Re: [regext] REGEXT Interim Meeting

Roger D Carney <rcarney@godaddy.com> Fri, 01 September 2017 16:08 UTC

Return-Path: <rcarney@godaddy.com>
X-Original-To: regext@ietfa.amsl.com
Delivered-To: regext@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 54031132F9C for <regext@ietfa.amsl.com>; Fri, 1 Sep 2017 09:08:15 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: 0
X-Spam-Level:
X-Spam-Status: No, score=0 tagged_above=-999 required=5 tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=secureservernet.onmicrosoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id yYCBTDU1tm1S for <regext@ietfa.amsl.com>; Fri, 1 Sep 2017 09:08:11 -0700 (PDT)
Received: from NAM02-SN1-obe.outbound.protection.outlook.com (mail-sn1nam02on0101.outbound.protection.outlook.com [104.47.36.101]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 605B113417F for <regext@ietf.org>; Fri, 1 Sep 2017 09:08:11 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=secureservernet.onmicrosoft.com; s=selector1-godaddy-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=o4QOoA8mNQL/BNbJ0eEZFu1t5lzbw9pl6tA7g+zItG4=; b=w7v8wQOZBIeOHV6/hLjYzM08tATxgjAZ2aYmAvTaMlMdH9MmTI4gn+MvDxLnq9o1kCzRP517/eV0AIeqBVuWfNdmMn7oV9UCU7WmRZOk2ss7LcEy03vVd7+RbaQwoF+gw8aiAhmmY0G1rUj0lntWDYWuNxKvkjfEhatoZEXHjz8=
Received: from CY4PR02MB2549.namprd02.prod.outlook.com (10.173.41.8) by CY4PR02MB3286.namprd02.prod.outlook.com (10.165.88.157) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.13.10; Fri, 1 Sep 2017 16:08:09 +0000
Received: from CY4PR02MB2549.namprd02.prod.outlook.com ([10.173.41.8]) by CY4PR02MB2549.namprd02.prod.outlook.com ([10.173.41.8]) with mapi id 15.20.0013.012; Fri, 1 Sep 2017 16:08:09 +0000
From: Roger D Carney <rcarney@godaddy.com>
To: "regext@ietf.org" <regext@ietf.org>
Thread-Topic: [regext] REGEXT Interim Meeting
Thread-Index: AQHTHcaahymmpvqGL0Cpo6t5YON2Q6KgJLbA
Date: Fri, 01 Sep 2017 16:08:09 +0000
Message-ID: <CY4PR02MB2549E88A538B5F9107C1F369B1920@CY4PR02MB2549.namprd02.prod.outlook.com>
References: <D12AB799-0624-4C80-B761-1FC79FC3AAA1@verisign.com>
In-Reply-To: <D12AB799-0624-4C80-B761-1FC79FC3AAA1@verisign.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: yes
X-MS-TNEF-Correlator:
authentication-results: spf=none (sender IP is ) smtp.mailfrom=rcarney@godaddy.com;
x-originating-ip: [199.189.229.39]
x-ms-publictraffictype: Email
x-microsoft-exchange-diagnostics: 1; CY4PR02MB3286; 6:LfH96U95JOR6Jc8dhgoiNl5A2UxlofR3NM7xKKSOAKEmam2NP1Ucn/PkhHOM2FcrwPPwR9rjt9LWukuTmiddKiyTGViVWhaKmPCWzvGzKw7XOms9uWvhqb+4uEt1OKh8Fl3HFEp6ea6P41NMy3ClwG+vOiW2qFYOscOSxoxV3HHDylot3/0gsUqfUIruUnF2vhcwkIIwHqn85QUX/ZmISchxaiTASYk82EWGHKHZDHHavTpSvVXzivHyXY3KiXjmRl4lAPXc8FuMgSJFmFyQ/Ow0T/567JE5o/J1beIB/lSQcq77W1Xhzdt6yZEZwA9OTwqsP7eFaMmX9EjUCD1iJg==; 5:lXntC77HussqjF/l7R0t5QnD8r3FPOuiAqQswgnGSDNjWIPBFbytHr4p/uRVWP96D535DFH7PY1nxXcIseXte44EqPe1OS1MTfjOwzSz1Ug0ZL6kCj77MyuriMd6osnuJU6FdcFEhMgEzo0zpVSO7A==; 24:7X3/nxozHPx37T4gWKFMp3S2aoN54UQxWx8x9KJJnu+YTnQYf9BxnJEvV6scLMp8EOy2+2amz3JQZr26WyC4E5ydq/VVkHqlx+Hxl97nlbI=; 7:+6VjHsUIavF4f+RJuDRKGn4NboIcV6cjulDDWHWKhb5M2KY2RLvSomKmZrG2iPU6sbV7yk49e8cBVw2ABqv0gS1u51AqJ+GKiKOcqmML1LLYso515KCxGYJqOKi2TwIXcTQV0spqQQW7X0+wnQ6jg1DthGFGXjWbFvv11G1nreLiUjjmvF+LAbbkkkHNcZ7keDlw9YYN15rApPCRBJ0+ZlRYdGqPOUtMBzKLcWJfjDA=
x-ms-exchange-antispam-srfa-diagnostics: SSOS;
x-ms-office365-filtering-correlation-id: 2c3a5e0d-394f-4067-87cd-08d4f153a394
x-ms-office365-filtering-ht: Tenant
