Christian,

On Dec 6, 2013, at 1:43 PM, Christian Grothoff <[email protected]> wrote:
> I meant 'management' in the sense of assigning names under .alt to
> groups/organizations/software.  We'd effectively need another process to
> decide who gets to implement a mechanism for ".com.alt".  

The RFC 6761 registry 
(http://www.iana.org/assignments/special-use-domain-names/special-use-domain-names.txt)
 would not designate who gets to implement a mechanism for .onion/.gnu/.i2p, it 
would merely state those strings are reserved so that they aren't allocated as 
DNS top-level domains and provide a reference to the (first) specification that 
reserved the name. I see no difference between the suffix being "." and ".alt" 
in the context of management. Indeed, the registry already lists non-TLD 
strings.

> Besides, as
> was already pointed out, RFC 6761 rejected the idea of ".alt",

RFC 6761 says nothing regarding ".alt".  To be clear, the idea is to provide a 
namespace alternative to the root that reduces the risk of name collisions for 
applications that do not make use of the DNS (the choice of ".alt" is mostly 
arbitrary -- it could be pretty much anything).  As I've asked before, beyond 
aesthetics, what arguments are there against ".alt"?

> and I
> agree with Stephane that, as RFC 6761 has consensus, we should not
> reopen that discussion just because we're trying to use it for the first
> time.

By this logic, we should have stuck with RFC 2065 for DNSSEC. It is not unusual 
for RFCs to not survive their first interaction with the real world.

>>> The case is even stronger for GNS, where DNS queries can even be
>>> intercepted at the network layer by a dedicated DNS2GNS gateway.
>> Sorry, I'm confused. The point of the RFC 6761 reservation scheme is that 
>> the names are _NOT_ intended for use in DNS resolution. What do you mean by 
>> "DNS queries can be intercepted at the network layer"?
> The GNS queries won't go to the DNS resolver hierarchy; however,
> applications may use the DNS protocol initially (for legacy reasons),
> and then at a 'personal' DNS resolver might decide to forward ".gnu" to
> GNS and other queries to DNS.

To be sure I understand: you're saying that if I take my favorite unmodified 
browser on my favorite unmodified operating system and point it at (say) 
gcc.gnu, a DNS query sent out by my machine to my local resolver using the 
standard DNS protocol would be received on UDP (or TCP?) port 53 by the special 
GNS resolver which would notice the trailing string ".gnu" and do something 
special with it, throwing everything else to the regular DNS resolution process?

Thanks,
-drc

Attachment: signature.asc
Description: Message signed with OpenPGP using GPGMail

_______________________________________________
DNSOP mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/dnsop

Reply via email to