| rfc9476.original | rfc9476.txt | |||
|---|---|---|---|---|
| dnsop W. Kumari | Internet Engineering Task Force (IETF) W. Kumari | |||
| Internet-Draft Google | Request for Comments: 9476 Google | |||
| Intended status: Standards Track P. Hoffman | Category: Standards Track P. Hoffman | |||
| Expires: 5 November 2023 ICANN | ISSN: 2070-1721 ICANN | |||
| 4 May 2023 | September 2023 | |||
| The ALT Special Use Top Level Domain | The .alt Special-Use Top-Level Domain | |||
| draft-ietf-dnsop-alt-tld-25 | ||||
| Abstract | Abstract | |||
| This document reserves a TLD label, "alt" to be used in non-DNS | This document reserves a Top-Level Domain (TLD) label "alt" to be | |||
| contexts. It also provides advice and guidance to developers | used in non-DNS contexts. It also provides advice and guidance to | |||
| developing alternative namespaces. | developers creating alternative namespaces. | |||
| [ This document is being collaborated on in Github at | ||||
| <https://github.com/wkumari/draft-wkumari-dnsop-alt-tld>. The most | ||||
| recent version of the document, open issues, etc should all be | ||||
| available here. The authors (gratefully) accept pull requests. ] | ||||
| Status of This Memo | Status of This Memo | |||
| This Internet-Draft is submitted in full conformance with the | This is an Internet Standards Track document. | |||
| provisions of BCP 78 and BCP 79. | ||||
| Internet-Drafts are working documents of the Internet Engineering | ||||
| Task Force (IETF). Note that other groups may also distribute | ||||
| working documents as Internet-Drafts. The list of current Internet- | ||||
| Drafts is at https://datatracker.ietf.org/drafts/current/. | ||||
| Internet-Drafts are draft documents valid for a maximum of six months | This document is a product of the Internet Engineering Task Force | |||
| and may be updated, replaced, or obsoleted by other documents at any | (IETF). It represents the consensus of the IETF community. It has | |||
| time. It is inappropriate to use Internet-Drafts as reference | received public review and has been approved for publication by the | |||
| material or to cite them other than as "work in progress." | Internet Engineering Steering Group (IESG). Further information on | |||
| Internet Standards is available in Section 2 of RFC 7841. | ||||
| This Internet-Draft will expire on 5 November 2023. | Information about the current status of this document, any errata, | |||
| and how to provide feedback on it may be obtained at | ||||
| https://www.rfc-editor.org/info/rfc9476. | ||||
| Copyright Notice | Copyright Notice | |||
| Copyright (c) 2023 IETF Trust and the persons identified as the | Copyright (c) 2023 IETF Trust and the persons identified as the | |||
| document authors. All rights reserved. | document authors. All rights reserved. | |||
| This document is subject to BCP 78 and the IETF Trust's Legal | This document is subject to BCP 78 and the IETF Trust's Legal | |||
| Provisions Relating to IETF Documents (https://trustee.ietf.org/ | Provisions Relating to IETF Documents | |||
| license-info) in effect on the date of publication of this document. | (https://trustee.ietf.org/license-info) in effect on the date of | |||
| Please review these documents carefully, as they describe your rights | publication of this document. Please review these documents | |||
| and restrictions with respect to this document. Code Components | carefully, as they describe your rights and restrictions with respect | |||
| extracted from this document must include Revised BSD License text as | to this document. Code Components extracted from this document must | |||
| described in Section 4.e of the Trust Legal Provisions and are | include Revised BSD License text as described in Section 4.e of the | |||
| provided without warranty as described in the Revised BSD License. | Trust Legal Provisions and are provided without warranty as described | |||
| in the Revised BSD License. | ||||
| Table of Contents | Table of Contents | |||
| 1. Introduction . . . . . . . . . . . . . . . . . . . . . . . . 2 | 1. Introduction | |||
| 1.1. Terminology . . . . . . . . . . . . . . . . . . . . . . . 3 | 1.1. Terminology | |||
| 1.2. Requirements Terminology . . . . . . . . . . . . . . . . 3 | 1.2. Requirements Terminology | |||
| 2. The alt Namespace . . . . . . . . . . . . . . . . . . . . . . 3 | 2. The .alt Namespace | |||
| 3. IANA Considerations . . . . . . . . . . . . . . . . . . . . . 5 | 3. IANA Considerations | |||
| 3.1. Special-Use Domain Name Registry . . . . . . . . . . . . 5 | 3.1. Special-Use Domain Name Registry | |||
| 3.2. Domain Name Reservation Considerations . . . . . . . . . 5 | 3.2. Domain Name Reservation Considerations | |||
