[regext] Re: RDAP responses for invalid domain names

Jasdip Singh <jasdips@arin.net> Fri, 10 April 2026 15:01 UTC

Return-Path: <jasdips@arin.net>
X-Original-To: regext@mail2.ietf.org
Delivered-To: regext@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 88C6BD989608 for <regext@mail2.ietf.org>; Fri, 10 Apr 2026 08:01:47 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1775833307; bh=wDY0DN0ti/xT4rN7WaCJVo/hwZ0vFp9l7KojO5j/Oqg=; h=From:To:Subject:Date:References:In-Reply-To; b=FS1W4f9WfjmZBf7nymPyo85ApXZwD+0pAohNAdjGrTRb7is98THBW5auAWHhg9kHf JKCf5PH+OG0436yTJeLZREDRpnXSYgWiA57L0PtVtZHbHm2tcRs98LUu3u6cqXAmJZ OE+B6I0msK0UbXH4nO94xVlJTvyEe3zD7UCS8U6I=
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -6.897
X-Spam-Level:
X-Spam-Status: No, score=-6.897 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_VALIDITY_CERTIFIED_BLOCKED=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=unavailable autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=arin365.onmicrosoft.com
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FCXmwA4-xk4k for <regext@mail2.ietf.org>; Fri, 10 Apr 2026 08:01:45 -0700 (PDT)
Received: from smtp4.arin.net (smtp4.arin.net [199.43.0.54]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id AADDFD989558 for <regext@ietf.org>; Fri, 10 Apr 2026 08:01:36 -0700 (PDT)
Received: from EOR2201ASH.corp.arin.net (eor2201ash.corp.arin.net [10.4.30.49]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp4.arin.net (Postfix) with ESMTPS id BFA3210757B7; Fri, 10 Apr 2026 11:01:30 -0400 (EDT)
Received: from EOR2201ASH.corp.arin.net (10.4.30.49) by EOR2201ASH.corp.arin.net (10.4.30.49) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.1258.34; Fri, 10 Apr 2026 08:01:30 -0700
Received: from CO1PR08CU001.outbound.protection.outlook.com (199.43.0.37) by EOR2201ASH.corp.arin.net (10.4.30.49) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.1258.34 via Frontend Transport; Fri, 10 Apr 2026 08:01:29 -0700
ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=cPfV0m2jzKgNpLS4xoVhyCwtY7dVXAFRyHRkOgm8HV+mm9kcPAD1z236yKYdw86TNp9DrdNBWij5rd/U9WgPcuSDdbKh2JO482sYvsiIcOR32FsWTzKta+Q2i2x8pugEpo0JERIx8C2lw2ytUrxDH0JZBpJL9VGpPa9POXwkIjCPZg5i4feKtvBTkPHCczHpR/+QvwQsZGIcMm4mk5acrMG4eNcLrwYzpKQWqbZr0+2osWXPx+5WLwpQGcaUMuU5xo9LGQH2pexswR7UdLS2bPQ+mimnNyfeFxXi9lVXVWAqF9iZONIMqp2vF7kuCt+RVwPFqlCwVABJOsBWbz0R0Q==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=wDY0DN0ti/xT4rN7WaCJVo/hwZ0vFp9l7KojO5j/Oqg=; b=LLLQsLdbUg3zsmJ1vAVq1oCMzH60k1/UB4kt/gOqrVL8W8Fy709nOh88vpvVo+2U0jSH1X07Yc0VHGqJWKgSrG1GRU+0c43muvpJ1GsntaJX1IYzocR5XyeaDg7qlOAGzpfUV2k9aJxJN/cobjkUi5iqUbpmDQIr7UlfQKaLCEzNs4CHt1gnVf/lNZ91LM4rXdGHNusakQ384hk5HVDK9ls4AgqTRLTaajxrLKfz4+77VBNXrVDWEkStzjmZ8Bc2QpyL0imccCT7BdY5fbGvS19umXKzKjvC3VOiJXJZ3yWHqqWT8taIH5pBXCeCxQdD78RdhaVpi8CiwhJS6DGeNA==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=arin.net; dmarc=pass action=none header.from=arin.net; dkim=pass header.d=arin.net; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=arin365.onmicrosoft.com; s=selector1-arin365-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=wDY0DN0ti/xT4rN7WaCJVo/hwZ0vFp9l7KojO5j/Oqg=; b=nIvEKFjc3zIe1+AW2R+GrCVSyXF7Rk/NPVV8/swwPLRSZD7hbqMq+aCDS3CJEOuTIne58nAMp2NytzO7gNGkhVCxdvxngEx0hQzYnJIdSxdKtA3+lGkxNW0wsVPrNChIlmGzU4w365Bi4WLrrmM7a+mSsuiQNafqWSMxQgEgit5rY+wu03p6S82ibcDq0CmmuaHAgnPWo77lCZYIjyaa6rSfXENRVvkg1XddxQbXU9tvu6z6PmQ+YjjGkH8aH5rZhEmiSjtscsXlB0dxES2HU1LirryoKyoh/RSC+RkamM8NYsWDHJlOdPUc+wGe1UOLoZERxxiNo1u5Z/+/6H1XWw==
Received: from PH7PR15MB6084.namprd15.prod.outlook.com (2603:10b6:510:24f::12) by MW3PR15MB3948.namprd15.prod.outlook.com (2603:10b6:303:4b::7) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9769.42; Fri, 10 Apr 2026 15:01:25 +0000
