[regext] Re: RDAP responses for invalid domain names
Pawel Kowalik <kowalik@denic.de> Sat, 11 April 2026 17:26 UTC
Return-Path: <kowalik@denic.de>
X-Original-To: regext@mail2.ietf.org
Delivered-To: regext@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id E2C21DA71608 for <regext@mail2.ietf.org>; Sat, 11 Apr 2026 10:26:26 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1775928386; bh=TNmbgtpuSxQIOaxfFE5oYtSSFQekSAUh+FN1C5I2m6o=; h=Date:From:Subject:To:References:In-Reply-To; b=ctNfj/VNgvER+BdFFid4mTwpu3QveI/fpK3S/FvA0vvwDwNnzkT/81xeWsb8xlDdc HJFYoAkxH5pXWknqpnj6MNWHLxhDi8YMu0VulcCH4lJI/nIUtPNM6F4dzx+QzGFWgN EYla2GujWbjAVftPdjyuM7XfwsBbrx0t/co8woyo=
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -2.798
X-Spam-Level:
X-Spam-Status: No, score=-2.798 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_VALIDITY_CERTIFIED_BLOCKED=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=denic.de
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ZI13AlxMSGeI for <regext@mail2.ietf.org>; Sat, 11 Apr 2026 10:26:26 -0700 (PDT)
Received: from mout-b-203.mailbox.org (mout-b-203.mailbox.org [195.10.208.52]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 0168DDA715FB for <regext@ietf.org>; Sat, 11 Apr 2026 10:26:26 -0700 (PDT)
Received: from smtp202.mailbox.org (smtp202.mailbox.org [IPv6:2001:67c:2050:b231:465::202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by mout-b-203.mailbox.org (Postfix) with ESMTPS id 4ftLDl6mlJz9wVl; Sat, 11 Apr 2026 19:26:15 +0200 (CEST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=denic.de; s=MBO0001; t=1775928376; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: in-reply-to:in-reply-to:references:references; bh=JhtZreK1qUhrE1+VlDrEGxzW74GH+tP5/zGIF4z/dNQ=; b=Gu371MzChChmXEAf2HzcPxgJm/UrNeZuRNEVnOLho0N/+pQujmJn8K++mT5RWUxGKsAL0Z yYhmEO4OQVGTJxPkyS6saDMn7zFR9OU/Q39PGNRjRrRNFwqxlAxjcRAz3Tl7UTrTxYVBPh xlgA+m/nF0LYFKGZQnzchEOWxOkorrFS+XqFRJEh58Vf8MHB7CIPaIdBuea6GKGT89zi79 yYwq7hwnJL04WPCdhCg+3AYDx0EDwQtEzN3eyzcQW7rQAtxCtIGNuLxSWlgvnR/oi2X0T1 Xi42deGNvXiCcLAQKwCm6IR7JtfU4rVJ7GwBDJ3Hf7tu5+pl/ZJSIXHE2Hm/hg==
Message-ID: <44123801-3b6a-4551-b83b-1e8b40c2ab5b@denic.de>
Date: Sat, 11 Apr 2026 19:26:13 +0200
MIME-Version: 1.0
From: Pawel Kowalik <kowalik@denic.de>
To: Jasdip Singh <jasdips@arin.net>, Andy Newton <andy@hxr.us>, "Thomas Corte (TANGO support)" <Thomas.Corte@knipp.de>, "regext@ietf.org" <regext@ietf.org>
References: <6c17aacf-881e-481b-a288-2b171c68af5e@denic.de> <PH7PR15MB60843DC2D06E128C03DFAFFDC9592@PH7PR15MB6084.namprd15.prod.outlook.com> <baf0ba8b-2d49-4888-9e6e-f0f439b4b644@knipp.de> <94732267-22cb-4a8e-987d-b80872a936b8@hxr.us> <170617e5-b6db-44d8-8d20-c5a6954e96d2@knipp.de> <9f43b6c4-bd5e-4de4-b106-237c60a710b7@hxr.us> <PH7PR15MB60848C46108D9140DA244612C9592@PH7PR15MB6084.namprd15.prod.outlook.com>
Content-Language: en-GB, de-DE
In-Reply-To: <PH7PR15MB60848C46108D9140DA244612C9592@PH7PR15MB6084.namprd15.prod.outlook.com>
Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg="sha-512"; boundary="------------ms090502020206070009090408"
X-MBO-RS-ID: 673a712c20c2eada685
X-MBO-RS-META: ixcuqzp36cbcqjugnp7hqqhi44m5ifyt
