Re: DNS-AS RRTYPE PARAMETER ALLOCATION
"Wolfgang Riedel (wriedel)" <[email protected]> Sat, 13 Feb 2016 20:36:38 +0000
| Newsgroups | gmane.ietf.dnsext |
|---|---|
| Message-ID | <[email protected]> |
--===============2539278119749720331== Content-Language: en-US Content-Type: multipart/signed; boundary="Apple-Mail=_F8EDD7BC-C6D6-410A-8E5F-90BE60FCDC47"; protocol="application/pgp-signature"; micalg=pgp-sha512 --Apple-Mail=_F8EDD7BC-C6D6-410A-8E5F-90BE60FCDC47 Content-Type: multipart/alternative; boundary="Apple-Mail=_59723724-6638-4E1C-B3B2-8BCC265C5D0B" --Apple-Mail=_59723724-6638-4E1C-B3B2-8BCC265C5D0B Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 Hi Ray, may thanks for your reply. I consultant with some colleagues and were good with filing a new = request and replace the mnemonic =3D DNSAS with mnemonic =3D AVC as you = suggested. Also some answer to your question inline. For all other on list, if you=E2=80=99re looking for more details on = DNS-AS please have look at http://dns.as.org Thank you, Wolfgang > On 10 Feb 2016, at 13:26PM, Ray Bellis <[email protected]> wrote: >=20 > Wolfgang, >=20 > I've been appointed as the designated expert to review your RRTYPE > application per RFC 6895. >=20 > In principle the application is OK, and it's highly desirable that you > avoid use of TXT. >=20 > Within my remit however I do have some concerns over the name of the = RRTYPE: >=20 > - the term "authoritative" has a particular meaning in the DNS > protocol, and "authoritative source" is a commonly used term > too. Typing "dns authoritative source" into Google already > produces 75,000 results, none that I could see relating to > your project. yes I agree and we have chosen the wording by intension to outline that = we leverage the authoritative name server as a sigle source of truth for = application metadata. > - using "DNS" within the RRTYPE name seems redundant - we=E2=80=99re = already in the DNS. agree > - the letters "AS" are also commonly used to refer to a BGP = "Autonomous System=E2=80=9D. agree > [FWIW, when I first saw your requested mnemonic in the subject of your > application I was expecting to see an application for an RRTYPE to > represent a BGP AS number!] it=E2=80=99s not so far off given that BGP expresses routing policy = intend and DNS-AS metadata for application policy intend > Also missing is any explicit statement that the intended wire and > presentation format are identical to that of a TXT record. > Consideration should also be given to what happens if the data does = not > fit within a single 255 octet "character-string" sub-field. OK will adress this > Incidentally, the "CISCO-CLS=3D" prefix in the RDATA would appear to = be > redundant when you get your own RRTYPE, and if it's expected that = other > vendors would use this then I suggest that you either omit it or use > something more neutral. yes good catch and I agree and will remove this > At a higher level I have concerns about the overall use case that > should be addressed if you plan to document "DNS Authoritative Source" > in an Internet Draft (although I don't expect these to be a factor in = my > decision as they're probably outside the scope of RFC 6895): at this time there are not plans to submit this as an Internet Draft > - why DNS? Readily available tool - already leveraged to identify an application by = DNS-NAME > How does the client know what domain names are supposed to be looked = up? it=E2=80=99s a function of an DNS-AS client which snoop DNS request as = an trigger and raises it=E2=80=99s own query for a DNS-AS Resource = Record to get the metadata to enforce policy later > - if the "Application Name" is the primary key, why not incorporate > that into the domain name? This =E2=80=98could be done=E2=80=99 - but most customers don=E2=80=99t = or won=E2=80=99t always identify what application is running on a server = via it=E2=80=99s FQDN. > - (corollary) is it expected that a client would want to (or even > be allowed to) obtain information about