[DNSOP] ALT-TLD and (insecure) delgations.

2017-02-01 Thread Warren Kumari
Hi there all, I have just posted a new version of alt-tld, which folds in a number of suggestions and comments from various people -- thank you for those. As the document was parked I held off making some of the larger edits; if you sent comments and I missed them, I apologize - please send them a

[DNSOP] I-D Action: draft-ietf-dnsop-alt-tld-07.txt

2017-02-01 Thread internet-drafts
A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Domain Name System Operations of the IETF. Title : The ALT Special Use Top Level Domain Authors : Warren Kumari Andrew Sulli

Re: [DNSOP] Big changes in draft-ietf-dnsop-terminology-bis

2017-02-01 Thread Bob Harold
On Mon, Jan 30, 2017 at 8:08 PM, Paul Hoffman wrote: > On 30 Jan 2017, at 10:15, Bob Harold wrote: > > 2. Names >>> >> Global DNS: >> Administration of names -- >> I think we need to add IETF to this section as an administrator. >> > > Could you please say more, maybe with actual text? I can see

Re: [DNSOP] ALT-TLD and (insecure) delgations.

2017-02-01 Thread Robert Edmonds
Warren Kumari wrote: > The largest outstanding issue is what to do about DNSSEC -- this is > (potentially) a problem for any / all 6761 type names. > The root is signed, so if a query leaks into the DNS (as they will), > an (unaware) validating resolver will try resolve it, and will expect > either

Re: [DNSOP] ALT-TLD and (insecure) delgations.

2017-02-01 Thread Bob Harold
On Wed, Feb 1, 2017 at 3:28 PM, Warren Kumari wrote: > Hi there all, > > I have just posted a new version of alt-tld, which folds in a number > of suggestions and comments from various people -- thank you for > those. As the document was parked I held off making some of the larger > edits; if you

Re: [DNSOP] ALT-TLD and (insecure) delgations.

2017-02-01 Thread Ralph Droms
> On Feb 1, 2017, at 3:47 PM, Bob Harold wrote: > > > On Wed, Feb 1, 2017 at 3:28 PM, Warren Kumari > wrote: > Hi there all, > > I have just posted a new version of alt-tld, which folds in a number > of suggestions and comments from various people -- thank you for >

Re: [DNSOP] ALT-TLD and (insecure) delgations.

2017-02-01 Thread Mark Andrews
In message , Warren K umari writes: > Hi there all, > > I have just posted a new version of alt-tld, which folds in a number > of suggestions and comments from various people -- thank you for > those. As the document was parked I held off making some of the larger > edits; if you sent comments a

Re: [DNSOP] ALT-TLD and (insecure) delgations.

2017-02-01 Thread Ted Lemon
On Feb 1, 2017, at 3:50 PM, Ralph Droms wrote: >> It appears to me that requesting an insecure delegation is the right thing >> to do, as a "technical use". We have, so far, been very careful in what we >> ask for. If ICANN does not agree, then we can discuss other options. > > I agree. I'm

Re: [DNSOP] ALT-TLD and (insecure) delgations.

2017-02-01 Thread Bob Harold
On Wed, Feb 1, 2017 at 3:58 PM, Ted Lemon wrote: > On Feb 1, 2017, at 3:50 PM, Ralph Droms wrote: > > It appears to me that requesting an insecure delegation is the right thing > to do, as a "technical use". We have, so far, been very careful in what we > ask for. If ICANN does not agree, then

Re: [DNSOP] ALT-TLD and (insecure) delgations.

2017-02-01 Thread Ted Lemon
On Feb 1, 2017, at 4:09 PM, Bob Harold wrote: > As I understand it, the idea is that if someone incorrectly looks up a .alt > name in DNS, we want an answer that causes the requester and recursive > resolver to not ask again, both to reduce traffic to the roots, and to > minimize leakage of inf

Re: [DNSOP] ALT-TLD and (insecure) delgations.

2017-02-01 Thread Mark Andrews
In message <1b8e640b-c38e-4b76-a73d-7178491a9...@fugue.com>, Ted Lemon writes: > > On Feb 1, 2017, at 3:50 PM, Ralph Droms wrote: > >> It appears to me that requesting an insecure delegation is the right > >> thing to do, as a "technical use". We have, so far, been very careful in > >> what we a

Re: [DNSOP] ALT-TLD and (insecure) delgations.

2017-02-01 Thread Ralph Droms
> On Feb 1, 2017, at 4:42 PM, Mark Andrews wrote: > > > In message <1b8e640b-c38e-4b76-a73d-7178491a9...@fugue.com>, Ted Lemon writes: >> >> On Feb 1, 2017, at 3:50 PM, Ralph Droms wrote: It appears to me that requesting an insecure delegation is the right thing to do, as a "technic

Re: [DNSOP] ALT-TLD and (insecure) delgations.

2017-02-01 Thread Ralph Droms
> On Feb 1, 2017, at 3:58 PM, Ted Lemon wrote: > > On Feb 1, 2017, at 3:50 PM, Ralph Droms wrote: >>> It appears to me that requesting an insecure delegation is the right thing >>> to do, as a "technical use". We have, so far, been very careful in what we >>> ask for. If ICANN does not agre

Re: [DNSOP] ALT-TLD and (insecure) delgations.

2017-02-01 Thread Warren Kumari
I'm sorry, I apparently did some overly aggressive editing of my mail before sending it (or I'm completely confused, which is ALWAYS a possibility). In order to try and stop leaks, the draft requests that the domain be added to the "Locally Served Zones" registry. This means that, when a validatin

Re: [DNSOP] ALT-TLD and (insecure) delgations.

2017-02-01 Thread Warren Kumari
On Wed, Feb 1, 2017 at 3:44 PM, Robert Edmonds wrote: > Warren Kumari wrote: >> The largest outstanding issue is what to do about DNSSEC -- this is >> (potentially) a problem for any / all 6761 type names. >> The root is signed, so if a query leaks into the DNS (as they will), >> an (unaware) vali

Re: [DNSOP] ALT-TLD and (insecure) delgations.

2017-02-01 Thread Mark Andrews
In message <1b8e640b-c38e-4b76-a73d-7178491a9...@fugue.com>, Ted Lemon writes: > > On Feb 1, 2017, at 3:50 PM, Ralph Droms wrote: > >> It appears to me that requesting an insecure delegation is the right > >> thing to do, as a "technical use". We have, so far, been very careful in > >> what we a