rfc8917xml2.original.xml | rfc8917.xml | |||
---|---|---|---|---|
<?xml version="1.0"?> | <?xml version="1.0" encoding="UTF-8"?> | |||
<?xml-stylesheet type="text/xsl" href="rfc2629.xslt" ?> | ||||
<!DOCTYPE rfc SYSTEM "rfc2629.dtd" [ | ||||
<!ENTITY RFC2119 PUBLIC "" "http://xml.resource.org/public/rfc/bibxml/referenc | ||||
e.RFC.2119.xml"> | ||||
<!ENTITY RFC3958 PUBLIC "" "http://xml.resource.org/public/rfc/bibxml/referenc | ||||
e.RFC.3958.xml"> | ||||
<!ENTITY RFC4848 PUBLIC "" "http://xml.resource.org/public/rfc/bibxml/referenc | ||||
e.RFC.4848.xml"> | ||||
<!ENTITY RFC4033 PUBLIC "" "http://xml.resource.org/public/rfc/bibxml/referenc | ||||
e.RFC.4033.xml"> | ||||
<!ENTITY RFC5222 PUBLIC "" "http://xml.resource.org/public/rfc/bibxml/referenc | ||||
e.RFC.5222.xml"> | ||||
<!ENTITY RFC5582 PUBLIC "" "http://xml.resource.org/public/rfc/bibxml/referenc | ||||
e.RFC.5582.xml"> | ||||
]> | ||||
<?rfc inline="yes"?> | <!DOCTYPE rfc SYSTEM "rfc2629-xhtml.ent"> | |||
<?rfc toc="yes" ?> | ||||
<?rfc tocdepth="2" ?> | ||||
<?rfc symrefs="yes" ?> | ||||
<?rfc iprnotified="no" ?> | ||||
<?rfc strict="no" ?> | ||||
<?rfc compact="no" ?> | ||||
<?rfc sortrefs="yes" ?> | ||||
<!-- <?rfc colonspace='yes' ?> --> | ||||
<rfc category="std" ipr="trust200902" updates="5222" docName="draft-gellens-lost | <rfc xmlns:xi="http://www.w3.org/2001/XInclude" submissionType="IETF" category=" | |||
-validation-09"> | std" consensus="true" ipr="trust200902" updates="5222" docName="draft-gellens-lo | |||
<front> | st-validation-09" number="8917" obsoletes="" xml:lang="en" tocInclude="true" toc | |||
<title abbrev="LoST-Validation">The LoST-Validation S-NAPTR Application Serv | Depth="2" symRefs="true" sortRefs="true" version="3"> | |||
ice Tag</title> | ||||
<author fullname="Randall Gellens" initials="R." | <front> | |||
surname="Gellens"> | <title abbrev="LoST-Validation">The LoST-Validation Straightforward-Naming | |||
Authority PoinTeR (S-NAPTR) Application Service Tag</title> | ||||
<seriesInfo name="RFC" value="8917"/> | ||||
<author fullname="Randall Gellens" initials="R." surname="Gellens"> | ||||
<organization>Core Technology Consulting</organization> | <organization>Core Technology Consulting</organization> | |||
<address> | <address> | |||
<postal> | <postal> | |||
<street></street> | <street/> | |||
<city></city> | <city/> | |||
<region> </region> | <region/> | |||
<code> </code> | <code/> | |||
<country>US </country> | <country>United States of America</country> | |||
</postal> | </postal> | |||
<email>rg+ietf@coretechnologyconsulting.com</email> | <email>rg+ietf@coretechnologyconsulting.com</email> | |||
<uri>http://www.coretechnologyconsulting.com</uri> | <uri>http://www.coretechnologyconsulting.com</uri> | |||
</address> | </address> | |||
</author> | </author> | |||
<author initials="B." surname="Rosen" fullname="Brian Rosen"> | <author initials="B." surname="Rosen" fullname="Brian Rosen"> | |||
<organization></organization> | <organization/> | |||
<address> | <address> | |||
<postal> | <postal> | |||
<street>470 Conrad Dr</street> | <street>470 Conrad Dr.</street> | |||
<city>Mars</city> | <city>Mars</city> | |||
<region> PA </region> | <region> PA </region> | |||
<code>16046 </code> | <code>16046 </code> | |||
<country>US </country> | <country>United States of America</country> | |||
</postal> | </postal> | |||
<phone> </phone> | <phone> </phone> | |||
<email>br@brianrosen.net | <email>br@brianrosen.net | |||
</email> | </email> | |||
</address> | </address> | |||
</author> | </author> | |||
<date month="October" year="2020" /> | ||||
<date year="2020"/> | ||||
<area>Real-Time Applications and Infrastructure</area> | <area>Real-Time Applications and Infrastructure</area> | |||
<workgroup></workgroup> | <keyword>location</keyword> | |||
<keyword>Internet-Draft</keyword> | <keyword>LoST</keyword> | |||
<abstract> | <keyword>emergency</keyword> | |||
<t>This document adds the "LoST-Validation" service tag to the Straightfor | <keyword>emergency services</keyword> | |||
ward Naming Authority PoinTeR (S-NAPTR) Application Service Tag IANA registry. | <keyword>ecrf</keyword> | |||
This tag can appear in a Naming Authority Pointer (NAPTR) Domain Name System (DN | <keyword>lvf</keyword> | |||
S) record to assist clients of the Location-to-Service Translation Protocol (LoS | <keyword>i3</keyword> | |||
T) in identifying LoST servers explicitly willing to perform location validation | ||||
. This tag and the information on its use is an update to RFC5222 that enables | ||||
