[DNSOP] warning

2016-12-17 Thread ac
If any of you are thinking about speaking your mind, there are consequences. v...@rhyolite.com host smtp.rhyolite.com [192.188.61.3] SMTP error from remote mail server after end of data: 550 5.7.1 mail uBI4vMnA039102 from 188.40.114.80 rejected by DCC https://en.wikipedia.org/wiki/Distributed_Che

Re: [DNSOP] I-D Action: draft-vixie-dns-rpz-04.txt

2016-12-17 Thread ac
On Sat, 17 Dec 2016 18:27:51 GMT Vernon Schryver wrote: > > From: ac > > that is only your point of view, take of your sunglasses, it is > > bright outside, we are Making The Internet Great Again, writing > > protocols to tell lies, moving lines, exploring the dark side of > > the force, a new ti

Re: [DNSOP] Aggressive NSEC statistics

2016-12-17 Thread Ted Lemon
We are deep down a rathole here. If this is worthy of discussion, which I don't dispute, it is probably better discussed under a different heading. On Dec 17, 2016 3:17 PM, "william manning" wrote: David, it would seem that fact-driven processes might serve the operational ecosystem better than

Re: [DNSOP] [homenet] Fwd: WGLC on "redact" and "homenet-dot"

2016-12-17 Thread william manning
David, it would seem that fact-driven processes might serve the operational ecosystem better than SWAG, don't you agree? Warren, do you have, even antecdotal data on the impact of aggressive NSEC and traffic to the roots, that would inform this discussion (maybe). At least it would give the root o

Re: [DNSOP] [homenet] Fwd: WGLC on "redact" and "homenet-dot"

2016-12-17 Thread David Conrad
Bill, On Dec 17, 2016, at 11:36 AM, william manning wrote: > Is there any public data to support the presumptions of excess capacity at > the roots and the impact of NSEC aggressive use on the DNS? Warren provided some interesting anecdotes at the last IEPG, but I'm unaware of any formal model

Re: [DNSOP] [homenet] Fwd: WGLC on "redact" and "homenet-dot"

2016-12-17 Thread william manning
Is there any public data to support the presumptions of excess capacity at the roots and the impact of NSEC aggressive use on the DNS? I know that in the previous century, punting on operational impact by guessing about outcomes was common. I thought the IETF had moved away from SWAG and was wo

Re: [DNSOP] [homenet] Fwd: WGLC on "redact" and "homenet-dot"

2016-12-17 Thread David Conrad
I presume NSEC Aggressive Use will significantly reduce the amount of crap hitting the root servers. Given how much capacity the root servers already have to provision to deal with that crap, I don't think a massive increase in legitimate (NSEC Aggressive Use-implementing) resolvers will move t

Re: [DNSOP] I-D Action: draft-vixie-dns-rpz-04.txt

2016-12-17 Thread Scott Schmit
On Fri, Dec 16, 2016 at 01:53:52PM -0800, internet-dra...@ietf.org wrote: > Abstract: >This document describes a method for expressing DNS response policy >inside a specially constructed DNS zone, and for recursive name >servers to use such policy to return modified results to DNS clien

Re: [DNSOP] I-D Action: draft-vixie-dns-rpz-04.txt

2016-12-17 Thread Vernon Schryver
> From: ac > that is only your point of view, take of your sunglasses, it is bright > outside, we are Making The Internet Great Again, writing protocols to > tell lies, moving lines, exploring the dark side of the force, a new > time is upon us, where toasters also make ice and ice and tell time.

Re: [DNSOP] I-D Action: draft-vixie-dns-rpz-04.txt

2016-12-17 Thread ac
On Sat, 17 Dec 2016 08:05:36 -0500 Ted Lemon wrote: > We are already zooming down it at full speed. The night is dark and > full of ice weasels. > that is only your point of view, take of your sunglasses, it is bright outside, we are Making The Internet Great Again, writing protocols to tell l

Re: [DNSOP] I-D Action: draft-vixie-dns-rpz-04.txt

2016-12-17 Thread Ted Lemon
We are already zooming down it at full speed. The night is dark and full of ice weasels. On Dec 17, 2016 00:38, "ac" wrote: > > > and so we all go down the slippery slope. > > > On Fri, 16 Dec 2016 13:53:52 -0800 > internet-dra...@ietf.org wrote: > > > > > A New Internet-Draft is available from