Good morning indeed. Thanks for Session
", "time": "2022-11-08T09:33:25Z"}, {"author": "Tim Wicinski", "text": "with my noisy keyboard !
", "time": "2022-11-08T09:33:28Z"}, {"author": "Tim Wicinski", "text": "taking notes via https://notes.ietf.org/notes-ietf-115-dnsop?edit
", "time": "2022-11-08T09:33:37Z"}, {"author": "Peter van Dijk", "text": "audio is terrible
", "time": "2022-11-08T09:37:05Z"}, {"author": "David Lawrence", "text": "Lots of static and echo from your link, Tim
", "time": "2022-11-08T09:37:29Z"}, {"author": "Hazel Smith", "text": "OK, so it's not jujst me that's hearing the \"darth vader\" voice?
", "time": "2022-11-08T09:37:31Z"}, {"author": "Peter van Dijk", "text": "there's an echo and lots of distortion
", "time": "2022-11-08T09:37:33Z"}, {"author": "Anthony Somerset", "text": "tim your mic seems to be causing some wierd dalek like inteference
", "time": "2022-11-08T09:37:40Z"}, {"author": "David Lawrence", "text": "Getting worse
", "time": "2022-11-08T09:37:41Z"}, {"author": "Shane Kerr", "text": "THE BEES!!!
", "time": "2022-11-08T09:37:44Z"}, {"author": "Peter van Dijk", "text": "Benno sounds fine
", "time": "2022-11-08T09:37:48Z"}, {"author": "Anthony Somerset", "text": "@meetecho may need your assistance incase its a room issue
", "time": "2022-11-08T09:37:52Z"}, {"author": "Suzanne Woolf", "text": "@meetecho we're having some trouble with echoes for a remote speaker
", "time": "2022-11-08T09:38:08Z"}, {"author": "Wes Hardaker", "text": "tim turn off and back on again.
", "time": "2022-11-08T09:38:09Z"}, {"author": "Lorenzo Miniero", "text": "We're aware and monitoring
", "time": "2022-11-08T09:38:13Z"}, {"author": "Daniel Gillmor", "text": "it's echoing bees
", "time": "2022-11-08T09:38:17Z"}, {"author": "Suzanne Woolf", "text": "thx
", "time": "2022-11-08T09:38:19Z"}, {"author": "Peter van Dijk", "text": "better!
", "time": "2022-11-08T09:38:21Z"}, {"author": "David Lawrence", "text": "Reboot Tim!
", "time": "2022-11-08T09:38:21Z"}, {"author": "Daniel Gillmor", "text": "but now it's better
", "time": "2022-11-08T09:38:22Z"}, {"author": "Shane Kerr", "text": "Wow reboot actually worked.
", "time": "2022-11-08T09:38:31Z"}, {"author": "Suzanne Woolf", "text": "There is no need to reboot Tim :-)
", "time": "2022-11-08T09:38:44Z"}, {"author": "Daniel Gillmor", "text": "the bees are returning
", "time": "2022-11-08T09:38:50Z"}, {"author": "Peter van Dijk", "text": "small numbers of bees spotted
", "time": "2022-11-08T09:38:58Z"}, {"author": "Peter van Dijk", "text": "they're gaining ground
", "time": "2022-11-08T09:39:03Z"}, {"author": "Warren Kumari", "text": "Turn if off and on again!
", "time": "2022-11-08T09:39:10Z"}, {"author": "Jan-Frederik Rieckers", "text": "And it gets worse again.
\nIt seems that the audio signal is duplicated somehow.
its starting to degrade again
", "time": "2022-11-08T09:39:26Z"}, {"author": "Anthony Somerset", "text": "tim your mic seems to be causing some wierd dalek like inteference
", "time": "2022-11-08T09:39:36Z"}, {"author": "Jan-Frederik Rieckers", "text": "and the duplicated signal is delayed. Wow. I would really like to know how this could happen....
", "time": "2022-11-08T09:39:42Z"}, {"author": "Tim Wicinski", "text": "I'll drop out. Arrggh !
