[rpp] Re: RPP -05 feedback

Jasdip Singh <jasdips@arin.net> Sun, 26 April 2026 20:39 UTC

Return-Path: <jasdips@arin.net>
X-Original-To: rpp@mail2.ietf.org
Delivered-To: rpp@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 55C0DE387F18 for <rpp@mail2.ietf.org>; Sun, 26 Apr 2026 13:39:43 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1777235983; bh=VsF1dEno0EQ+BqdvltbWFjnd3h3Si88bNXHK8AcB294=; h=From:To:Subject:Date:References:In-Reply-To; b=ezfea0z9UkrPBZpDMRY16Pw/E09Hb/uhOQNOZwNWfS8CV0EfUtist/d74FWRGye1G P0Jt+2jxXZCQvwNwfjW00Qs+kWk1nXP6GlOsvRxodFaeWy/knBjLOxxlLhmhMaZqwL VYB31feb3NNlTANaRo34GBr3Pz7wMluNCqXjt/3I=
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -6.899
X-Spam-Level:
X-Spam-Status: No, score=-6.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=arin365.onmicrosoft.com
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0khC7aEFPfHw for <rpp@mail2.ietf.org>; Sun, 26 Apr 2026 13:39:42 -0700 (PDT)
Received: from smtp4.arin.net (smtp4.arin.net [IPv6:2001:500:4:201::54]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 23C80E387F11 for <rpp@ietf.org>; Sun, 26 Apr 2026 13:39:42 -0700 (PDT)
Received: from EOR2201ASH.corp.arin.net (eor2201ash.corp.arin.net [10.4.30.49]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp4.arin.net (Postfix) with ESMTPS id 0B1A010757B2; Sun, 26 Apr 2026 16:39:35 -0400 (EDT)
Received: from EOR2201ASH.corp.arin.net (10.4.30.49) by EOR2201ASH.corp.arin.net (10.4.30.49) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.1258.34; Sun, 26 Apr 2026 13:39:34 -0700
Received: from DM2PR0701CU001.outbound.protection.outlook.com (199.43.0.37) by EOR2201ASH.corp.arin.net (10.4.30.49) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.1258.34 via Frontend Transport; Sun, 26 Apr 2026 13:39:34 -0700
ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=qoB7LOkNH/R3jH64iVowfILiFhatEd266euoMVgNZ2ZCu8AbTiUvDO8vDvzP7cTQM9ui21FqunKuzz9n9JocIre+mnPccX/hRwB+RPdLE3ZL2u1I8+MsmygbLV2fBHIX9dZDkzdORmHM3A6EvPqBVHzZW1tKZrdvoqRtO8tYMNY26lVET3ikAvjJJmBgYGw6W9X9CEigVxFPAG1loesjci60i6bPdWHDLwrODCftlQDkJ647WtEbf2CVQQyKswNFvIzBTQqctuPHwfEXYcsSPScgnewsVTI8wz0ss3VZv6WbgkzZvAUX2LS1TntEtK5/dLqM0F7TNfYE/9kL17T2YQ==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=VsF1dEno0EQ+BqdvltbWFjnd3h3Si88bNXHK8AcB294=; b=t/1ehhR9DuyfBdWBdtyXP4d30CSGVaMGrkbYPOf/uogAkAy41svifQkv3wPVyO5Ed6eKj6pXYViIFJrhoB4jPqQOQwRtZ0fiYq6xACiT2HtR6hDF2pZpiz6S9uE7LU0FM+f/YkePJNQ/N6P35RK+0AksCRsMgFC8TYWwXubCbMAGoRNCmtO65+g29QFq/5UQzlMPHkwUfD5DANTs+zch6AsTTpQqNDNpZFRlGex+MUYkzIpW7Q7PSwtburxDG5XWhGn0nou3u2GNtbTve7hE01QAK4ph8cNFr19RGC8nxCf84QrAkCVCCTcRGFaA67KKLQDxSPhtG5OHNTbsO6hG6g==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=arin.net; dmarc=pass action=none header.from=arin.net; dkim=pass header.d=arin.net; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=arin365.onmicrosoft.com; s=selector1-arin365-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=VsF1dEno0EQ+BqdvltbWFjnd3h3Si88bNXHK8AcB294=; b=JkGyHNK2X/yyQ44EGzgyRsFDudZYNap2UJn1zeNhA1A9zREcbontmlHVxPGBcVxnS9Klungqu4HGFDh3Tumdmx4ydDV69v9m0XjJPUk6c2pQe12jgQdkv3iAQq2GIqfyT0SJdB8c/xspAQDGVL6vNmvdSY/+qixM1RXmlRzF9uPVsMn9xNvbE5aFJjtTHykqrCjwLwKF6sgx02uqA+9OsKgrvXUTDHEG3Oly025vVlfXus/8H7yC3uR1/K7vAhTe5v7L5SpkyQyNtUP+7pEScgYUbi/aIQK7+LA7+PZ2GRMUFILT/3C9Jc1Tg9YnbQouuDS15QugY/Kp9uargoqb3Q==
Received: from PH7PR15MB6084.namprd15.prod.outlook.com (2603:10b6:510:24f::12) by SA1PR15MB4657.namprd15.prod.outlook.com (2603:10b6:806:19c::17) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9870.16; Sun, 26 Apr 2026 20:39:30 +0000
Received: from PH7PR15MB6084.namprd15.prod.outlook.com ([fe80::95fb:7687:c884:aefc]) by PH7PR15MB6084.namprd15.prod.outlook.com ([fe80::95fb:7687:c884:aefc%3]) with mapi id 15.20.9870.012; Sun, 26 Apr 2026 20:39:30 +0000
From: Jasdip Singh <jasdips@arin.net>