the explicit discovery of a server that supports location validation.</t> | ||||
<abstract> | ||||
<t>This document adds the 'LoST-Validation' service tag to the | ||||
Straightforward-Naming Authority PoinTeR (S-NAPTR) Application Service | ||||
Tag IANA registry. This tag can appear in a Naming Authority Pointer | ||||
(NAPTR) Domain Name System (DNS) record to assist clients of the | ||||
Location-to-Service Translation (LoST) Protocol in identifying LoST | ||||
servers designated for location validation. This tag and | ||||
the information about its use update RFC 5222, which enables the explicit | ||||
discovery of a server that supports location validation.</t> | ||||
</abstract> | </abstract> | |||
</front> | </front> | |||
<middle> | <middle> | |||
<section anchor="scope" numbered="true" toc="default"> | ||||
<!-- | <name>Document Scope</name> | |||
<section anchor="terminology" title="Terminology"> | <t>This document adds 'LoST-Validation' to the S-NAPTR Application | |||
<t>The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", "SH | Service Tag IANA registry and describes how this tag fits in the LoST | |||
OULD", "SHOULD NOT", | server discovery procedure described in <xref target="RFC5222" | |||
"RECOMMENDED", "MAY", and "OPTIONAL" in this document are to be interpre | format="default"/>. This tag is used with Naming Authority Pointer | |||
ted as described in | (NAPTR) Domain Name System (DNS) records so that clients of the | |||
<xref target="RFC2119"/>. </t> | Location-to-Service Translation (LoST) Protocol <xref target="RFC5222" | |||
</section> | format="default"/> can identify servers designated for location validation | |||
. This tag and the information on its use is an update to <xref target="RFC5222 | ||||
<section anchor="scope" title="Document Scope"> | " format="default"/> that enables the explicit discovery of a server that suppor | |||
<t>This document adds 'LoST-Validation' to the S-NAPTR Application Servi | ts location validation.</t> | |||
ce Tag IANA registry, and describes how this tag fits in the LoST server discove | ||||
ry procedure described in <xref target="RFC5222"/>. This tag is used with Namin | ||||
g Authority Pointer (NAPTR) Domain Name System (DNS) records so that clients of | ||||
the Location-to-Service Translation Protocol (LoST) <xref target="RFC5222"/> can | ||||
identify servers explicitly willing to perform location validation. This tag a | ||||
nd the information on its use is an update to <xref target="RFC5222"/> that enab | ||||
les the explicit discovery of a server that supports location validation.</t> | ||||
</section> | ||||
<section anchor="intro" title="Introduction"> | ||||
<t>The Location-to-Service Translation Protocol, LoST <xref target="RFC522 | ||||
2"/> defines a mapping service with the additional ability for a client to reque | ||||
st that a civic address be validated. The LoST protocol allows servers to ignor | ||||
e a request to perform location validation. The National Emergency Number Assoc | ||||
iation (NENA) has defined an architecture for all-IP emergency services (known a | ||||
s "i3" <xref target="NENA-i3"/>), which defines the mapping (routing) and valida | ||||
tion functions as two distinct functional elements, defined as an Emergency Call | ||||
Routing Function (ECRF) and a Location Validation Function (LVF). NENA i3 requ | ||||
ires that the mapping (ECRF) and validation (LVF) functions be separable, so tha | ||||
t an entity responsible for a LoST server cluster can decide to provide mapping | ||||
and validation services using consolidated or separate server clusters (i.e., us | ||||
ing the same or separate boxes). The rationale is that the mapping service is u | ||||
sed in real-time during emergency call routing, while the validation service is | ||||
used in advance, typically when data is provisioned, and therefore the mapping s | ||||
ervice has much higher availability and response time requirements than the vali | ||||
dation service. An organization might choose to deploy these services using dif | ||||
ferent server clusters to make it easier to provide higher levels of service for | ||||
the mapping function while shielding it from the potentially bursty load of val | ||||
idation, while another organization might choose to use the same sets of servers | ||||
for both, configured and deployed to offer the high service level demanded of t | ||||
he mapping service.</t> | ||||