", "time": "2022-11-08T09:39:45Z"}, {"author": "Anthony Somerset", "text": "its starting to degrade again
", "time": "2022-11-08T09:39:53Z"}, {"author": "Tim Wicinski", "text": "We agree !
", "time": "2022-11-08T09:40:00Z"}, {"author": "Warren Kumari", "text": "Yup, an echo and a delay >= the echo canceller time
", "time": "2022-11-08T09:40:12Z"}, {"author": "\u00c9ric Vyncke", "text": "WG chairs have the 'power' to request a DNS directorate review
", "time": "2022-11-08T09:41:21Z"}, {"author": "Tim Wicinski", "text": "Thanks Eric V!
", "time": "2022-11-08T09:41:30Z"}, {"author": "Tim Wicinski", "text": "We shall
", "time": "2022-11-08T09:41:34Z"}, {"author": "Suzanne Woolf", "text": "Happy to push the relevant button to get a review-- good reminder to have, thx Geoff
", "time": "2022-11-08T09:41:48Z"}, {"author": "\u00c9ric Vyncke", "text": ":thumbsup:
", "time": "2022-11-08T09:41:56Z"}, {"author": "Lorenzo Miniero", "text": "Looks like that's the audio stream we're getting from the browser, so it's not a mixing quirk on our end. Tim, have you tried using a different browser just to see if that may fix it?
", "time": "2022-11-08T09:42:21Z"}, {"author": "Anthony Somerset", "text": "is it just me or does the network feel flaky/laggy in the room?
", "time": "2022-11-08T09:42:47Z"}, {"author": "Warren Kumari", "text": "DNSDIR Review requested.
", "time": "2022-11-08T09:42:54Z"}, {"author": "Warren Kumari", "text": "Much thanks to everyone who serves on the DNSDIR and the DNSDIR secretaries....
", "time": "2022-11-08T09:43:35Z"}, {"author": "Tim Wicinski", "text": "Using Firefox @lorenzo, I could try Brave; Safari but not during the session
", "time": "2022-11-08T09:43:41Z"}, {"author": "Warren Kumari", "text": "I can probably drives the slides if that helps?
", "time": "2022-11-08T09:48:23Z"}, {"author": "Tim Wicinski", "text": "it appears to be stuck \"processing decks\"
", "time": "2022-11-08T09:50:17Z"}, {"author": "Anthony Somerset", "text": "@Lorenzo Miniero heads up
", "time": "2022-11-08T09:50:42Z"}, {"author": "Tim Wicinski", "text": "This is a good reason to get your slides in early
", "time": "2022-11-08T09:51:04Z"}, {"author": "Jabber", "text": "sftcd: I get a 404 for https://datatracker.ietf.org/meeting/115/materials/slides-115-dnsop-the-alt-special-use-top-level-domain-draft-ietf-dnsop-alt-tld-18
", "time": "2022-11-08T09:51:11Z"}, {"author": "Alessandro Amirante", "text": "yeah it seems that the deck is not available on the datatracker
", "time": "2022-11-08T09:51:42Z"}, {"author": "Alessandro Amirante", "text": "it 404s
", "time": "2022-11-08T09:51:47Z"}, {"author": "Tim Wicinski", "text": "", "time": "2022-11-08T09:52:17Z"}, {"author": "Warren Kumari", "text": "Reuploading them....
", "time": "2022-11-08T09:52:23Z"}, {"author": "Warren Kumari", "text": "Plan is that I can just share my screen with the sldies if that works for the chairs...
", "time": "2022-11-08T09:53:43Z"}, {"author": "Suzanne Woolf", "text": "@meetecho we're having a very weird problem with slides in the datatracker
", "time": "2022-11-08T09:54:00Z"}, {"author": "Suzanne Woolf", "text": "OK thx Warren
", "time": "2022-11-08T09:54:08Z"}, {"author": "Alessandro Amirante", "text": "they should be available now
", "time": "2022-11-08T09:54:29Z"}, {"author": "Benno Overeinder", "text": "Thanks!
