Re: [DNSOP] Specification of DNSKEY "Private-key-format"

2019-08-29 Thread Evan Hunt
On Fri, Aug 30, 2019 at 09:56:21AM +0530, Mukund Sivaraman wrote: > For interoperability, there are other BIND-specific formats to consider > too such as the journal file format, the control channel protocol, > etc. Those seem like separate conversations to me, but I'm happy to have them. I shoul

Re: [DNSOP] Specification of DNSKEY "Private-key-format"

2019-08-29 Thread Mukund Sivaraman
Hi Evan On Thu, Aug 29, 2019 at 04:11:23PM +, Evan Hunt wrote: > On Thu, Aug 29, 2019 at 07:25:54PM +0530, Mukund Sivaraman wrote: > > I am asking about where this key format is specified - I want to extend > > it. > > There's never been a written specification as far as I know, and if there

Re: [DNSOP] Rough notes for an incremental zone digest

2019-08-29 Thread Wessels, Duane
Thanks Mukund. For everyone else's benefit, what Mukund and I were discussing is ways to make the ZONEMD algorithm more efficient for large dynamic zones. The authors are intending for that to be future work, and not a part of the current proposal, which has this to say about such zones: As

Re: [DNSOP] Specification of DNSKEY "Private-key-format"

2019-08-29 Thread Evan Hunt
On Thu, Aug 29, 2019 at 07:25:54PM +0530, Mukund Sivaraman wrote: > I am asking about where this key format is specified - I want to extend > it. There's never been a written specification as far as I know, and if there was one, then it's definitely been obsolete since 2009, because I changed the

Re: [DNSOP] Why would a v4 client send AAAA query?

2019-08-29 Thread Erik Nygren
The device could also have an IPv6 interface via a tunnel or VPN client. - Erik [Sent from my IPv6 connected T-Mobile 4G LTE mobile device] On Thu, Aug 29, 2019, 5:44 AM Naveen Kottapalli wrote: > My query was about the behavior we observed on a gateway where a pure v4 > subscriber (no

Re: [DNSOP] Specification of DNSKEY "Private-key-format"

2019-08-29 Thread Mukund Sivaraman
Hi Viktor On Thu, Aug 29, 2019 at 09:48:31AM -0400, Viktor Dukhovni wrote: > On Thu, Aug 29, 2019 at 06:25:02PM +0530, Mukund Sivaraman wrote: > > A tool such as BIND's dnssec-keygen generates the following formatted > > private keys: > > > > [muks@naina ~]$ cat Kexample.org.+008+10638.private >

Re: [DNSOP] Specification of DNSKEY "Private-key-format"

2019-08-29 Thread Viktor Dukhovni
On Thu, Aug 29, 2019 at 06:25:02PM +0530, Mukund Sivaraman wrote: > A tool such as BIND's dnssec-keygen generates the following formatted > private keys: > > [muks@naina ~]$ cat Kexample.org.+008+10638.private > Private-key-format: v1.3 > Algorithm: 8 (RSASHA256) > Modulus: [...] > PublicExponent:

[DNSOP] Specification of DNSKEY "Private-key-format"

2019-08-29 Thread Mukund Sivaraman
A tool such as BIND's dnssec-keygen generates the following formatted private keys: [muks@naina ~]$ cat Kexample.org.+008+10638.private Private-key-format: v1.3 Algorithm: 8 (RSASHA256) Modulus: 3GqHtpNGJk9obM8cIeQa5RqYJNd7ZMJ3tdOIauC8Rz7G3dhxQtTDWwW6vAg3xptDCR/s3l3FaSFTkXyoqqY2/zLTNWUqY2R043xs5Z

Re: [DNSOP] Why would a v4 client send AAAA query?

2019-08-29 Thread Mukund Sivaraman
On Thu, Aug 29, 2019 at 03:13:45PM +0530, Naveen Kottapalli wrote: > My query was about the behavior we observed on a gateway where a pure v4 > subscriber (not dual-stack) has sent both A and query for the same > domain simultaneously. Just wanted to know why would a pure v4 subscriber > whic

Re: [DNSOP] Why would a v4 client send AAAA query?

2019-08-29 Thread Töma Gavrichenkov
Peace, On Thu, Aug 29, 2019 at 12:44 PM Naveen Kottapalli wrote: > My query was about the behavior we observed on a gateway > where a pure v4 subscriber (not dual-stack) has sent both A > and query for the same domain simultaneously. Just > wanted to know why would a pure v4 subscriber whic

Re: [DNSOP] Why would a v4 client send AAAA query?

2019-08-29 Thread Mark Andrews
Firstly most machines these days have at least one dual stack interface if not many even if the uplink is IPv4 only. Until the address is resolved they don’t know if the is usable (reachable) or not. -- Mark Andrews > On 29 Aug 2019, at 19:43, Naveen Kottapalli wrote: > > My query was

Re: [DNSOP] Why would a v4 client send AAAA query?

2019-08-29 Thread Naveen Kottapalli
My query was about the behavior we observed on a gateway where a pure v4 subscriber (not dual-stack) has sent both A and query for the same domain simultaneously. Just wanted to know why would a pure v4 subscriber which cannot use the resolved domain addresses is trying to resolve the v6