x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(300000500095)(300135000095)(300000501095)(300135300095)(22001)(300000502095)(300135100095)(2017030254152)(48565401081)(300000503095)(300135400095)(2017052603199)(49563074)(201703131423075)(201703031133081)(201702281549075)(300000504095)(300135200095)(300000505095)(300135600095)(300000506095)(300135500095); SRVR:CY4PR02MB3286;
x-ms-traffictypediagnostic: CY4PR02MB3286:
x-exchange-antispam-report-test: UriScan:(158342451672863)(278428928389397)(246761809553906)(21748063052155);
x-microsoft-antispam-prvs: <CY4PR02MB3286D7BD684BC9B32440A709B1920@CY4PR02MB3286.namprd02.prod.outlook.com>
x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(100000700101)(100105000095)(100000701101)(100105300095)(100000702101)(100105100095)(102415395)(6040450)(601004)(2401047)(8121501046)(5005006)(10201501046)(93006095)(93001095)(3002001)(100000703101)(100105400095)(6055026)(6041248)(201703131423075)(201702281528075)(201703061421075)(201703061406153)(20161123564025)(20161123562025)(20161123558100)(20161123560025)(20161123555025)(6072148)(201708071742011)(100000704101)(100105200095)(100000705101)(100105500095); SRVR:CY4PR02MB3286; BCL:0; PCL:0; RULEID:(100000800101)(100110000095)(100000801101)(100110300095)(100000802101)(100110100095)(100000803101)(100110400095)(100000804101)(100110200095)(100000805101)(100110500095); SRVR:CY4PR02MB3286;
x-forefront-prvs: 0417A3FFD2
x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(39860400002)(189002)(497574002)(377454003)(199003)(54164003)(6246003)(9686003)(53546010)(606006)(53936002)(54556002)(54896002)(6306002)(110136004)(53376002)(77096006)(6916009)(6506006)(86362001)(2950100002)(97736004)(2501003)(16200700003)(53946003)(236005)(5660300001)(189998001)(2900100001)(74316002)(7696004)(229853002)(478600001)(105586002)(33656002)(106356001)(99936001)(101416001)(25786009)(790700001)(6116002)(68736007)(3846002)(9326002)(561944003)(2906002)(2351001)(3280700002)(102836003)(3660700001)(14454004)(99286003)(6436002)(55016002)(66066001)(54356999)(50986999)(76176999)(81156014)(8936002)(7736002)(81166006)(8676002)(733005)(1730700003)(5640700003)(5630700001)(569006); DIR:OUT; SFP:1102; SCL:1; SRVR:CY4PR02MB3286; H:CY4PR02MB2549.namprd02.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en;
received-spf: None (protection.outlook.com: godaddy.com does not designate permitted sender hosts)
spamdiagnosticoutput: 1:99
spamdiagnosticmetadata: NSPM
Content-Type: multipart/related; boundary="_006_CY4PR02MB2549E88A538B5F9107C1F369B1920CY4PR02MB2549namp_"; type="multipart/alternative"
MIME-Version: 1.0
X-OriginatorOrg: godaddy.com
X-MS-Exchange-CrossTenant-originalarrivaltime: 01 Sep 2017 16:08:09.3988 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: d5f1622b-14a3-45a6-b069-003f8dc4851f
X-MS-Exchange-Transport-CrossTenantHeadersStamped: CY4PR02MB3286
Archived-At: <https://mailarchive.ietf.org/arch/msg/regext/z2nNReDE03CRkjurx0KtaLGBh6I>
Subject: Re: [regext] REGEXT Interim Meeting
X-BeenThere: regext@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Registration Protocols Extensions <regext.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/regext>, <mailto:regext-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/regext/>
List-Post: <mailto:regext@ietf.org>
List-Help: <mailto:regext-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/regext>, <mailto:regext-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 01 Sep 2017 16:08:15 -0000