| 4. Privacy Considerations . . . . . . . . . . . . . . . . . . . 6 | 4. Privacy Considerations | |||
| 5. Security Considerations . . . . . . . . . . . . . . . . . . . 6 | 5. Security Considerations | |||
| 6. Acknowledgements . . . . . . . . . . . . . . . . . . . . . . 6 | 6. References | |||
| 7. References . . . . . . . . . . . . . . . . . . . . . . . . . 7 | 6.1. Normative References | |||
| 7.1. Normative References . . . . . . . . . . . . . . . . . . 7 | 6.2. Informative References | |||
| 7.2. Informative References . . . . . . . . . . . . . . . . . 7 | Acknowledgements | |||
| Appendix A. Changes / Author Notes. . . . . . . . . . . . . . . 7 | Authors' Addresses | |||
| Authors' Addresses . . . . . . . . . . . . . . . . . . . . . . . 13 | ||||
| 1. Introduction | 1. Introduction | |||
| Many Internet protocols need to name entities. Names that look like | Many Internet protocols need to name entities. Names that look like | |||
| DNS names (a series of labels separated with dots) have become | DNS names (a series of labels separated with dots) have become | |||
| common, even in systems that are not part of the global DNS | common, even in systems that are not part of the global DNS | |||
| administered by IANA. This document reserves the top-level label | administered by IANA. This document reserves the top-level label | |||
| "alt" (short for "alternative") as a special-use domain name | "alt" (short for "alternative") as a special-use domain name | |||
| ([RFC6761]). This top-level label can be used as the final | [RFC6761]. This top-level label can be used as the final (rightmost) | |||
| (rightmost) label to signify that the name is not rooted in the | label to signify that the name is not rooted in the global DNS and | |||
| global DNS, and that it should not be resolved using the DNS | that it should not be resolved using the DNS protocol. | |||
| protocol. | ||||
| In Section 3.1, the IANA is requested to add the .alt name to the | ||||
| "Special-Use Domain Name" registry. IANA sets aside names in that | ||||
| registry, as described in https://www.iana.org/domains/reserved. | ||||
| Throughout the rest of this document, the top-level "alt" label is | Throughout the rest of this document, the top-level "alt" label is | |||
| shown as ".alt" to match the common presentation form of DNS names. | shown as ".alt" to match the common presentation form of DNS names. | |||
| As detailed in Section 3.1, IANA has added the .alt name to the | ||||
| "Special-Use Domain Name" registry. IANA sets aside names in that | ||||
| registry, as described in <https://www.iana.org/domains/reserved>. | ||||
| The techniques in this document are primarily intended to address | The techniques in this document are primarily intended to address | |||
| some of the issues discussed in [RFC8244], which contains additional | some of the issues discussed in [RFC8244], which contains additional | |||
| background on the issues with special use domain names. | background on the issues with special-use domain names. | |||
| In this document, ".alt" was chosen for the special-use domain name | In this document, ".alt" was chosen for the special-use domain name | |||
| instead of something like "alt.arpa" so that systems that use the | instead of something like "alt.arpa" so that systems that use the | |||
| name do not have to worry that a parent of their name would be | name do not have to worry that a parent of their name would be | |||
| resolved if the name leaked to the Internet. Historically, some | resolved if the name leaked to the Internet. Historically, some | |||
| systems that want to use non-DNS names wanted the entire name to be | systems that want to use non-DNS names wanted the entire name to be | |||
| not in the DNS, and reserving ".alt" fulfills that use case. | not in the DNS, and reserving ".alt" fulfills that use case. | |||
| 1.1. Terminology | 1.1. Terminology | |||
| This document assumes familiarity with DNS terms; please see | This document assumes familiarity with DNS terms; please see | |||
| [RFC8499]. Terminology that is specific to this document is: | [RFC8499]. Terminology that is specific to this document is: | |||
| * DNS name: Domain names that are intended to be used with DNS | DNS name: Domain names that are intended to be used with DNS | |||
| resolution, either in the global DNS or in some other context. | resolution, either in the global DNS or in some other context. | |||
| * DNS context: The namespace anchored at the globally-unique DNS | DNS context: The namespace anchored at the globally unique DNS root | |||
