Re: [regext] EPP Transport Service Discovery

"Gould, James" <jgould@verisign.com> Wed, 20 March 2024 12:27 UTC

Return-Path: <jgould@verisign.com>
X-Original-To: regext@ietfa.amsl.com
Delivered-To: regext@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D7B93C14F6F2 for <regext@ietfa.amsl.com>; Wed, 20 Mar 2024 05:27:47 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -7.005
X-Spam-Level:
X-Spam-Status: No, score=-7.005 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, HTTPS_HTTP_MISMATCH=0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=verisign.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4rWPHgNjkaCt for <regext@ietfa.amsl.com>; Wed, 20 Mar 2024 05:27:43 -0700 (PDT)
Received: from mail5.verisign.com (mail5.verisign.com [69.58.187.31]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A7121C14F6EF for <regext@ietf.org>; Wed, 20 Mar 2024 05:27:42 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=verisign.com; l=43944; q=dns/txt; s=VRSN; t=1710937663; h=from:to:cc:date:message-id:mime-version:subject; bh=WALzH3OWSgnidosxldUuaZAZDC5A3zZU9152MmPd288=; b=hjbnsPTpKBYQ+AsD568u87Ip2Dnq62mpOne51QUqIpjz38XedCGaQaVO ctBF/4onnKWlhnTDFS7fh0k5VrpzBef9Upjxx8qzfBwF4IH+8J2/Mw8Ch teyW/9tfdGLj+QMnooHoFsnLV9nXZ0JyAbstp+DRbAlnILqSptTBeUH4s jYlo+ZEowK6FjbatnV4rg3Ti/gbE0jPbScEZ3OSuRJo7I9I89GPEQCCKm ZXmPXUw4b+h/yDRqpXnbXW+r6soSOf5QcTjeDMjhoWa8aj4R56ftfw1NN C3SSpCNf38ss9KBSIi9C32ThWIQvWya14xaDMjofBik24mFpGCFJvnJ18 A==;
X-CSE-ConnectionGUID: UcwkidnzSACd02+4VBS8EQ==
X-CSE-MsgGUID: Ue1cn6AkSNSuCEaXtpH0gg==
X-ThreatScanner-Verdict: Negative
IronPort-Data: A9a23:79ZD7KPx2u9i3JrvrR0KlsFynXyQoLVcMsEvi/8bNLSAYAhSjmhWm TcfWWiYeqHdUtbGC48kb9jk805VvZDcz9c1QFFt/30xRHkW9ZScWt6UJBuuNHqZcJySEU875 J4UOtCdcJk+ECHS/UrwPObr9nIkiqzgqtYQaQLhEnkZqVhMFH5413qP4tIEv7OEoeRVIiuD5 Y+o/5OEYFOp0GJ/ODNOtPrSoRo05f6t5D1H7gFhNKwS7A7VmkdOAcNEL8ldDZdarqp8RbfmG rmZnNlV2kuDon/B3/v8yu6TnnUiG+OUZU7WzCMOB8BOuzAazgQqyKE3KfEAXklejjSNjrhZx c5E3XCKYV5B0pbkxqJFDHG0LwkkZfcaoOSdeSDl2SCu5xaun0XEkq0G4H4eYNVwFtZfWQlm6 fEeITYRWRGP78reLGWTE7QEamwLdaEHDatH0p1S5Wix4cUOGPgvd573Cepwh1/csOgVRKqDO JBJAdZYRE+ojxVnYj/7AbpgxLv43iGXnzdw8Dp5roJvi4TfIZAYPBEA/7M5d/TTLfi5kHp0q Ur79Hv6Ax0cJue24jbdqDHwuMX0zQ7CDdd6+L2QrpaGgXW5/EpKNzs7ZQPh5+eyjVSmHdtTb VIO4Sxopq83nKCpZoClGUTn+zjd40VaB4s4/+4SsWlhzoLW7AGEAmQsUDNbaccnu8lwTjsvv rOMt4m4W2Ux7ePMIZ6b3oqZ9Di0ZwEWFkk5eAQpRDsZ+/m7r45m23ojSf4mSsZZlObdGzL3x zOHtn1i37oUgccH27T99lfCqz6pr4LCCA84+guRWXiqhitieIO7aqSz6Vnd7utaK8CSSVzpl GMEnMya4eYEAJqOwXDVXugXHaqo6PDDOzrZqVJqFoMqsTWg53DleppfiBlkKUhkItoseDL1b gnUoww52XNIFHGwa/ZoZY+hU55v1rb6U9HkTbXeaZxEeJ4oMhGd5ycobkmVt4zwrHURfWgEE c/zWa6R4bwyUMyLEBLeqz8h7IIW
