Re: [DNSOP] Specification of DNSKEY "Private-key-format"

2019-08-29 Thread Evan Hunt
On Fri, Aug 30, 2019 at 09:56:21AM +0530, Mukund Sivaraman wrote: > For interoperability, there are other BIND-specific formats to consider > too such as the journal file format, the control channel protocol, > etc. Those seem like separate conversations to me, but I'm happy to have them. I

Re: [DNSOP] Specification of DNSKEY "Private-key-format"

2019-08-29 Thread Mukund Sivaraman
Hi Evan On Thu, Aug 29, 2019 at 04:11:23PM +, Evan Hunt wrote: > On Thu, Aug 29, 2019 at 07:25:54PM +0530, Mukund Sivaraman wrote: > > I am asking about where this key format is specified - I want to extend > > it. > > There's never been a written specification as far as I know, and if there

Re: [DNSOP] Rough notes for an incremental zone digest

2019-08-29 Thread Wessels, Duane
Thanks Mukund. For everyone else's benefit, what Mukund and I were discussing is ways to make the ZONEMD algorithm more efficient for large dynamic zones. The authors are intending for that to be future work, and not a part of the current proposal, which has this to say about such zones:

Re: [DNSOP] Specification of DNSKEY "Private-key-format"

2019-08-29 Thread Evan Hunt
On Thu, Aug 29, 2019 at 07:25:54PM +0530, Mukund Sivaraman wrote: > I am asking about where this key format is specified - I want to extend > it. There's never been a written specification as far as I know, and if there was one, then it's definitely been obsolete since 2009, because I changed the

Re: [DNSOP] Why would a v4 client send AAAA query?

2019-08-29 Thread Erik Nygren
The device could also have an IPv6 interface via a tunnel or VPN client. - Erik [Sent from my IPv6 connected T-Mobile 4G LTE mobile device] On Thu, Aug 29, 2019, 5:44 AM Naveen Kottapalli wrote: > My query was about the behavior we observed on a gateway where a pure v4 > subscriber

Re: [DNSOP] Specification of DNSKEY "Private-key-format"

2019-08-29 Thread Mukund Sivaraman
Hi Viktor On Thu, Aug 29, 2019 at 09:48:31AM -0400, Viktor Dukhovni wrote: > On Thu, Aug 29, 2019 at 06:25:02PM +0530, Mukund Sivaraman wrote: > > A tool such as BIND's dnssec-keygen generates the following formatted > > private keys: > > > > [muks@naina ~]$ cat Kexample.org.+008+10638.private >

Re: [DNSOP] Specification of DNSKEY "Private-key-format"

2019-08-29 Thread Viktor Dukhovni
On Thu, Aug 29, 2019 at 06:25:02PM +0530, Mukund Sivaraman wrote: > A tool such as BIND's dnssec-keygen generates the following formatted > private keys: > > [muks@naina ~]$ cat Kexample.org.+008+10638.private > Private-key-format: v1.3 > Algorithm: 8 (RSASHA256) > Modulus: [...] >

[DNSOP] Specification of DNSKEY "Private-key-format"

2019-08-29 Thread Mukund Sivaraman
A tool such as BIND's dnssec-keygen generates the following formatted private keys: [muks@naina ~]$ cat Kexample.org.+008+10638.private Private-key-format: v1.3 Algorithm: 8 (RSASHA256) Modulus:

Re: [DNSOP] Why would a v4 client send AAAA query?

2019-08-29 Thread Mukund Sivaraman
On Thu, Aug 29, 2019 at 03:13:45PM +0530, Naveen Kottapalli wrote: > My query was about the behavior we observed on a gateway where a pure v4 > subscriber (not dual-stack) has sent both A and query for the same > domain simultaneously. Just wanted to know why would a pure v4 subscriber >

Re: [DNSOP] Why would a v4 client send AAAA query?

2019-08-29 Thread Töma Gavrichenkov
Peace, On Thu, Aug 29, 2019 at 12:44 PM Naveen Kottapalli wrote: > My query was about the behavior we observed on a gateway > where a pure v4 subscriber (not dual-stack) has sent both A > and query for the same domain simultaneously. Just > wanted to know why would a pure v4 subscriber

Re: [DNSOP] Why would a v4 client send AAAA query?

2019-08-29 Thread Mark Andrews
Firstly most machines these days have at least one dual stack interface if not many even if the uplink is IPv4 only. Until the address is resolved they don’t know if the is usable (reachable) or not. -- Mark Andrews > On 29 Aug 2019, at 19:43, Naveen Kottapalli wrote: > > My query

Re: [DNSOP] Why would a v4 client send AAAA query?

2019-08-29 Thread Naveen Kottapalli
My query was about the behavior we observed on a gateway where a pure v4 subscriber (not dual-stack) has sent both A and query for the same domain simultaneously. Just wanted to know why would a pure v4 subscriber which cannot use the resolved domain addresses is trying to resolve the

Re: [DNSOP] Why would a v4 client send AAAA query?

2019-08-29 Thread Viktor Dukhovni
On Wed, Aug 28, 2019 at 05:53:26AM +0530, Naveen Kottapalli wrote: > Can one of you tell why would a v4 client send query or a by client > send a A query when the resolved address cannot be used? One answer I did not see, but seems to me to be the most likely, is that the library interface