Re: IPv6 NAT?

2008-02-18 Thread Keith Moore
I hate to rain on the parade, but... >> 1. ULAs will give enterprises the addressing autonomy that they >> seek (as RFC 1918 addresses do with IPv4) > > Correct. That's available today. > >> ; but that 2. Enterprises will NOT need to use NAT to make those >> ULAs globally reachable (instead usin

Re: IPv6 NAT?

2008-02-19 Thread Keith Moore
> My point is that this is a solved problem in practice. Probably not > solved in the way you or I would like, but solved nevertheless. Perhaps the meaning of "solved" has changed over the years :) Several years ago I saw a sign that read: Mediocrity is excellence at pursuing the mean.

Re: Last Call: draft-klensin-rfc2821bis

2008-03-24 Thread Keith Moore
FWIW, my opinion is that if you want to accept incoming mail via IPv6, you need to advertise one or more MX records that point to ipv6-capable hosts. Treating A records (in the absence of MX records) as "implicit MX" records was a hack needed to avoid forcing everyone to advertise an MX record

Re: Last Call: draft-klensin-rfc2821bis

2008-03-25 Thread Keith Moore
Ned Freed wrote: >> er, NO. SMTP has no dependence on what may or may >> not exist in the DNS. Forcing SMTP to depend on DNS >> is a huge mistake. And yes Virginia, I plan on removing >> A rr's from my zones (eventually) > > You know, that's a very interesting point. One o

Re: Last Call: draft-klensin-rfc2821bis

2008-03-25 Thread Keith Moore
> > Ned, by "disable MX lookups", do you mean "don't put MX records > into the DNS zone and therefore force a fallback to the address > records" or "ignore the requirement of the standard that > requires using MX records if they are there"? If the latter, > the behavior, however useful (or not)

Re: Last Call: draft-klensin-rfc2821bis

2008-03-25 Thread Keith Moore
s what you should do in the absence of any such knowledge. Ned Freed wrote: > >> --On Tuesday, 25 March, 2008 23:18 -0400 Keith Moore >> <[EMAIL PROTECTED]> wrote: > >>>> You know, that's a very interesting point. One of more common >>>> configu

Re: Last Call: draft-klensin-rfc2821bis

2008-03-26 Thread Keith Moore
Markku Savela wrote: > > The goal should be to make IPv4 and IPv6 easily replaceable anywhere, > whithout any reduced functionality. I don't see how requiring MX lookups for IPv6 mail relaying reduces functionality. As far as I can tell, it increases functionality because it provides (as a s

Re: Last Call: draft-klensin-rfc2821bis

2008-03-26 Thread Keith Moore
SM wrote: > We could look at the question by asking whether the fallback MX > behavior should be an operational decision. But then we would be > treating IPv4 and IPv6 differently. IPv4 and IPv6 really are different, in a number of ways that affect both applications and operations. e.g. Sc

Re: Last Call: draft-klensin-rfc2821bis

2008-03-26 Thread Keith Moore
Frank Ellermann wrote: > Bill Manning wrote: > >> example.com. soa ( >> stuff >> ) > >> ns foo. >> ns bar. >> ; >> mailhost fe80::21a:92ff:fe99:2ab1 > >> is what i am using today. > > In that case adding an MX record pointing to mailhost > or not is perfectly irrelevant from an IP

Re: Last Call: draft-klensin-rfc2821bis

2008-03-26 Thread Keith Moore
Frank Ellermann wrote: > Keith Moore wrote: > >> IPv4-only hosts can see the record even if they can't >> directly send mail to that address. and there's no reason >> ("obvious" or otherwise) why a MTA should reject mail from >> a hos

Re: Last Call: draft-klensin-rfc2821bis

2008-03-26 Thread Keith Moore
John Levine wrote: > Not to be cynical or anything, but regardless of what we decree, I > think it's vanishingly unlikely that many systems on the public > Internet* will accept mail from a domain with only an record. I think it's vanishing unlikely that email will be useful at all, if spam

Re: Last Call: draft-klensin-rfc2821bis

2008-03-26 Thread Keith Moore
John Levine wrote: > Not to reignite the usual spam argument, but it is (unfortunately in > this case) not 1988 or even 1998 any more. When upwards of 90% of all > mail is spam, keeping mail usable is at least as dependent on limiting > the spam that shows up in people's mailboxes as deliverin

Re: Last Call: draft-klensin-rfc2821bis

2008-03-26 Thread Keith Moore
> This document is not the place to fight spam. If you want a BCP to deprecate > the fall-back, then write one. Until all the implementations remove > fall-back to A, the correct behavior is to also fall-back to . People > (particularly the apps dev & support communities) are having a hard eno

