Post APOY4uPtgTkQlnH8Vs by florent@mastodon.zeteo.me
 (DIR) More posts by florent@mastodon.zeteo.me
 (DIR) Post #APO1EuWKr83JV5Rr9c by bortzmeyer@mastodon.gougere.fr
       2022-11-08T07:12:07Z
       
       0 likes, 0 repeats
       
       Good morning, London! Second day of #IETF115, with a lot of #DNS today.Otherwise, it rains.
       
 (DIR) Post #APOETeLoYVCv6BsyVE by bortzmeyer@mastodon.gougere.fr
       2022-11-08T09:40:24Z
       
       0 likes, 0 repeats
       
       dnsop working group at#IETF115 If you have ideas about the future of the #DNS, it is time to voice them. https://datatracker.ietf.org/meeting/115/materials/agenda-115-dnsop-03
       
 (DIR) Post #APOF2v08dqLUsHZ2qe by bortzmeyer@mastodon.gougere.fr
       2022-11-08T09:46:49Z
       
       0 likes, 0 repeats
       
       First big issue : the .ALT TLD. A TLD for non-#DNS resolution systems. Quite politically loaded... (ICANN, alternative roots, etc)Proposal to move it to Working Group Last Call.
       
 (DIR) Post #APOFOQ4UJos1JmqqC8 by bortzmeyer@mastodon.gougere.fr
       2022-11-08T09:50:41Z
       
       0 likes, 0 repeats
       
       There are also funny technical issues such as "how do we sign a TLD which will not exist in the root zone?"#DNS #DNSSEC
       
 (DIR) Post #APOG1uEk69dEAUTb2u by bortzmeyer@mastodon.gougere.fr
       2022-11-08T09:57:51Z
       
       0 likes, 0 repeats
       
       #DNS error reporting was tested at the hackathon two days ago.  "What we learned: the food was amazing." This technique allows a DNS resolver to report to the operatior of a domain, not to the client (like RFC 8914 does).
       
 (DIR) Post #APOIxL2dJMu7iSKGQK by bortzmeyer@mastodon.gougere.fr
       2022-11-08T10:30:20Z
       
       0 likes, 0 repeats
       
       Now, caching of #DNS resolution failures. The Facebook breakage on october 2021 showed that many resolvers keep trying and overload the parent name servers. The goal is to be more specific that resolvers MUST cache resolution failures.
       
 (DIR) Post #APOK89J1Nu9YSSi5fU by bortzmeyer@mastodon.gougere.fr
       2022-11-08T10:43:43Z
       
       0 likes, 0 repeats
       
       Proposal of a new EDNS option for the application to tell the local resolver/proxy how you want #DNS resolution to be performed("I want everything sent over DoH to eight*four")#IETF115
       
 (DIR) Post #APOLAWhTTY5zY1qTNA by bortzmeyer@mastodon.gougere.fr
       2022-11-08T10:55:23Z
       
       1 likes, 0 repeats
       
       Some people suggest an API instead. We are in 2022, guys, we no longer use only C, how to design and specify an API for N programming languages?
       
 (DIR) Post #APOLMKZIPKUlOdeHFg by mneylon@social.tchncs.de
       2022-11-08T10:57:33Z
       
       0 likes, 0 repeats
       
       @bortzmeyer you work for a registry so surely you want to give the world some crazy Java code that nobody will ever use? :)
       
 (DIR) Post #APOLU3YTXvS6wnwsyW by immae@mastodon.immae.eu
       2022-11-08T10:58:56Z
       
       0 likes, 0 repeats
       
       @bortzmeyer You’re thinking of things like jsonschema for instance? There are a few standardizations that exist and is widely supported in many programming languages
       
 (DIR) Post #APOLYZH7YNwQU3yynY by bortzmeyer@mastodon.gougere.fr
       2022-11-08T10:59:23Z
       
       0 likes, 0 repeats
       
       @mneylon We export a network API, people can choose the programming language (as long as it is one I love). https://www.afnic.fr/en/observatory-and-resources/expert-papers/using-the-fr-api-with-go-3-4/
       
 (DIR) Post #APOLe0Vzhh4uPmX7Gi by bortzmeyer@mastodon.gougere.fr
       2022-11-08T11:00:30Z
       
       0 likes, 0 repeats
       
       @immae I don't see the relationship between an API and a schema langage for a format (like JSON).
       
 (DIR) Post #APOM3QGZ6BATWJR31U by immae@mastodon.immae.eu
       2022-11-08T11:05:06Z
       
       0 likes, 0 repeats
       
       @bortzmeyer openapi then? I’m not sure I get what you’re trying to specify here (I thought you wanted to specify a content standard - independently of the transport -, hence the jsonschema)
       
 (DIR) Post #APOMJ20l2tgyvbU5mC by bortzmeyer@mastodon.gougere.fr
       2022-11-08T11:08:09Z
       
       0 likes, 0 repeats
       
       @immae The idea was to replace a network protocol (DNS) by an API, since, in that use case, client and server are on the same machine.So a network "API" would not help.
       
 (DIR) Post #APOMZZHB8SrejM3BB2 by cquest@amicale.net
       2022-11-08T11:11:07Z
       
       0 likes, 0 repeats
       
       @bortzmeyer A correctly designed REST/json API is language independent:- expose it with openapi (ex swagger)- describe your data model with jsonschema
       
 (DIR) Post #APOMehd9V9OK5amDZo by bortzmeyer@mastodon.gougere.fr
       2022-11-08T11:11:56Z
       
       0 likes, 0 repeats
       
       @cquest https://mastodon.gougere.fr/@bortzmeyer/109307867274537663API, not network, REST "API" !
       
