Re: OPENPGPKEY RRTYPE review - Comments period ends Aug 6th

On 24/07/2014, at 3:56 pm, Mark Andrews <[email protected]> wrote:

>> - why should there be a distinct namespace for mapped email addresses?
>> I see Joe has provided one reason (which doesn't appear to make sense to
>> me since a large RRType can't be 'hidden' lower down), but my point is
>> that there isn't a reason in the draft.
> 
> Because it it is bad to mix foo.example.net the host with [email protected]
> the email address as they are different entities.  mbox did this.
> Both mapped to foo.example.net in the DNS.  This results in overloading
> so you can't know which records at the name apply to which entity.  Does
> a TXT record refer to foo.example.net or [email protected]?

Ah I see what you mean, though the hash algorithm means it's not a straight foo to foo comparison.   By using a hash nobody gets to choose what the actual first label is, it is chosen for them by the algorithm and so there's the possibility of collision now or future.  But unless I am missing something, the chances of someone needing a host that has the same first label as a SHA2-224 hash are practically zero so I'm not sure the issue is strong enough to insist on a distinct namespace .

>> - why should that distinct namespace have a 1 to 1 link with the RR that
>> it will contain?
>> This I think is something quite novel and worth a lot more discussion.
> 
> Take CERT for example.  You may have may protocols that all use
> [email protected] but each has a different CERT record.  By having
> different namespace for each protocol you avoid stuffing too many
> records at a node (we are still limited to 64k).  If you want to
> use the same CERT for multiple services you can enter it multiple
> times or use CNAME to refer to a single instance.

Hmm.  Still thinking about that.

cheers
Jay

> 
>> cheers
>> Jay
>> 
>>> 
>>>> Joe
>>>> 
>>>> 
>>>> _______________________________________________
>>>> dnsext mailing list
>>>> [email protected]
>>>> https://www.ietf.org/mailman/listinfo/dnsext
>>> --
>>> Mark Andrews, ISC
>>> 1 Seymour St., Dundas Valley, NSW 2117, Australia
>>> PHONE: +61 2 9871 4742                 INTERNET: [email protected]
>> 
>> 
>> --
>> Jay Daley
>> Chief Executive
>> .nz Registry Services (New Zealand Domain Name Registry Limited)
>> desk: +64 4 931 6977
>> mobile: +64 21 678840
>> linkedin: www.linkedin.com/in/jaydaley
>> 
> 
> -- 
> Mark Andrews, ISC
> 1 Seymour St., Dundas Valley, NSW 2117, Australia
> PHONE: +61 2 9871 4742                 INTERNET: [email protected]


-- 
Jay Daley
Chief Executive
.nz Registry Services (New Zealand Domain Name Registry Limited)
desk: +64 4 931 6977
mobile: +64 21 678840
linkedin: www.linkedin.com/in/jaydaley

_______________________________________________
dnsext mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/dnsext