Re: Last Call: draft-klensin-rfc2821bis

2008-03-26 Thread Keith Moore
Frank Ellermann wrote: > Keith Moore wrote: > >> you're assuming lots of conditions there that don't apply >> in the general case... > > The cases involving MX queries are not unusual, a good part > of 2821bis explains how this works. MTAs know if they

Re: Last Call: draft-klensin-rfc2821bis

2008-03-26 Thread Keith Moore
Dave Crocker wrote: > > I keep trying to understand why the SMTP use of records should be any > different than its use of A records. Haven't heard a solid explanation, > nevermind seen consensus forming around it. because conditions are different now than it was when RFC 974 was written,

Re: Last Call: draft-klensin-rfc2821bis

2008-03-26 Thread Keith Moore
Tony Hain wrote: > Your arguments make no sense. Any service that has an MX creates > absolutely no cost, and the fallback to only makes one last > attempt to deliver the mail before giving up. Trying to force the > recipient MTA to publish an MX to avoid delivery failure on the > sending MTA

Re: Last Call: draft-klensin-rfc2821bis

2008-03-27 Thread Keith Moore
> That is all well and good, but it is completely of value to the receiving > MTA, and under their complete control. There is nothing that requires a > receiving MTA to follow this model, despite what others may see as value. well, if you want to receive mail from other domains without special ar

Re: Last Call: draft-klensin-rfc2821bis

2008-03-27 Thread Keith Moore
David Morris wrote: > > On Fri, 28 Mar 2008, Keith Moore wrote: > >>> If there were some serious technical consequence for lack of the MX record >>> I would be >>> all for specifying its use. Operational practice with A records shows that >>> ther

Re: Implicit MX and A RRs

2008-03-27 Thread Keith Moore
Tony Finch wrote: > On Thu, 27 Mar 2008, Matti Aarnio wrote: >> There will be lots of legacy codes using legacy APIs for long future. >> I do use getaddrinfo() API myself, and permit it do all queries to >> get addresses. Thus it will also query for A in addition to . >> It can even be order

Re: Last Call: draft-klensin-rfc2821bis

2008-03-28 Thread Keith Moore
>> and the dummy SMTP server works, but it consumes resources on the >> host and eats bandwidth on the network. having a way to say "don't >> send this host any mail" in DNS seems like a useful thing. and we >> simply don't need the fallback to because we don't have the >> backward

Re: Last Call: draft-klensin-rfc2821bis

2008-03-28 Thread Keith Moore
[EMAIL PROTECTED] wrote: > Let me throw another idea into the mix. What if we were to > recommend a transition architecture in which an MTA host > ran two instances of the MTA software, one binding only to > IPv4 addresses, and the other binding to only IPv6 addresses. > Assume that there will be

Re: Last Call: draft-klensin-rfc2821bis

2008-03-29 Thread Keith Moore
Frank Ellermann wrote: > John C Klensin wrote: > >> I don't believe that I seen any evidence of anyone who >> had a strong position changing his or her mind since >> the discussion started, nor have I seen a new argument >> presented after the first few days. > > The argument from somebody saying

Re: Last Call: draft-klensin-rfc2821bis

2008-03-29 Thread Keith Moore
I think it is time to put an end to specious arguments. These standards get used for decades. I don't think it's appropriate to cripple them because of some arrangement that happens to exist now from a few dysfunctional DNS providers. Providers will get more flexible as the need becomes appar

Re: Last Call: draft-klensin-rfc2821bis

2008-03-29 Thread Keith Moore
> principle of least surprise. > > Henning > > On Mar 29, 2008, at 10:34 AM, Theodore Tso wrote: >> On Sat, Mar 29, 2008 at 10:16:10AM -0400, Keith Moore wrote: >>> I think it is time to put an end to specious arguments. >>> >>> These standards ge

Re: Last Call: draft-klensin-rfc2821bis

2008-03-30 Thread Keith Moore
> > So, a domain name erroneously appears in an address field and the references > host erroneously accepts mail it shouldn't. > > This degree of problematic operation is not likely to get solved with a new > DNS > construct. this specific problem will get solved with a simplification of how

Re: Last Call: draft-klensin-rfc2821bis

2008-03-30 Thread Keith Moore
agree with most of what you said, however: > Since bad guys can deduce addresses by scanning --and will certainly do so > if we > make it sufficiently hard for them to use the DNS-- this type of > DNS change, it seems to me, would have little effect on the > antisocial. note that scanning is

Re: Last Call: draft-klensin-rfc2821bis

2008-03-31 Thread Keith Moore
Tony Finch wrote: > On Sat, 29 Mar 2008, John Levine wrote: >> Getting rid of the fallback flips the default to be in line with >> reality -- most hosts don't want to receive mail directly, so if >> you're one of the minority that actually does, you affirmatively >> publish an MX to say so.

