Re: [DNSOP] NOTE RR type for confidential zone comments

2014-05-28 Thread Joe Abley
On 28 May 2014, at 15:23, Ted Lemon ted.le...@nominum.com wrote: So not to put too fine a point on it, but where is the use case for this proposal? It seems like something that is more of someone's cool hack than a standard people ought to implement. What am I missing? Is the use case

Re: [DNSOP] NOTE RR type for confidential zone comments

2014-05-28 Thread Ted Lemon
On May 28, 2014, at 9:25 AM, Joe Abley jab...@hopcount.ca wrote: Is the use case perhaps the ability to attack comment-like metadata Definitely a possibility. :) If this is really something that's mainly useful for BIND9, then you'd think a private RRType would suffice, similar to the use

Re: [DNSOP] NOTE RR type for confidential zone comments

2014-05-28 Thread Olafur Gudmundsson
On May 28, 2014, at 8:23 AM, Ted Lemon ted.le...@nominum.com wrote: So not to put too fine a point on it, but where is the use case for this proposal? It seems like something that is more of someone's cool hack than a standard people ought to implement. What am I missing?

Re: [DNSOP] NOTE RR type for confidential zone comments

2014-05-28 Thread Joe Abley
On 28 May 2014, at 16:33, Ted Lemon ted.le...@nominum.com wrote: On May 28, 2014, at 9:25 AM, Joe Abley jab...@hopcount.ca wrote: Is the use case perhaps the ability to attack comment-like metadata Definitely a possibility. :) Sorry, I've been teaching people at AfNOG about DNS and

Re: [DNSOP] NOTE RR type for confidential zone comments

2014-05-28 Thread Evan Hunt
So not to put too fine a point on it, but where is the use case for this proposal? It seems like something that is more of someone's cool hack than a standard people ought to implement. What am I missing? The first three I thought of when the Dan suggested the feature: 1) In the places

Re: [DNSOP] NOTE RR type for confidential zone comments

2014-05-28 Thread Ted Lemon
On May 28, 2014, at 12:15 PM, Evan Hunt e...@isc.org wrote: 1) In the places I've worked, there have often been emails going around asking who's in charge of a particular machine or a particular IP address, that information having apparently been misplaced since the machine was set up or the

Re: [DNSOP] NOTE RR type for confidential zone comments

2014-05-28 Thread Paul Hoffman
- I don't think we should lose a bit from the header for this. If we just discovered the need for this, it is not important enough to burn a bit on. - EDNS0 seems fine for it, but it feels much more like a Meta type --Paul Hoffman ___ DNSOP mailing

Re: [DNSOP] NOTE RR type for confidential zone comments

2014-05-28 Thread Evan Hunt
On Wed, May 28, 2014 at 12:20:26PM -0400, Ted Lemon wrote: These are all examples of things that are ordinarily addressed by some kind of IPAM user interface. True, for the first two, at least, and the third could be solved on an implementation-specific basis by storing metadata outside the

Re: [DNSOP] NOTE RR type for confidential zone comments

2014-05-28 Thread Ted Lemon
On May 28, 2014, at 12:39 PM, Evan Hunt e...@isc.org wrote: But another way of saying that is: software exists that kluges around this lacuna in the DNS feature set, which doesn't mean it isn't a lacuna. Sure, but you could also say that IP leaves out the feature of supporting streaming, and

Re: [DNSOP] NOTE RR type for confidential zone comments

2014-05-28 Thread 神明達哉
At Wed, 28 May 2014 12:57:55 -0400, Ted Lemon ted.le...@nominum.com wrote: What you are proposing is essentially a management function, not a naming function. Using the DNS to provide that function can work, and may even make sense in some cases, but I don't think it's the right thing to do

Re: [DNSOP] NOTE RR type for confidential zone comments

2014-05-28 Thread Evan Hunt
On Tue, May 27, 2014 at 09:30:57PM -0700, Doug Barton wrote: On a purely stylistic level I agree with you. :) However this signal would only have to be sent when requesting a zone transfer, and the extra 32 bits would be in the noise. The direction of the wind being clear, I have redrafted