| root, administered by IANA. This is the namespace or context that | and administered by IANA. This is the namespace or context that | |||
| "normal" DNS uses. | "normal" DNS uses. | |||
| * non-DNS context: Any other (alternative) namespace. | non-DNS context: Any other (alternative) namespace. | |||
| * pseudo-TLD: A label that appears in a fully-qualified domain name | pseudo-TLD: A label that appears in a fully qualified domain name in | |||
| in the position of a TLD, but which is not part of the global DNS. | the position of a TLD, which is not part of the global DNS. This | |||
| This term is not intended to be pejorative. | term is not intended to be pejorative. | |||
| * TLD: See the definition in Section 2 of [RFC8499]. | TLD: See the definition in Section 2 of [RFC8499]. | |||
| 1.2. Requirements Terminology | 1.2. Requirements Terminology | |||
| The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", | The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", | |||
| "SHOULD", "SHOULD NOT", "RECOMMENDED", "NOT RECOMMENDED", "MAY", and | "SHOULD", "SHOULD NOT", "RECOMMENDED", "NOT RECOMMENDED", "MAY", and | |||
| "OPTIONAL" in this document are to be interpreted as described in BCP | "OPTIONAL" in this document are to be interpreted as described in | |||
| 14 [RFC2119] [RFC8174] when, and only when, they appear in all | BCP 14 [RFC2119] [RFC8174] when, and only when, they appear in all | |||
| capitals, as shown here. | capitals, as shown here. | |||
| 2. The alt Namespace | 2. The .alt Namespace | |||
| This document reserves the .alt label for use as an unmanaged pseudo- | This document reserves the .alt label for use as an unmanaged pseudo- | |||
| TLD namespace. The .alt label can be used in any domain name as a | TLD namespace. The .alt label can be used in any domain name as a | |||
| pseudo-TLD to signify that this is an alternative (non-DNS) | pseudo-TLD to signify that this is an alternative (non-DNS) namespace | |||
| namespace, and should not be looked up in a DNS context. | and should not be looked up in a DNS context. | |||
| This document uses ".alt" for the pseudo-TLD in the presentation | This document uses ".alt" for the pseudo-TLD in the presentation | |||
| format for the DNS, corresponding to a 0x03616c7400 suffix in DNS | format for the DNS, corresponding to a 0x03616c7400 suffix in DNS | |||
| wire format. The on-the-wire formats for non-DNS protocols might be | wire format. The on-the-wire formats for non-DNS protocols might be | |||
| different. | different. | |||
| Because names beneath .alt are in an alternative namespace, they have | Because names beneath .alt are in an alternative namespace, they have | |||
| no significance in the regular DNS context. DNS stub and recursive | no significance in the regular DNS context. DNS stub and recursive | |||
| resolvers do not need to look them up in the DNS context. | resolvers do not need to look them up in the DNS context. | |||
| skipping to change at page 4, line 24 ¶ | skipping to change at line 154 ¶ | |||
| protocol will handle the name. To maximize compatibility with | protocol will handle the name. To maximize compatibility with | |||
| existing applications, it is suggested, but not required, that non- | existing applications, it is suggested, but not required, that non- | |||
| DNS protocols using names that end in .alt follow DNS name syntax. | DNS protocols using names that end in .alt follow DNS name syntax. | |||
| If the non-DNS protocol has a wire format like the DNS wire format, | If the non-DNS protocol has a wire format like the DNS wire format, | |||
| it might append the null label at the end of the name, but it also | it might append the null label at the end of the name, but it also | |||
| might not. This document does not make any suggestion for how non- | might not. This document does not make any suggestion for how non- | |||
| DNS protocols deal with the wire format of their names. | DNS protocols deal with the wire format of their names. | |||
| Groups wishing to create new alternative namespaces may create their | Groups wishing to create new alternative namespaces may create their | |||
| alternative namespace under a label that names their namespace under | alternative namespace under a label that names their namespace under | |||
| the .alt pseudo-TLD. This document defines neither a registry nor | the .alt pseudo-TLD. This document defines neither a registry nor a | |||
| governance model for the .alt namespace, as it is not managed by the | governance model for the .alt namespace, as it is not managed by the | |||
| IETF or IANA. There is no guarantee of unambiguous mappings from | IETF or IANA. There is no guarantee of unambiguous mappings from | |||