Received: from PH7PR15MB6084.namprd15.prod.outlook.com ([fe80::95fb:7687:c884:aefc]) by PH7PR15MB6084.namprd15.prod.outlook.com ([fe80::95fb:7687:c884:aefc%3]) with mapi id 15.20.9769.016; Fri, 10 Apr 2026 15:01:25 +0000
From: Jasdip Singh <jasdips@arin.net>
To: Pawel Kowalik <kowalik=40denic.de@dmarc.ietf.org>, "regext@ietf.org" <regext@ietf.org>
Thread-Topic: [regext] RDAP responses for invalid domain names
Thread-Index: AQHcyPUpdm2F1+ImJEClOzDqhJiGL7XYXWNV
Date: Fri, 10 Apr 2026 15:01:25 +0000
Message-ID: <PH7PR15MB60843DC2D06E128C03DFAFFDC9592@PH7PR15MB6084.namprd15.prod.outlook.com>
References: <6c17aacf-881e-481b-a288-2b171c68af5e@denic.de>
In-Reply-To: <6c17aacf-881e-481b-a288-2b171c68af5e@denic.de>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-ms-reactions: allow
authentication-results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=arin.net;
x-ms-publictraffictype: Email
x-ms-traffictypediagnostic: PH7PR15MB6084:EE_|MW3PR15MB3948:EE_
x-ms-office365-filtering-correlation-id: d3bccbdc-8458-4a6d-fae9-08de9712094f
x-ms-exchange-senderadcheck: 1
x-ms-exchange-antispam-relay: 0
x-microsoft-antispam: BCL:0;ARA:13230040|366016|376014|1800799024|10070799003|8096899003|22082099003|18002099003|38070700021|56012099003;
x-microsoft-antispam-message-info: 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
x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:PH7PR15MB6084.namprd15.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230040)(366016)(376014)(1800799024)(10070799003)(8096899003)(22082099003)(18002099003)(38070700021)(56012099003);DIR:OUT;SFP:1102;
x-ms-exchange-antispam-messagedata-chunkcount: 2
x-ms-exchange-antispam-messagedata-0: 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
x-ms-exchange-antispam-messagedata-1: 7ypsEuPyMAzkuA==
Content-Type: multipart/alternative; boundary="_000_PH7PR15MB60843DC2D06E128C03DFAFFDC9592PH7PR15MB6084namp_"
MIME-Version: 1.0
X-Exchange-RoutingPolicyChecked: mbgAsaBNsK34AR+feHQKhZwHShXeW9jk5sr8BAyENOYKPiKMHgfDn468Mfmsny1Dvp+mIy7Q9YQAptQfo4NM6YHP66occKPsxj5EtTgTlTuyynGHFsUAyXMpkqUesKahkWlnkuMdtmxcCss1AqANFlc9BUyG9YOY68g3t04mO7aCRteNT7FSXOWpL2KYXRNb3cKtJ2KR+azrPX+026bEqDqql/7CvQNpCVU9GHX1Fnx7kKkpVcEPHb6cJYYiAFt4tqiO+kjzeSiWzrY9iRqmKtA8NPoulzpxROFWYn6KgzipJbjithOLkj81yYPWuJTK+KE5LiQqPHimBMhz/PnUKA==
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: PH7PR15MB6084.namprd15.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: d3bccbdc-8458-4a6d-fae9-08de9712094f
X-MS-Exchange-CrossTenant-originalarrivaltime: 10 Apr 2026 15:01:25.3491 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: cad70df5-eb75-43b7-adb3-12798d38d9b7
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: rDGYRsyNN+VIwHe7B/kn3SPg1U88EwrXmW/sKOkMH0h6aATRlnSXgqY67z67iEbDiLTl7DPM9N5Z0vnQaYUrnQ==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: MW3PR15MB3948
X-OriginatorOrg: arin.net
Message-ID-Hash: ROA7AWDNPFABWG4M4DDMYQRWDV26WWHU
X-Message-ID-Hash: ROA7AWDNPFABWG4M4DDMYQRWDV26WWHU
X-MailFrom: jasdips@arin.net
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-regext.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [regext] Re: RDAP responses for invalid domain names
List-Id: Registration Protocols Extensions Working Group <regext.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/regext/-26Pqk4COcQgxjIv8CBmn9syvEA>
List-Archive: <https://mailarchive.ietf.org/arch/browse/regext>
List-Help: <mailto:regext-request@ietf.org?subject=help>
List-Owner: <mailto:regext-owner@ietf.org>
List-Post: <mailto:regext@ietf.org>
List-Subscribe: <mailto:regext-join@ietf.org>
List-Unsubscribe: <mailto:regext-leave@ietf.org>