Hi James,

After rereading the <check> commands in RFC 5730 and 5731, I do agree with you that it appears the RFCs intended (Scott Hollenbeck may provide clarity) the <check> command to return “avail=0” during a “quiet period” even though “quiet period” was not mentioned specifically or defined in these RFCs. I just want to recognize in practice today this is not always the case, some registries return “avail=1” on <check> commands processed during quiet periods if the name has not been registered.

So in reference to the Fee draft I am recommending that paragraph 5 of section 3.8 be changed from:

“If the client <fee:command> contains no phase/subphase attributes and the server is currently in a "quiet period" (e.g. not accepting registrations or applications) the server MUST return data consistent with the general availability phase.”

to

“If the client <fee:command> contains no phase/subphase attributes and the server is currently in a "quiet period" (e.g. not accepting registrations or applications) the server MUST return data consistent with RFCs 5730 and 5731 and MUST include a <fee:reason> in the response extension.”

Should we force a specific reason (e.g. <fee:reason>Quiet period, please provide appropriate phase details for fee information.</fee:reason>)?

Does anyone else have thoughts on this rewording?


Thanks
Roger


From: Gould, James [mailto:jgould@verisign.com]
Sent: Friday, August 25, 2017 12:22 PM
To: Roger D Carney <rcarney@godaddy.com>; regext@ietf.org
Subject: Re: [regext] REGEXT Interim Meeting

Roger,

It’s not clear what the “quiet period” is.  Is it really part of the open phase, is it a sub-phase, or is it a gap between phases?  Without a clear definition of what a “quiet period” is, I believe it is difficult to define the expected behavior for it in the registry fee extension.  My recommendation is to define the registry fee draft to cover one or more active phases, where a TLD should always be in at least one defined phase (“sunrise”, “landrush”, “claims”, “open”, or “custom”), where a “quiet period” may be a custom phase that does not require special handling in the registry fee extension.  The registrars are not required to implement draft-ietf-regext-launchphase, but should be aware of the possible set of phases the TLD operates in when determining the target fee.  If the registrar is unaware of the phases, then the server will respond based on the current active phase(s) according to what is defined in the registry fee extension (e.g., fee of the current phase if there is just one or an error if there is more than one phase).


—

JG

[id:image001.png@01D255E2.EB933A30]

James Gould
Distinguished Engineer
jgould@Verisign.com

703-948-3271
12061 Bluemont Way
Reston, VA 20190

Verisign.com<http://verisigninc.com/>

From: regext <regext-bounces@ietf.org<mailto:regext-bounces@ietf.org>> on behalf of Roger Carney <rcarney@godaddy.com<mailto:rcarney@godaddy.com>>
Date: Friday, August 25, 2017 at 12:33 PM
To: "regext@ietf.org<mailto:regext@ietf.org>" <regext@ietf.org<mailto:regext@ietf.org>>
Subject: [EXTERNAL] Re: [regext] REGEXT Interim Meeting

Hi James,

So you are suggesting the “quiet period” is a distinct phase. As I was suggesting the “quiet period” is the “open” phase, I don’t think that is an exception to the rule, just defining “quiet period.”

