Re: [v6ops] New Version Notification for draft-bp-v6ops-ipv6-ready-dns-dnssec-00.txt

Lencse Gábor <lencse@hit.bme.hu> Wed, 10 October 2018 19:22 UTC

Return-Path: <lencse@hit.bme.hu>
X-Original-To: v6ops@ietfa.amsl.com
Delivered-To: v6ops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E90A5124C04 for <v6ops@ietfa.amsl.com>; Wed, 10 Oct 2018 12:22:44 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.9
X-Spam-Level:
X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id LYWUbKIDJnH6 for <v6ops@ietfa.amsl.com>; Wed, 10 Oct 2018 12:22:41 -0700 (PDT)
Received: from frogstar.hit.bme.hu (frogstar.hit.bme.hu [IPv6:2001:738:2001:4020::2c]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E7013124BE5 for <v6ops@ietf.org>; Wed, 10 Oct 2018 12:22:40 -0700 (PDT)
Received: from [192.168.1.119] (host-79-121-42-18.kabelnet.hu [79.121.42.18]) (authenticated bits=0) by frogstar.hit.bme.hu (8.15.2/8.15.2) with ESMTPSA id w9AJMRLj023513 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128 verify=NO) for <v6ops@ietf.org>; Wed, 10 Oct 2018 21:22:34 +0200 (CEST) (envelope-from lencse@hit.bme.hu)
X-Authentication-Warning: frogstar.hit.bme.hu: Host host-79-121-42-18.kabelnet.hu [79.121.42.18] claimed to be [192.168.1.119]
To: v6ops@ietf.org
References: <153919621638.5900.18199747860735930931.idtracker@ietfa.amsl.com> <28C84190-026A-418D-B8E0-147B9F852018@consulintel.es>
From: Lencse Gábor <lencse@hit.bme.hu>
Message-ID: <8964a130-8af7-f367-a951-37354cd6360b@hit.bme.hu>
Date: Wed, 10 Oct 2018 21:22:23 +0200
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Thunderbird/52.9.1
MIME-Version: 1.0
In-Reply-To: <28C84190-026A-418D-B8E0-147B9F852018@consulintel.es>
Content-Type: multipart/alternative; boundary="------------C25DC0879C7CFF77DB4294D0"
Content-Language: en-US
X-Virus-Scanned: clamav-milter 0.100.1 at frogstar.hit.bme.hu
X-Virus-Status: Clean
Received-SPF: pass (frogstar.hit.bme.hu: authenticated connection) receiver=frogstar.hit.bme.hu; client-ip=79.121.42.18; helo=[192.168.1.119]; envelope-from=lencse@hit.bme.hu; x-software=spfmilter 2.001 http://www.acme.com/software/spfmilter/ with libspf2-1.2.10;
X-DCC--Metrics: frogstar.hit.bme.hu; whitelist
X-Scanned-By: MIMEDefang 2.79 on 152.66.248.44
Archived-At: <https://mailarchive.ietf.org/arch/msg/v6ops/VihKvqTDDKWkAK-tMtK7phvCT8U>
Subject: Re: [v6ops] New Version Notification for draft-bp-v6ops-ipv6-ready-dns-dnssec-00.txt
X-BeenThere: v6ops@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: v6ops discussion list <v6ops.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/v6ops>, <mailto:v6ops-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/v6ops/>
List-Post: <mailto:v6ops@ietf.org>
List-Help: <mailto:v6ops-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/v6ops>, <mailto:v6ops-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 10 Oct 2018 19:22:45 -0000

Dear Jordi and Cameron,

I have read the draft and I agree with the solution (to provide also a 
AAAA record if the zone is DNSSEC signed) as a "recommendation".

However, I do not think that the timing described in Section 7 would be 
feasible. What do you mean under "MUST be suspended" in the following 
sentence?

	[...] If there is a failure at the
    deadline in complying with those requirements, the relevant NS, MUST
    be temporarily suspended until there is a subsequent successful
    verification.