<t>In order to permit this separability, any entity querying a LoST serv | ||||
er needs to be able to resolve an Application Unique String (AUS) into a URL for | ||||
a LoST server that offers the required service (mapping or validation). This s | ||||
eparability needs to be maintained throughout the LoST tree structure, from fore | ||||
st guide to leaf node (LoST architecture is described in <xref target="RFC5582"/ | ||||
>). Because LoST referrals return an AUS rather than a URL, either a different | ||||
Service Tag or a DNS name convention (e.g., "ecrf.example.org" and "lvf.example. | ||||
org") is needed to differentiate the different services. DNS name conventions a | ||||
re inflexible and fragile, making a different service tag the preferred approach | ||||
.</t> | ||||
<t>Because a server discovered using the "LoST" application service tag | ||||
may ignore a request to perform location validation, a service tag explicitly fo | ||||
r location validation also reduces the likelihood (which has existed since <xref | ||||
target="RFC5582"/>) of a client requiring location validation reaching servers | ||||
unwilling to do so.</t> | ||||
</section> | </section> | |||
<section anchor="intro" numbered="true" toc="default"> | ||||
<section anchor="LoST-Validation" title="The LoST-Validation Application Ser | <name>Introduction</name> | |||
vice Tag"> | <t>The LoST Protocol <xref | |||
target="RFC5222" format="default"/> defines a mapping service with the | ||||
<t>This document adds 'LoST-Validation' to the S-NAPTR Application Servi | additional ability for a client to request that a civic address be | |||
ce Tag registry created by <xref target="RFC3958"/>. The 'LoST-Validation' tag | validated. The LoST protocol allows servers to ignore a request to | |||
serves as a counterpart to the 'LoST' tag added by <xref target="RFC5222"/>: The | perform location validation. The National Emergency Number Association | |||
'LoST' tag identifies servers able to perform the core mapping function, while | (NENA) has defined an architecture for all-IP emergency services (known | |||
'LoST-Validation' identifies servers explicitly willing to perform the validatio | as "i3" <xref target="NENA-i3" format="default"/>), which defines the | |||
n function.</t> | mapping (routing) and validation functions as two distinct functional | |||
elements, defined as an Emergency Call Routing Function (ECRF) and a | ||||
<t>Because some servers might be configured to provide both mapping and vali | Location Validation Function (LVF). NENA i3 requires that the mapping | |||
dation functions, a server identified using the 'LoST' service tag might also pe | (ECRF) and validation (LVF) functions be separable; an entity | |||
rform the validation function (and resolving the two tags might result in the sa | responsible for a LoST server cluster can decide to provide mapping and | |||
me URL). Because the two functions might be separate, clients seeking a LoST se | validation services using consolidated or separate server clusters | |||
rver for location validation can first try U-NAPTR resolution using the 'Lost-Va | (i.e., using the same or separate boxes). The rationale is that the | |||
lidation' service tag, and fallback to the 'LoST' service tag if this does not r | mapping service is used in real time during emergency call routing, | |||
esolve to a usable LoST server.</t> | while the validation service is used in advance, typically when data is | |||
provisioned; therefore, the mapping service has much higher availability | ||||
<t>LoST <xref target="RFC5222"/> specifies that LoST servers are located by | and response-time requirements than the validation service. An | |||
resolving an application Unique String (AUS) using U-NAPTR/DDDS (URI-Enabled NAP | organization might choose to deploy these services using different | |||
TR/Dynamic Delegation Discovery Service) <xref target="RFC4848"/>, and defines t | server clusters to make it easier to provide higher levels of service | |||
he 'LoST' Application service tag. In order to permit separability of the mappi | for the mapping function while shielding it from the potentially bursty | |||
ng and validation services performed using LoST, and to reduce the likelihood of | load of validation. Another organization might choose to use the same | |||
a client requiring location validation reaching servers unwilling to do so, thi | sets of servers for both services, configured and deployed to offer the hi | |||