all known applications at > a domain with a single DNS query? there is nothing confidential inside a DNS-AS resource record. The key is that it it authoritative! > - what about DNS Security? What happens in your SDN if someone > manages to poison a record? what happens if I haven't done my homework and didn=E2=80=99t secure and = harden my DNS infrastructure ;-) If DNS is compromised you have bigger problems than how a network = element chooses mark and service (queue) for a given application... > The decision will be reached within two weeks of today, and before > approval the explicit linking to the TXT record format must be = resolved. >=20 > I urge you to reconsider your project name of "DNS Authoritative = Source" > as being a clash with existing terminology. I'm not currently inclined > to reject the application on that basis of the requested DNSAS = mnemonic, > but welcome community feedback on that issue. yes will file a new request for mnemonic =3D AVC >=20 > kind regards, >=20 > Ray Bellis --Apple-Mail=_59723724-6638-4E1C-B3B2-8BCC265C5D0B Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 <html><head><meta http-equiv=3D"Content-Type" content=3D"text/html = charset=3Dutf-8"></head><body style=3D"word-wrap: break-word; = -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" = class=3D"">Hi Ray,<div class=3D""><br class=3D""></div><div class=3D"">may= thanks for your reply.</div><div class=3D""><br class=3D""></div><div = class=3D"">I consultant with some colleagues and were good with filing a = new request and replace the mnemonic =3D DNSAS with mnemonic =3D AVC as = you suggested.</div><div class=3D"">Also some answer to your question = inline.</div><div class=3D""><br class=3D""></div><div class=3D"">For = all other on list, if you=E2=80=99re looking for more details on DNS-AS = please have look at <a href=3D"http://dns.as.org" = class=3D"">http://dns.as.org</a><br class=3D""><div class=3D""><br = class=3D"webkit-block-placeholder"></div><div class=3D""> <div style=3D"color: rgb(0, 0, 0); letter-spacing: normal; orphans: = auto; text-align: start; text-indent: 0px; text-transform: none; = white-space: normal; widows: auto; word-spacing: 0px; = -webkit-text-stroke-width: 0px; word-wrap: break-word; = -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" = class=3D""><div style=3D"color: rgb(0, 0, 0); letter-spacing: normal; = orphans: auto; text-align: start; text-indent: 0px; text-transform: = none; white-space: normal; widows: auto; word-spacing: 0px; = -webkit-text-stroke-width: 0px; word-wrap: break-word; = -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" = class=3D""><div style=3D"color: rgb(0, 0, 0); letter-spacing: normal; = orphans: auto; text-align: start; text-indent: 0px; text-transform: = none; white-space: normal; widows: auto; word-spacing: 0px; = -webkit-text-stroke-width: 0px; word-wrap: break-word; = -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" = class=3D""><div style=3D"color: rgb(0, 0, 0); letter-spacing: normal; = orphans: auto; text-align: start; text-indent: 0px; text-transform: = none; white-space: normal; widows: auto; word-spacing: 0px; = -webkit-text-stroke-width: 0px; word-wrap: break-word; = -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" = class=3D""><div style=3D"color: rgb(0, 0, 0); letter-spacing: normal; = orphans: auto; text-align: start; text-indent: 0px; text-transform: = none; white-space: normal; widows: auto; word-spacing: 0px; = -webkit-text-stroke-width: 0px; word-wrap: break-word; = -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" = class=3D""><div style=3D"color: rgb(0, 0, 0); letter-spacing: normal; = orphans: auto; text-align: start; text-indent: 0px; text-transform: = none; white-space: normal; widows: auto; word-spacing: 0px; = -webkit-text-stroke-width: 0px; word-wrap: break-word; = -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" = class=3D""><div style=3D"color: rgb(0, 0, 0); letter-spacing: normal; = orphans: auto; text-align: start; text-indent: 