| names to name resolution mechanisms. Mitigation or resolution of | names to name resolution mechanisms. Mitigation or resolution of | |||
| collisions that occur under .alt are outside the scope of this | collisions that occur under .alt are outside the scope of this | |||
| document and outside the IETF's remit. Users are advised to consider | document and outside the IETF's remit. Users are advised to consider | |||
| the associated risks when using names under .alt. | the associated risks when using names under .alt. | |||
| Regardless of the expectations above, names in the .alt pseudo-TLD | Regardless of the expectations above, names in the .alt pseudo-TLD | |||
| will leak outside the context in which they are valid. Decades of | will leak outside the context in which they are valid. Decades of | |||
| experience show that such names will appear at recursive resolvers, | experience show that such names will appear at recursive resolvers | |||
| and will thus also appear at the root servers for the global DNS. | and will thus also appear at the root servers for the global DNS. | |||
| Sending traffic to the root servers that is known to always elicit an | Sending traffic to the root servers that is known to always elicit an | |||
| NXDOMAIN response, such as queries for names ending in .alt, wastes | NXDOMAIN response, such as queries for names ending in .alt, wastes | |||
| resources on both the resolver and the root server. Caching | resources on both the resolver and the root server. Caching | |||
| resolvers performing aggressive use of DNSSEC-validated caches | resolvers performing aggressive use of DNSSEC-validated caches | |||
| (described in [RFC8198]) may mitigate this by synthesizing negative | (described in [RFC8198]) may mitigate this by synthesizing negative | |||
| answers from cached NSEC records for names under .alt. Similarly, | answers from cached NSEC records for names under .alt. Similarly, | |||
| caching resolvers using QNAME minimisation (described in [RFC9156]) | caching resolvers using QNAME minimization (described in [RFC9156]) | |||
| will cause less of this traffic to the root servers because the | will cause less of this traffic to the root servers because the | |||
| negative responses will cover all names under .alt. | negative responses will cover all names under .alt. | |||
| Currently deployed projects and protocols that are using pseudo-TLDs | Currently deployed projects and protocols that are using pseudo-TLDs | |||
| are recommended to move under the .alt pseudo-TLD, but this is not a | are recommended to move under the .alt pseudo-TLD, but this is not a | |||
| requirement. Rather, the .alt pseudo-TLD is being reserved so that | requirement. Rather, the .alt pseudo-TLD is being reserved so that | |||
| current and future projects of a similar nature have a designated | current and future projects of a similar nature have a designated | |||
| place to create alternative resolution namespaces that will not | place to create alternative resolution namespaces that will not | |||
| conflict with the regular DNS context. | conflict with the regular DNS context. | |||
| 3. IANA Considerations | 3. IANA Considerations | |||
| 3.1. Special-Use Domain Name Registry | 3.1. Special-Use Domain Name Registry | |||
| The IANA is requested to add the .alt name to the "Special-Use Domain | The IANA has added the .alt name to the "Special-Use Domain Name" | |||
| Name" registry ([RFC6761]), and reference this document. | registry [RFC6761] with a reference to this RFC. | |||
| 3.2. Domain Name Reservation Considerations | 3.2. Domain Name Reservation Considerations | |||
| This section exists to meet the requirements of [RFC6761]. The | This section exists to meet the requirements of [RFC6761]. The | |||
| questions posed in RFC 6761 were largely written assuming a DNS | questions posed in [RFC6761] were largely written assuming a DNS | |||
| resolution system, and so some of the questions are not especially | resolution system, and so some of the questions are not especially | |||
| relevant or well suited. | relevant or well suited. | |||
| 1. Users might or might not recognize that names in the .alt pseudo- | 1. Users might or might not recognize that names in the .alt pseudo- | |||
| TLD as special. | TLD as special. | |||
| 2. Application software that uses alternative namespaces in the .alt | 2. Application software that uses alternative namespaces in the .alt | |||
| pseudo-TLD are expected to have their own processing rules for their | pseudo-TLD are expected to have their own processing rules for | |||