s document defines the 'LoST-Validation' service tag. NAPTR records for LoST se | gh service level demanded of the mapping service.</t> | |||
rvers available for location validation contain the 'LoST-Validation' service ta | <t>In order to permit this separability, any entity querying a LoST | |||
g. An entity needing to perform location validation using LoST performs the dis | server needs to be able to resolve an Application Unique String (AUS) | |||
covery procedure as described in <xref target="RFC5222"/>, except that the 'LoST | into a URL for a LoST server designated for the required service (mapping | |||
-Validation' service tag is used in preference to the 'LoST' service tag. For b | or validation). This separability needs to be maintained throughout the | |||
oth service tags, the HTTP and HTTPS URL schemes are used. In the absense of an | LoST tree structure, from forest guide to leaf node (LoST architecture | |||
y NAPTR records containing the 'LoST-Validation' service tag, the 'LoST' service | is described in <xref target="RFC5582" format="default"/>). Because | |||
tag is used. Fallback to the 'LoST' service tag may follow if the 'Lost-Valida | LoST referrals return an AUS rather than a URL, either a different | |||
tion' service tag fails to result in a usable LoST server. The discovery proced | service tag or a DNS name convention (e.g., "ecrf.example.org" and | |||
ure with the 'LoST-Validation' service tag might result in the same URL as the ' | "lvf.example.org") is needed to differentiate between the services. DNS n | |||
LoST' service tag, or it may result in a different URL. When the URLs are diffe | ame conventions are inflexible and fragile, making a different service tag the p | |||
rent, they could lead to the same physical servers, or different servers.</t> | referred approach.</t> | |||
<t>Because LoST servers may ignore a request to perform location | ||||
validation, a service tag explicitly for location validation also | ||||
reduces the likelihood (which has existed since <xref target="RFC5582" | ||||
format="default"/>) that a client needing location validation will reach s | ||||
ervers that are not doing so | ||||
(due to configuration and/or conditions).</t> | ||||
<section anchor="req" title="Requirements Language"> | ||||
<t> | ||||
The key words "<bcp14>MUST</bcp14>", "<bcp14>MUST NOT</bcp14>", | ||||
"<bcp14>REQUIRED</bcp14>", "<bcp14>SHALL</bcp14>", "<bcp14>SHALL NOT</bcp14> | ||||
", | ||||
"<bcp14>SHOULD</bcp14>", "<bcp14>SHOULD NOT</bcp14>", | ||||
"<bcp14>RECOMMENDED</bcp14>", "<bcp14>NOT RECOMMENDED</bcp14>", | ||||
"<bcp14>MAY</bcp14>", and "<bcp14>OPTIONAL</bcp14>" in this document are to | ||||
be | ||||
interpreted as described in BCP 14 <xref target="RFC2119"/> <xref | ||||
target="RFC8174"/> when, and only when, they appear in all capitals, as | ||||
shown here. | ||||
</t> | ||||
</section> | ||||
</section> | </section> | |||
<section anchor="LoST-Validation" numbered="true" toc="default"> | ||||
<section anchor="back" title="Backwards Compatability"> | <name>The LoST-Validation Application Service Tag</name> | |||
<t>This document adds 'LoST-Validation' to the "S-NAPTR Application | ||||
<t>The primary use of LoST in general, and the location validation functiona | Service Tags" registry created by <xref target="RFC3958" | |||
lity in particular, is within the emergency services area. Within North America | format="default"/>. The 'LoST-Validation' tag serves as a counterpart | |||
, the NENA i3 <xref target="NENA-i3"/> document specifies how protocols includin | to the 'LoST' tag added by <xref target="RFC5222" format="default"/>: | |||
g LoST are used. The i3 document is expected to reference the 'LoST-Validation' | the 'LoST' tag identifies servers able to perform the core mapping | |||
service tag, and specify its use in both server NAPTR DNS records and client re | function, while 'LoST-Validation' identifies servers designated for the va | |||
solution of Application Unique Strings (AUS).</t> | lidation function.</t> | |||
<t>Because some servers might be configured to provide both mapping and | ||||
<t>LoST allows a server to refuse to perform location validation, and define | validation functions, a server identified using the 'LoST' service tag | |||
s the 'locationValidationUnavailable' warning. LoST also allows a server to refe | might also perform the validation function (and resolving the two tags | |||
r to another server rather than answering itself. So, in a deployment where a Lo | might result in the same URL). Because the two functions might be | |||
