Re: [DNSOP] [dnsext] [mif] 2nd Last Call for MIF DNS server selection document

2011-10-23 Thread Ted Lemon
On Oct 23, 2011, at 2:39 AM, Matthew Pounsett wrote: I think we need to accept that this practice is here to stay, and figure out how to deal with it on those terms. There is no secure way to do search lists in a MIF environment. Or, really, even in a SIF environment. So saying "we just have

Re: [DNSOP] [dnsext] [mif] 2nd Last Call for MIF DNS server selection document

2011-10-23 Thread Mark Andrews
In message <96472fb7-8425-4928-8f55-2abf2cb59...@conundrum.com>, Matthew Pounse tt writes: > > On 2011/10/22, at 15:21, Keith Moore wrote: > > > > > On Oct 22, 2011, at 2:42 PM, Doug Barton wrote: > > > >> 1. I think we're all in agreement that dot-terminated names (e.g., > >> example.) should

Re: [DNSOP] [dnsext] [mif] 2nd Last Call for MIF DNS server selection document

2011-10-23 Thread Keith Moore
On Oct 23, 2011, at 2:39 AM, Matthew Pounsett wrote: > > On 2011/10/22, at 15:21, Keith Moore wrote: > >> >> On Oct 22, 2011, at 2:42 PM, Doug Barton wrote: >> >>> 1. I think we're all in agreement that dot-terminated names (e.g., >>> example.) should not be subject to search lists. I persona

Re: [DNSOP] [dhcwg] [dnsext] [mif] 2nd Last Call for MIF DNS server selection document

2011-10-23 Thread Mark Andrews
In message , Donald Eastlake writes: > Hi, > > On Sun, Oct 23, 2011 at 7:49 PM, Mark Andrews wrote: > > > > In message <96472fb7-8425-4928-8f55-2abf2cb59...@conundrum.com>, Matthew = > Pounse > > tt writes: > >> > >> On 2011/10/22, at 15:21, Keith Moore wrote: > >> > >> > > >> > On Oct 22, 2011

Re: [DNSOP] [dhcwg] [dnsext] [mif] 2nd Last Call for MIF DNS server selection document

2011-10-23 Thread Donald Eastlake
Hi, On Sun, Oct 23, 2011 at 7:49 PM, Mark Andrews wrote: > > In message <96472fb7-8425-4928-8f55-2abf2cb59...@conundrum.com>, Matthew > Pounse > tt writes: >> >> On 2011/10/22, at 15:21, Keith Moore wrote: >> >> > >> > On Oct 22, 2011, at 2:42 PM, Doug Barton wrote: >> > >> >> 1. I think we're a

Re: [DNSOP] [dnsext] [mif] 2nd Last Call for MIF DNS server selection document

2011-10-23 Thread sthaug
> > I can't agree with this statement. As others have said, the practice of > > using a search list to allow 'ssh foo.bar' to reach 'foo.bar.example.com' > > isn't going anywhere, and there are a lot of people that make extensive use > > of the convenience. > > It needs to die because it's fun