Re: [DNSOP] Prefixed name spaces and DANE client TLSA

2016-01-12 Thread George Michaelson
I think the mapping of SMTP (a protocol, an over-the wire framing and dialogue about exchanging mail) has been crossed (crossing-the-beam crossed) with a ROLE. a client can be an SMTP speaker, and a forwarder/delivery agent can be an SMTP speaker. They aren't performing the sale role. So does DANE

[DNSOP] Prefixed name spaces and DANE client TLSA

2016-01-12 Thread John Levine
I'm having what seems to me a very peculiar argument over in DANE. There's a draft called draft-huque-dane-client-cert-02 about validating SSL certificates for client hosts. The idea, which seems reasonable, is that if an SMTP or other client presents a TLS certificate claiming that it's outbound

[DNSOP] Updating RFC 7719: draft-ietf-dnsop-terminology-bis

2016-01-12 Thread Paul Hoffman
Greetings again. As promised during the run-up to RFC 7719, the DNS Terminology draft, we are starting a revision. The goals are: -In places where the WG came to tentative consensus, strengthen that consensus -Possibly reorganize and re-categorize the discussion of "resolvers" -Formally upda

Re: [DNSOP] Call for Adoption: draft-fanf-dnsop-rfc2317bis

2016-01-12 Thread 神明達哉
At Sun, 13 Dec 2015 22:08:13 -0500, Tim Wicinski wrote: > This starts a Call for Adoption for draft-fanf-dnsop-rfc2317bis > > The draft is available here: > https://datatracker.ietf.org/doc/draft-fanf-dnsop-rfc2317bis/ > > Please review this draft to see if you think it is suitable for adoption >

[DNSOP] I-D Action: draft-ietf-dnsop-terminology-bis-00.txt

2016-01-12 Thread internet-drafts
A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Domain Name System Operations Working Group of the IETF. Title : DNS Terminology Authors : Paul Hoffman Andrew Sullivan

[DNSOP] I-D Action: draft-ietf-dnsop-cookies-09.txt

2016-01-12 Thread internet-drafts
A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Domain Name System Operations Working Group of the IETF. Title : Domain Name System (DNS) Cookies Authors : Donald E. Eastlake

Re: [DNSOP] Order of DNS records...

2016-01-12 Thread bert hubert
On Tue, Jan 12, 2016 at 03:47:16PM +0100, Stephane Bortzmeyer wrote: > > returned RRSIG first for 44% of my statistically dubious sample. > > It is said that PowerDNS does it at random, on purpose, to break > erroneous programs. Let me clarify that. PowerDNS Authoritative has always randomized re

Re: [DNSOP] Order of DNS records...

2016-01-12 Thread Stephane Bortzmeyer
On Tue, Jan 12, 2016 at 02:43:46PM +, Dick Franks wrote a message of 176 lines which said: > returned RRSIG first for 44% of my statistically dubious sample. It is said that PowerDNS does it at random, on purpose, to break erroneous programs. _

Re: [DNSOP] Order of DNS records...

2016-01-12 Thread Dick Franks
Attempt to repeat your result using #!/usr/bin/perl -w # use Net::DNS 1.01; my $resolver = new Net::DNS::Resolver( nameserver => 'ns02.one.com.', dnssec => 1 ); $resolver->send(qw( masters-consultants.fr SOA ))->print; # returned RRSIG first for 44% of my statistically dubious sample. Di

Re: [DNSOP] Order of DNS records...

2016-01-12 Thread Brett
On 11 January 2016 at 21:20, Stephane Bortzmeyer wrote: > Interesting: it sends the signature before the SOA (and it breaks at > least one DNS program - one of mine, shame): > > % dig @ns02.one.com. SOA masters-consultants.fr. > > ; <<>> DiG 9.9.5-9+deb8u3-Debian <<>> @ns02.one.com. SOA > masters