ST tree has separate server clusters for mapping and for validation, mapping ser | separate, clients seeking a LoST server for location validation can | |||
vers receiving a request for validation could either perform the validation as r | first try a URI-Enabled NAPTR (U-NAPTR) resolution using the | |||
equested, or return the 'locationValidationUnavailable' warning, and potentially | 'LoST-Validation' service tag and can fall back to the 'LoST' service tag | |||
also include a <redirect> element to redirect to a validation server. How | if this does not resolve to a usable LoST server.</t> | |||
ever, the <redirect> element contains an Application Unique String, so unl | <t>LoST <xref target="RFC5222" format="default"/> specifies that LoST | |||
ess the AUSs for validation and mapping are different (e.g., 'ecrf.example.org' | servers are located by resolving an AUS using U-NAPTR/DDDS (URI-Enabled | |||
and 'lvf.example.org'), we still need a different service tag to allow for flexi | NAPTR / Dynamic Delegation Discovery Service) <xref target="RFC4848" | |||
ble deployment choices (i.e., not requiring a DNS name convention).</t> | format="default"/> and defines the 'LoST' application service tag. In | |||
order to permit separability of the mapping and validation services | ||||
<t>LoST clients performing emergency services operations are expected to com | performed using LoST, this document defines the 'LoST-Validation' | |||
ply with the latest NENA i3 specification, and hence support the 'LoST-Validatio | service tag. This tag also reduces the likelihood that a client needing | |||
n' service tag when defined. A LoST client implemented prior to the addition of | location validation might reach servers that are not performing validation | |||
the 'LoST-Validation' tag would use the 'LoST' tag to resolve an AUS. Such a c | (due to | |||
lient might not be performing location validation, but if it is, the LoST server | configuration and/or conditions). NAPTR records for LoST servers availabl | |||
it contacts may perform the service. Even in a deployment where mapping and va | e for location validation contain the 'LoST-Validation' service tag. An entity | |||
lidation are split, the data is identical; the split is a load and deployment op | needing to perform location validation using LoST performs the discovery procedu | |||
timization strategy. The server designated for mapping is likely to perform val | re as described in <xref target="RFC5222" format="default"/>, except that the 'L | |||
idation when requested, potentially unless it is under load. If an older client | oST-Validation' service tag is used in preference to the 'LoST' service tag. Fo | |||
attempts validation using a designated mapping server that refuses the request, | r both service tags, the HTTP and HTTPS URL schemes are used. In the absence of | |||
the client will retry later, at which point the server may no longer be under l | any NAPTR records containing the 'LoST-Validation' service tag, the 'LoST' serv | |||
oad and may provide the function. Even in the (unlikely) case of a designated m | ice tag is used. Fallback to the 'LoST' service tag may follow if the 'LoST-Val | |||
apping server that refuses to perform validation at any time, the server could r | idation' service tag fails to result in a usable LoST server. The discovery pro | |||
eturn a redirect with a different AUS (e.g., "lvf.example.com") that resolves to | cedure with the 'LoST-Validation' service tag might result in the same URL as th | |||
a designated validation server. In the (unlikely) worst case, the client will | e 'LoST' service tag, or it may result in a different URL. When the URLs are di | |||
be unable to reach a server willing to perform validation, and will submit a dis | fferent, they could lead to the same physical servers or different servers.</t> | |||
crepancy report, as specified in NENA i3. The discrepancy report resolution wou | ||||
ld be to update the client with the 'LoST-Validation' service tag, update the AU | ||||
S returned in a redirect and DNS to use a different DNS host name, or permit the | ||||
server to perform validation when not under stress (or a combination). Note th | ||||
at, because LoST does not require servers to perform validation, the situation d | ||||
escribed can exist regardless of the addition of the 'LoST-Validation' service t | ||||
ag. The addition of the tag improves the likelihood of a client needing validat | ||||