| own names, probably in specialized resolver APIs, libraries, and/or | their own names, probably in specialized resolver APIs, | |||
| application software. Application software that is not specifically | libraries, and/or application software. Application software | |||
| designed to use names in the .alt pseudo-TLD are not expected to make | that is not specifically designed to use names in the .alt | |||
| their software recognize these names as special. | pseudo-TLD are not expected to make their software recognize | |||
| these names as special. | ||||
| 3. Developers of name resolution APIs and libraries that are | 3. Developers of name resolution APIs and libraries that are | |||
| specifically designed to implement resolution of an alternative name | specifically designed to implement resolution of an alternative | |||
| resolution system are expected to recognize names in the .alt pseudo- | name resolution system are expected to recognize names in the | |||
| TLD as special and thus perform resolution of those names. The exact | .alt pseudo-TLD as special and thus perform resolution of those | |||
| mechanism used by the name resolution APIs and libraries will | names. The exact mechanism used by the name resolution APIs and | |||
| obviously depend on the particular alternative resolution system. | libraries will obviously depend on the particular alternative | |||
| Regular DNS resolution APIs and libraries are not expected to | resolution system. Regular DNS resolution APIs and libraries are | |||
| recognize or treat names in the .alt pseudo-TLD differently. | not expected to recognize or treat names in the .alt pseudo-TLD | |||
| differently. | ||||
| 4. Caching DNS servers SHOULD NOT recognize names in the .alt | 4. Caching DNS servers SHOULD NOT recognize names in the .alt | |||
| pseudo-TLD as special and SHOULD NOT perform any special handling | pseudo-TLD as special and SHOULD NOT perform any special handling | |||
| with them. | with them. | |||
| 5. Authoritative DNS servers SHOULD NOT recognize names in the .alt | 5. Authoritative DNS servers SHOULD NOT recognize names in the .alt | |||
| pseudo-TLD as special and SHOULD NOT perform any special handling | pseudo-TLD as special and SHOULD NOT perform any special handling | |||
| with them. | with them. | |||
| 6. DNS server operators will treat names in the .alt pseudo-TLD as | 6. DNS server operators will treat names in the .alt pseudo-TLD as | |||
| they would names in any other TLD not in the global DNS. DNS server | they would names in any other TLD not in the global DNS. DNS | |||
| operators may be aware that queries for names ending in .alt are not | server operators may be aware that queries for names ending in | |||
| DNS names, and queries for those names were leaked into the DNS | .alt are not DNS names and that queries for those names were | |||
| context. This information can be useful for support or debugging | leaked into the DNS context. This information can be useful for | |||
| purposes. | support or debugging purposes. | |||
| 7. It is not possible for DNS registries/registrars to register DNS | 7. It is not possible for DNS registries/registrars to register DNS | |||
| names in the .alt pseudo-TLD as the .alt will not exist in the global | names in the .alt pseudo-TLD as the .alt will not exist in the | |||
| DNS root. | global DNS root. | |||
| 4. Privacy Considerations | 4. Privacy Considerations | |||
| This document reserves .alt to be used to indicate that a name is not | This document reserves .alt to be used to indicate that a name is not | |||
| a DNS name. Unfortunately, these queries will undoubtedly leak into | a DNS name. Unfortunately, these queries will undoubtedly leak into | |||
| the global DNS. This is a general problem with alternative | the global DNS. This is a general problem with alternative | |||
| namespaces and not confined to names ending in .alt. | namespaces and not confined to names ending in .alt. | |||
| For example, a value such as "example.alt" could easily cause a | For example, a value such as "example.alt" could easily cause a | |||
| privacy issue for any names in that namespace that are leaked to the | privacy issue for any names in that namespace that are leaked to the | |||
| Internet. In addition, if a name ending in .alt is sufficiently | Internet. In addition, if a name ending in .alt is sufficiently | |||
| unique, long-lasting, and frequently leaks into the global DNS, then | unique, long-lasting, and frequently leaks into the global DNS, then | |||
| regardless of how the value is constructed, that value can act | regardless of how the name is constructed, it can act similar to a | |||
