[rpp] Re: RPP -05 feedback

Pawel Kowalik <kowalik@denic.de> Wed, 18 March 2026 11:13 UTC

Return-Path: <kowalik@denic.de>
X-Original-To: rpp@mail2.ietf.org
Delivered-To: rpp@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id A1208CCFED32 for <rpp@mail2.ietf.org>; Wed, 18 Mar 2026 04:13:24 -0700 (PDT)
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -2.798
X-Spam-Level:
X-Spam-Status: No, score=-2.798 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_VALIDITY_CERTIFIED_BLOCKED=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=denic.de
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Ce8v4-47twEk for <rpp@mail2.ietf.org>; Wed, 18 Mar 2026 04:13:23 -0700 (PDT)
Received: from mout-b-203.mailbox.org (mout-b-203.mailbox.org [195.10.208.52]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id ADBC6CCFED21 for <rpp@ietf.org>; Wed, 18 Mar 2026 04:13:23 -0700 (PDT)
Received: from smtp2.mailbox.org (smtp2.mailbox.org [10.196.197.2]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by mout-b-203.mailbox.org (Postfix) with ESMTPS id 4fbR5W4Clnz9wvL; Wed, 18 Mar 2026 12:13:19 +0100 (CET)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=denic.de; s=MBO0001; t=1773832399; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: in-reply-to:in-reply-to:references:references; bh=iVJ45zoRbgLK/q+4fypOi49GqD76wPTPmLFqzszYPGM=; b=yGNJFVo83fYhwm1bNiEP3z80eiJH04A7uUyBTKSEEmzKe5XTU4Snv26CgWU5X3LdH3hCpW pEY1J9xQ9FoywdRYBIaqEMD0rTJe18EQsXQgSm2F1iHnVOfP2bpdnx4nvWHhA1PZ/WcI8g TVyI5OEX9mAgJPjhZq6thEPJkGeWNxFTt3Yf0RClUueY8S8OiMvfwjBltS0275Fum91q5z 0WSXJnTch0gOMZPpdySJ8YVK9Bd79xq0CVL7WLtoGO7L+bUHK4914iouI2NAV5vGcy3IX0 q30G+O+IPSvXGda7kw5aA7NZsnbTsHqqDSSUMMm8Q7dSw1VGTJYh9qZqCoZYqg==
Message-ID: <5eaad1b1-bcf2-41b5-9ccd-5faf0f0b133d@denic.de>
Date: Wed, 18 Mar 2026 12:13:18 +0100
MIME-Version: 1.0
From: Pawel Kowalik <kowalik@denic.de>
To: Maarten Wullink <maarten.wullink=40sidn.nl@dmarc.ietf.org>, Jasdip Singh <jasdips@arin.net>, "rpp@ietf.org" <rpp@ietf.org>
References: <PH7PR15MB6084DB24C0D4AC84D9B899EEC941A@PH7PR15MB6084.namprd15.prod.outlook.com> <AM8P194MB157799CDCBF08E118908A1F0E64EA@AM8P194MB1577.EURP194.PROD.OUTLOOK.COM>
Content-Language: en-GB, de-DE
In-Reply-To: <AM8P194MB157799CDCBF08E118908A1F0E64EA@AM8P194MB1577.EURP194.PROD.OUTLOOK.COM>
Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg="sha-512"; boundary="------------ms040007060408060405000806"
X-MBO-RS-ID: db6b43d7a618149e7bd
X-MBO-RS-META: xsrdwhd83fdxhoh6sgtw4dopmggju41h
Message-ID-Hash: HOC6AHAKJE4AYAW3SQV54JPCKEQIFS5G
X-Message-ID-Hash: HOC6AHAKJE4AYAW3SQV54JPCKEQIFS5G
X-MailFrom: kowalik@denic.de
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [rpp] Re: RPP -05 feedback
List-Id: "This list discusses a provisioning protocol based on RESTful principles and corresponding data representations using JSON." <rpp.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/rpp/2oB2D3glcGVk6VNhe49HSRb_va0>
List-Archive: <https://mailarchive.ietf.org/arch/browse/rpp>
List-Help: <mailto:rpp-request@ietf.org?subject=help>
List-Owner: <mailto:rpp-owner@ietf.org>
List-Post: <mailto:rpp@ietf.org>
List-Subscribe: <mailto:rpp-join@ietf.org>
List-Unsubscribe: <mailto:rpp-leave@ietf.org>

Hi Jasdip,

also few comments / clarifications from me on the points of items we 
adopted from EPP [PK].