Who would suspend what?

In my (admittedly incomplete) understanding  of the role of 
informational RFCs of the v6ops WG, they should provide guidance, and 
they may not command other bodies to do something.

Please correct me if I am mistaken.

Best regards,

Gábor

10/10/2018 8:32 PM keltezéssel, JORDI PALET MARTINEZ írta:
> Hi all,
>
> We have worked in an integrated version of two documents:
>
> draft-v6ops-byrne-dnssecaaaa
> draft-palet-sunset4-ipv6-ready-dns-00
>
> The new document is now:
>
> https://datatracker.ietf.org/doc/draft-bp-v6ops-ipv6-ready-dns-dnssec/?include_text=1
>
> Inputs welcome!
>
> Regards,
> Jordi
>   
>   
>
>
> -----Mensaje original-----
> De: <internet-drafts@ietf.org>
> Fecha: miércoles, 10 de octubre de 2018, 20:30
> Para: Jordi Palet <jordi.palet@theipv6company.com>, Jordi Palet Martinez <jordi.palet@theipv6company.com>, Cameron Byrne <cameron.byrne@t-mobile.com>, Cameron Byrne <Cameron.Byrne@T-Mobile.com>
> Asunto: New Version Notification for draft-bp-v6ops-ipv6-ready-dns-dnssec-00.txt
>
>      
>      A new version of I-D, draft-bp-v6ops-ipv6-ready-dns-dnssec-00.txt
>      has been successfully submitted by Jordi Palet Martinez and posted to the
>      IETF repository.
>      
>      Name:		draft-bp-v6ops-ipv6-ready-dns-dnssec
>      Revision:	00
>      Title:		IPv6-Ready DNS/DNSSSEC Infrastructure
>      Document date:	2018-10-10
>      Group:		Individual Submission
>      Pages:		6
>      URL:            https://www.ietf.org/internet-drafts/draft-bp-v6ops-ipv6-ready-dns-dnssec-00.txt
>      Status:         https://datatracker.ietf.org/doc/draft-bp-v6ops-ipv6-ready-dns-dnssec/
>      Htmlized:       https://tools.ietf.org/html/draft-bp-v6ops-ipv6-ready-dns-dnssec-00
>      Htmlized:       https://datatracker.ietf.org/doc/html/draft-bp-v6ops-ipv6-ready-dns-dnssec
>      
>      
>      Abstract:
>         This document defines the timing for implementing a worldwide
>         IPv6-Ready DNS and DNSSEC infrastructure, in order to facilitate the
>         global IPv6-only deployment.
>      
>         A key issue for this, is the need for a global support of DNSSEC and
>         DNS64, which in some scenarios do not work well together.  This
>         document states that any DNSSEC signed resources records should
>         include a native IPv6 resource record as the most complete and
>         expedient path to solve any deployment conflict with DNS64 and DNSSEC
>      
>                                                                                        
>      
>      
>      Please note that it may take a couple of minutes from the time of submission
>      until the htmlized version and diff are available at tools.ietf.org.
>      
>      The IETF Secretariat
>      
>      
>
>
>
> **********************************************
> IPv4 is over
> Are you ready for the new Internet ?
> http://www.consulintel.es
> The IPv6 Company
>
> This electronic message contains information which may be privileged or confidential. The information is intended to be for the exclusive use of the individual(s) named above and further non-explicilty authorized disclosure, copying, distribution or use of the contents of this information, even if partially, including attached files, is strictly prohibited and will be considered a criminal offense. If you are not the intended recipient be aware that any disclosure, copying, distribution or use of the contents of this information, even if partially, including attached files, is strictly prohibited, will be considered a criminal offense, so you must reply to the original sender to inform about this communication and delete it.
>
>
>
> _______________________________________________
> v6ops mailing list
> v6ops@ietf.org
> https://www.ietf.org/mailman/listinfo/v6ops
>