| similar to a web cookie with all the associated downsides of | web cookie with all the associated downsides of identification or re- | |||
| (re-)identification. | identification. | |||
| 5. Security Considerations | 5. Security Considerations | |||
| Because names in the .alt pseudo-TLD are explicitly outside of the | Because names in the .alt pseudo-TLD are explicitly outside of the | |||
| DNS context, it is impossible to rely on any DNS-related security | DNS context, it is impossible to rely on any DNS-related security | |||
| considerations. Care must be taken when mapping the pseudo-TLD into | considerations. Care must be taken when mapping the pseudo-TLD into | |||
| its corresponding non-DNS name resolution system in order to get | its corresponding non-DNS name resolution system in order to get | |||
| whatever security is offered by that system. | whatever security is offered by that system. | |||
| 6. Acknowledgements | 6. References | |||
| We would like to thank Joe Abley, Mark Andrews, Erik Auerswald, Roy | ||||
| Arends, Ray Bellis, Vittorio Bertola, Marc Blanchet, John Bond, | ||||
| Stephane Bortzmeyer, David Cake, Vint Cerf, David Conrad, Steve | ||||
| Crocker, Vladimir Cunat, Brian Dickson, Ralph Droms, Robert Edmonds, | ||||
| Patrik Faltstrom, Bernd Fix, Christian Grothoff, Olafur Gudmundsson, | ||||
| Ted Hardie, Bob Harold, Wes Hardaker, Geoff Huston, Joel Jaeggli, | ||||
| John C Klensin, Eliot Lear, Barry Leiba, Ted Lemon, Edward Lewis, | ||||
| John Levine, George Michaelson, Ed Pascoe, Libor Peltan, Jim Reid, | ||||
| Martin Schanzenbach, Ben Schwartz, Arturo Servin, Peter Thomassen, | ||||
| Paul Vixie, Duane Wessels, Paul Wouters, and Suzanne Woolf for | ||||
| feedback. | ||||
| This document was many years in the making, and we would like to | ||||
| sincerely apologize for anyone who we forgot to credit. | ||||
| We would also like to thank Rob Wilton for serving as Responsible AD | ||||
| for this document. | ||||
| In addition, Andrew Sullivan was an author from adoption (2015) | ||||
| through version 14 (2021). | ||||
| 7. References | ||||
| 7.1. Normative References | 6.1. Normative References | |||
| [RFC2119] Bradner, S., "Key words for use in RFCs to Indicate | [RFC2119] Bradner, S., "Key words for use in RFCs to Indicate | |||
| Requirement Levels", BCP 14, RFC 2119, | Requirement Levels", BCP 14, RFC 2119, | |||
| DOI 10.17487/RFC2119, March 1997, | DOI 10.17487/RFC2119, March 1997, | |||
| <https://www.rfc-editor.org/info/rfc2119>. | <https://www.rfc-editor.org/info/rfc2119>. | |||
| [RFC6761] Cheshire, S. and M. Krochmal, "Special-Use Domain Names", | [RFC6761] Cheshire, S. and M. Krochmal, "Special-Use Domain Names", | |||
| RFC 6761, DOI 10.17487/RFC6761, February 2013, | RFC 6761, DOI 10.17487/RFC6761, February 2013, | |||
| <https://www.rfc-editor.org/info/rfc6761>. | <https://www.rfc-editor.org/info/rfc6761>. | |||
| [RFC8174] Leiba, B., "Ambiguity of Uppercase vs Lowercase in RFC | [RFC8174] Leiba, B., "Ambiguity of Uppercase vs Lowercase in RFC | |||
| 2119 Key Words", BCP 14, RFC 8174, DOI 10.17487/RFC8174, | 2119 Key Words", BCP 14, RFC 8174, DOI 10.17487/RFC8174, | |||
| May 2017, <https://www.rfc-editor.org/info/rfc8174>. | May 2017, <https://www.rfc-editor.org/info/rfc8174>. | |||
| [RFC8244] Lemon, T., Droms, R., and W. Kumari, "Special-Use Domain | [RFC8244] Lemon, T., Droms, R., and W. Kumari, "Special-Use Domain | |||
| Names Problem Statement", RFC 8244, DOI 10.17487/RFC8244, | Names Problem Statement", RFC 8244, DOI 10.17487/RFC8244, | |||
| October 2017, <https://www.rfc-editor.org/info/rfc8244>. | October 2017, <https://www.rfc-editor.org/info/rfc8244>. | |||
| 7.2. Informative References | 6.2. Informative References | |||
| [RFC8198] Fujiwara, K., Kato, A., and W. Kumari, "Aggressive Use of | [RFC8198] Fujiwara, K., Kato, A., and W. Kumari, "Aggressive Use of | |||
| DNSSEC-Validated Cache", RFC 8198, DOI 10.17487/RFC8198, | DNSSEC-Validated Cache", RFC 8198, DOI 10.17487/RFC8198, | |||
| July 2017, <https://www.rfc-editor.org/info/rfc8198>. | July 2017, <https://www.rfc-editor.org/info/rfc8198>. | |||
| [RFC8499] Hoffman, P., Sullivan, A., and K. Fujiwara, "DNS | [RFC8499] Hoffman, P., Sullivan, A., and K. Fujiwara, "DNS | |||
| Terminology", BCP 219, RFC 8499, DOI 10.17487/RFC8499, | Terminology", BCP 219, RFC 8499, DOI 10.17487/RFC8499, | |||
| January 2019, <https://www.rfc-editor.org/info/rfc8499>. | January 2019, <https://www.rfc-editor.org/info/rfc8499>. | |||
| [RFC9156] Bortzmeyer, S., Dolmans, R., and P. Hoffman, "DNS Query | [RFC9156] Bortzmeyer, S., Dolmans, R., and P. Hoffman, "DNS Query | |||
| Name Minimisation to Improve Privacy", RFC 9156, | Name Minimisation to Improve Privacy", RFC 9156, | |||
