[rpp] Re: RPP -05 feedback

Jasdip Singh <jasdips@arin.net> Wed, 18 March 2026 20:44 UTC

Return-Path: <jasdips@arin.net>
X-Original-To: rpp@mail2.ietf.org
Delivered-To: rpp@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id D21A7CD41105 for <rpp@mail2.ietf.org>; Wed, 18 Mar 2026 13:44:46 -0700 (PDT)
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -6.899
X-Spam-Level:
X-Spam-Status: No, score=-6.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=arin365.onmicrosoft.com
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id EJDlDCYs4i9t for <rpp@mail2.ietf.org>; Wed, 18 Mar 2026 13:44:46 -0700 (PDT)
Received: from smtp3.arin.net (smtp3.arin.net [IPv6:2001:500:4:201::53]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 1D7E3CD410F8 for <rpp@ietf.org>; Wed, 18 Mar 2026 13:44:46 -0700 (PDT)
Received: from EOR2201ASH.corp.arin.net (eor2201ash.corp.arin.net [10.4.30.49]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp3.arin.net (Postfix) with ESMTPS id EEE7F10757B3; Wed, 18 Mar 2026 16:44:45 -0400 (EDT)
Received: from EOR2201ASH.corp.arin.net (10.4.30.49) by EOR2201ASH.corp.arin.net (10.4.30.49) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.1258.34; Wed, 18 Mar 2026 13:44:45 -0700
Received: from DM5PR08CU004.outbound.protection.outlook.com (199.43.0.37) by EOR2201ASH.corp.arin.net (10.4.30.49) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.1258.34 via Frontend Transport; Wed, 18 Mar 2026 13:44:45 -0700
ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=F1di7B9jegWeqxyRxizWQ1tKP4tq2bBAUN3xcnHcLm4blDPxm6NXLWmX5s7E0GB0NhLG/+rNVQWqADdHTGofyf/XFuc4YbT9Ew9yfw1qmYKkkmPu9dzPYiYSrbRBgMA4TBWFCBGRQxjWIXD+7/gUpVCVm+A7dQFt5HfI2nQj8AGXy64WUENBzGUpLff9V1bzcf6hJJHpokmsBWSINLKUN4293q5tu0fM3bOX6hYy5RIcskmh9GiPyLO8AJIv+ADKMAI0fpGKQ0L7NuvmcRZNMFN1WOWtQ2Ldrh7Mf/PpiqOcsfHR4bQdETo4VcKzoWJtu1xJXrcrnXyNG+m8Ydo4pQ==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=NvBUZyo+m/4NpmarjAE/qFdDOPo5X98fPOlD5+atQS8=; b=DDH3i4QMt6Ex4zHfetQYbnlFUmeSZrKpx6R0S7sRMyQQFeSMVGZeYiVg9ayCXA1kwSK8Vx92O1T2CKqiU/EvgMc1ZPHpjmrylgiCz0Ov/7LkKAyCN7sOfiLXpgum7Msn2VvJ087B1n/6R6JHHH1SgfAOojIs7ofRZvfAXAfp7Rrf7IAqqYMCAVi2yshgNg3Eyzk13ThTIwA900xUQxmjcGA/OvNZzweTYpLeTIkrFZ+znsiCGW5uAYBEU2Z1vTVv26zG20IRPyE71dVoMMRuSt5DibMs+jnJIJodohc5VrMqW4DAGrZRafLRQRDjdPpdw1R6m9A50Ny02s5XQIwZnQ==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=arin.net; dmarc=pass action=none header.from=arin.net; dkim=pass header.d=arin.net; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=arin365.onmicrosoft.com; s=selector1-arin365-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=NvBUZyo+m/4NpmarjAE/qFdDOPo5X98fPOlD5+atQS8=; b=PI0Cy1+it8bRQjQexRLICZI++IlQhUjZTfFtx1hAg7uheN2ar6kW9xjMlLhNjQSe/Wob1h1gNf4b8LatPIhiqb6CzyvpignI0B4AXp4ISmtfctbKQ2i8Dv35zjJnBxaZDHjLCwQg7kYZ5LIxMaRhMe7l7dDMIwMhaVAx5VazuiBTfnzEFr5S8oClPkrbxK9bP0LG69rJd+w0OOZfVvow+a6CXs6LHF2spS7WEjuFN0/BxzI/z31uZcBVTIyxn6MEBDxonLlBOlMKVB4Opzf8zQ+OWl7MWw2+OXUiPYwiMbFMu+qoglxRtwLHV9auY/Bkpn1s6Y1FOJP4OyIOcocRLg==
Received: from PH7PR15MB6084.namprd15.prod.outlook.com (2603:10b6:510:24f::12) by IA3PR15MB6724.namprd15.prod.outlook.com (2603:10b6:208:51b::9) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9745.9; Wed, 18 Mar 2026 20:44:41 +0000
Received: from PH7PR15MB6084.namprd15.prod.outlook.com ([fe80::95fb:7687:c884:aefc]) by PH7PR15MB6084.namprd15.prod.outlook.com ([fe80::95fb:7687:c884:aefc%3]) with mapi id 15.20.9745.007; Wed, 18 Mar 2026 20:44:41 +0000
From: Jasdip Singh <jasdips@arin.net>
