[DNSOP] Re: New Version Notification for draft-muks-dns-nta- feed-zones-00.txt

--===============2554374254636448319==
Content-Type: multipart/alternative; boundary="000000000000a8c7b20657a701c1"

--000000000000a8c7b20657a701c1
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

Hi,

I agree with Ond=C5=99ej's point regarding the architecture here. NTAs are
inherently local operational overrides specific to a resolver's policy,
rather than a global state that belongs in dedicated feed zones.

If the core objective is visibility and discovery into active NTAs rather
than building new zone-transfer infrastructure, leveraging *RFC 9606
(RESINFO)* might be a cleaner alternative.

Since NTAs are scoped to the resolver and are meant to be temporary,
resolvers could self-announce their currently active NTAs via RESINFO
key-value pairs (for instance, an nta-uri attribute pointing to the
resolver's active NTA dataset).

This keeps the policy discovery explicitly local to the resolver
enforcement point and reuses an existing mechanism, avoiding the need to
construct and maintain new feed-zone distribution logic.

Best regards,
Aditya Ghosh (he/him)
Research Intern
India Internet Foundation
[email protected]

--000000000000a8c7b20657a701c1
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div><p>Hi,</p><p>I agree with Ond=C5=99ej&#39;s point reg=
arding the architecture here. NTAs are inherently local operational overrid=
es specific to a resolver&#39;s policy, rather than a global state that bel=
ongs in dedicated feed zones.</p><p>If the core objective is visibility and=
 discovery into active NTAs rather than building new zone-transfer infrastr=
ucture, leveraging <b>RFC 9606 (RESINFO)</b> might be a cleaner alternative=
.</p><p>Since NTAs are scoped to the resolver and are meant to be temporary=
, resolvers could self-announce their currently active NTAs via <code>RESIN=
FO</code> key-value pairs (for instance, an <code>nta-uri</code> attribute =
pointing to the resolver&#39;s active NTA dataset).</p><p>This keeps the po=
licy discovery explicitly local to the resolver enforcement point and reuse=
s an existing mechanism, avoiding the need to construct and maintain new fe=
ed-zone distribution logic.</p><p>Best regards,</p></div><div dir=3D"ltr" c=
lass=3D"gmail_signature" data-smartmail=3D"gmail_signature"><div dir=3D"ltr=
"><table cellpadding=3D"0" cellspacing=3D"0" border=3D"0" width=3D"100%" st=
yle=3D"font-family:&quot;Times New Roman&quot;;width:1896px;min-width:100%;=
max-width:100%"><tbody><tr><td align=3D"left" valign=3D"top" style=3D"paddi=
ng:0px"><table cellpadding=3D"0" cellspacing=3D"0" border=3D"0" width=3D"10=
0%" style=3D"max-width:550px;font-family:Arial,sans-serif;color:rgb(45,55,7=
2);line-height:1.4;border-collapse:collapse"><tbody><tr><td style=3D"paddin=
g:0px"><table cellpadding=3D"0" cellspacing=3D"0" border=3D"0" width=3D"100=
%"><tbody><tr><td style=3D"vertical-align:top"><table cellpadding=3D"0" cel=
lspacing=3D"0" border=3D"0" style=3D"vertical-align:top"><tbody><tr><td sty=
le=3D"font-weight:bold;padding-bottom:4px;line-height:1.4">Aditya Ghosh=C2=
=A0<span style=3D"font-weight:normal;color:rgb(107,70,193)">(he/him)</span>=
</td></tr><tr><td style=3D"color:rgb(107,70,193);padding-bottom:2px;line-he=
ight:1.4;white-space:nowrap">Research Intern</td></tr><tr><td style=3D"colo=
r:rgb(107,70,193);padding-bottom:4px;line-height:1.4">India Internet Founda=
tion</td></tr><tr><td style=3D"padding-bottom:2px;line-height:1.4"><a href=
=3D"mailto:[email protected]" style=3D"color:rgb(85,60,154);text-decor=
ation:none;border-bottom:0px" target=3D"_blank">[email protected]</a><=
/td></tr><tr><td style=3D"font-size:12px;padding-bottom:2px;line-height:1.4=
"><table cellpadding=3D"0" cellspacing=3D"0" border=3D"0" style=3D"border-c=
ollapse:collapse"><tbody><tr><td style=3D"vertical-align:middle"><br></td><=
/tr></tbody></table></td></tr></tbody></table></td></tr></tbody></table></t=
d></tr></tbody></table></td></tr></tbody></table></div></div></div>

--000000000000a8c7b20657a701c1--


--===============2554374254636448319==
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: base64
Content-Disposition: inline

X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KRE5TT1AgbWFp
bGluZyBsaXN0IC0tIGRuc29wQGlldGYub3JnClRvIHVuc3Vic2NyaWJlIHNlbmQgYW4gZW1haWwg
dG8gZG5zb3AtbGVhdmVAaWV0Zi5vcmcK

--===============2554374254636448319==--