", "time": "2022-11-08T09:54:57Z"}, {"author": "Tim Wicinski", "text": "So Roy gets Willem to give his talk?!?
", "time": "2022-11-08T09:54:59Z"}, {"author": "Jabber", "text": "sftcd: I'm not sure but think the dns name on that slide should be defo.ie :-)
", "time": "2022-11-08T09:55:30Z"}, {"author": "Jabber", "text": "dkg: defol.io says \"Defolio is run by Estonian Marketing Association\"
", "time": "2022-11-08T09:56:10Z"}, {"author": "Jabber", "text": "sftcd: yeah, that's not mine:-)
", "time": "2022-11-08T09:56:28Z"}, {"author": "Mark Andrews", "text": "https://datatracker.ietf.org/meeting/115/agenda/ will need fixing as the slides are not there yet
", "time": "2022-11-08T10:08:11Z"}, {"author": "Peter van Dijk", "text": "I've been ignoring the .alt draft, as an implementer. I see now that I was wrong about that. This keeps happening :)
", "time": "2022-11-08T10:08:32Z"}, {"author": "Benjamin Schwartz", "text": "I vote for MAY
", "time": "2022-11-08T10:08:44Z"}, {"author": "Jabber", "text": "dkg: why would MAY be preferable to SHOULD ?
", "time": "2022-11-08T10:09:12Z"}, {"author": "Benjamin Schwartz", "text": "(... with some language explaining that they're not allowed to break DNSSEC in the process)
", "time": "2022-11-08T10:09:15Z"}, {"author": "Jabber", "text": "dkg: \"weird\" is not a good argument against
", "time": "2022-11-08T10:09:21Z"}, {"author": "Mark Andrews", "text": ".onion hacks break DNSSEC
", "time": "2022-11-08T10:09:50Z"}, {"author": "Peter van Dijk", "text": "MAY sounds better than SHOULD, but still seems way too strong
", "time": "2022-11-08T10:10:15Z"}, {"author": "Benjamin Schwartz", "text": "Another option would be to simply note that Local Root is allowed, which subsumes this
", "time": "2022-11-08T10:10:36Z"}, {"author": "Eric Orth", "text": "Maybe a better argument than \"weird\" is that informational implies a lack of strict requirements and thus MUST and maybe SHOULD become a bit ambiguous as to how strict of a requirement it actually is.
", "time": "2022-11-08T10:11:07Z"}, {"author": "Peter van Dijk", "text": "to qualify \"some resolvers\", it looks like Unbound and Knot Resolver handle .onion specially by default; BIND and PowerDNS Recursor do not
", "time": "2022-11-08T10:12:40Z"}, {"author": "Ralf Weber", "text": "Akamai Cacheserve also not
", "time": "2022-11-08T10:13:04Z"}, {"author": "Peter van Dijk", "text": "thanks - can't \"git grep\" that one here ;)
", "time": "2022-11-08T10:13:21Z"}, {"author": "Andrew Campling", "text": "Listening to thia presentation seems to make an increasingly strong
", "time": "2022-11-08T10:13:43Z"}, {"author": "St\u00e9phane Bortzmeyer", "text": "DNAME in the root:-) https://datatracker.ietf.org/doc/draft-bortzmeyer-dname-root/
", "time": "2022-11-08T10:14:03Z"}, {"author": "Andrew Campling", "text": "*Listening to this discussion, it seems to make an increasingly strong case for not moving forward with .alt
", "time": "2022-11-08T10:14:34Z"}, {"author": "Benjamin Schwartz", "text": "Also, Aggressive NSEC will minimize the number of queries to the root anyway
", "time": "2022-11-08T10:15:18Z"}, {"author": "Tim Wicinski", "text": "Queue is closed, folks can place their comments here and will be incorporated into minutes
", "time": "2022-11-08T10:17:39Z"}, {"author": "Warren Kumari", "text": "+QNAME minimization....
", "time": "2022-11-08T10:17:48Z"}, {"author": "Ray Bellis", "text": "With my RSO hat on - I disagree with those assertions. We simply cannot know at this point.