ion being able to do so.</t> | ||||
</section> | </section> | |||
<section anchor="security" title="Security Considerations"> | <section anchor="back" numbered="true" toc="default"> | |||
<t>The security considerations described in <xref target="RFC3958"/>, <xre | <name>Backwards Compatibility</name> | |||
f target="RFC4848"/>, and <xref target="RFC5222"/> apply here. No additional se | <t>The primary use of LoST in general, and the location validation functio | |||
curity aspects are foreseen by the addition of an extra tag. Separation of serv | nality in particular, is within the emergency services area. Within North Ameri | |||
ices might be desired, for example, to be able to allocate different levels of r | ca, the NENA i3 <xref target="NENA-i3" format="default"/> document specifies how | |||
esources (such as server capacity, attack mitigation, bandwidth, etc.) to the ma | protocols including LoST are used. The i3 document is expected to reference th | |||
pping and validation services, in which case separate tags are needed to allow L | e 'LoST-Validation' service tag and specify its use in both server NAPTR DNS rec | |||
oST clients (which may include other LoST servers) to identify the correct serve | ords and client resolution of AUS.</t> | |||
r cluster.</t> | <t>LoST allows a server to refuse to perform location validation and | |||
<t><xref target="RFC5222"/> descriptively discusses the use of DNS Securit | defines the 'locationValidationUnavailable' warning. LoST also allows a | |||
y <xref target="RFC4033"/> to mitigate the risk of DNS-based attacks. Because D | server to refer to another server rather than answering itself. So, in a | |||
NS Security has become more widely deployed since the publication of <xref targe | deployment where a LoST tree has separate server clusters for mapping | |||
t="RFC5222"/>, such measures SHOULD be used when performing NAPTR resolution. N | and for validation, mapping servers receiving a request for validation | |||
ote that, while there are valid reasons to proceed with a LoST mapping query des | could either perform the validation as requested or return the | |||
pite security failures while initiating or processing an emergency call, these c | 'locationValidationUnavailable' warning and potentially also include a | |||
oncerns generally do not apply to a loST validation query done in advance of an | <redirect> element to redirect to a validation server. However, | |||
emergency call.</t> | the <redirect> element contains an AUS, so | |||
unless the AUSs for validation and mapping are different (e.g., | ||||
'ecrf.example.org' and 'lvf.example.org'), we still need a different | ||||
service tag to allow for flexible deployment choices (i.e., not | ||||
requiring a DNS name convention).</t> | ||||
<t>LoST clients performing emergency services operations in North | ||||
America are expected to | ||||
comply with the NENA i3 specification and hence support the | ||||
'LoST-Validation' service tag when defined. A LoST client implemented | ||||
prior to the addition of the 'LoST-Validation' tag would use the 'LoST' | ||||
tag to resolve an AUS. Such a client might not be performing location | ||||
validation, but if it is, the LoST server it contacts may perform the | ||||
service. Even in a deployment where mapping and validation are split, | ||||
the data is identical; the split is a load and deployment optimization | ||||
strategy. Servers designated for mapping might perform validation when | ||||
requested (potentially depending on load or other factors). If an older | ||||
client attempts validation using a designated mapping server that | ||||
refuses the request, the client will retry later, at which point the | ||||
server might provide the function (e.g., if its load or other conditions | ||||
have changed). Even | ||||
in the case of a designated mapping server that refuses to | ||||
perform validation at any time, the server could return a redirect with | ||||
a different AUS (e.g., "lvf.example.com") that resolves to a designated | ||||
validation server. In the worst case, the client will be | ||||
unable to reach a server willing to perform validation and will follow | ||||
up (e.g., submit a discrepancy report as specified in NENA i3). The | ||||
resolution may be to update the client with the 'LoST-Validation' | ||||
service tag, update the AUS returned in a redirect and DNS to use a | ||||
different DNS host name, or permit the server to perform validation when | ||||