Message-ID-Hash: KNHXMMREHEYGRR4XO6Z54G3XDW6GUMEB
X-Message-ID-Hash: KNHXMMREHEYGRR4XO6Z54G3XDW6GUMEB
X-MailFrom: kowalik@denic.de
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-regext.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [regext] Re: RDAP responses for invalid domain names
List-Id: Registration Protocols Extensions Working Group <regext.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/regext/GTG312A59AJAXmNMcQn93CIPofE>
List-Archive: <https://mailarchive.ietf.org/arch/browse/regext>
List-Help: <mailto:regext-request@ietf.org?subject=help>
List-Owner: <mailto:regext-owner@ietf.org>
List-Post: <mailto:regext@ietf.org>
List-Subscribe: <mailto:regext-join@ietf.org>
List-Unsubscribe: <mailto:regext-leave@ietf.org>
Hi, On 10.04.26 20:13, Jasdip Singh wrote: > > *From: *Andy Newton <andy@hxr.us> > *Date: *Friday, April 10, 2026 at 1:57 PM > *To: *Thomas Corte (TANGO support) <Thomas.Corte@knipp.de>, > regext@ietf.org <regext@ietf.org> > *Subject: *[regext] Re: RDAP responses for invalid domain names > > > On 4/10/26 12:47 PM, Thomas Corte (TANGO support) wrote: > … > > > But as a *registrar*, I wouldn't know where to begin here – do you > expect each registrar to > > determine and encode the IDN policies for each gTLD registry they're > working with into their RDAP > > servers, so they can decide correctly, on a per-TLD basis, whether a > query for a specific IDN domain > > name should yield 400 (= impossible to register) or 404 (= possible, > but we don't sponsor it)? > > That does seem onerous for a registrar and unlikely something a most > registrars can do. So 404 is the best effort. Good point. > > [JS] Agreed. > I agree as well taking registrar use-cases into account. I don't agree however that RDAP shall carry logic "impossible to register" as it is not RDAP's responsibility to claim that. For generally invalid domain names, objectively no matter what server policy is - like examples 1 and 3, 400 looks like appropriate response to me as well. For other cases, where a name may be invalid in the server context (because of idn language not supported, or maybe because single-digit registration is not allowed per policy etc.) both responses 404 or 400 look appropriate. 404 is just telling the domain does not exist (which is true), 400 is telling that that such domain name does not make sense to the server. Kind Regards, Pawel
- [regext] RDAP responses for invalid domain names Pawel Kowalik
- [regext] Re: RDAP responses for invalid domain na… Scott Hollenbeck
- [regext] Re: RDAP responses for invalid domain na… Jasdip Singh
- [regext] Re: RDAP responses for invalid domain na… Thomas Corte (TANGO support)
- [regext] Re: RDAP responses for invalid domain na… Andy Newton
- [regext] Re: RDAP responses for invalid domain na… Thomas Corte (TANGO support)
- [regext] Re: RDAP responses for invalid domain na… Andy Newton
- [regext] Re: RDAP responses for invalid domain na… Jasdip Singh
- [regext] Re: RDAP responses for invalid domain na… Pawel Kowalik
- [regext] Re: RDAP responses for invalid domain na… Mario Loffredo
- [regext] Re: RDAP responses for invalid domain na… Pawel Kowalik