", "time": "2022-11-08T10:18:58Z"}, {"author": "Ray Bellis", "text": "If name spaces under .alt end up being very popular then the leakage load could become significant.
", "time": "2022-11-08T10:19:59Z"}, {"author": "Warren Kumari", "text": "... but if there is no .alt, the same thing is true. Having them in .alt means that negative caching can help suppress.
", "time": "2022-11-08T10:20:50Z"}, {"author": "Warren Kumari", "text": "I think it isn't \"if things in .alt become popolar\", it is more \"if alternative resolution things leak\"
", "time": "2022-11-08T10:21:16Z"}, {"author": "Jabber", "text": "dkg: meetecho: minor echo of the remote speaker via the room mic
", "time": "2022-11-08T10:21:43Z"}, {"author": "Ray Bellis", "text": "if we're going to put requirements on resolvers, it should be on stub resolvers only.
", "time": "2022-11-08T10:21:59Z"}, {"author": "Jabber", "text": "dkg: i think the speaker can hear it too
", "time": "2022-11-08T10:22:16Z"}, {"author": "Viktor Dukhovni", "text": "We have language for .HOME that covers synthesis.
", "time": "2022-11-08T10:23:26Z"}, {"author": "Viktor Dukhovni", "text": "So .alt can be handled just like .HOME
", "time": "2022-11-08T10:23:41Z"}, {"author": "Ray Bellis", "text": "there is no .home - Homenet got forced to use .home.arpa instead
", "time": "2022-11-08T10:23:59Z"}, {"author": "Suzanne Woolf", "text": "Those who we had to kick out of the queue-- apologies and if you put your coments in the chat they'll be picked up in the minutes
", "time": "2022-11-08T10:25:15Z"}, {"author": "Warren Kumari", "text": "We could ask them too -- some implementations may do it - e.g systemd people are quite active at adding things.
", "time": "2022-11-08T10:26:28Z"}, {"author": "Eric Orth", "text": "As a stub implementor, I'd appreciate a MAY on dropping alt queries, just as general permission in case I ever get around to adding it.
", "time": "2022-11-08T10:26:34Z"}, {"author": "Lars-Johan Liman", "text": "In response to @Benjamin Schwartz : the queries are not supposed to appear at all. If you leak a query to you local resolver, I'd argue that not responding at all is the appropriate way to treat this. No need neither for doing a full cycle to find the \"NXDOMAIN\" from the root, nor for sythesizing. Just \"shut up\" or respond with \"REFUSED\".
", "time": "2022-11-08T10:26:47Z"}, {"author": "Warren Kumari", "text": "Sorry, context was unclear -- them == stub resolver people.
", "time": "2022-11-08T10:26:50Z"}, {"author": "Ray Bellis", "text": "@eric ultimately the \"protocol\" switch has to happen in the client (stub) anyway, at least w.r.t. those API calls that go into gethostbyname(), etc.
Mirror zones and aggressive negative caching will suppress traffic to the root in recursive servers and keep DNSSEC working
", "time": "2022-11-08T10:28:04Z"}, {"author": "Ray Bellis", "text": "so in this context when I say stub I mean the \"name resolution service\" on the client, before it gets to the point of saying \"oh, you mean DNS\"
", "time": "2022-11-08T10:28:06Z"}, {"author": "Benjamin Schwartz", "text": "@Lars If this is \"not a protocol change\" then I think it's clear that it shouldn't change the behavior of recursive resolvers, and we should still be able to ask \"does .alt exist in the root\" and get a signed answer.
", "time": "2022-11-08T10:28:45Z"}, {"author": "Mark Andrews", "text": "Do not intercept queries for .alt in recursive servers. The above two solutions should be enough.
", "time": "2022-11-08T10:29:44Z"}, {"author": "George Michaelson", "text": "@ray putting \"name resolution service\" into quotes gets to the point that it might be GNS or NIS/yellow pages
", "time": "2022-11-08T10:29:49Z"}, {"author": "Ray Bellis", "text": "@ggm yes, and that's a good thing.