Re: Last Call: draft-klensin-rfc2821bis: closing the implicit MX issue

2008-04-14 Thread Keith Moore
Dave Crocker wrote: > Tony Hansen wrote: >> From this viewpoint, running code wins. >> >> I'm also swayed by the principle of "least surprise". > ... >> Last of all, I'm swayed by the discussions around RFC 974 and the DRUMS >> archive search > ... >> So the bottom line is that I see sufficie

Re: Last Call: draft-klensin-rfc2821bis: closing the implicit MX issue

2008-04-17 Thread Keith Moore
Dave Crocker wrote: > Yeah, this "running code" thing is over-rated. indeed it is. many people are so accustomed to accepting the problems with today's large-scale email operation that they fail to see how things could be any other way. after all, it "works"...sort of. > It does have one c

Re: SHOULD vs MUST case sensitivity

2008-06-27 Thread Keith Moore
Computer science long ago made the mistake of imposing semantic difference on case differences, which is distinct from other uses of case. Absent explicit specification of case sensitivity for the keywords, the rules of English writing apply, I would think. For better or worse, in IETF we ha

Re: SHOULD vs MUST case sensitivity

2008-06-29 Thread Keith Moore
Dave, regardless of the original intent of 2119, your belief is inconsistent with longstanding IETF process. you do not get to retroactively change the intent of RFCs that have gained consensus and approval. Keith Dave Crocker wrote: Randy Presuhn wrote: In what universe does that make

Re: problem dealing w/ ietf.org mail servers

2008-07-03 Thread Keith Moore
surely we in the IETF should be able to do better than to have our mail servers filter incoming mail based on completely irrelevant criteria like whether a PTR lookup succeeds! how can we expect the rest of the network to be sane if we can't even use reasonable criteria for our spam filtering

Re: problem dealing w/ ietf.org mail servers

2008-07-03 Thread Keith Moore
Jeroen Massar wrote: On Wed, Jul 02, 2008 at 10:47:53PM -0700, 'kent' wrote: [..] However, this last address, 2001:470:1:76:2c0:9fff:fe3e:4009, is not explicitly configured on the sending server; instead, it is being implicitly configured through ip6 autoconf stuff: Which (autoconfig) you sh

Re: problem dealing w/ ietf.org mail servers

2008-07-03 Thread Keith Moore
John Levine wrote: surely we in the IETF should be able to do better than to have our mail servers filter incoming mail based on completely irrelevant criteria like whether a PTR lookup succeeds! Spam filtering is sort of like chemotherapy, the difference between the good a

Re: problem dealing w/ ietf.org mail servers

2008-07-03 Thread Keith Moore
John Levine wrote: that's hardly a justification for stupidity. I entirely agree. Where we evidently don't agree is about what's stupid. in this case, what's stupid is filtering mail based on arbitrary and largely undocumented criteria, with little regard for the consequences.for instanc

Re: problem dealing w/ ietf.org mail servers

2008-07-04 Thread Keith Moore
[EMAIL PROTECTED] wrote: I think I could have been clearer with my message. It wasn't intended as either a criticism of the ietf list management (in fact, I use precisely the same anti-spam technique) or a request for help with configuration of my mailservers (I may not be the sharpest knife i

Re: problem dealing w/ ietf.org mail servers

2008-07-07 Thread Keith Moore
=> according to Glen via RT (RT is a well known bug ticket system): "This check is in place at the direction of the IETF community, and has been discussed and debated at length." I don't recall the Last Call on that question, nor even the I-D. seems like this calls into question the compe

Re: Update of RFC 2606 based on the recent ICANN changes ?

2008-07-07 Thread Keith Moore
Historically, the view has been that bloating the root servers in that way would be very dangerous. Counter-claims observe that .com seems to have survived with a similar storage and traffic pattern, so why should there be a problem moving the pattern up one level? because it makes the root

Re: Update of RFC 2606 based on the recent ICANN changes ?

