Re: [regext] Questions about RDAP extensions and registration at IANA, role of prefix and version

"Hollenbeck, Scott" <shollenbeck@verisign.com> Thu, 07 November 2019 12:04 UTC

Return-Path: <shollenbeck@verisign.com>
X-Original-To: regext@ietfa.amsl.com
Delivered-To: regext@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6747412080A for <regext@ietfa.amsl.com>; Thu, 7 Nov 2019 04:04:46 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.999
X-Spam-Level:
X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=verisign.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Vx4X3OwG06HX for <regext@ietfa.amsl.com>; Thu, 7 Nov 2019 04:04:44 -0800 (PST)
Received: from mail4.verisign.com (mail4.verisign.com [69.58.187.30]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7DFFF120143 for <regext@ietf.org>; Thu, 7 Nov 2019 04:04:44 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=verisign.com; l=8384; q=dns/txt; s=VRSN; t=1573128284; h=from:to:cc:date:message-id:references:in-reply-to: content-transfer-encoding:mime-version:subject; bh=izfFbahdznVNWh3e8FbBsnXWSNfm0PS8WdNzBKDo3q4=; b=jUy/4TbIKS3aHEFP8Zi9x9VbwrvrG8M+HH8C+X9WXdT7/rumFySUSlzI Q0TYmgy87IiTJs/eEuykfx8by9ePRh9WVPIWeKeB4e2TqUCk8nH4luXba 9k72/HT2qNKWS0toOqAmGPG7ottcVkh+tQOhTqnN5Tv+9q+2y1u0qzwAl eQ8Jfn5hBOZygNC4pecCb2mkcKZbVBkuNCS3p34lDZAuY9VmN+dijTwM1 L46mqYyUSgMC/9J0KrB+runzqWczYjjXhde0moRY40BttmopwRYTZBogr xG/L5O676F8FkoDUFarK6QYvYltMMWRQOgbN1iLVnWg3xe4K7/L7tVBOw g==;
X-IronPort-AV: E=Sophos;i="5.68,278,1569297600"; d="scan'208";a="8771375"
IronPort-PHdr: 9a23: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
X-IPAS-Result: A2E5AABYB8Rd/zGZrQpbChsBAQEBAQEBBQEBAREBAQMDAQEBgW0DAQEBCwGDC4ExCoQfkSaZQIFnCQEBAQEBAQEBAQcBIwwBAQKEPgIXhBw3Bg4CDgEBAQQBAQEBAQUDAQEBAoYgDII7ImprAQEBAQEBAQEBAQEBAQEBAQEBARYCMhFDEhIBAR0BAQEBAgEjETcBCgMFBwQCAQgRBAEBAwIRDgcCAgIwFQgIAgQBDQUIgxuCVy+yGnWBMoo+BoEOKAGFGYcSgUE+gRABgmQuPoJiAQEDgRkRCVEZglGCXgSNCkKCN4VimB8DB4IkhxeOIiOZco5GiDGROQIEAgQFAhWBaIF8cFCCbFARFJBuiE+FP3SQGoEPAQE
Received: from BRN1WNEX02.vcorp.ad.vrsn.com (10.173.153.49) by BRN1WNEX02.vcorp.ad.vrsn.com (10.173.153.49) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.1779.2; Thu, 7 Nov 2019 07:04:40 -0500
Received: from BRN1WNEX02.vcorp.ad.vrsn.com ([fe80::7c0a:1cc:5def:9dde]) by BRN1WNEX02.vcorp.ad.vrsn.com ([fe80::7c0a:1cc:5def:9dde%4]) with mapi id 15.01.1779.002; Thu, 7 Nov 2019 07:04:40 -0500
From: "Hollenbeck, Scott" <shollenbeck@verisign.com>
To: "pm@dotandco.com" <pm@dotandco.com>, "regext@ietf.org" <regext@ietf.org>
CC: "andy@arin.net" <andy@arin.net>, "marc.blanchet@viagenie.ca" <marc.blanchet@viagenie.ca>
Thread-Topic: [EXTERNAL] Questions about RDAP extensions and registration at IANA, role of prefix and version
Thread-Index: AQHVlNFppAX3zbkEXkaeLjcuj3jTdKd/m/DQ
Date: Thu, 07 Nov 2019 12:04:40 +0000
Message-ID: <0851ad33353441189ae5d5b4baa3e9fa@verisign.com>
References: <cd67ca1a-febf-4304-afdb-e70b39026cd8@www.fastmail.com>
In-Reply-To: <cd67ca1a-febf-4304-afdb-e70b39026cd8@www.fastmail.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [10.170.148.18]
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/regext/gX7r-RXx5Zy-IUlNjPPu4EPPWzo>
Subject: Re: [regext] Questions about RDAP extensions and registration at IANA, role of prefix and version
X-BeenThere: regext@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Registration Protocols Extensions <regext.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/regext>, <mailto:regext-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/regext/>
List-Post: <mailto:regext@ietf.org>
List-Help: <mailto:regext-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/regext>, <mailto:regext-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 07 Nov 2019 12:04:50 -0000

Patrick, my expectation is that the value registered with IANA is the exact value that should appear in an rdapConformance section. The purpose of these values is to clearly identify an associated specification, so one should be able to extract an identifier from an RDAP response, look it up in the IANA registry, find an exact match, and unambiguously identify the associated specification. We clearly need to clean up this part of 7483 if/when we do 7483bis.