To: Pawel Kowalik <kowalik=40denic.de@dmarc.ietf.org>, Maarten Wullink <maarten.wullink=40sidn.nl@dmarc.ietf.org>, "rpp@ietf.org" <rpp@ietf.org>
Thread-Topic: [rpp] Re: RPP -05 feedback
Thread-Index: AQHctbZE1Fd56h2p+E24NxBOfS52vLW0EIWugAAUgACAAJ0ksg==
Date: Wed, 18 Mar 2026 20:44:41 +0000
Message-ID: <PH7PR15MB608464A711BE3CD660EE4400C94EA@PH7PR15MB6084.namprd15.prod.outlook.com>
References: <PH7PR15MB6084DB24C0D4AC84D9B899EEC941A@PH7PR15MB6084.namprd15.prod.outlook.com> <AM8P194MB157799CDCBF08E118908A1F0E64EA@AM8P194MB1577.EURP194.PROD.OUTLOOK.COM> <5eaad1b1-bcf2-41b5-9ccd-5faf0f0b133d@denic.de>
In-Reply-To: <5eaad1b1-bcf2-41b5-9ccd-5faf0f0b133d@denic.de>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-ms-reactions: allow
authentication-results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=arin.net;
x-ms-publictraffictype: Email
x-ms-traffictypediagnostic: PH7PR15MB6084:EE_|IA3PR15MB6724:EE_
x-ms-office365-filtering-correlation-id: 68b3c08a-0516-4c8a-6032-08de852f2dcc
x-ms-exchange-senderadcheck: 1
x-ms-exchange-antispam-relay: 0
x-microsoft-antispam: BCL:0;ARA:13230040|1800799024|366016|376014|38070700021|8096899003|7053199007|18002099003|22082099003|56012099003;
x-microsoft-antispam-message-info: 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
x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:PH7PR15MB6084.namprd15.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230040)(1800799024)(366016)(376014)(38070700021)(8096899003)(7053199007)(18002099003)(22082099003)(56012099003);DIR:OUT;SFP:1102;
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: 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
Content-Type: multipart/alternative; boundary="_000_PH7PR15MB608464A711BE3CD660EE4400C94EAPH7PR15MB6084namp_"
MIME-Version: 1.0
X-Exchange-RoutingPolicyChecked: GdWlV56m7mWXzkgkhneIWdH37zKg+POWxnwdzKuvVrn3syuxfuiJcvcr0kUqXJB1I7kO148X2qjSJuPB/bTeskcmqNqRaIYlFsaSdstSUjfxw2+h9qNdqEe4PRE/K6205FtnixvOIhcFP3SBZX/lt/wc6RvZdZ3uko5B3OWwnlxRZcMeJ5Xh7pOIxBwy8UVaH/1Cef3ITYpXnS6o+xiUl645I20XbTf7YiocWYu8Emn9+OxEmOyf1ng4/CQrAgaArsY7cNexdYW9Sb0W8/bGpn9IGyN0ftgwnPrxvUxdxj5h6DdYyweyxZ7oDdTt+1yVX351JyjqJRvjTIvHqSzL3Q==
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: PH7PR15MB6084.namprd15.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 68b3c08a-0516-4c8a-6032-08de852f2dcc
X-MS-Exchange-CrossTenant-originalarrivaltime: 18 Mar 2026 20:44:41.0894 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: cad70df5-eb75-43b7-adb3-12798d38d9b7
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: fqdy8d1so0xzAq0lRe5Al3BCBFicqwPbKtnjcMaJPCfWoSUoSSNhezoFLWMW+a7w/8quMTRqneoxUfd5z5BLgA==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: IA3PR15MB6724
X-OriginatorOrg: arin.net
Message-ID-Hash: 2ZZYPSIAPUAZBIWRBYUGG7HCSZ5ZQK5G
X-Message-ID-Hash: 2ZZYPSIAPUAZBIWRBYUGG7HCSZ5ZQK5G
X-MailFrom: jasdips@arin.net
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [rpp] Re: RPP -05 feedback
List-Id: "This list discusses a provisioning protocol based on RESTful principles and corresponding data representations using JSON." <rpp.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/rpp/0qdZPjOWqXD-HMqkW3fHS4q0p_o>
List-Archive: <https://mailarchive.ietf.org/arch/browse/rpp>
List-Help: <mailto:rpp-request@ietf.org?subject=help>
List-Owner: <mailto:rpp-owner@ietf.org>
List-Post: <mailto:rpp@ietf.org>
List-Subscribe: <mailto:rpp-join@ietf.org>
List-Unsubscribe: <mailto:rpp-leave@ietf.org>

Hi Pawel,

Please find my comments below.