To: Pierre Thierry <pierre@nothos.net>, "rpp@ietf.org" <rpp@ietf.org>
Thread-Topic: [rpp] Re: RPP -05 feedback
Thread-Index: AQHctbZE1Fd56h2p+E24NxBOfS52vLXV5EyAgBITYYCAAeWDAIAEII0AgAK7YwCAAQKxuoAAORN1gAAX43Y=
Date: Sun, 26 Apr 2026 20:39:30 +0000
Message-ID: <PH7PR15MB6084202A9D8CBEEE748D5465C9292@PH7PR15MB6084.namprd15.prod.outlook.com>
References: <PH7PR15MB6084DB24C0D4AC84D9B899EEC941A@PH7PR15MB6084.namprd15.prod.outlook.com> <7aecece5-7098-4132-869c-56664d42a34e@nothos.net> <71C79B1D-EACE-4D23-B053-2859903A7A47@sidn.nl> <85cd2c3e-ae4d-4976-bf86-9fb7708c391f@nothos.net> <8DD95A12-E7C8-4D48-B17B-C18F71B5BA67@sidn.nl> <b22cfd3a-b249-4530-b1c3-768df8ebc41d@nothos.net> <PH7PR15MB608487F306DA621B3A986329C9292@PH7PR15MB6084.namprd15.prod.outlook.com> <PH7PR15MB60842F2BFFBEBCDD66B43147C9292@PH7PR15MB6084.namprd15.prod.outlook.com>
In-Reply-To: <PH7PR15MB60842F2BFFBEBCDD66B43147C9292@PH7PR15MB6084.namprd15.prod.outlook.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-ms-reactions: allow
authentication-results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=arin.net;
x-ms-publictraffictype: Email
x-ms-traffictypediagnostic: PH7PR15MB6084:EE_|SA1PR15MB4657:EE_
x-ms-office365-filtering-correlation-id: 206b5a07-4a50-4ba6-f633-08dea3d3eab8
x-ms-exchange-senderadcheck: 1
x-ms-exchange-antispam-relay: 0
x-microsoft-antispam: BCL:0;ARA:13230040|366016|10070799003|376014|1800799024|56012099003|22082099003|18002099003|38070700021|13003099007|8096899003;
x-microsoft-antispam-message-info: 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
x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:PH7PR15MB6084.namprd15.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230040)(366016)(10070799003)(376014)(1800799024)(56012099003)(22082099003)(18002099003)(38070700021)(13003099007)(8096899003);DIR:OUT;SFP:1102;
x-ms-exchange-antispam-messagedata-chunkcount: 2
x-ms-exchange-antispam-messagedata-0: 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
x-ms-exchange-antispam-messagedata-1: 8zeF98oGQgxKVA==
Content-Type: multipart/alternative; boundary="_000_PH7PR15MB6084202A9D8CBEEE748D5465C9292PH7PR15MB6084namp_"
MIME-Version: 1.0
X-Exchange-RoutingPolicyChecked: QZbrKTMZsvrPSqur+VK+Oy/wIfvk1iviJVrT73GMDZA6SCGXanmJhCm6bxv3OiDMophxaA1+LOSjmXUifh1DEtOq1t/J1qx0qYw3dNwwi3QLUGwrfu2rYsov2lA8ASuGwkyHI4nqES+oTZhOdvFA+oxU9o58aCCOF7j8dVDTm8/5Lw1RzA7A/0JX8RbOdPyBVAUz8p4dGlmNgqd6HHAwHTWx++FsunajHtbnWhc0GOVkBXqBI5wberzfNzD5pxw8DOXkHwFwui3OfzLRmWPl6ux4C/9QeviguE24olMtNmmuK0ILf6vgwv7N1p8aC2Tz+EvJfMXYxaNorN4vVXzxTg==
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: PH7PR15MB6084.namprd15.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 206b5a07-4a50-4ba6-f633-08dea3d3eab8
X-MS-Exchange-CrossTenant-originalarrivaltime: 26 Apr 2026 20:39:30.4347 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: cad70df5-eb75-43b7-adb3-12798d38d9b7
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: a+0crvZZgszKAUi1+QnL+pR/mPb15QWITLKWwGheH5m3PKgG4XI1mIKlCzSzTtwzlHhvowCqyCZo5JIMUSAPzA==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: SA1PR15MB4657
X-OriginatorOrg: arin.net
Message-ID-Hash: 364K6EVJ5M3WEWSOJDFIDUGPBXJ6HPMW
X-Message-ID-Hash: 364K6EVJ5M3WEWSOJDFIDUGPBXJ6HPMW
X-MailFrom: jasdips@arin.net
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [rpp] Re: RPP -05 feedback
List-Id: "This list discusses a provisioning protocol based on RESTful principles and corresponding data representations using JSON." <rpp.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/rpp/S8GF4-GC89Oj_AeHNmPz4m2Jd6s>
List-Archive: <https://mailarchive.ietf.org/arch/browse/rpp>
List-Help: <mailto:rpp-request@ietf.org?subject=help>
List-Owner: <mailto:rpp-owner@ietf.org>
List-Post: <mailto:rpp@ietf.org>
List-Subscribe: <mailto:rpp-join@ietf.org>
List-Unsubscribe: <mailto:rpp-leave@ietf.org>

