Slashdot Mirror
Paul Mockapetris On The Future of DNS
penciling_in writes "In a CircleID article called Letting
DNS Loose, Paul Mockapetris, the inventor of DNS and Chief Scientist and Chairman of Nominum, gives a good indication of
what is to be expected in the upcoming years when it comes to data riding on
DNS: "RFID tags, UPC codes, International characters in email
addresses and host names, and a variety of other identifiers could all go into
DNS, and folks have occasionally proposed doing just that. It's really just a
question of figuring out how to use the DNS -- it's ready to carry arbitrary
identifiers." According to Paul, there are 40 or so data types to be added
to DNS: "In fact the whole ENUM scheme is built out of classical DNS
technology, and NAPTR is really just the latest data type to be added to the
DNS. NAPTR is also just an extension of SRV, which was an extension of MX, which
are DNS data types that Active Directory uses to start itself and the Internet
uses to route each piece of mail." Paul also clarifies the recent BBC story
previously discussed here
on Slashdot."
Who knows what Verisign will do when someone scans an "unregistered" barcode...
Naming conventions are pretty useless these days. The ``big'' TLDs like .com, .org, .net, etc. are all remnants from the old days when the Internet was still US-only. Nowadays we have all those country domains, which may or may not implement some scheme to indicate the type of site (.uk does, .nl doesn't).
.nu domain, the server is in California, and my content comes entirely from the Netherlands, then what country does my site belong to? So perhaps we should just dispense with the current naming scheme altogether and just have one word as name for the main site (I think RealNames attempted this and failed). Instead of http://www.google.com/ one would just write ``Google'' (or maybe ``google''?), dropping the http://www which is fairly redundant when using a webbrowser (yes, I know that ``www'' indicates the hostname, but who cares what the hostname is, I just want the site), and the TLD which is basically meaningless.
Two things make the TLDs pretty much meaningless: a traditional TLD (.com etc.) does not neccesarily indicate the type of site, and a country code does not necessarily indicate the Real World location of a site (.nu anyone?). Besides, ``location'' is a very vague notion on the Internet. If my site has a
Just an idea for the more-or-less distant future.
I'm surprised that mDNS wasn't mentioned in the context of the future of DNS. It is, after all, the technology behind Rendezvous, Apple's protocol for automatic service advertising and configuration on local LANs. mDNS is basically just normal DNS multicasted, with some conventions on how to represent services.
mDNS is already used for zero-configuration networking, sharing iTunes playlists, and finding other iChat users on a local LAN. Since it's based on DNS, its both simple and has mature implementations. And it's open source; Apple provides a working reference implementation for MacOS 9, MacOS X, Windows, and Posix (including Linux).
If it needs a [UPC|RFID|Serial number|unique ID of any kind] why not give it an IPv6 address? It's a well designed heirarchical system, and DNS is already capable of handling it.
There is no reasonable defense against an idiot with an agenda
:wq
what about security issues? BIND has as long history of bugs and with the recent threats to the root DNS servers, I think the real issue is building a secure DNS service rather than extending the data it carries.
So whitehouse ctrl+enter...?
I'm trying to teach myself to set people on fire with my mind... Is it hot in here?
Actually, there already are provisions for this.
The SRV record, defined in rfc2782, is used to store a HOST:PORT pair
When will browsers (or anything else for that matter) start supporting this???
Here is a (possibly outdated) list of software that supports the SRV record.
comment directly in my journal
While the main point of the article is interesting, the rather depressing part - about the politics of the ITU, ICANN, etc. - is that unless we can get these oafs to work together, we are totally hosed. Having witnessed some of the machinations that goes on in at least a couple of these groups, I despair of whether we will get anything rational out of all of this. (I would much, much rather see sausages being made, than see these groups "working' again...)
"The time is always now" - Victor
- rrset-order is still broken.
- GSS-TSIG support is still missing.
- Strange multi-threading bugs still exist
- Awful security history isn't behind it yet.
Oddly enough, the expensive Nominum commercial product has all these things fixed and BIND does not, even though ISC and Nominum are the same set of folks, in the same building.Does this sound like bullshit to you ? If so, see the following:
- Read the bottom parts of this
and the links at the bottom of this
- Nominum/ISC relationship described here
Of course, the trouble is that there's not many alternatives. DJBDNS is stable, but missing features and has an odd "semi-open-source" license. ( Also, if you read some of the links, Dan's a really cranky source of supportAAARRGGHH.