Re: [secdir] secdir review of draft-cheshire-dnsext-nbp-09.txt

Donald Eastlake <d3e3e3@gmail.com> Wed, 15 December 2010 09:01 UTC

Return-Path: <d3e3e3@gmail.com>
X-Original-To: secdir@core3.amsl.com
Delivered-To: secdir@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 6405B3A6F72; Wed, 15 Dec 2010 01:01:30 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -103.267
X-Spam-Level:
X-Spam-Status: No, score=-103.267 tagged_above=-999 required=5 tests=[AWL=0.332, BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jljUEjMzdxhX; Wed, 15 Dec 2010 01:01:29 -0800 (PST)
Received: from mail-qy0-f179.google.com (mail-qy0-f179.google.com [209.85.216.179]) by core3.amsl.com (Postfix) with ESMTP id 235C13A6F55; Wed, 15 Dec 2010 01:01:29 -0800 (PST)
Received: by qyj19 with SMTP id 19so1752217qyj.10 for <multiple recipients>; Wed, 15 Dec 2010 01:03:11 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:mime-version:received:in-reply-to :references:from:date:message-id:subject:to:cc:content-type; bh=8LMatZkftJWgCNQfauPCHS5/ojE+eBEaRJ9FfoYc85M=; b=p91Lkdqitb5E14rQrGcJtibc4X+CXCK8R6X6+eRZi3MGcFhlmjWmWhqxBUAKOIu4C1 wcuUHiYB7T76InzEjPYLmJTWOmlZ0iJVGEw06NqNukSaNwGrYbeblIz9z2PXWDVM6pnA CH1NGo0fhm8NfbB+ewyjDYiknkuAgHEDoco1o=
DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc:content-type; b=CjZgZccgxennMZ7sEOt+2UXixc2hw6VAGDjwsbFvng2x5gOh+N+AJK+70xsRb6KVX7 wbTpX/Adnc4M7fV4q3OD/yPeYXckttuBmJC6eGPZ6PgmDUEi0TNjgJYZ0fccg38j7ziQ +tYX8sjuOstbTGkG6TmiVE6vZbvPvaBPXmCnw=
Received: by 10.224.67.147 with SMTP id r19mr6094760qai.324.1292403789586; Wed, 15 Dec 2010 01:03:09 -0800 (PST)
MIME-Version: 1.0
Received: by 10.220.91.197 with HTTP; Wed, 15 Dec 2010 01:02:49 -0800 (PST)
In-Reply-To: <4EB6E265-450D-41C8-AD98-0665274F7E8C@apple.com>
References: <20101101094624.GC29846@elstar.local> <4EB6E265-450D-41C8-AD98-0665274F7E8C@apple.com>
From: Donald Eastlake <d3e3e3@gmail.com>
Date: Wed, 15 Dec 2010 04:02:49 -0500
Message-ID: <AANLkTingT=nW+W6xhsNVdcMQCRFgx4TC08iyJyUnDP37@mail.gmail.com>
To: Stuart Cheshire <cheshire@apple.com>
Content-Type: text/plain; charset=ISO-8859-1
Cc: secdir@ietf.org, draft-cheshire-dnsext-nbp.all@tools.ietf.org, iesg@ietf.org
Subject: Re: [secdir] secdir review of draft-cheshire-dnsext-nbp-09.txt
X-BeenThere: secdir@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Security Area Directorate <secdir.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/secdir>, <mailto:secdir-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/secdir>
List-Post: <mailto:secdir@ietf.org>
List-Help: <mailto:secdir-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/secdir>, <mailto:secdir-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 15 Dec 2010 09:01:30 -0000

As the principle author of 2606, I believe they were intended to be
encouraged but not mandatory.

For some time there has been an increasingly hardened attitude about
this in the IESG and, basically, you won't be allowed to use other
names unless there is a good reason a 2606 name won't serve the
purpose or possibly if you are doing a minor update version of an
existing RFC and don't want to disturb it more than necessary.

On Tue, Dec 14, 2010 at 7:12 PM, Stuart Cheshire <cheshire@apple.com>; wrote:
> On 1 Nov 2010, at 2:46 AM, Juergen Schoenwaelder wrote:
>
>> On page 9, the DNS name "printer1.ietf.org" should probably changed to
>> "printer1.example.com".

Why not make the minimal change and use printer1.example.org?

Donald

> We'll update the example in the document, but I have a question:
>
> RFC 2606 states that names like example.com "can be used as examples". I
> agree that when writers *want* to use a vendor-neutral example it's useful
> to have these names available, but are they mandatory? Is there an RFC which
> states that *all* examples MUST use example.com?
>
> I've been seeing this a lot recently. Any time someone uses an example name
> other than the RFC 2606 example names, people leap on them and tell them
> this is not allowed and all RFCs have to use only the RFC 2606-sanctioned
> example names. Is this true? There's a big difference between saying "these
> names are available for use if you want" and "these names are mandatory and
> you're not allowed to use any others".
>
> Stuart Cheshire <cheshire@apple.com>;
> * Wizard Without Portfolio, Apple Inc.
> * www.stuartcheshire.org