One correction: For the given example, the RPP URI would be: "https://rpp.example:8443/rpp/v1…”.


From: Jasdip Singh <jasdips@arin.net>
Date: Sunday, April 26, 2026 at 4:27 PM
To: Pierre Thierry <pierre@nothos.net>, rpp@ietf.org <rpp@ietf.org>
Subject: [rpp] Re: RPP -05 feedback

Missed one point... I think Pierre is right regarding the “_rpp” label use and requiring the “rpp” URI scheme. To leverage HTTPS RR without it, we could perhaps emulate DoH’s use of the “dohpath” SvcParamKey [1], and register “rpppath” in that IANA registry [2] with a {+path} URI template [3]? For example:

  example. 3600 IN HTTPS 1 rpp.example. alpn=h2,h3 port=8443 ipv4hint=192.0.2.1 ipv6hint=2001:db8::1 rpppath="/rpp/v1/{+path}"

The RPP URI would then be: "https://example:8443/rpp/v1…" for various RPP endpoints. IIUC, this should work but good to prototype. :)

Jasdip

[1] https://datatracker.ietf.org/doc/html/rfc9461#name-new-svcparamkey-dohpath
[2] https://www.iana.org/assignments/dns-svcb/dns-svcb.xhtml
[3] https://www.rfc-editor.org/rfc/rfc6570.html#page-22


From: Jasdip Singh <jasdips@arin.net>
Date: Sunday, April 26, 2026 at 12:20 PM
To: Pierre Thierry <pierre@nothos.net>, rpp@ietf.org <rpp@ietf.org>
Subject: [rpp] Re: RPP -05 feedback

Hi,

From: Pierre Thierry <pierre@nothos.net>
Date: Saturday, April 25, 2026 at 8:19 PM
To: rpp@ietf.org <rpp@ietf.org>
Subject: [rpp] Re: RPP -05 feedback

Le 24/04/2026 à 08:35, Maarten Wullink a écrit :
 what about if we add a special zone (e.g. _rpp) for rpp server bootstrap only and put the HTTP RR there. something like:
_rpp.example. 3600 IN HTTPS 1 rpp.example. alpn=h2,h3 port=8443

IIUC, a _rpp.example SVCB record is supposed to be used for rpp://example. I didn't see the use you suggest in RFC 9460 (a special zone for a HTTPS RR). SRV is more flexible there.

[JS] I think using HTTPS RR over SRV RR has advantages for protocols like RPP that use HTTPS as a substrate since the TLS negotiation would be more granular and efficient for the former.

Consider:

  _rpp._tcp.example. 3600 IN SRV 10 60 8443 rpp.example.

versus

  _rpp.example. 3600 IN HTTPS 1 rpp.example. alpn=h2,h3 port=8443 ipv4hint=192.0.2.1 ipv6hint=2001:db8::1

In the SRV case, a client just gets to know about the port and then do another query for the IP address (if not in the Additional Data section). In the HTTPS case, it gets all that info upfront along with HTTP2 versus HTTP3 preference when establishing the TLS connection.

Might be good to prototype both approaches to confirm.

Thanks,
Jasdip