Re: Balancing the Process (Was: Obsoleting SPF RRTYPE)

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



In message <8D23D4052ABE7A4490E77B1A012B63077516DFAD@xxxxxxxxxxxxxxxxxxxxxx>, Ted Lemon writes:
> On May 2, 2013, at 9:56 PM, Mark Andrews <marka@xxxxxxx> wrote:
> > How do we deal with sites?
> > How do we deal with vendors that ship such product?
>
> I say we punch 'em.
>
> Seriously, the IETF doesn't have an enforcement arm.   It's up to buyers
> to check to see that what they are buying is protocol compliant, and
> often they either fail to even try, or don't really know how.

When the literature says it is a DNS server how is the buyer to
know it isn't a complete DNS server?  And even if they know it is
not a complete DNS server would they know the impact of deploying
it?

> What you can do as a DNS vendor, if you want to beat up other vendors
> with non-compliant products, is to produce a validation test suite and
> start promoting it.   Is there a vendor that does this now?   If so, you
> could just use theirs, assuming it's free.   Start boasting in your
> advertising that your product is standards compliant.

Which just adds more noise.  Now if a recognised standards body was
to do the tests then it might have some effect.

Should we be using RFC 1033's complaint's procedures?  How can
we get TLDs to do step 5 when steps 1 though 4 fail?

COMPLAINTS

   These are the suggested steps you should take if you are having
   problems that you believe are caused by someone else's name server:


   1.  Complain privately to the responsible person for the domain.  You
   can find their mailing address in the SOA record for the domain.

   2.  Complain publicly to the responsible person for the domain.

   3.  Ask the NIC for the administrative person responsible for the
   domain.  Complain.  You can also find domain contacts on the NIC in
   the file NETINFO:DOMAIN-CONTACTS.TXT

   4.  Complain to the parent domain authorities.

   5.  Ask the parent authorities to excommunicate the domain.


> Now that you're done with that, get started on all the middleboxes that
> are made by vendors who are not "DNS vendors".

Middle boxes are a little easier to deal with as they are usually at the
client end not the server end.
 
> The good news is that the ocean is warmer than it was even ten years ago,
> so boiling it is somewhat less work than it used to be.

-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: marka@xxxxxxx




[Index of Archives]     [IETF Annoucements]     [IETF]     [IP Storage]     [Yosemite News]     [Linux SCTP]     [Linux Newbies]     [Fedora Users]