IronPort-HdrOrdr: A9a23:w+lnCazBXzDEfaMLUC95KrPwG71zdoMgy1knxilNoERuA66lf8 DHppgmPGzP+VMssRAb6Ki90ca7IU80maQe3WBzB8bYYOCFghrKEGgK1+KLqAEIcBeQygcp78 Zdmt9FZuEYY2IWsS+w2njdLz9p+qjhzEjj792uqUuFYzsaEp1d0w==
X-Talos-CUID: 9a23:+KsXz2DKY/GOPdb6ExRs600VFsY3SVT2wC+KYBOGI105ZYTAHA==
X-Talos-MUID: 9a23:vK98/QSatBjtS+u1RXTRiWhpMplB4J+IM10mvJw2p9GkbSN/bmI=
X-IronPort-AV: E=Sophos;i="6.07,140,1708387200"; d="png'150?scan'150,208,217,150";a="29616561"
Received: from BRN1WNEX01.vcorp.ad.vrsn.com (10.173.153.48) by BRN1WNEX02.vcorp.ad.vrsn.com (10.173.153.49) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.1.2507.35; Wed, 20 Mar 2024 08:27:41 -0400
Received: from BRN1WNEX01.vcorp.ad.vrsn.com ([10.173.153.48]) by BRN1WNEX01.vcorp.ad.vrsn.com ([10.173.153.48]) with mapi id 15.01.2507.035; Wed, 20 Mar 2024 08:27:41 -0400
From: "Gould, James" <jgould@verisign.com>
To: "jkolker=40godaddy.com@dmarc.ietf.org" <jkolker=40godaddy.com@dmarc.ietf.org>, "steve@shinkuro.com" <steve@shinkuro.com>, "shollenbeck=40verisign.com@dmarc.ietf.org" <shollenbeck=40verisign.com@dmarc.ietf.org>
CC: "regext@ietf.org" <regext@ietf.org>
Thread-Topic: [EXTERNAL] Re: [regext] EPP Transport Service Discovery
Thread-Index: AQHaesIAWjYcMp1BRDifguzfI9i3tg==
Date: Wed, 20 Mar 2024 12:27:41 +0000
Message-ID: <11E8FEF1-5FE0-4C20-BA40-46D4B5032A51@verisign.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: yes
X-MS-TNEF-Correlator:
user-agent: Microsoft-MacOutlook/16.82.24021116
x-originating-ip: [10.170.148.18]
Content-Type: multipart/related; boundary="_004_11E8FEF15FE04C20BA4046D4B5032A51verisigncom_"; type="multipart/alternative"
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/regext/GVnJj-OT6-73FSlwTWoHVgDcDV4>
Subject: Re: [regext] EPP Transport Service Discovery
X-BeenThere: regext@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: Registration Protocols Extensions <regext.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/regext>, <mailto:regext-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/regext/>
List-Post: <mailto:regext@ietf.org>
List-Help: <mailto:regext-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/regext>, <mailto:regext-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 20 Mar 2024 12:27:47 -0000