2008-07-07 Thread Keith Moore
The latest CAIDA study says: * The overall query traffic experienced by the roots continues to grow. The observed 2007 query rate and client rate was 1.5-3X above their observed values in 2006 * The proportion of invalid traffic, i.e., DNS pollution, hitting the roots is still high, over 9

Re: Update of RFC 2606 based on the recent ICANN changes ?

2008-07-07 Thread Keith Moore
Umm, hk. resolves to the same address from both our machines and is pingable (modulo a single packet loss from yours, depending on how your ping counts) from both. http://hk pulls up a web page on a machine with the same address. interesting. I had actually tried that URL before sending the l

Re: Update of RFC 2606 based on the recent ICANN changes ?

2008-07-07 Thread Keith Moore
The site-dependent interpretation of the name is determined not by the presence of dot within the name but its absence from the end. not so. in many contexts the trailing dot is not valid syntax. I don't buy "unreliable" as a diagnosis for that state of affairs. "hk" operates exactly as an

Re: Update of RFC 2606 based on the recent ICANN changes ?

2008-07-08 Thread Keith Moore
Ted Faber wrote: On Tue, Jul 08, 2008 at 12:54:16PM +1000, Mark Andrews wrote: "hk." is not a syntactically valid hostname (RFC 952). "hk." is not a syntactically valid mail domain. Periods at the end are not legal. RFC 1035 has *nothing* to do with defining wh

Re: Update of RFC 2606 based on the recent ICANN changes ?

2008-07-08 Thread Keith Moore
Ted Faber wrote: On Mon, Jul 07, 2008 at 11:28:05PM -0400, Keith Moore wrote: The site-dependent interpretation of the name is determined not by the presence of dot within the name but its absence from the end. not so. in many contexts the trailing dot is not valid syntax. Let me be

Re: Update of RFC 2606 based on the recent ICANN changes ?

2008-07-08 Thread Keith Moore
RFC1043 defines the dot. The fact that some apps don't recognize it is a bug. not when the application explicitly specifies that FQDNs are to be used. in such cases the dot is superfluous. Keith ___ Ietf mailing list Ietf@ietf.org https://www.ietf.or

Re: problem dealing w/ ietf.org mail servers

2008-07-08 Thread Keith Moore
1) I do understand where the current "last 64 bits are EUId" comes from. 2) Someone (I think it was Keith Moore) said that if the scheme doesn't work for servers AND hosts (i.e no difference) it's a bad scheme. I sort of agree with that, but the reason it doesn't w

Re: Update of RFC 2606 based on the recent ICANN changes ?

2008-07-08 Thread Keith Moore
Joe Touch wrote: Keith Moore wrote: |> RFC1043 defines the dot. The fact that some apps don't recognize it is a |> bug. | | not when the application explicitly specifies that FQDNs are to be used. | in such cases the dot is superfluous. Superfluous is fine. Prohibited is not. If the

Re: Update of RFC 2606 based on the recent ICANN changes ?

2008-07-08 Thread Keith Moore
Joe Touch wrote: I don't think you get to revise a couple of decades of protocol design and implementation by declaring that RFC 1043's authors and process trump everything that's been done afterward. I'll repeat: some app misbehaviors are just bugs not all app misbehaviors de

Re: Update of RFC 2606 based on the recent ICANN changes ?

2008-07-08 Thread Keith Moore
Many, many working groups have looked at the problems associated with relative names and determined that they're not acceptable. It's a "bug" that relative names are forbidden in these apps, nor that the final "." is implicit and in many cases disallowed. These are carefully considered desi

Re: Update of RFC 2606 based on the recent ICANN changes ?

2008-07-08 Thread Keith Moore
It's nonsensical for an application to decide that relative names are unacceptable, but to require users to input names as relative. it's nonsensical for you to unilaterally declare that such names are relative, when well over two decades of practice indicates otherwise. I didn't declare it;

Re: Update of RFC 2606 based on the recent ICANN changes ?

2008-07-08 Thread Keith Moore
Ted Faber wrote: On Tue, Jul 08, 2008 at 02:17:57PM -0400, Keith Moore wrote: The notion of a single-label fully-qualified DNS name being "valid" is an odd one. DNS, as far as I can tell, was always intended to be federated, both in assignment and lookup. The notion of havin

Re: Update of RFC 2606 based on the recent ICANN changes ?

2008-07-08 Thread Keith Moore
I don't think 1034 was handed down from a mountain on stone tablets. It was not. But when other programs started using the DNS, it was *they* that endorsed what the DNS as per that doc. ...but they also profiled it in various ways for use with that specific app. Some apps define their own R

Re: Update of RFC 2606 based on the recent ICANN changes ?