If we write it into the document, there is no assuming/forecasting of client desire.

I do want to sort of retract my presumption from my previous email to the list. There are registrars that did not implement draft-ietf-regext-launchphase, but the link to fee is really not appropriate.


Thanks
Roger


From: Gould, James [mailto:jgould@verisign.com]
Sent: Thursday, August 24, 2017 2:43 PM
To: Roger D Carney <rcarney@godaddy.com<mailto:rcarney@godaddy.com>>; regext@ietf.org<mailto:regext@ietf.org>
Subject: Re: [regext] REGEXT Interim Meeting

Roger,

I don’t believe it is clean to assume the capabilities or desire of the client when the current phase is a quiet period by defaulting the return to the “open” / general registration phase.  When there is an active phase the behavior is to return the fee for the active phase by default.  If you consider the quiet period a phase (null or explicitly the custom “quiet” period) then why would you make an exception to that rule?  A client submitting pre-registration availability checks needs to be aware of what they’re looking for (fee during “sunrise”, fee during “claims”, fee during “open”), and the protocol should not attempt to forecast the clients desire.


—

JG

[cid:image002.png@01D32306.BB40FA10]

James Gould
Distinguished Engineer
jgould@Verisign.com

703-948-3271
12061 Bluemont Way
Reston, VA 20190

Verisign.com<http://verisigninc.com/>

From: regext <regext-bounces@ietf.org<mailto:regext-bounces@ietf.org>> on behalf of Roger Carney <rcarney@godaddy.com<mailto:rcarney@godaddy.com>>
Date: Thursday, August 24, 2017 at 3:31 PM
To: "regext@ietf.org<mailto:regext@ietf.org>" <regext@ietf.org<mailto:regext@ietf.org>>
Subject: [EXTERNAL] Re: [regext] REGEXT Interim Meeting

Good Afternoon,

For the quiet period, I think you provide a clean proposal of using “open” but I have one “compatibility/legacy” concern. There are registrars that do not participate in “launches/phases”, for various reasons I am sure. Some of these registrars most likely never implemented draft-ietf-regext-launchphase, which would mean any “pre-registration” availability checks from these registrars would return unavailable. I don’t think that we would want to exclude these potential registrations.


Thanks
Roger


From: Gould, James [mailto:jgould@verisign.com]
Sent: Thursday, August 24, 2017 8:03 AM
To: Roger D Carney <rcarney@godaddy.com<mailto:rcarney@godaddy.com>>; regext@ietf.org<mailto:regext@ietf.org>
Subject: Re: [regext] REGEXT Interim Meeting

Roger,

Thanks for hosting this meeting.  Unfortunately, I was not able to participate in the meeting.  I include some points below based on review of draft-ietf-regext-epp-fees-06 and the minutes:

1.       I agree that we shouldn’t mix launch phase detection into the fee extension, and this is best suited for a draft specifically designed for policy and feature detection like the Registry Mapping.
2.       The “quiet period” is not formally defined, but if it were I would define as a period when there is no active launch phase (null launch phase) or when there is a launch phase that does not accept any registrations or applications (custom “quiet” launch phase).  In either case, I believe that if the phase / sub-phase is not supplied by the client that the fee should be returned in context to the current launch phase.  If no registrations or applications are allowed during the current launch phase (null or custom “quiet” launch phase) then the fee should come back as unavailable.  Returning the fee as if the active phase is the “open” phase (general availability) does not seem to match the default behavior of returning the fee according to the current active phase.  The client can pass the “open” phase explicitly if they needed to determine the fee for that future phase.
3.       The Validate extension meets a similar purpose as the policy and feature detection of the Registry Mapping, where the Registry Mapping provides TLD level service, policy, and feature information that enables the client to automate their configuration.  The Validate extension implements a pre-check of the contact policy using real data.  One option for the Validate extension that we discussed in the past is providing a pre-check extension (e.g., no-op) to the domain mapping or the contact mapping, but the issue with the pre-check (e.g., no-op) extension is that a registrar may need to create a set of objects (contacts, hosts, and domains) that are validated against the server policy at the time of the domain create.  The Registry Mapping provides meta-data to drive client policy discovery and configuration and the Validate extension provides a pre-check or test of contact policy using real contact data.  I view the Allocation Token and Verification Code extensions serving a completely different purpose of authorizing the allocation of a domain name via an allocation token and enabling the client to provide proof of one or more forms of verification in meeting one or more verification profiles, respectively.  In summary, I would group the Validate extension and the Registry Mapping in one bucket of discovering the verifying policy, and the Allocation Token and the Verification Code extensions in another bucket of providing tokens or codes to apply different policies (allocation and verification).