+1

We’ve had experience of adding and removing transports many years ago and it was done with adequate notice to the registrars.

--

JG

[cid87442*image001.png@01D960C5.C631DA40]

James Gould
Fellow Engineer
jgould@Verisign.com<applewebdata://13890C55-AAE8-4BF3-A6CE-B4BA42740803/jgould@Verisign.com>

703-948-3271
12061 Bluemont Way
Reston, VA 20190

Verisign.com<http://verisigninc.com/>

From: regext <regext-bounces@ietf.org> on behalf of Jody Kolker <jkolker=40godaddy.com@dmarc.ietf.org>
Date: Wednesday, March 20, 2024 at 7:59 AM
To: Steve Crocker <steve@shinkuro.com>, "Hollenbeck, Scott" <shollenbeck=40verisign.com@dmarc.ietf.org>
Cc: "regext@ietf.org" <regext@ietf.org>
Subject: [EXTERNAL] Re: [regext] EPP Transport Service Discovery


Caution: This email originated from outside the organization. Do not click links or open attachments unless you recognize the sender and know the content is safe.

Just adding my 2 cents.

It seems that designing and implementing a discovery system seems to be a bit complicated and will take some time to design and complete.  Every registry will be contacting registrars when a new system is enabled, or at least should be.  I don’t see a huge benefit of adding a service discovery system compared to the amount of time it will take to design and implement.  I would rather we spend our time defining the separate transport system than designing a discovery system.


Thanks,
Jody Kolker
319-329-9805  (mobile)

Please contact my direct supervisor Scott Courtney (scourtney@godaddy.com<mailto:scourtney@godaddy.com>) with any feedback.

This email message and any attachments hereto is intended for use only by the addressee(s) named herein and may contain confidential information. If you have received this email in error, please immediately notify the sender and permanently delete the original and any copy of this message and its attachments.

From: regext <regext-bounces@ietf.org> On Behalf Of Steve Crocker
Sent: Wednesday, March 20, 2024 5:11 AM
To: Hollenbeck, Scott <shollenbeck=40verisign.com@dmarc.ietf.org>
Cc: regext@ietf.org
Subject: Re: [regext] EPP Transport Service Discovery

Caution: This email is from an external sender. Please do not click links or open attachments unless you recognize the sender and know the content is safe. Forward suspicious emails to isitbad@.


Scott, et al,

This seems to me an excellent idea, but let me suggest adding a bit more content.

And before doing so, let me acknowledge that a registry will likely inform its registrars well in advance of any changes and will likely provide a test system for registers to use in advance of a cutover to a new transport system.  But rather than depending on this alone, an automated process for discovering the transport will be very helpful.

And now for the added content:

If a registry upgrades to a new transport method, it will likely operate both the old and new transport for a period of time.  Indeed, it might even support three or more transport methods during some periods.  Accordingly, the response to a service discovery query will likely contain multiple answers.  Each answer should also include a flag indicating whether it is a preferred method.

But wait, there's more.

Each transport method will go through a lifecycle.  The transport method lifecycle has the following states.

A. Announcement that the method will be supported in the future.  (Including the anticipated date is a good idea, but the date should be interpreted as a guess, not a certainty.)

B. Announcement that the method is now supported.  Include the date it became supported.  (A transport method in this state is "preferred."  There should be at least one method in this state, but there could be more than one.)

C. Announcement that the method that has been supported is scheduled to be removed.  Include the estimated date of removal.  This will serve as notice that any registrar still using the transport should move to another available method that has reached state B.  (And, of course, there should indeed already be at least one method in state B.)

D. Announcement that the method will become unavailable on a specific date.  (All use of a method in this state should have ceased.  However, if the method is still in use by a registrar, it will work.  The registry's system or other monitoring systems can take note and escalate attention to the appropriate managers,)

E. Removal of the transport method from the set of answers.

Extension of the proposal to include these states is easy.  Just add a flag to indicate whether the transport method is in state A, B, C or D, and include the date.

Comments?