0px; text-transform: = none; white-space: normal; widows: auto; word-spacing: 0px; = -webkit-text-stroke-width: 0px; word-wrap: break-word; = -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" = class=3D""><div style=3D"letter-spacing: normal; orphans: auto; = text-align: start; text-indent: 0px; text-transform: none; white-space: = normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; = word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: = after-white-space;" class=3D""><div style=3D"letter-spacing: normal; = orphans: auto; text-align: start; text-indent: 0px; text-transform: = none; white-space: normal; widows: auto; word-spacing: 0px; = -webkit-text-stroke-width: 0px; word-wrap: break-word; = -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" = class=3D""><div style=3D"letter-spacing: normal; orphans: auto; = text-align: start; text-indent: 0px; text-transform: none; white-space: = normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; = word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: = after-white-space;" class=3D""><div style=3D"letter-spacing: normal; = orphans: auto; text-align: start; text-indent: 0px; text-transform: = none; white-space: normal; widows: auto; word-spacing: 0px; = -webkit-text-stroke-width: 0px; word-wrap: break-word; = -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" = class=3D""><div style=3D"letter-spacing: normal; orphans: auto; = text-align: start; text-indent: 0px; text-transform: none; white-space: = normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; = word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: = after-white-space;" class=3D""><div style=3D"letter-spacing: normal; = orphans: auto; text-align: start; text-indent: 0px; text-transform: = none; white-space: normal; widows: auto; word-spacing: 0px; = -webkit-text-stroke-width: 0px; word-wrap: break-word; = -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" = class=3D""><div style=3D"letter-spacing: normal; orphans: auto; = text-align: start; text-indent: 0px; text-transform: none; white-space: = normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; = word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: = after-white-space;" class=3D""><div style=3D"letter-spacing: normal; = orphans: auto; text-align: start; text-indent: 0px; text-transform: = none; white-space: normal; widows: auto; word-spacing: 0px; = -webkit-text-stroke-width: 0px; word-wrap: break-word; = -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" = class=3D""><div style=3D"letter-spacing: normal; orphans: auto; = text-align: start; text-indent: 0px; text-transform: none; white-space: = normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; = word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: = after-white-space;" class=3D""><div style=3D"letter-spacing: normal; = orphans: auto; text-align: start; text-indent: 0px; text-transform: = none; white-space: normal; widows: auto; word-spacing: 0px; = -webkit-text-stroke-width: 0px; word-wrap: break-word; = -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" = class=3D""><div style=3D"font-variant: normal; letter-spacing: normal; = line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: = 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: = 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; = -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" = class=3D""><div style=3D"font-variant: normal; letter-spacing: normal; = line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: = 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: = 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; = -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" = class=3D""><div style=3D"font-variant: normal; letter-spacing: normal; = line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: = 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: = 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; = -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" = class=3D""><div