is SOME minimal-level of nonborkenness.
>
> IF a cache takes url
>
> http://www.example.com/url_a
>
> and instead returns
>
> http://www.example.com/url_b

This is true, but the GET/POST question is half orthogonal (so that would 
be 45 degrees?) to the nonce question. IE you could use a POST plus a nonce 
if you wanted. IIRC POST /should/ do enough alone to avoid the need for a 
nonce though, as I can't see how any web cache would cache POSTs.

-- 
Alex Bligh
_______________________________________________
dnsext mailing list
dnsext@ietf.org
https://www.ietf.org/mailman/listinfo/dnsext

v2.8.7 | Report a Bug | By Email