", "time": "2022-11-08T10:30:11Z"}, {"author": "George Michaelson", "text": "ie its out-of-scope of the DNS to tell a host how it maps names
", "time": "2022-11-08T10:30:14Z"}, {"author": "George Michaelson", "text": "except where \"name resolution service\" IS the DNS
", "time": "2022-11-08T10:30:25Z"}, {"author": "George Michaelson", "text": "It's probably just a language thing but when a document puts times in and its \"five minutes\" it feels like a heuristic to a human problem, not an algorithm. -\"try it for a bit but give up if you want to make some coffee\"
", "time": "2022-11-08T10:32:04Z"}, {"author": "Ray Bellis", "text": "The whole point of this draft is that it's not DNS, though. Surely it's not our of scope to say that client stubs MUST NOT send their queries to the upstream DNS resolver?
", "time": "2022-11-08T10:32:08Z"}, {"author": "Anthony Somerset", "text": "EDNS client subnet resolution failures - i guess depends on the class of error - e.g. SERVFAIL vs NXDOMAIN
\nshould we handle different error classes differently like we do email errors (permanent fails vs temporary fails)
", "time": "2022-11-08T10:32:38Z"}, {"author": "Benjamin Schwartz", "text": "@Ray If it's \"not DNS\", then surely there is no stub resolver!
", "time": "2022-11-08T10:32:43Z"}, {"author": "George Michaelson", "text": "@ray yea, I could go there. \"hey, non-DNS implementors. if you implement a fallback, failover or side query to the DNS, do us a favour and don't ask for this list of things\"
", "time": "2022-11-08T10:32:51Z"}, {"author": "Ray Bellis", "text": "@ben see above - I'm really talking one level below that, e.g. getaddrinfo()
i.e. the NSS layer
", "time": "2022-11-08T10:33:58Z"}, {"author": "Peter van Dijk", "text": "note that 7871 currently prohibits ecs-scoped NXDOMAINs; that doesn't mean the same should go for failures, though
", "time": "2022-11-08T10:34:16Z"}, {"author": "Benjamin Schwartz", "text": "@Ray Leaving aside the question of whether that layer actually exists, what recommendation would you make about names containing characters that are not allowed in the root zone? .alt is the same: a label that, by policy, is not permitted to appear in the root.
", "time": "2022-11-08T10:34:54Z"}, {"author": "Ray Bellis", "text": "@ben _if_ those queries leak to the root, return signed NXDOMAIN. If the name is not in a form that's even legal in the DNS then they'll likely get a FORMERR from their configured DNS recursive resolver. Either way, the client will get a name resolution failure and there's not much else we as DNS operators can do to mitigate that. It's down to the client and its \"protocol switch\" to do the right thing and not leak.
", "time": "2022-11-08T10:38:21Z"}, {"author": "Mark Andrews", "text": "DNS allows any characters in the labels. The root zone rules for delegated zones are DLH restricted.
btw, another argument not to DNAME to AS112 for .alt is that anyone can stand-up an AS112 server, and without QNAME minimization the full .alt query name (if legal DNS) will appear in their logs
", "time": "2022-11-08T10:41:27Z"}, {"author": "Ray Bellis", "text": "@Mark I was thinking of the case where the name length or label lengths exceed DNS's constraints (255/63). That said, I still think it would be a mistake for any alt naming system that wants to co-exist alongside the DNS to allow this.
", "time": "2022-11-08T10:43:06Z"}, {"author": "St\u00e9phane Bortzmeyer", "text": "@Mark Andrews Not just a matter of allowed characters but also of size.
", "time": "2022-11-08T10:45:32Z"}, {"author": "\u00c9ric Vyncke", "text": "'link local' can be weird when connected to multiple links though
", "time": "2022-11-08T10:45:43Z"}, {"author": "Jabber", "text": "sftcd: FWIW I'm in favour of progressing draft-homburg-add-codcp, not sure how feasible it is to expect stubs to implement, nor how often people use such local proxies, but I do have such a setup so would use it
", "time": "2022-11-08T10:51:50Z"}, {"author": "Jabber", "text": "dkg: can we stop saying that we don't standardize APIs? we have documented APIs and they are deeply useful in clarifying our thinking about what we offer to the layers above us.
