[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [IPSECKEY] new draft revision (00b)



-----BEGIN PGP SIGNED MESSAGE-----


>>>>> "Sam" == Sam Weiler <weiler@watson.org> writes:
    Sam> On Mon, 7 Apr 2003, Michael Richardson wrote:
    >> (Is the proper name for the wire-encode form: "DNS name"?)

    Sam> Quoting rfc1035 section 3.3
    Sam> <domain-name> is a domain name represented as a series of labels,

    Sam> So you might use "a domain name encoded as defined in RFC1035, section
    Sam> 3.3.

  How about
  "a <domain-name> encoded as defined in RFC1035, section 3.3."

    >> I'm uncertain about his new suggestion. I'm specifically not certain how
    >> to "wire-encode" an IPv6 name.

    Sam> Quoting from rfc1886 section 2.2:
    Sam>    A 128 bit IPv6 address is encoded in the data portion of an AAAA
    Sam>    resource record in network byte order (high-order byte first).

  Olafur made the suggestion, I think, of keeping the <domain-name> encoding,
even for the v4 and v6 literals. This makes the parser agnostic about what
format the literals are in (making the user of the RR do a bit more work,
and deal with a few more error cases). The only addition was a type field.

    Sam> Perhaps "a 32 bit IPv4 address" is adequately to-the-point.

    >> 2) byte to distinguish type.
    >> FQDN)   wire-encode item
    >> IPv4)   4 bytes
    >> IPv6)   16 bytes

    Sam> I prefer this, but I'm not the one writing code.

  So do I.

]       ON HUMILITY: to err is human. To moo, bovine.           |  firewalls  [
]   Michael Richardson, Sandelman Software Works, Ottawa, ON    |net architect[
] mcr@sandelman.ottawa.on.ca http://www.sandelman.ottawa.on.ca/ |device driver[
] panic("Just another Debian GNU/Linux using, kernel hacking, security guy"); [

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.7 (GNU/Linux)
Comment: Finger me for keys

iQCVAwUBPpHv9oqHRg3pndX9AQHBbwQAue/GYvVAxHwmksHOtOOWU/QSollqiTSm
0moacimMig4L34/FhIsspZbHNTtvgrpluniXnwv3J1ik73SwGz9bYhJ0f4N5ZvKe
UbA3ztNkFHmfQ45iLQmWADnEbz0H+mbnVP8LGNVGMm5ucES8bn8WvEpiZXy/Nikk
eXy9xuvYQ5w=
=mn/b
-----END PGP SIGNATURE-----
-
This is the IPSECKEY@sandelman.ca list.
Email to ipseckey-request@sandelman.ca to be removed.