Thanks,
Jasdip


From: Pawel Kowalik <kowalik=40denic.de@dmarc.ietf.org>
Date: Wednesday, March 18, 2026 at 7:13 AM
To: Maarten Wullink <maarten.wullink=40sidn.nl@dmarc.ietf.org>, Jasdip Singh <jasdips@arin.net>, rpp@ietf.org <rpp@ietf.org>
Subject: [rpp] Re: RPP -05 feedback


Hi Jasdip,

also few comments / clarifications from me on the points of items we adopted from EPP [PK].

On 18.03.26 11:40, Maarten Wullink wrote:

Error handling:

“The RPP result codes are based on the EPP result codes defined in [RFC5730].”

For non-domain name use cases in the future, is it expected that HTTP status codes should suffice and there would not be any expectation to return either RPP or EPP codes?

MW:  there is a mapping from RPP code to appropriate HTTP code, currently the RPP-Code is required to be present in all responses. we can always add additional rpp codes for new use cases where there is no  suitable RPP code?


[PK] we described this in the architecture document 5.1.16. in great detail. HTTP codes do not offer enough of level of granularity which is needed to transport information needed by the clients.
Therefore RPP-Code is always required, but HTTP code is also mapped to the operation outcome that allows first level of processing by for example only http-aware framework layers.

From the two paths: define a whole new set of codes, or use the set of codes from EPP and extend on it, we decided to reuse EPP codes. It does not mean that the server behind needs to know or implement EPP, it just uses the same codes.

For example: "Object is not eligible for renewal" is RPP-Code 02105, which is derived from EPP 2105 and not re-defined, but it is a fully valid RPP code.

There is a clear benefit for EPP operators in the transition if the codes can be mapped by just adding/removing leading "0”.

[JS] Agreed. As long as there is room for RPP codes for future non-EPP usage scenarios in RPP, and AFAICT it looks so. :)


[...]
Request Headers:

There are some headers that, IIUC, seem to connote EPP semantics, like “RPP-Cltrid” and “RPP-Svtrid”. Why not have them prefixed with “EPP-" to distinguish from the actual RPP headers like "RPP-Profile”?  Also, is it safe to assume that they are optional for non-EPP use cases in RPP?

MW: If a header is only used for EPP (using RPP as proxy) then it must be optional , we can change the header name to make explicit that the header is for  EPP only.

[PK] I will contradict what Maarten is telling. The headers happen to have the same name and happen to serve the same function as EPP-equivalents, but they are independent from EPP.

RPP-Cltrid is an audit trail and idempotency key same time. RPP-Svtrid is an audit trail which is critical in the provisioning system. The headers will work same way if there is no EPP server behind. Both are mandatory btw.

[JS] OK. For further clarity, good to include above rationale in the spec. Essentially, an implementer who has no prior EPP experience should be able to clearly follow this spec.


[...]
General:

Acknowledging that the near-term adopters of RPP would be EPP actors, to ensure that the RPP core protocol reads more generic for other actors in the future, not sure how but it might help to address the EPP constructs in RPP in a separate set of sections, or even in a separate document. Sorry if this sounds a bit heretic, given the current charter. :)

MW: Are you refering to EPP users using only RPP, or those using RPP as proxy in front of EPP?
we should minimise  EPP-only features in RPP, maybe we can make a separate informational best practices/howto document for EPP operators that want to migrate to RPP
[PK] so far we made some pragmatic choices, by referencing EPP RFCs at places, we limited the chances that EPP users have to make line-by-line comparison whether things are same.

We may set a goal of removing all normative dependency to EPP and copy-paste whatever is derived. This is basically editorial work. An additional Informational drafts for transition from EPP would be then needed to help people identify elements which are actually not changed.

[JS] Good idea.


This would be for sure better for non EPP adopters (like RIRs), but more work to EPP operators. Right now the charter with its focus on domain provisioning let us believe that the second group shall be served with focus.

[JS] Right, thanks.


 Happy to hear opinions from the WG.