", "time": "2022-11-08T10:53:26Z"}, {"author": "Jabber", "text": "dkg: APIs do not evolve fast
", "time": "2022-11-08T10:53:38Z"}, {"author": "Ray Bellis", "text": "getaddrinfo() was defined in RFC 2553
dkg: i mean, some do, but some are extremely long-lived. thoughtful API design can shape the ecosystem to align it with what features the protocols support.
", "time": "2022-11-08T10:55:36Z"}, {"author": "St\u00e9phane Bortzmeyer", "text": "We are in 2022, guys, we no longer use only C, how to design and specify an API for N programming languages?
", "time": "2022-11-08T10:55:40Z"}, {"author": "Warren Kumari", "text": "REST! <runs away>
", "time": "2022-11-08T10:57:23Z"}, {"author": "Jabber", "text": "sftcd: given that \"we want better than getaddrinfo()\" has been clear for some years and seemingly nothing much has happened, I don't think that desire is a good reason to hold up or not do related work at this point (at the same time it'd be great if real work happened on \"better than getaddrinfo()\")
", "time": "2022-11-08T10:57:27Z"}, {"author": "Jabber", "text": "dkg: St\u00e9phane, there are still bindings from the C ABI to most programming languages, so that can be useful. Or, for languages whose idioms are significantly different, it's possible to just take inspiration from an abstract API if it's widely understood.
", "time": "2022-11-08T10:57:37Z"}, {"author": "Sean Turner", "text": "Captive Portal API: https://datatracker.ietf.org/doc/rfc8908/
", "time": "2022-11-08T10:59:01Z"}, {"author": "Benjamin Schwartz", "text": "@Sean That's a protocol, not an API :)
", "time": "2022-11-08T10:59:29Z"}, {"author": "Warren Kumari", "text": "My question was what are the privacy / fingerprinting implications when these leak? Currently e.g an ISP resolver just sees lots of queries from my (IPv4) NAT. When the forwarder on my CPE blindly forwards these, doesn't it share a bunch more about my internal list of clients?
", "time": "2022-11-08T10:59:30Z"}, {"author": "Ray Bellis", "text": "on any POSIX system there's a good chance that other languages' name lookup functions internally use getaddrinfo() anyway.
:)
", "time": "2022-11-08T10:59:40Z"}, {"author": "Sean Turner", "text": "I'll go back under my bridge.
", "time": "2022-11-08T10:59:56Z"}, {"author": "Warren Kumari", "text": "Erm. Isn't any IPC API basically a protocol?
", "time": "2022-11-08T11:00:10Z"}, {"author": "Benjamin Schwartz", "text": "@Warren Depends on whether it uses shared memory...
", "time": "2022-11-08T11:01:10Z"}, {"author": "Warren Kumari", "text": "I send you an RPC <message>, you send a <response>. These are formatted protocol messages
", "time": "2022-11-08T11:01:17Z"}, {"author": "Benjamin Schwartz", "text": "For API work at the IETF, I usually point to TAPS https://datatracker.ietf.org/wg/taps/about/
", "time": "2022-11-08T11:03:00Z"}, {"author": "Warren Kumari", "text": "Even with shared memory -- I put a specially formatted \"packet\" in memory (this packet might be just '(int32) 17'), but we have an agreement on \"octet 1 means X, octet 2 means Y\". You parse and understand this message/language, and so do I...
", "time": "2022-11-08T11:03:20Z"}, {"author": "Warren Kumari", "text": "This is all navel gazing...
", "time": "2022-11-08T11:03:27Z"}, {"author": "Warren Kumari", "text": "(Sorry, unclear -- I meany my \"isn't IPC a protocol\" is navel gazing)
", "time": "2022-11-08T11:04:13Z"}, {"author": "Peter van Dijk", "text": "https://datatracker.ietf.org/doc/rfc8063/ - Key Relay Mapping for the Extensible Provisioning Protocol
", "time": "2022-11-08T11:12:26Z"}]