—

JG

[cid:image003.png@01D32306.BB40FA10]

James Gould
Distinguished Engineer
jgould@Verisign.com

703-948-3271
12061 Bluemont Way
Reston, VA 20190

Verisign.com<http://verisigninc.com/>

From: regext <regext-bounces@ietf.org<mailto:regext-bounces@ietf.org>> on behalf of Roger Carney <rcarney@godaddy.com<mailto:rcarney@godaddy.com>>
Date: Wednesday, August 23, 2017 at 4:52 PM
To: "regext@ietf.org<mailto:regext@ietf.org>" <regext@ietf.org<mailto:regext@ietf.org>>
Subject: [EXTERNAL] [regext] REGEXT Interim Meeting

Good Afternoon,

We held an interim meeting this morning and discussed the current Fee draft document (draft-ietf-regext-epp-fees-06) and the Validate draft document (draft-ietf-regext-validate-02).

In attendance was Jody Kolker, Antoin Verschuren, Alex Mayrhofer, James Galvin, Dean Farwell, Andreas Huber and Roger Carney.

Agenda:
1.       Fee
a.       Confirm Edits (scheme, section 3.8 and reference)
b.       Discuss “Quiet Period”: section 3.8 paragraph 5
c.       Discuss WG Last Call
2.       Validate
a.       Re-introduce
b.       Comments/Questions
3.       TLD Phase Mapping

We started the meeting by confirming that the current revision of the document (v6) addressed all currently known issues.

Jim Galvin mentioned that we may need to resolve TLD phase detection to make it easier for this draft to move forward as detection (at least in simple form) was removed in the last draft. We spent a few minutes on this and recalled some of the reasons given for removal, e.g. complexity and not a true fit for this draft. We discussed the idea of pulling this into the proposed Registry Mapping draft. We also discussed if the authors were opposed to detection being in the Fee draft and I confirmed that I was not completely against including but I do believe the reasons everyone provided for not including makes sense and that it seems more appropriate in the Registry Mapping draft.

We spent a good amount of time, roughly 35 minutes focused on section 3.8 describing Phase/Subphase. Alex mentioned that 3.8 does not clearly address the scenario of a server not supporting phase/subphase. Alex will provide some language and we will work into the next draft. Discussion continued on the “comfort” idea of phase detection: “Should we allow servers to provide responses with multiple phases/subphases in the same response?” We generally agreed that the added complexity and cost associated with this did not outweigh the possible benefits and that we would stay with the v6 language around this (if client does not supply and only one exists return the one and if multiple exist return error).

No one on the call raised any concerns with the “Quiet Period” in section 3.8 paragraph 5. Please review and express any concerns.

The Chairs did indicate that once we get general agreement on the list for the Fee draft we can move this draft to WG last call. At this point I believe we are in a good state with v6 plus the addition of Alex’s suggested text on servers that may not have phase support. Please respond to the list if you agree or disagree.

We moved the discussion onto Validate and Jody provided an overview of the problem space and the proposed solution. There was a general agreement that this proposal sounds good and seems like a logical business issue to resolve. There was some discussion on the possible need to be able to refine this “validate” down to the exact domain name. The draft does allow for this though it was not in the original goals. Jim and Antoin talked about this whole “validate” concept possibly being larger and may need to examined in totality (e.g. with allocation token and verification code). Do they belong together or stay separate, should there be a “higher” framework that pulls together the idea of validation/verification?

If anyone has any additional thoughts on these topics or new topics for these documents please let us know.

Again, thanks to all that were able to participate this morning, it was a very productive meeting.


Thanks
Roger