2008-07-08 Thread Keith Moore
Ted Faber wrote: On Tue, Jul 08, 2008 at 05:11:35PM -0400, Keith Moore wrote: And vanity TLDs are going to be much more attractive if people think they can get single-label host names out of them. Of your concerns (which I don't have the relevant experience to comment on in detail),

Re: Update of RFC 2606 based on the recent ICANN changes ?

2008-07-08 Thread Keith Moore
The (some) resolver handles names differently if it contains a dot. The distinction that I have been unclearly stating is between absolute and relative names. RFC 1034 (i said 1035 earlier, but it's 1034) lays out a convention for specifying which one you want by appending the dot. As

Re: Call for review of proposed update to ID-Checklist

2008-07-09 Thread Keith Moore
6. Addresses used in examples SHOULD use fully qualified domain names instead of literal IP addresses, and SHOULD use example fqdn's such as foo.example.com instead of real-world fqdn's. See [RFC2606] (Eastlake, D. and A. Panitz, "Reserved Top Level DNS Names," June 1999.) for e

Re: Call for review of proposed update to ID-Checklist

2008-07-09 Thread Keith Moore
John C Klensin wrote: (iii) The IETF has indicated enough times that domain names, not literal addresses, should be used in both protocols and documents that doing anything else should reasonably require clear and strong justification. I take issue with that as

Re: Call for review of proposed update to ID-Checklist

2008-07-11 Thread Keith Moore
Eliot Lear wrote: Bob, This contradicts Section 2.1 of RFDC 1123, which says an application SHOULD support literal addresses (and of course DNS support is a MUST) -- Section 6.1.1.) Within the application space, which is what we were talking about with RFC 1123, I'd have to say that the

Re: Proposed Experiment: More Meeting Time on Friday for IETF 73

2008-07-18 Thread Keith Moore
one thing to measure is how many WG or BOF chairs say "Please don't give us a Friday afternoon session". Brian E Carpenter wrote: The proposed Friday schedule would be: 0900-1130 Morning Session I 1130-1300 Break 1300-1400 Afternoon Session I 1415-1515 Afternoon Session II Try i

Re: Proposed Experiment: More Meeting Time on Friday for IETF 73

2008-07-18 Thread Keith Moore
Do we spend too much time with overviews of drafts that really should have been read by all attendees beforehand? Maybe it would be good for the first session on Monday to be an "Area Overview" session where an overview of all the latest drafts can be "presented" to give people a broader view o

Re: About IETF communication skills

2008-07-31 Thread Keith Moore
Lixia Zhang wrote: I'd like to share my own experience here: I was interviewed by exactly the same reporter some time ago, and I requested to review the article before publication. But the very next thing I learned was that the article had been published, and the interview misquoted. My exp

Re: About IETF communication skills

2008-07-31 Thread Keith Moore
Ned Freed wrote: Lixia Zhang wrote: I'd like to share my own experience here: I was interviewed by exactly the same reporter some time ago, and I requested to review the article before publication. But the very next thing I learned was that the article had been published, and the interview misq

Re: About IETF communication skills

2008-07-31 Thread Keith Moore
My experience with that reporter is similar. I came to believe that she saw it as her job to misrepresent whatever information was given to her. ... Let's not be too harsh. Do we have any reason to believe that media coverage in this case is less accurate than media coverage in general? The se

Re: About IETF communication skills

2008-08-01 Thread Keith Moore
Ole Jacobsen wrote: I agree with Paul. Having now quickly read the article in question I don't even see what the "problem" is, including the somewhat provocative headline. I think it's a huge problem if the market gets the idea that NATs (as we currently know them) will also be a part of IPv

Re: About IETF communication skills

2008-08-01 Thread Keith Moore
Fred Baker wrote: On Jul 31, 2008, at 5:52 PM, JORDI PALET MARTINEZ wrote: Some considered that part of the delay of the IPv6 deployment was due to the lack of communication effort from IETF. I'm not really sure about that, however I agree that everything helps, of course. To be honest, I t

Re: About IETF communication skills

2008-08-01 Thread Keith Moore
Noel Chiappa wrote: Having read it, I think this story is pretty accurate - and that's probably why some people here are upset about it. It's not the accurate parts I'm upset about. From the article: > The Internet engineering community working on IPv6 is considering > reintroducing NAT - on

"reality" vs. "principle" (was Re: About IETF communication skills)

2008-08-01 Thread Keith Moore
Geoff Huston wrote: Yes, I stand by what I said in that article. If you disagree with my perspective on this topic, then perhaps you may want to followup with me directly, rather than claim some shortcoming on the part of the journalist. Well, of course, the things you are quoted as saying are