On 18.03.26 11:40, Maarten Wullink wrote:
>
> Error handling:
>
> “The RPP result codes are based on the EPP result codes defined in 
> [RFC5730].”
>
> For non-domain name use cases in the future, is it expected that HTTP 
> status codes should suffice and there would not be any expectation to 
> return either RPP or EPP codes?
>
> MW:  there is a mapping from RPP code to appropriate HTTP code, 
> currently the RPP-Code is required to be present in all responses. we 
> can always add additional rpp codes for new use cases where there is 
> no  suitable RPP code?
>
[PK] we described this in the architecture document 5.1.16. in great 
detail. HTTP codes do not offer enough of level of granularity which is 
needed to transport information needed by the clients.
Therefore RPP-Code is always required, but HTTP code is also mapped to 
the operation outcome that allows first level of processing by for 
example only http-aware framework layers.

 From the two paths: define a whole new set of codes, or use the set of 
codes from EPP and extend on it, we decided to reuse EPP codes. It does 
not mean that the server behind needs to know or implement EPP, it just 
uses the same codes.

For example: "Object is not eligible for renewal" is RPP-Code 02105, 
which is derived from EPP 2105 and not re-defined, but it is a fully 
valid RPP code.

There is a clear benefit for EPP operators in the transition if the 
codes can be mapped by just adding/removing leading "0".

[...]
> Request Headers:
>
> There are some headers that, IIUC, seem to connote EPP semantics, like 
> “RPP-Cltrid” and “RPP-Svtrid”. Why not have them prefixed with “EPP-" 
> to distinguish from the actual RPP headers like "RPP-Profile”?  Also, 
> is it safe to assume that they are optional for non-EPP use cases in RPP?
>
> MW: If a header is only used for EPP (using RPP as proxy) then it must 
> be optional , we can change the header name to make explicit that the 
> header is for  EPP only.

[PK] I will contradict what Maarten is telling. The headers happen to 
have the same name and happen to serve the same function as 
EPP-equivalents, but they are independent from EPP.

RPP-Cltrid is an audit trail and idempotency key same time. RPP-Svtrid 
is an audit trail which is critical in the provisioning system. The 
headers will work same way if there is no EPP server behind. Both are 
mandatory btw.

[...]
> General:
>
> Acknowledging that the near-term adopters of RPP would be EPP actors, 
> to ensure that the RPP core protocol reads more generic for other 
> actors in the future, not sure how but it might help to address the 
> EPP constructs in RPP in a separate set of sections, or even in a 
> separate document. Sorry if this sounds a bit heretic, given the 
> current charter. :)
>
> MW: Are you refering to EPP users using only RPP, or those using RPP 
> as proxy in front of EPP?
> we should minimise  EPP-only features in RPP, maybe we can make a 
> separate informational best practices/howto document for EPP operators 
> that want to migrate to RPP
[PK] so far we made some pragmatic choices, by referencing EPP RFCs at 
places, we limited the chances that EPP users have to make line-by-line 
comparison whether things are same.

We may set a goal of removing all normative dependency to EPP and 
copy-paste whatever is derived. This is basically editorial work. An 
additional Informational drafts for transition from EPP would be then 
needed to help people identify elements which are actually not changed.

This would be for sure better for non EPP adopters (like RIRs), but more 
work to EPP operators. Right now the charter with its focus on domain 
provisioning let us believe that the second group shall be served with 
focus. Happy to hear opinions from the WG.

Kind Regards,
Pawel