style=3D"font-variant: normal; letter-spacing: normal; = line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: = 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: = 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; = -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" = class=3D""><div style=3D"color: rgb(0, 0, 0); font-variant: normal; = letter-spacing: normal; line-height: normal; orphans: 2; text-align: = -webkit-auto; text-indent: 0px; text-transform: none; white-space: = normal; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; = word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: = after-white-space;" class=3D""><font class=3D"Apple-style-span"><span = class=3D"Apple-style-span" style=3D"border-collapse: separate; = border-spacing: 0px;"><div style=3D"word-wrap: break-word; = -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" = class=3D""><span class=3D"Apple-style-span" style=3D"border-collapse: = separate; border-spacing: 0px;"><div style=3D"word-wrap: break-word; = -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" = class=3D""><span class=3D"Apple-style-span" style=3D"border-collapse: = separate; border-spacing: 0px;"><div style=3D"word-wrap: break-word; = -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" = class=3D""><span class=3D"Apple-style-span" style=3D"border-collapse: = separate; border-spacing: 0px;"><div style=3D"word-wrap: break-word; = -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" = class=3D""><span class=3D"Apple-style-span" style=3D"border-collapse: = separate; border-spacing: 0px;"><div style=3D"color: rgb(0, 0, 0); = font-size: 10px;" class=3D""><font class=3D""><div class=3D""><span = style=3D"font-size: 10px; text-align: -webkit-auto;" class=3D"">Thank = you,</span></div><font class=3D"Apple-style-span" = color=3D"#00000000">Wolfgang</font></font></div><div style=3D"font-size: = 10px;" class=3D""><br = class=3D""></div></span></div></span></div></span></div></span></div></spa= n></font></div><div style=3D"font-variant: normal; letter-spacing: = normal; line-height: normal; orphans: 2; text-align: -webkit-auto; = text-indent: 0px; text-transform: none; white-space: normal; widows: 2; = word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: = break-word; -webkit-nbsp-mode: space; -webkit-line-break: = after-white-space;" class=3D""><span class=3D"Apple-style-span" = style=3D"border-collapse: separate; border-spacing: 0px;"><font = class=3D"Apple-style-span" color=3D"#797979"><div style=3D"word-wrap: = break-word; -webkit-nbsp-mode: space; -webkit-line-break: = after-white-space;" class=3D""><span class=3D"Apple-style-span" = style=3D"border-collapse: separate; border-spacing: 0px;"><div = style=3D"word-wrap: break-word; -webkit-nbsp-mode: space; = -webkit-line-break: after-white-space;" class=3D""><span = class=3D"Apple-style-span" style=3D"border-collapse: separate; = border-spacing: 0px;"><div style=3D"word-wrap: break-word; = -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" = class=3D""><span class=3D"Apple-style-span" style=3D"border-collapse: = separate; border-spacing: 0px;"><div style=3D"word-wrap: break-word; = -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" = class=3D""><span class=3D"Apple-style-span" style=3D"border-collapse: = separate; border-spacing: 0px;"><div class=3D""><span style=3D"font-size: = 9px;" class=3D""><font = class=3D"Apple-style-span"></font></span></div></span></div></span></div><= /span></div></span></div></font></span></div></div></div></div></div></div= ></div></div></div></div></div></div></div></div></div></div></div></div><= /div></div></div></div> </div> <br class=3D""><div><blockquote type=3D"cite" class=3D""><div = class=3D"">On 10 Feb 2016, at 13:26PM, Ray Bellis <<a = href=3D"mailto:[email protected]" class=3D"">[email protected]</a>> = wrote:</div><br class=3D"Apple-interchange-newline"><div class=3D""><div = class=3D"">Wolfgang,<br class=3D""><br class=3D"">I've been appointed as = the designated expert to review your RRTYPE<br class=3D"">application = per RFC 6895.