Scott

> -----Original Message-----
> From: Patrick Mevzek <pm@dotandco.com>
> Sent: Wednesday, November 6, 2019 1:37 PM
> To: regext@ietf.org
> Cc: Andrew Lee Newton <andy@arin.net>; Hollenbeck, Scott
> <shollenbeck@verisign.com>; marc.blanchet@viagenie.ca
> Subject: [EXTERNAL] Questions about RDAP extensions and registration at
> IANA, role of prefix and version
>
> Hello,
>
> (after having written all the below, I see it is touched already by
> https://tools.ietf.org/html/draft-blanchet-regext-rdap-deployfindings-
> 05#section-2.2 for most points, so there is some overlap but still sending my
> views below, because that draft hints at just changing things in the current
> IANA registry, where I think some RFC changes are needed too) (so CCing
> the designated experts for the IANA registry, and Marc as author of the
> above draft)
>
> IANA registry at
> https://www.iana.org/assignments/rdap-extensions/rdap-
> extensions.xhtml#rdap-extensions-1
> lists extensions names.
>
> The examples in RFC7483 with lunarNic makes me think that
> * the prefix is lunarNic
> * which is what should be registered at IANA
> * the conformance list has lunarNic_level_0
> * fields have lunarNic as prefix.
>
> So "_level_0" is a kind of suffix, under control of the relevant party (of the
> namespace being registered), but is it free-form or should it be always
> _level_XXXX?
> Once "foobar" is registered at IANA, what is its owner allowed to do?
> Can it uses any of the following in rdapConformance:
> - foobar
> - foobar_0
> - foobar0
> - foobar_level_0
> - foobar_buzz
> - foobar_level_0_sublevel_42
> ?
>
> RFC7483 §4.1 goes over this without explaining it.
>
> So some observations/questions:
>
> 1) _level_0 is not the only case.
> "fred" as registered, appears in rdapConformance as "fred_version_0"
>
> So this would make me think the _level_0 syntax is not mandatory
>
> 2) some extensions do not appear used with any suffix:
> "arin_originas0" and "cidr0" as registered as such and appear as such in
> rdapConformance.
>
> However, the final 0 seems like a "version" indicator, so why "cidr0" vs
> "cidr_level_0"?
> If so, should the registration be instead for "arin_originas" and "cidr" so that
> the relevant owners can "upgrade" to a later version without a new IANA
> registration?
> But if so, this creates a collision. Shouldn't the RFC mention that when you
> register X you own X_anything, not Xanything, that is make at least a _
> character mandatory after the prefix if what is used in the rdapConformance
> is not exactly the prefix?
>
> 3) kind of same case for:
> icann_rdap_response_profile_0
> icann_rdap_technical_implementation_guide_0
>
> they are used as is in rdapConformation, but shouldn't the IANA registration
> really be for the prefix, without consideration of the "version"? And they do
> not use either _level_0, _version_0, or 0 like other extensions, but now _0.
>
> Even their own specification says:
> At the time of publication,"icann_rdap_technical_implementation_guide" is
> pending registration in the IANA RDAP Extensions Registry
>
> So what was registered at IANA is not what the specification says, there is a
> "_0" difference.
>
> Again, it seems the _level_0 part is completely optional, is that the intent?
>
>
> 4) RFC 7480 says about extension prefixes: "and they
>    SHOULD NOT begin with an underscore character, numerical digit, or
>    the characters "xml"."
>
> I would suggest this is amended at some point in the future to reserve
> everything starting with "rdap_" to only be used by extensions defined in
> RFCs, like RFC8521 does.
> (I am not sure what is the gain by refusing "xml" as prefix, even if I do not see
> it as a useful prefix either. RDAP is far more JSON than XML stuff so if we had
> to restrict something "json" would have made more sense than "xml" to me,
> even if neither makes sense to me in some way here; explanations in
> RFC7480 §6 do not really convince me there)
>
>
> What do I miss for the above discussion on prefix/suffix/version?
> Are there other documents explaining in more details this prefix/version
> schema and its rules?
>
> I am not asking all the above for the beauty(?) of it, things like that have
> strong interoperability consequences and needs to be taken into account to
> properly design a client connecting to various servers, which I sadly discover
> only now as working in RDAP-land.
>
>
> PS: unrelated additional petpeeve, for here or anywhere else, any link taken
> to a "reference" but which points to a git repository, without enforcing in the
> URL a specific commit, is not really a reference. It points to the latest
> "master" version of that file, which can change over time, as a branch tip is
> not a stable reference. Links to repositories should be refused if they do not
> include a stable reference, which means a commit ID (a tag can also move, so
> it is not good enough)
>
> Of course for any other link, the content can also change at any time.
> Wikipedia solves that by adding to each link something like "retrieved on
> XXXX-XX-XX" so that you have at least a timestamp. IANA registration could
> at least include a timestamp (when the extension was registered)
>
> PS2: seeing that all of the above come from the fact that we are basically
> trying to reinvent XML namespaces but in JSON... and arriving at the situation
> where we get all the drawbacks without any strong advantage, at least not
> until things are clearer/stricter.
>
> --
>   Patrick Mevzek
>   pm@dotandco.com