[DNSOP] draft-wkumari-dnsop-internal and DNAME

2017-11-10 Thread Stephane Bortzmeyer
draft-wkumari-dnsop-internal-00 says "This document requests that the .internal TLD be assigned to the IANA (similar to the way that .example is) and a DNSSEC insecure delegation (that is, a delegation with no DS records) be inserted into the root-zone, delegated to blackhole-[12].iana.org." This

Re: [DNSOP] Agenda for IETF100

2017-11-10 Thread Stephane Bortzmeyer
On Fri, Nov 03, 2017 at 11:07:54PM -0400, tjw ietf wrote a message of 202 lines which said: > As you can see, we have time for our Monday Morning slot of 2.5 hours. > Because of this, we're currently planning on giving back the Thursday > meeting slot. Any news on that? The monday session col

Re: [DNSOP] Agenda for IETF100

2017-11-10 Thread Paul Wouters
I can summarize ENS for you. It takes 4 out of 7 geeks to bypass the blockchain in case of emergency, court orders or kneecaps. According to the presentation held at ICANN60 Sent from my iPhone > On Nov 10, 2017, at 17:46, Stephane Bortzmeyer wrote: > > On Fri, Nov 03, 2017 at 11:07:54PM -04

Re: [DNSOP] draft-wkumari-dnsop-internal and DNAME

2017-11-10 Thread Matt Larson
> On Nov 10, 2017, at 7:12 AM, Stephane Bortzmeyer wrote: > > draft-wkumari-dnsop-internal-00 says "This document requests that the > .internal TLD be assigned to the IANA (similar to the way that > .example is) and a DNSSEC insecure delegation (that is, a delegation > with no DS records) be ins

Re: [DNSOP] Agenda for IETF100

2017-11-10 Thread Stephane Bortzmeyer
On Fri, Nov 10, 2017 at 05:58:13PM +0530, Paul Wouters wrote a message of 29 lines which said: > It takes 4 out of 7 geeks to bypass the blockchain in case of > emergency, court orders or kneecaps. > > According to the presentation held at ICANN60 Well, if someone at ICANN said so, someone i

Re: [DNSOP] draft-wkumari-dnsop-internal and DNAME

2017-11-10 Thread Stephane Bortzmeyer
On Fri, Nov 10, 2017 at 08:53:06AM -0500, Matt Larson wrote a message of 32 lines which said: > I'll note that from a technical/mechanical perspective, ICANN's and > Verisign's root zone management systems already know how to deal > with delegations. A DNAME in the root would require an unknow

Re: [DNSOP] Agenda for IETF100

2017-11-10 Thread Paul Wouters
The ENS developer said so in response to my question. Sent from my iPhone > On Nov 10, 2017, at 19:55, Stephane Bortzmeyer wrote: > > On Fri, Nov 10, 2017 at 05:58:13PM +0530, > Paul Wouters wrote > a message of 29 lines which said: > >> It takes 4 out of 7 geeks to bypass the blockchain in

Re: [DNSOP] Agenda for IETF100

2017-11-10 Thread David Conrad
Can confirm, as can anyone willing to go to an Adobe Connect archive. For the curious: https://participate.icann.org/p6u03rimy92/?launcher=false&fcsContent=true&pbMode=normal The discussion on Ethereum by Leonard Tan, an Ethereum developer, starts at 00:31:00. Paul’s question is at 00:42:16. Fr

Re: [DNSOP] Resolver behaviour with multiple trust anchors

2017-11-10 Thread william manning
in the last 20 years, there have been a few testbeds that have explored this space. irl.cs.ucla.edu/papers/imc71-osterweil.pdf https://eprint.iacr.org/2013/254.pdf that suggest Matt is spot on here. accepting any success is likely to present the fewest problems from a user perspective. /Wm On

Re: [DNSOP] Resolver behaviour with multiple trust anchors

2017-11-10 Thread william manning
in reverse order of trustworthiness: the root a third party - e.g. DLV locally verified - e.g. my employer, ISP, someone I have a binding legal relationship with /Wm On Thu, Nov 2, 2017 at 8:04 AM, Bob Harold wrote: > > On Thu, Nov 2, 2017 at 10:41 AM, Matt Larson > wrote: > >> The root KSK r

Re: [DNSOP] Review of draft-dupont-dnsop-rfc2845bis-00.txt

2017-11-10 Thread Francis Dupont
In your previous mail you wrote: > After a reading, I felt that this document needs the following: > > * Editing for clarity of sentences => I agree until the text comes from original RFCs (i.e. you are 17 year too late) or can only be clarified at the margin. > * Addressing insufficient p

Re: [DNSOP] Agenda for IETF100

2017-11-10 Thread tjw ietf
Great question Paul and thanks for getting that on record. On Sat, Nov 11, 2017 at 2:59 AM, David Conrad wrote: > Can confirm, as can anyone willing to go to an Adobe Connect archive. For > the curious: > > https://participate.icann.org/p6u03rimy92/?launcher=false&; > fcsContent=true&pbMode=norm