<br class=3D""><br class=3D"">In principle the application = is OK, and it's highly desirable that you<br class=3D"">avoid use of = TXT.<br class=3D""><br class=3D"">Within my remit however I do have some = concerns over the name of the RRTYPE:<br class=3D""><br class=3D"">- the = term "authoritative" has a particular meaning in the DNS<br class=3D""> = protocol, and "authoritative source" is a commonly used term<br = class=3D""> too. Typing "dns authoritative source" into = Google already<br class=3D""> produces 75,000 results, none that I = could see relating to<br class=3D""> your project.<br = class=3D""></div></div></blockquote><div><br class=3D""></div><div>yes I = agree and we have chosen the wording by intension to outline that we = leverage the authoritative name server as a sigle source of truth for = application metadata.</div><br class=3D""><blockquote type=3D"cite" = class=3D""><div class=3D""><div class=3D"">- using "DNS" within the = RRTYPE name seems redundant - we=E2=80=99re already in the DNS.<br = class=3D""></div></div></blockquote><div><br = class=3D""></div>agree</div><div><br class=3D""><blockquote type=3D"cite" = class=3D""><div class=3D""><div class=3D"">- the letters "AS" are also = commonly used to refer to a BGP "Autonomous System=E2=80=9D.<br = class=3D""></div></div></blockquote><div><br = class=3D""></div><div>agree</div><br class=3D""><blockquote type=3D"cite" = class=3D""><div class=3D""><div class=3D"">[FWIW, when I first saw your = requested mnemonic in the subject of your<br class=3D"">application I = was expecting to see an application for an RRTYPE to<br = class=3D"">represent a BGP AS number!]<br = class=3D""></div></div></blockquote><div><br class=3D""></div><div>it=E2=80= =99s not so far off given that BGP expresses routing policy intend and = DNS-AS metadata for application policy intend</div><br = class=3D""><blockquote type=3D"cite" class=3D""><div class=3D""><div = class=3D"">Also missing is any explicit statement that the intended wire = and<br class=3D"">presentation format are identical to that of a TXT = record.<br class=3D"">Consideration should also be given to what happens = if the data does not<br class=3D"">fit within a single 255 octet = "character-string" sub-field.<br = class=3D""></div></div></blockquote><div><br class=3D""></div><div>OK = will adress this</div><br class=3D""><blockquote type=3D"cite" = class=3D""><div class=3D""><div class=3D"">Incidentally, the = "CISCO-CLS=3D" prefix in the RDATA would appear to be<br = class=3D"">redundant when you get your own RRTYPE, and if it's expected = that other<br class=3D"">vendors would use this then I suggest that you = either omit it or use<br class=3D"">something more neutral.<br = class=3D""></div></div></blockquote><div><br class=3D""></div><div>yes = good catch and I agree and will remove this</div><br = class=3D""><blockquote type=3D"cite" class=3D""><div class=3D""><div = class=3D"">At a higher level I have concerns about the overall use case = that<br class=3D"">should be addressed if you plan to document = "DNS Authoritative Source"<br class=3D"">in an Internet Draft (although = I don't expect these to be a factor in my<br class=3D"">decision as = they're probably outside the scope of RFC 6895):<br = class=3D""></div></div></blockquote><div><br class=3D""></div><div>at = this time there are not plans to submit this as an Internet = Draft</div><br class=3D""><blockquote type=3D"cite" class=3D""><div = class=3D""><div class=3D"">- why DNS? = </div></div></blockquote><div><br class=3D""></div><div>Readily = available tool - already leveraged to identify an application by = DNS-NAME</div><br class=3D""><blockquote type=3D"cite" class=3D""><div = class=3D""><div class=3D"">How does the client know what domain names = are supposed to be looked up?