| DOI 10.17487/RFC9156, November 2021, | DOI 10.17487/RFC9156, November 2021, | |||
| <https://www.rfc-editor.org/info/rfc9156>. | <https://www.rfc-editor.org/info/rfc9156>. | |||
| Appendix A. Changes / Author Notes. | Acknowledgements | |||
| [RFC Editor: Please remove this section before publication ] | ||||
| From -24 to -25: | ||||
| * Capitalized a SHOULD NOT. | ||||
| From -23 to -24: | ||||
| * Small changes based on inputs from IESG review. | ||||
| From -22 to -23: | ||||
| * Small changes based on inputs from IETF Last Call. | ||||
| From -21 to -22: | ||||
| * Addressed issues from AD review - | ||||
| https://mailarchive.ietf.org/arch/msg/dnsop/ | ||||
| aIkeZUqKDZzzseCPfiIJ9J6zYXc/ | ||||
| * Combined some of the acknowledgements into one paragraph. | ||||
| From -20 to -21: | ||||
| * During WGLC review, replaced the descriptive text with the | ||||
| requirements from RFC 6761 with a list. This in turn required | ||||
| adding in the BCP 14 boilerplate. | ||||
| * During WGLC review, made a few more requested changes | ||||
| From -19 to -20: | ||||
| * Expanded the privacy considerations | ||||
| * Clarified benefit of using aggressive NSEC | ||||
| * Clarified that the .alt namespace is unmanaged and thus comes with | ||||
| risks. | ||||
| * Added description of why .alt was chosen instead of alt.arpa | ||||
| * Removed 2119 language because there are no MUSTs or SHOULDs | ||||
| From -18 to -19: | ||||
| * Document was discussed at IETF115 | ||||
| * Changed the intended status to Standards Track at the request of | ||||
| the responsible AD (Rob Wilton) | ||||
| * Clarified that this only deals with some of the problems from RFC | ||||
| 8244 | ||||
| * Removed text telling protocol designers that they should | ||||
| differentiate their names from other designers | ||||
| * Added a note that .alt names will leak out of the local context | ||||
| * Reminded resolver operators that there are already ways to reduce | ||||
| .alt traffic to the root servers | ||||
| * Moved the paragraph related to 6761 to the IANA Considerations | ||||
| section | ||||
| * Strengthened the security considerations | ||||
| * Added references for QNAME minimization and agressive NSEC caching | ||||
| From -16 to -18: | ||||
| * Lots of editorial fix-ups | ||||
| * Fixed reference to RFC 8499 | ||||
| * Clarified presentation format for .alt | ||||
| * Clarified that IANA will set aside the name when it goes into the | ||||
| 6761 registry | ||||
| * Removed the loose registry for names under .alt | ||||
| * Added back the required discussion for RFC 6761 | ||||
| From -15 to -16: | ||||
| * Many simplifications to focus the document on the technical bits | ||||
| as much as possible, based on mailing list feedback. | ||||
| * Removed unused references. | ||||
| * Removed the RFC 2119 language because it is no longer used in the | ||||
| document. | ||||
| * Added a non-normative IANA registry. | ||||
| * Added Paul Hoffman as second author to help get the draft moving | ||||
| in the DNSOP WG again. | ||||
| From -14 to -15: | ||||
| * [Pinky]: Gee, Brain. What are we going to do tonight? | ||||
| * [The Brain]: The same thing we do every 6 months, Pinky. Post a | ||||
| new version of this document, with only the version number | ||||
| changed. | ||||
| From -13 to -14: | ||||
| * Andrew asked to be removed as co-author, due to potential | ||||
| perception of CoI. | ||||
| * Erik Auerswald provided Github issues and comments re: references | ||||
| and grammar. | ||||
| From -12 to -13: | ||||
| * Just bumping versions to prevent expiration. | ||||
| From -08 to -12: | ||||
| * Just bumping versions to prevent expiration. | ||||
| * Updated references (aggressive-nsec is now RFC 8198, draft-ietf- | ||||
| dnsop-sutld-ps is now 8244). | ||||
| From -07 to -08: | ||||
| * Made it clear that this is only for non-DNS. | ||||
| * As per Interim consensus, removed the "add this to local zones" | ||||
| text. | ||||
| * Added a Privacy Considerations section | ||||
| * Grammar fix -- "alternative" is more correct than "alternate", | ||||
| replaced. | ||||
| From -06 to -07: | ||||
| * Rolled up the GItHub releases in to a full release. | ||||
| From -07.2 to -07.3 (GitHub point release): | ||||
| Removed 'sandbox' at Stephane's suggestion - https://www.ietf.org/ | ||||
| mail-archive/web/dnsop/current/msg18495.html | ||||
| Suggested (in 4.1 bullet 3) that DNS libraries ignore these -- Bob | ||||
| Harold - https://mailarchive.ietf.org/arch/msg/dnsop/ | ||||
| a_ruPf8osSzi_hCzCqOxYLXhYoA | ||||
| Added some pointers to the SUTLD document. | ||||
| From -07.1 to -07.2 (Github point release): | ||||