 (DIR) Post #APONlBRFgklsEFrfWK by bortzmeyer@mastodon.gougere.fr
       2022-11-08T11:24:20Z
       
       0 likes, 0 repeats
       
       We also have a proposal to help debug #DNS censorship. (As usual, I'm skeptical since censors typically don't want transparency.)
       
 (DIR) Post #APOOCED3UgrKdr7Via by huguei@social.tchncs.de
       2022-11-08T11:29:24Z
       
       0 likes, 0 repeats
       
       @bortzmeyer well... I guess you have to embed the public key inside your app-specific browser, or retrieve it in some way inside your own protocol!
       
 (DIR) Post #APOQPLoCkeijsosiMC by shane_kerr@fosstodon.org
       2022-11-08T11:54:11Z
       
       0 likes, 0 repeats
       
       @bortzmeyerI'm surprised that nobody suggested a new resource record type to indicate a non-delegation. 😆(Probably someone did but I admit that I haven't read every thread on this topic over the years...)
       
 (DIR) Post #APORJcDevNaezpcIHw by shane_kerr@fosstodon.org
       2022-11-08T12:04:23Z
       
       0 likes, 0 repeats
       
       @bortzmeyerThe IETF doesn't design APIs, except when it does. 😉I think that the getdns effort was moderately successful. On the one hand it shows that API design does not need to be an IETF activity. But the IETF has protocol experts and programmers, so why not do such work in the IETF?
       
 (DIR) Post #APOT2HR78qgLWZlusK by bert_hubert@fosstodon.org
       2022-11-08T12:23:36Z
       
       0 likes, 0 repeats
       
       @bortzmeyer most languages can call a C API though. Even as an ABI.
       
 (DIR) Post #APOVtFuvihu04M6ee0 by bortzmeyer@mastodon.gougere.fr
       2022-11-08T12:55:15Z
       
       0 likes, 0 repeats
       
       Just outside of #IETF115...#London
       
 (DIR) Post #APOW0FjanYhzWs8jE8 by bortzmeyer@mastodon.gougere.fr
       2022-11-08T12:56:48Z
       
       0 likes, 0 repeats
       
       @bert_hubert But it is often a poor fit (returning a pointer vs. returning a dictionary, return codes vs. exceptions, etc). This is not to be encouraged.
       
 (DIR) Post #APOWDUHe13B0PwNV9E by nicolasvivant@mastodon.social
       2022-11-08T12:59:15Z
       
       0 likes, 0 repeats
       
       @bortzmeyer "Gives solution for all type of probleme". Utile.
       
 (DIR) Post #APOY4uPtgTkQlnH8Vs by florent@mastodon.zeteo.me
       2022-11-08T13:17:53Z
       
       0 likes, 0 repeats
       
       @bortzmeyer J'ai lu « Facepalm » reading
       
 (DIR) Post #APOg69T20lJ7N4qS2K by huitema@social.secret-wg.org
       2022-11-08T14:49:59Z
       
       0 likes, 0 repeats
       
       @bortzmeyer @bert_hubert If we want API accessible in multiple languages, and if we don't like starting from C, it seems that we just have to reinvent Remote Procedure Calls...
       
 (DIR) Post #APOhk4PILPxRDMhC0e by bortzmeyer@mastodon.gougere.fr
       2022-11-08T15:08:15Z
       
       0 likes, 0 repeats
       
       @huitema @bert_hubert But here, the point was to avoid "remote" since the stub and the proxy are assumed to be on the same machine.
       
 (DIR) Post #APOjYoJe1wm221oNeq by huitema@social.secret-wg.org
       2022-11-08T15:28:28Z
       
       0 likes, 0 repeats
       
       @bortzmeyer @bert_hubert RPC boils down to marshalling arguments, passing the message, unmarshalling at the server, marshalling results at the server, sending response message, unmarshalling at the client. Marshalling can be done in any language for which there is a parser, which gets you language independence. Message passing can be local.
       
 (DIR) Post #APOkm0Uq9do9Wmu9M8 by bortzmeyer@mastodon.gougere.fr
       2022-11-08T15:42:20Z
       
       0 likes, 0 repeats
       
       Strange side meeting at #IETF115 "Is privacy preserving Web filtering possible?"(Specially in the context of CSAM - Child Sexual Abuse Material)The speaker (Internet Watch Foundation) claims that filtering should be done without monitoring user activity.#ARCOM <- This is a french-specific troll.
       
 (DIR) Post #APOlBH0BvLNLxVcIdc by bortzmeyer@mastodon.gougere.fr
       2022-11-08T15:46:50Z
       
       0 likes, 0 repeats
       
       Readers of this toot are probably all busy searching technical solutions (from simple ones like hashing of URLs to shiny ones like homomorphic encryption).They exist but this may not be the "real" problem.
       
 (DIR) Post #APOmGhheB5oqAk61hY by bortzmeyer@mastodon.gougere.fr
       2022-11-08T15:59:01Z
       
       0 likes, 0 repeats
       
       "if you add 'with the consent of the user', the problem becomes much simpler" #IETF115
       
 (DIR) Post #APOmeoALngUJAP12rQ by bortzmeyer@mastodon.gougere.fr
       2022-11-08T16:03:23Z
       
       0 likes, 0 repeats
       
       "for instance, this is what ad blockers are doing"Basically, filtering must NOT be done "on the wire" but on the user's machine. #IETF115
       
 (DIR) Post #APP78IL4h9yyEBMyzA by vyr@noc.social
       2022-11-08T19:52:42Z
       
       0 likes, 0 repeats
       
       @bortzmeyer "answers" to all your "queries"!
       
 (DIR) Post #APQ7XnZjtERTVILl3o by bortzmeyer@mastodon.gougere.fr
       2022-11-09T07:26:41Z
       
       0 likes, 0 repeats
       
       @vyr Better than the DNS :-)