<br = class=3D""></div></div></blockquote><div><br class=3D""></div><div>it=E2=80= =99s a function of an DNS-AS client which snoop DNS request as an = trigger and raises it=E2=80=99s own query for a DNS-AS Resource Record = to get the metadata to enforce policy later</div><br = class=3D""><blockquote type=3D"cite" class=3D""><div class=3D""><div = class=3D"">- if the "Application Name" is the primary key, why not = incorporate<br class=3D""> that into the domain name?<br = class=3D""></div></div></blockquote><div><br class=3D""></div><div>This = =E2=80=98could be done=E2=80=99 - but most customers don=E2=80=99t or = won=E2=80=99t always identify what application is running on a server = via it=E2=80=99s FQDN. </div><br class=3D""><blockquote type=3D"cite"= class=3D""><div class=3D""><div class=3D""> - (corollary) is it = expected that a client would want to (or even<br class=3D""> = be allowed to) obtain information about all known = applications at<br class=3D""> a domain with a single = DNS query?<br class=3D""></div></div></blockquote><div><br = class=3D""></div><div>there is nothing confidential inside a DNS-AS = resource record. </div><div>The key is that it it = authoritative!</div><br class=3D""><blockquote type=3D"cite" = class=3D""><div class=3D""><div class=3D"">- what about DNS = Security? What happens in your SDN if someone<br class=3D""> = manages to poison a record?<br = class=3D""></div></div></blockquote><div><br class=3D""></div><div>what = happens if I haven't done my homework and didn=E2=80=99t secure and = harden my DNS infrastructure ;-)</div><div>If DNS is compromised you = have bigger problems than how a network element chooses mark and service = (queue) for a given application...</div><br class=3D""><blockquote = type=3D"cite" class=3D""><div class=3D""><div class=3D"">The decision = will be reached within two weeks of today, and before<br = class=3D"">approval the explicit linking to the TXT record format must = be resolved.<br class=3D""><br class=3D"">I urge you to reconsider your = project name of "DNS Authoritative Source"<br class=3D"">as being a = clash with existing terminology. I'm not currently inclined<br = class=3D"">to reject the application on that basis of the requested = DNSAS mnemonic,<br class=3D"">but welcome community feedback on that = issue.<br class=3D""></div></div></blockquote><div><br = class=3D""></div><div>yes will file a new request for mnemonic =3D = AVC</div><br class=3D""><blockquote type=3D"cite" class=3D""><div = class=3D""><div class=3D""><br class=3D"">kind regards,<br class=3D""><br = class=3D"">Ray Bellis<br class=3D""></div></div></blockquote></div><br = class=3D""></div></body></html>= --Apple-Mail=_59723724-6638-4E1C-B3B2-8BCC265C5D0B-- --Apple-Mail=_F8EDD7BC-C6D6-410A-8E5F-90BE60FCDC47 Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename="signature.asc" Content-Type: application/pgp-signature; name="signature.asc" Content-Description: Message signed with OpenPGP using GPGMail -----BEGIN PGP SIGNATURE----- Version: GnuPG/MacGPG2 v2.0.28 Comment: GPGTools - http://gpgtools.org iQIcBAEBCgAGBQJWv5PUAAoJECTe5TeQF2Aswi0QALQFMnHXGD2lf9FqxgT7FRSO OmKIwlDHDyBGVzEy8srywqO6uTfcIb2I3NFFl18sMkbXc7E7ZG6H4RGq8HIws+nh n0uDlBD01Eh3y4C80RF6cm3w+/goHWOLKJ4CoYswGhMvzNpiWXtUmPS2MrsFY4lA 7iszs+0uD8Pz98pHO6eqiq6X1fhYLu/5G2wH1+hNnqBQk8LGNg/a3BYqX3JWu8z3 CbIpmdIrd0LDSQUVOfr7ZPUsZTmzbXDHYMxhBWWw0XWfyr4Zf/g4BLZ3hySJ93NF lI5oQ3NcGdW/SeqTGWOHwU12F9Olvb4fHQGsupiTLiY1Dio9gDMOWBFHsykQYzRj lXWI+aIs5mCIJ6vtN4m6VZBuSCYeeczYm9H8OzzTPvYLvxr9GyHFpzPRaBIRI0pY eyGbMowRMalO1lSq3OFc2Rq6N7CrGxl/NTTtZLSgqLWWlfMgAazxB8tWkK73R1z9 h+kSjBC2/rtVa/aTKIHwwLaRKX3RIz14I328uc39eOEUOQw4x62zz9ADTG/FaH2F BSPZr4VXzGg0mO5/xB1Y5WXxi43nLLXKwgjAJlUTTiy3snRDiklZOrGaPpMznmFG 1H0d5hsDulpxhXaR2s7aZ7KFJpRFhxXwWcByVADwusIZ+f9pzEYJ84ZaGhlIFsE7 Rhc/e5fkqwx21RZ7b8eS =SbV/ -----END PGP SIGNATURE----- --Apple-Mail=_F8EDD7BC-C6D6-410A-8E5F-90BE60FCDC47-- --===============2539278119749720331== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ dnsext mailing list [email protected] https://www.ietf.org/mailman/listinfo/dnsext --===============2539278119749720331==--