Steve


On Tue, Mar 19, 2024 at 7:11 PM Hollenbeck, Scott <shollenbeck=40verisign.com@dmarc.ietf.org<mailto:40verisign.com@dmarc.ietf.org>> wrote:
As noted during this morning’s regext session, we need to consider how a client can discover the transport services provided by an EPP server. Opportunistic probing is one method, another is server capability publication using something like an SVCB record that’s published in a DNS zone maintained by the EPP server operator. Perhaps something like this:

epp.example.net<http://secure-web.cisco.com/1Dx4oMEim9TuCUzKpRK0GTLL5llykjXS110SiPk9d8qm4VInLeDPvtxong6fnn7jKREBNdVkPY8QsuVb_dOBlJ_tew_7o775_C3qzGJPCn_AjJH_ROX9zyenAwLSYZgZUedZlLFDlXUTNu2GKul9Wj5OeA0m63WTBDZ8IdSOPnWZ85fFuTJ5ImWTmOFHLqRFNI5WJpXoSAuao9NsrJ79tiIeQhjKu67n8N1tDpMSE7mcycsfFHrOF5rvVD1HR3VRTDuOWhjq34W16X8P10QjLt2UInTQGkCLW9sr3DsN760U/http%3A%2F%2Fepp.example.net%2F>.  7200  IN SVCB 3 epp.example.net<http://secure-web.cisco.com/1Dx4oMEim9TuCUzKpRK0GTLL5llykjXS110SiPk9d8qm4VInLeDPvtxong6fnn7jKREBNdVkPY8QsuVb_dOBlJ_tew_7o775_C3qzGJPCn_AjJH_ROX9zyenAwLSYZgZUedZlLFDlXUTNu2GKul9Wj5OeA0m63WTBDZ8IdSOPnWZ85fFuTJ5ImWTmOFHLqRFNI5WJpXoSAuao9NsrJ79tiIeQhjKu67n8N1tDpMSE7mcycsfFHrOF5rvVD1HR3VRTDuOWhjq34W16X8P10QjLt2UInTQGkCLW9sr3DsN760U/http%3A%2F%2Fepp.example.net%2F>. (
       alpn="bar" port="700" transport="tcp")

There is no “transport” SvcParamKey currently registered with IANA, but that’s easy to do. I think there’s a draft here that needs to be written.

Scott
_______________________________________________
regext mailing list
regext@ietf.org<mailto:regext@ietf.org>
https://www.ietf.org/mailman/listinfo/regext<https://secure-web.cisco.com/13eJ1HcVsWCkFp_YmyFMAZo8in-eyt4CM8_emYFuLPstlMkuwVm-pUx6C5JqqgXW-iAwRWBWsAL0DPhewe4Wg3bNkHY30tB51lXeJOr_n5nFNOJko81xntuGPQcN_5SZpU32GUo62RxBb5QsgQZPwl5aKfrJKDdBevOHWGWWD20KJKoIl47NgXzaVj5Vg3YDcU1mbhcJ5K54DWzyWznHv4HdcPYjUfJya4LMHNyPCQdax11MBe10wwAK77MihOJBS3yA8ozcF_rHYY55x7LGPbKVvoYHtkfmNetzaij--tvA/https%3A%2F%2Fwww.ietf.org%2Fmailman%2Flistinfo%2Fregext>


--
Sent by a Verified
[Image removed by sender. Sent by a Verified sender]<https://secure-web.cisco.com/10brGmovAGEfSvh97kxsClT-_fGYW1stAYZNjjF0_Omzli81z_86JKNanYF0S4VyYmGMwpMXlUCKvzSRVCqzQsiQmN60D7d1TW9oYq2u0ka-k1v4WpHD-xwRbQKAZC0tnpq641-o6pjES218bcBuSHhrWLgobK5PvUW4urR7prm1sflJWXPSOoW0QD2L1rEJTip4sK1JfHf1mEsLeCMFafYS42O4953CvxPAGcFGEg8f5sCcXe0VgQ-HFvmCDnqqz3eW8RFEeojCMWMn4cNiqDQmwu4SPZCWI93xzFkI5j8Y/https%3A%2F%2Fwallet.unumid.co%2Fauthenticate%3FreferralCode%3Dtcp16fM4W47y>
sender