Re: "reality" vs. "principle" (was Re: About IETF communication skills)

2008-08-02 Thread Keith Moore
Noel Chiappa wrote: > IPv4 NATs cause problems .. because they rob applications developers of > functionality, make the net less reliable and less flexible, increase > the cost of running applications and raise the barrier for new > applications, and increase the effort and expen

avoiding pitfalls in v4/v6 NAT (was Re: About IETF communication skills)

2008-08-02 Thread Keith Moore
Noel Chiappa wrote: > From: Keith Moore <[EMAIL PROTECTED]> > But these limitations don't inherently apply to NAT between v4 and v6, > particularly not when the v4 address is a public one. I don't understand this; I thought the inherent problems you so abl

Re: avoiding pitfalls in v4/v6 NAT (was Re: About IETF communication skills)

2008-08-03 Thread Keith Moore
Noel Chiappa wrote: > From: Keith Moore <[EMAIL PROTECTED]> >>> these limitations don't inherently apply to NAT between v4 and v6, >> I thought the inherent problems ... would apply to an IPv4-IPv6 NAT, >> when such a device is used to al

Re: avoiding pitfalls in v4/v6 NAT (was Re: About IETF communication skills)

2008-08-03 Thread Keith Moore
Noel Chiappa wrote: > From: Keith Moore <[EMAIL PROTECTED]> > You don't need to add it to all (or most) IPv6 implementations. More hair-splitting... It's not hair-splitting if it significantly reduces the barrier to adoption. > The goal ... is not to

Re: About IETF communication skills

2008-08-03 Thread Keith Moore
I find myself imagining what IETF would be like if anyone who could claim to be a journalist (say because they have a blog) could get in for free, subject only to the condition that they could not talk during meeting sessions. I think I just might claim to be a journalist (after all, I do have

Re: New schemes vs recycling "http:" (Re: Past LC comments on draft-ietf-geopriv-http-location-delivery-08)

2008-08-07 Thread Keith Moore
Tim Bray wrote: The TAG is in fact clearly correct when they state that introduction of new URI schemes is quite expensive. To me it seems that this depends on the extent to which those new URI schemes are to be used in contexts where existing URI schemes are used. New URI schemes used in

Re: New schemes vs recycling "http:" (Re: Past LC comments on draft-ietf-geopriv-http-location-delivery-08)

2008-08-07 Thread Keith Moore
Tim Bray wrote: On Thu, Aug 7, 2008 at 10:23 AM, Keith Moore <[EMAIL PROTECTED]> wrote: The TAG is in fact clearly correct when they state that introduction of new URI schemes is quite expensive. To me it seems that this depends on the extent to which those new URI schemes are to be u

Re: New schemes vs recycling "http:" (Re: Past LC comments on draft-ietf-geopriv-http-location-delivery-08)

2008-08-07 Thread Keith Moore
Tim Bray wrote: Don't browser and OS libraries dispatch on URI scheme? I guess it's probably not as easy to extend as adding a new handler for a new Content-Type, but it's at least possible for a new URI scheme to start appearing (in email, Web pages, local docs, etc) and for the user to insta

Re: New schemes vs recycling "http:" (Re: Past LC comments on draft-ietf-geopriv-http-location-delivery-08)

2008-08-07 Thread Keith Moore
Tim Bray wrote: On Thu, Aug 7, 2008 at 4:47 PM, Keith Moore <[EMAIL PROTECTED]> wrote: That's ridiculous. First of all it's not as if HTTP is an optimal or even particularly efficient way of accessing all kinds of resources - so you want to permit URI schemes for as many

Re: Publishing RFCs in PDF Formal

2008-08-27 Thread Keith Moore
Julian Reschke wrote: > Paul Hoffman wrote: >> ... >> It sure it. It just turns out to be a terrible format for extracting >> text as anything other than lines, and even then doesn't work >> reliably with commonly-used tools >> ... > > It's also a terrible format for reading documentation in a W

Re: Publishing RFCs in PDF Formal

2008-08-27 Thread Keith Moore
Julian Reschke wrote: > > data URIs are available in 3 out of 4 major browsers, with IE8 adding > them as well. I thought IE8 had some fairly annoying limitations on their use? >> format. But data: URLs are not as widely supported as we'd like. Nor >> is MHTML. Having multiple files per docu

