Greetings,

I am seeking the wisdom of the WG on the following.

Section 4 of RFC 9224 states that: (a) "the domain name's authoritative 
registration data service is found by doing the label-wise longest match of the 
target domain name", and also that (b) "the entry for the root of the domain 
name space is specified as "".".

The upshot of this is that if IANA were to add an entry for the root to the 
bootstrap file, RDAP clients that implement RFC 9224 would hit the IANA server 
for *all* queries for domains under TLDs that haven't added their base URL to 
the bootstrap file. As of writing, that's about 25% of all registered 
domains[1]. I believe that this has significant implications on the privacy of 
user queries, in addition to the operational impact it would have on IANA.

Sentence (b) above was introduced in draft-ietf-weirds-bootstrap-11[2], while 
that document was going through IETF last call.

I haven't found the specific mailing list thread that resulted in its addition, 
but it seems unlikely to me that funnelling queries to IANA's RDAP server was 
the intent of the WG or the author, and that an errata would be appropriate.

Thoughts?

G.

[1] https://deployment.rdap.org/
[2] 
https://author-tools.ietf.org/iddiff?url1=draft-ietf-weirds-bootstrap-10&url2=draft-ietf-weirds-bootstrap-11&difftype=--hwdiff#:~:text=The%20entry%20for%20the%20root%20of%20the%20domain%20name%20space%20is%20specified%20as%20%22%22.

--
Gavin Brown
Principal Engineer, Global Domains & Strategy
Internet Corporation for Assigned Names and Numbers (ICANN)

https://www.icann.org

_______________________________________________
regext mailing list -- regext@ietf.org
To unsubscribe send an email to regext-le...@ietf.org

Reply via email to