Re: [regext] OK, What Next? (was RDAP Extensions Approach Analysis v2)

"Gould, James" <jgould@verisign.com> Mon, 27 June 2022 18:01 UTC

Return-Path: <jgould@verisign.com>
X-Original-To: regext@ietfa.amsl.com
Delivered-To: regext@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2287AC157B5D for <regext@ietfa.amsl.com>; Mon, 27 Jun 2022 11:01:20 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -7.108
X-Spam-Level:
X-Spam-Status: No, score=-7.108 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=verisign.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id O07hbupE_9vK for <regext@ietfa.amsl.com>; Mon, 27 Jun 2022 11:01:15 -0700 (PDT)
Received: from mail2.verisign.com (mail2.verisign.com [72.13.63.31]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 799B0C159487 for <regext@ietf.org>; Mon, 27 Jun 2022 11:01:15 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=verisign.com; l=20523; q=dns/txt; s=VRSN; t=1656352875; h=from:to:subject:date:message-id:mime-version; bh=TvGh5F0F9fYzQDO8K0S8L/IgINPG7DPsoGn6gPMO9G0=; b=Ea60ILzHhMd/qXZZmybQ/ZvomQ78gDhE2eJsizdHZ9pauWGCSV2aA1qP XD0TqGnudO5EeRDyvdSEowVUUdI+flNQw2bhwVGLyrXHvZ9M6yJovBppq sqxRCYNmNJr7eEhXxZz13LHrfcF6DY6eNCMvAadxQ4k92dheGnvJkfzZ0 R6kaogyUacAeq5aNiEBxRfxatiXANWFhS7Qar7Z811UQBheLApeZ8FU03 JCH/7tiJzd3fsL/tXoFJIgsPFfFOemn4wo794KeFM4WKplXBWQaCvXxuW DWKUUfUNPRUyreiEk08Ic/cbZHXZe7fjRpPmkAFRVUjT6bc0QH650ypmP A==;
IronPort-Data: A9a23:pPal5qxThytjtiFEGvd6t+dDxyrEfRIJ4+MujC+fZmUNrF6WrkUOy TQXDTqFOK6OYWChfop2O9iy/EkPv5PSxtY1SFFq+S00HyNBpPSeCIXCJC8cHc8wwu7rFxs7s ppEOrEsCOhuExcwcz/0auCJQUGRUchkf5KkYAL+EnkZqTRMFWFw03qPp8Zj2tQy2YbjXFvX0 T/Pi5a31GGNimYc3l08tvrrRCNH5JwebxtB4zTSzdgS1LPvvyF94KA3fMldHFOhKmVgJdNWc s6YpF2P1jiAo0pyUIPNfoHTKSXmSpaKVeSHoiQOB/j62nCurARqukowHKJ0hUu6F1xlNj2+o TlAncXYdOsnAkHDsPQeQjNfPA5QBKBXweLVYljllfej01KTJhMAw902ZK03Faci3L9IJ0x+r aZeNjsKdAjFju7w3qigTK9ngcFLwMvDZdtZ4y47i2iEVrB6EPgvQI2TjTNc9DU/gd1KEd7Aa tAYcjtgalLLZBgn1lI/Uc9mxr/01iOXnztwg02E/JY4wXHv4hV07bXJE/r3Re6tbJAA9qqfj iecl4jjOTkBNNubzTeD+H+nhbqTxT32QoMJFbK+sPVthXWfw2UJA1sXWEe15/6jhSaWXttFK ktS/i0go7I/+EuDT9jhGRa+ujiFonY0QddfHv0mwACA1qSS5ByWblXoVRZLctp/q8k7VWRwk 0SXhZXsBCcqurrTQ2ibr/GKtyi0fyMSKAfueBM5cOfM2PG7yKlbs/4FZo8L/HKd5jEtJQzN/ g==
IronPort-HdrOrdr: A9a23:1btgTq9fzoNnDBKU3g1uk+AFI+orL9Y04lQ7vn2ZLiYlF/Bw9v re/sjzuiWVtN98Yh8dcLO7V5VoKEm0naKdirNhXotKMjOGhEKYaK9v6of4yyDtFmnU5odmuZ tIQuxbBMfrBVZ3yeT38GCDeeoI8Z2i/LqzjenTi01xSxpnApsM0y5iBh2FHlZNSA5KOJo8GP OnjfZ6mw==
X-IronPort-AV: E=Sophos; i="5.92,227,1650931200"; d="scan'208,217"; a="15020482"
Received: from BRN1WNEX01.vcorp.ad.vrsn.com (10.173.153.48) by BRN1WNEX02.vcorp.ad.vrsn.com (10.173.153.49) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.1.2375.24; Mon, 27 Jun 2022 14:01:13 -0400
Received: from BRN1WNEX01.vcorp.ad.vrsn.com ([10.173.153.48]) by BRN1WNEX01.vcorp.ad.vrsn.com ([10.173.153.48]) with mapi id 15.01.2375.024; Mon, 27 Jun 2022 14:01:13 -0400
From: "Gould, James" <jgould@verisign.com>
To: "shollenbeck=40verisign.com@dmarc.ietf.org" <shollenbeck=40verisign.com@dmarc.ietf.org>, "mario.loffredo@iit.cnr.it" <mario.loffredo@iit.cnr.it>, "regext@ietf.org" <regext@ietf.org>
Thread-Topic: RE: RE: [regext] OK, What Next? (was RDAP Extensions Approach Analysis v2)
Thread-Index: AQHYik/jstnitK3MckqrzlEXYU2BYg==
Date: Mon, 27 Jun 2022 18:01:13 +0000
Message-ID: <602FA3F5-0F22-405C-AE47-F696DAC160B6@verisign.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
user-agent: Microsoft-MacOutlook/16.59.22031300
x-originating-ip: [10.170.148.18]
Content-Type: multipart/alternative; boundary="_000_602FA3F50F22405CAE47F696DAC160B6verisigncom_"
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/regext/vi63cEnjn-Uj3D8VwZK15EUKCgM>
Subject: Re: [regext] OK, What Next? (was RDAP Extensions Approach Analysis v2)
X-BeenThere: regext@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: Registration Protocols Extensions <regext.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/regext>, <mailto:regext-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/regext/>
List-Post: <mailto:regext@ietf.org>
List-Help: <mailto:regext-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/regext>, <mailto:regext-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 27 Jun 2022 18:01:20 -0000