| * Reverted the <TBD> string (at request of chairs). | ||||
| * Added an editors note explaining the above. | ||||
| * Removed some more background, editorializing, etc. | ||||
| From -06 to -07.1 (https://github.com/wkumari/draft-wkumari-dnsop- | ||||
| alt-tld/tree/7988fcf06100f7a17f21e6993b781690b5774472): | ||||
| * Replaced ALT with <TBD> at the suggestions of George. | ||||
| From -05 to -06: | ||||
| * Removed a large amount of background - we now have the (adopted) | ||||
| tldr document for that. | ||||
| * Made it clear that pseudo-TLD is not intended to be pejorative. | ||||
| * Tried to make it cleat that this is something people can choose to | ||||
| use - or not. | ||||
| From -04 to -05: | ||||
| * Version bump - we are waiting in the queue for progress on SUN, | ||||
| bumping this to keep it alive. | ||||
| From -03 to -04: | ||||
| * 3 changes - the day, the month and the year (a bump to keep | ||||
| alive). | ||||
| From -02 to -03: | ||||
| * Incorporate suggestions from Stephane and Paul Hoffman. | ||||
| From -01 to -02: | ||||
| * Merged a bunch of changes from Paul Hoffman. Thanks for sending a | ||||
| git pull. | ||||
| From -00 to 01: | ||||
| * Removed the "delegated to new style AS112 servers" text -this was | ||||
| legacy from the omnicient AS112 days. (Joe Abley) | ||||
| * Removed the "Advice to implemntors" section. This used to | ||||
| recommend that people used a subdomain of a domain in the DNS. It | ||||
| was pointed out that this breaks things badly if the domain | ||||
| expires. | ||||
| * Added text about why we don't want to adminster a registry for | ||||
| ALT. | ||||
| From Individual-06 to DNSOP-00 | ||||
| * Nothing changed, simply renamed draft-wkumari-dnsop-alt-tld to | ||||
| draft-ietf-dnsop-alt-tld | ||||
| From -05 to -06 | ||||
| * Incorporated comments from a number of people, including a number | ||||
| of suggestion heard at the IETF meeting in Dallas, and the DNSOP | ||||
| Interim meeting in May, 2015. | ||||
| * Removed the "Let's have an (optional) IANA registry for people to | ||||
| (opportinistically) register their string, if they want that | ||||
| option" stuff. It was, um, optional.... | ||||
| From -04 to -05 | ||||
| * Went through and made sure that I'd captured the feedback | ||||
| received. | ||||
| * Comments from Ed Lewis. | ||||
| * Filled in the "Domain Name Reservation Considerations" section of | ||||
| RFC6761. | ||||
| * Removed examples from .Onion. | ||||
| From -03 to -04 | ||||
| * Incorporated some comments from Paul Hoffman | ||||
| From -02 to -03 | ||||
| * After discussions with chairs, made this much more generic (not | ||||
| purely non-DNS), and some cleanup. | ||||
| From -01 to -02 | ||||
| * Removed some fluffy wording, tightened up the language some. | We would like to thank Joe Abley, Mark Andrews, Erik Auerswald, Roy | |||
| Arends, Ray Bellis, Vittorio Bertola, Marc Blanchet, John Bond, | ||||
| Stéphane Bortzmeyer, David Cake, Vint Cerf, David Conrad, Steve | ||||
| Crocker, Vladimir Cunat, Brian Dickson, Ralph Droms, Robert Edmonds, | ||||
| Patrik Fältström, Bernd Fix, Christian Grothoff, Olafur Gudmundsson, | ||||
| Ted Hardie, Bob Harold, Wes Hardaker, Geoff Huston, Joel Jaeggli, | ||||
| John C Klensin, Eliot Lear, Barry Leiba, Ted Lemon, Edward Lewis, | ||||
| John Levine, George Michaelson, Ed Pascoe, Libor Peltan, Jim Reid, | ||||
| Martin Schanzenbach, Ben Schwartz, Arturo Servin, Peter Thomassen, | ||||
| Paul Vixie, Duane Wessels, Paul Wouters, and Suzanne Woolf for | ||||
| feedback. | ||||
| From -00 to -01. | This document was many years in the making, and we would like to | |||
| sincerely apologize for anyone who we forgot to credit. | ||||
| * Fixed the abstract. | We would also like to thank Rob Wilton for serving as Responsible AD | |||
| for this document. | ||||
| * Recommended that folk root their non-DNS namespace under a DNS | In addition, Andrew Sullivan was an author from adoption (2015) | |||
| namespace that they control (Joe Abley) | through version 14 (2021). | |||
| Authors' Addresses | Authors' Addresses | |||
| Warren Kumari | Warren Kumari | |||
| 1600 Amphitheatre Parkway | 1600 Amphitheatre Parkway | |||
| Mountain View, CA, 94043 | Mountain View, CA 94043 | |||
| United States of America | United States of America | |||
| Email: warren@kumari.net | Email: warren@kumari.net | |||
| Paul Hoffman | Paul Hoffman | |||
| ICANN | ICANN | |||
| Email: paul.hoffman@icann.org | Email: paul.hoffman@icann.org | |||
| End of changes. 41 change blocks. | ||||
| 380 lines changed or deleted | 118 lines changed or added | |||
This html diff was produced by rfcdiff 1.48. | ||||