Re: [Uri-review] Proposed scheme registration: sdns (DNS stamps)

Frank Denis <ietf@dnscrypt.info> Wed, 24 October 2018 17:11 UTC

Content-Type: text/plain; charset="utf-8"
Mime-Version: 1.0 (Mac OS X Mail 12.0 \(3445.100.39\))
From: Frank Denis <ietf@dnscrypt.info>
In-Reply-To: <CA+9kkMAwX1uDguV43MgNbHdz8MyEE-kDa2+k=JmVFas+6=7p8A@mail.gmail.com>
Date: Wed, 24 Oct 2018 19:09:47 +0200
Cc: uri-review@ietf.org
Content-Transfer-Encoding: quoted-printable
Message-Id: <3D3389E3-292A-408E-9204-B8C3E47BD3F3@dnscrypt.info>
References: <20181024155855.4v4s4lwov4luufrs@msync.c9x.org> <CA+9kkMAwX1uDguV43MgNbHdz8MyEE-kDa2+k=JmVFas+6=7p8A@mail.gmail.com>
To: Ted Hardie <ted.ietf@gmail.com>, uri-review@ietf.org
Archived-At: <https://mailarchive.ietf.org/arch/msg/uri-review/5C2F12t_LA-D81RJLTYLgyDnTU4>
Subject: Re: [Uri-review] Proposed scheme registration: sdns (DNS stamps)
Precedence: list

> On 24 Oct 2018, at 18:31, Ted Hardie <ted.ietf@gmail.com> wrote:
> 
> Hi Frank,

  Hi Ted,

> Thanks for sending the proposal to the list.  A couple of high level comments.  
> 
> First, the syntax you present uses //, which doesn't seem to be correct to me.  If I'm reading the specification correctly, the URL doesn't have a hierarchical part and does not rely on an authority section (which is what the // delimits in RFC 3986 syntax). 

  All the sdns URIs currently in use share a global namespace. However, the parameters specifically use URL-safe base64 to avoid slashes, so URIs can later:

- Support namespaces
- Support implementation-specific filters (e.g. `sdns://.../ipv6only)

> 2nd, it's not clear in the description of addresses how they would be fed into the algorithm you provide in some of the corner cases.  For example:
> "addr is the IP address of the server. It can be an empty string, or just a port number."  Is the port number represented with a preceding colon?  

  A preceding colon is required. The description has been updated to clarify this. Thanks!

> For IPv6 hosts which use [ and ] as delimeters, is the input URL-encoded before being base64 encoded?  Are scopes permitted?

  Scopes are permitted, and are supported by current implementations. The document has been updated to reflect this.

  Strings are not encoded individually, besides being preceded by their length.

  The entire concatenation of all parameters is eventually base64-encoded. The document has been updated to clarify this.

> For hostname, the document says  that hostname is the server host name which will also be used as a SNI name.  If the hostname uses one of the IDNA characters outside the URL-permitted range, is it encoded with URL encoding or punycode?

  SNI names in certificates are raw binary strings. Given the context, we probably shouldn’t apply any encoding either. The document has been updated to clarify this.

> As a stylistic note, I think sdns is likely to be confused with the existing dns scheme name, and I would suggest using "dns-stamps" for additional clarity.

  This is definitely doable, but would be break all existing implementations and servers lists, 

> Thanks again for the opportunity to comment,

  Thanks for your very helpful comments, Ted.

[Uri-review] Proposed scheme registration: sdns (… Frank Denis
Re: [Uri-review] Proposed scheme registration: sd… Ted Hardie
Re: [Uri-review] Proposed scheme registration: sd… Frank Denis
Re: [Uri-review] Proposed scheme registration: sd… Eric Johnson
Re: [Uri-review] Proposed scheme registration: sd… Frank Denis