Re: IESG Statement on Revised guidance for interim meetings

2008-09-02 Thread Keith Moore
+1 Dave CROCKER wrote: > > IESG Secretary wrote: >> This statement provides IESG guidance on interim IETF Working Group >> meetings, conference calls, and jabber sessions. > > Good note. > > >> Historically the work of the IETF has been conducted over mailing lists. >> This practice ensures th

Re: RFC 2026 interpretation question

2008-10-02 Thread Keith Moore
> First question is: Why have any delay at all? I presume the answer has > to do with broader community exposure -- review and maybe experience, > although 4 months is not enough for serious experience. > > If indeed that reason is right, it seems that distribution doesn't > happen until the RF

Re: Last Call: draft-irtf-asrg-dnsbl (DNS Blacklists and Whitelists)

2008-11-07 Thread Keith Moore
Under no circumstances should any kind of Blacklists or Whitelists be accepted by IETF as standards-track documents. These lists are responsible for huge numbers of illegitimate delivery failures. We should no more be standardizing such lists than to be standardizing spam. Keith

Re: Last Call: draft-irtf-asrg-dnsbl (DNS Blacklists and Whitelists)

2008-11-07 Thread Keith Moore
DNSBLs work to degrade the interoperability of email, to make its delivery less reliable and system less accountable for failures. They do NOT meet the "no known technical omissions" criterion required of standards-track documents. The fact that they are widely used is sad, not a justification fo

Re: Last Call: draft-irtf-asrg-dnsbl (DNS Blacklists and Whitelists)

2008-11-08 Thread Keith Moore
Ned Freed wrote: >> Sadly, I have to agree with Keith. While these lists are a >> fact of life today, and I would favor an informational document >> or document that simply describes how they work and the issues >> they raise, standardizing them and formally recommending their >> use is not desir

Re: Last Call: draft-irtf-asrg-dnsbl (DNS Blacklists and Whitelists)

2008-11-08 Thread Keith Moore
John Levine wrote: >> standardizing them and formally recommending their use > > I'm not aware of any language in the current draft that recommends > that people use DNSBLs. Standardizing it is an implicit recommendation. In particular it's a statement that there are "no known technical omissio

Re: Last Call: draft-irtf-asrg-dnsbl (DNS Blacklists and Whitelists)

2008-11-08 Thread Keith Moore
Dave, you're mischaracterizing the situation and you ought to know better. basing reputation on IP address is pretty dubious. transmitting reputation over DNS is not "otherwise-acceptable" and there's at least some argument to be made that this choice of mechanism lends itself to abuse, or even

Re: Last Call: draft-irtf-asrg-dnsbl (DNS Blacklists and Whitelists)

2008-11-08 Thread Keith Moore
John C Klensin wrote: > I'm am beginning to wish for the days at which, at least in > principle, we could standardize something and immediately put a > "not recommended" label on it. Well, I have often wished we had a clear label (or maybe even a separate document series) for things of the form

Re: Last Call: draft-irtf-asrg-dnsbl (DNS Blacklists and Whitelists)

2008-11-08 Thread Keith Moore
> standardization drastically impairs email interoperability. > > John C Klensin wrote: > >> Sadly, I have to agree with Keith. While these lists are a >> fact of life today, and I would favor an informational document >> or document that simply describes how they wor

Re: Last Call: draft-irtf-asrg-dnsbl (DNS Blacklists and Whitelists)

2008-11-08 Thread Keith Moore
John Levine wrote: >> Unlike you, I don't see "overwhelming community consensus for >> this mechanism". > > Aw, come on. There's a billion and a half mailboxes using the > Spamhaus DNSBLs, on systems ranging from giant ISPs down to hobbyist > Linux boxes. and there's a billion and a half users

Re: Last Call: draft-irtf-asrg-dnsbl (DNS Blacklists and Whitelists)

2008-11-08 Thread Keith Moore
You keep citing 1.5 billion users. I haven't asked all of them, of course, but I keep finding that users don't trust their email to be reliable, and they don't know how to find an email service that is reliable. Mostly they maintain several different email accounts and try sending from multiple a

Re: Last Call: draft-irtf-asrg-dnsbl (DNS Blacklists and Whitelists)

2008-11-08 Thread Keith Moore
Chris Lewis wrote: > Keith Moore wrote: >> I think you're missing the point. > > Oh, no, I fully understand the point. In contrast, I think you're > relying on false dichotomies. > > For example: > >> Better "interoperation" of a f

Re: Last Call: draft-irtf-asrg-dnsbl (DNS Blacklists and Whitelists)