Scott,



The "including a unique string literal value registered in the IANA RDAP Extensions registry specified in [RFC7480]" could be the prefix value "lunarNIC", where the “lunarNIC_level_0” value does include the unique string literal value “lunarNIC” registered in the IANA RDAP Extensions registry specified in [RFC7480].  The RFCs refer to identifiers, prefixes, and now unique string literal values.  They are very non-specific and open to interpretation.



If we were to support Approach B, my recommendation for the errata change to RFC 9083 would be to change section 4.1 to read:



…

When custom JSON values are inserted into responses,

conformance to those custom specifications MUST be indicated by

including unique prefix identifiers registered in the IANA RDAP

Extensions registry specified in [RFC7480].  The conformance value

MUST match or be prefixed with a registered unique prefix identifier.

For example, if the fictional Registry of the Moon wants to signify that their JSON
responses are conformant with their registered extensions, the conformance value
might be "lunarNIC_level_0" that uses the registered “lunarNIC” prefix identifier.
…


If normative language can’t be used in the errata change, then the second sentence could read “A conformance value matches or is prefixed with a registered unique prefix identifier”.  The question is how we address the inclusion of a non-prefix identifier, such as “icann_rdap_response_profile_0” in the RDAP Extensions Registry, which defines policy and not new extension elements.

I believe a separate draft will be needed to fully define creating the various forms of RDAP extensions, which includes versioning.



--



JG



James Gould

Fellow Engineer

jgould@Verisign.com <applewebdata://13890C55-AAE8-4BF3-A6CE-B4BA42740803/jgould@Verisign.com>



703-948-3271

12061 Bluemont Way

Reston, VA 20190



Verisign.com <http://verisigninc.com/>



On 6/27/22, 12:54 PM, "Hollenbeck, Scott" <shollenbeck=40verisign.com@dmarc.ietf.org> wrote:





    > -----Original Message-----

    > From: Gould, James <jgould=40verisign.com@dmarc.ietf.org>

    > Sent: Monday, June 27, 2022 12:37 PM

    > To: Hollenbeck, Scott <shollenbeck@verisign.com>; mario.loffredo@iit.cnr.it;

    > regext@ietf.org

    > Subject: [EXTERNAL] Re: RE: [regext] OK, What Next? (was RDAP Extensions

    > Approach Analysis v2)

    >

    > Caution: This email originated from outside the organization. Do not click

    > links

    > or open attachments unless you recognize the sender and know the content

    > is safe.

    >

    > Scott,

    >

    > The question is how we handle versioning, which is an aspect not covered in

    > the existing RFCs.  The only version reference is in the RDAP Conformance

    > definition in section 4.1 of RFC 9083 with "rdap_level_0" and

    > "lunarNIC_level_0".  If the use of "lunarNIC_level_0" was a mistake, then

    > versioning is completely absent for extensions.  A client can easily do a

    > regular expression match with the RDAP conformance values since the

    > prefixes should be unique.  The reference to "The extension identifier is

    > used as a prefix in JSON names and as a prefix of path segments in RDAP

    > URLs" in RFC 7480 simply defines the primary key in the RDAP Extensions

    > Registry and doesn't imply anything about the RDAP Conformance value in

    > RFC 9083.



    [SAH] Sorry, but "doesn't imply anything about the RDAP Conformance value in

    RFC 9083" is just not true. 7480 describes that prefix as being registered

    with IANA and being used to prefix extension elements. 9083 says "When custom

    JSON values are inserted into responses, conformance to those custom

    specifications MUST be indicated by including a unique string literal value

    registered in the IANA RDAP Extensions registry specified in [RFC7480]".

    That's clear linkage.



    I've said earlier that the errata change to 9083 could be from "lunarNIC" to

    "lunarNIC_level_0" to make the examples consistent. That change would also

    demonstrate that version information can be included in registered prefixes.



    Scott