Hi Paweł,

Interesting observations. :)

"Is 404 the right behaviour?”

Does not seem. 404 (Not Found) should be for a non-extant resource if the query is deemed well-formed syntax- and semantics-wise. Examples 1 and 3 should return 400 (Bad Request) assuming these are considered syntax errors per section 5.4 of RFC 9083. As for example 2, if it is deemed a syntax error by that same section, then 400; otherwise, 422 (Unprocessable Content) since mixing  jp characters with .de doesn’t make sense semantically. Example 2 seems tricky. :)

Looks like it should be 400 if syntax error in query value, and 422 if semantic error. That said, 400 could cover 422 scenarios but not vice-versa, AFAIU.

Thanks,
Jasdip

From: Pawel Kowalik <kowalik=40denic.de@dmarc.ietf.org>
Date: Friday, April 10, 2026 at 10:20 AM
To: regext@ietf.org <regext@ietf.org>
Subject: [regext] RDAP responses for invalid domain names

Hi,

rfc7480 Section 5.3 specifies 404 as an answer for an non existing
object (for example domain name).

Section 5.4 specifies 400 code for malformed queries.

How about queries which are not malformed on the RDAP protocol level but
invalid objects (generally or registry-specific)?

Example1: xn–fdkp0gtc.com - wrongly encoded IDN domain

Example2: ロバート.de, where de does not support jp characters

Example3: 1234567890123456789012345678901234567890123456789012345678901234567890.com
- label too long

My observation is that RDAP servers would respond with 404 in all of
those cases, but the standard would not specify it clearly whether it is
correct or not.

rfc7482 only suggests 400 as a response code, if UTF-8 decoding of query
strings would fail, which is in line with rfc7480 Section 5.4, but does
not cover the other cases.

Did I miss something? Is 404 the right behaviour?

Kind regards,
Pawel