2008-11-08 Thread Keith Moore
Paul Hoffman wrote: > The IETF has repeatedly tried and failed to fix the "RFC levels" problem. Paul, our criteria for standards-track documents haven't changed in several years. Sure they're imperfect but that's not a justification for abandoning them. And this document doesn't meet them. Kei

Re: Last Call: draft-irtf-asrg-dnsbl (DNS Blacklists and Whitelists)

2008-11-08 Thread Keith Moore
Livingood, Jason wrote: > Keith - I encourage you to consult with several very large scale email > domains around the world to see if they think that DNSxBLs are useful, > effective, and in widespread use or not. Jason - I encourage you to consult with users whose mail isn't getting delivered,

Re: Last Call: draft-irtf-asrg-dnsbl (DNS Blacklists and Whitelists)

2008-11-09 Thread Keith Moore
Chris Lewis wrote: > So, where's this accountability gap you keep talking about? The gap is where ISPs can drop my mail without a good reason, and without my having any recourse against them. The gap increases when they delegate those decisions to a third party. It increases further when the m

IP-based reputation services vs. DNSBL (long)

2008-11-09 Thread Keith Moore
Trying to sum up the situation here: 1. Several people have argued (somewhat convincingly) that: - Source IP address reputation services can be valuable tools for blocking spam, - Such services can be better at identifying spam than per-message content analysis, - Such services can (and sometim

Re: Last Call: draft-irtf-asrg-dnsbl (DNS Blacklists and Whitelists)

2008-11-10 Thread Keith Moore
John Levine wrote: > As I said a few messages up in this string, although the structure of > IPv4 DNSxLs has long since been cast in concrete, IPv6 DNSxLs aren't > that mature yet and one of my goals was to make them interoperate > equally well so, for example, if you find you're using cruddy ones

Re: Last Call: draft-irtf-asrg-dnsbl (DNS Blacklists and Whitelists)

2008-11-10 Thread Keith Moore
Steve Linford wrote: > I certainly agree that there are hundreds of small DNSBLs run from kid's > bedrooms which list on incomprehensible wildly over-broad policies and > that such DNSBLs are both antagonistic and useless and as a result are > used by almost nobody - that's 'market force'. But to

Re: Last Call: draft-irtf-asrg-dnsbl (DNS Blacklists and Whitelists)

2008-11-10 Thread Keith Moore
der Mouse wrote: > [Keith Moore] >>> The fact that [DNSBLs] are widely used is sad, not a justification >>> for standardization. > > True. The justification is not simply that they are widely used; it is > that they are widely used, they are often done wrong, they

Re: Last Call: draft-irtf-asrg-dnsbl (DNS Blacklists and Whitelists)

2008-11-10 Thread Keith Moore
Tony Finch wrote: > On Mon, 10 Nov 2008, Keith Moore wrote: >> I suspect it will be very difficult to make IPv6 DNSxLs work anywhere >> nearly as well as IPv4 DNSxLs, because in IPv6 it is fairly easy to use >> a different address for every SMTP conversation. > > I e

Re: Last Call: draft-irtf-asrg-dnsbl (DNS Blacklists and Whitelists)

2008-11-10 Thread Keith Moore
Tony Finch wrote: > On Mon, 10 Nov 2008, Keith Moore wrote: >> Tony Finch wrote: >> >>> In any case, DNSBLs should scale roughly according to the size of the >>> routing table, not the size of the address space. >> What does it mean for a DNSBL to "s

Re: Last Call: draft-irtf-asrg-dnsbl (DNS Blacklists and Whitelists)

2008-11-09 Thread Keith Moore
Matthias Leisi wrote: > [Disclosure: I am the leader of the dnswl.org project; I provided some > input into the DNSxL draft as far as it concerns whitelists.] > > Keith Moore schrieb: > >> These incidents happen one at a time. It's rarely worth suing over a >>

Re: IP-based reputation services vs. DNSBL (long)

2008-11-11 Thread Keith Moore
Eliot Lear wrote: > On 11/10/08 10:37 PM, John Levine wrote: >>> I hope the charter, unlike the previous one, will require the >>> development of a protocol for communicating email sender reputation >>> that can be implemented in email products without known patent >>> encumbrances that are incompa

Re: several messages

2008-11-11 Thread Keith Moore
Steve Linford wrote: > On 11 Nov 2008, at 15:11, Peter Dambier wrote: > >> Hi Steve, >> >> sorry to mention spamhaus again, >> but that is the reason why many german and especially austrian >> mailoperators had to give up blacklisting completely > > I do not think it is productive to use thi

<    1   2   3   4   5   6   7   8   9   10   >