not under stress (or a combination). Note that, because LoST does not | ||||
require servers to perform validation, the situation described can exist | ||||
regardless of the addition of the 'LoST-Validation' service tag. Use of | ||||
the tag improves the likelihood that a client is able to validate a | ||||
location when needed.</t> | ||||
</section> | </section> | |||
<section anchor="security" numbered="true" toc="default"> | ||||
<section anchor="iana" title="IANA Considerations"> | <name>Security Considerations</name> | |||
<t>The security considerations described in <xref target="RFC3958" | ||||
<t>IANA is requested to add 'LoST-Validation' to the S-NAPTR Application S | format="default"/>, <xref target="RFC4848" format="default"/>, and <xref | |||
ervice Tag registry created by <xref target="RFC3958"/> This tag serves as a co | target="RFC5222" format="default"/> apply here. No additional security | |||
unterpart to the 'LoST' tag added by <xref target="RFC5222"/>.</t> | aspects are foreseen by the addition of an extra tag. Separation of | |||
services might be desired, for example, to be able to allocate different l | ||||
<t>(Note that IANA and <xref target="RFC3958"/> call this registry "S-NAPT | evels of resources (such as server capacity, attack mitigation, bandwidth, etc.) | |||
R Application Service Tags" while <xref target="RFC5222"/> calls it "U-NAPTR app | to the mapping and validation services, in which case separate tags are needed | |||
lication service tag".)</t> | to allow LoST clients (which may include other LoST servers) to identify the cor | |||
rect server cluster.</t> | ||||
<section title="S-NAPTR Registration"> | <t><xref target="RFC5222" format="default"/> descriptively discusses the | |||
use of DNS security <xref target="RFC4033" format="default"/> to | ||||
<t>This document registers an S-NAPTR application service tag:</t> | mitigate the risk of DNS-based attacks. Because DNS security has become | |||
more widely deployed since the publication of <xref target="RFC5222" | ||||
<t> | format="default"/>, such measures <bcp14>SHOULD</bcp14> be used when | |||
<?rfc compact="yes" ?> | performing NAPTR resolution. Note that, while there are valid reasons | |||
<?rfc subcompact="no" ?> | to proceed with a LoST mapping query despite security failures while | |||
<list style="empty"> | initiating or processing an emergency call, these concerns generally do | |||
<t>Application Service Tag: LoST-Validation</t> | not apply to a LoST validation query done in advance of an emergency | |||
<t>Defining Publication: This document.</t> | call.</t> | |||
</list> | ||||
<?rfc compact="no" ?> | ||||
</t> | ||||
</section> <!-- title="S-NAPTR Registration" --> | ||||
</section> <!-- title="IANA Considerations" --> | ||||
<!-- <section title="Contributors"> | ||||
<t></t> | ||||
</section> --> | ||||
<section title="Acknowledgements"> | ||||
<t>Many thanks to Ted Hardie, Ben Campbell, Dan Banks, Pete Resnick, Shawn | ||||
Emery, Robert Wilton, Roman Danyliw, and Benjamin Kaduk for their helpful revie | ||||
ws and suggestions, and to Barry Leiba for shepherding the document.</t> | ||||
</section> | </section> | |||
<section anchor="iana" numbered="true" toc="default"> | ||||
<name>IANA Considerations</name> | ||||
<t>IANA has added 'LoST-Validation' to the "S-NAPTR Application Service | ||||
Tags" registry created by <xref target="RFC3958" format="default"/>. | ||||
This tag serves as a counterpart to the 'LoST' tag added by <xref | ||||
target="RFC5222" format="default"/>.</t> | ||||
<section title="Changes from Previous Versions"> | <t>(Note that IANA and <xref target="RFC3958" format="default"/> call this | |||
<?rfc compact="yes" ?> | registry "S-NAPTR Application Service Tags", while <xref target="RFC5222" forma | |||
<?rfc subcompact="yes" ?> | t="default"/> calls it "U-NAPTR application service tag".)</t> | |||
<section title="Changes from -00 to -01"> | <section numbered="true" toc="default"> | |||
<t> | <name>S-NAPTR Registration</name> | |||
<list style="symbols"> | <t>This document registers an S-NAPTR application service tag:</t> | |||
<t>Fixed incorrect tag in <xref target="iana"/></t> | <dl spacing="normal"> | |||
<t>Clarified background and explanation in <xref target="intro"/></t | <dt>Application Service Tag:</dt> <dd>LoST-Validation</dd> | |||
> | <dt>Defining Publication:</dt> <dd>This document</dd> | |||
<t>Clarified text in <xref target="LoST-Validation"/></t> | </dl> | |||
<t>Expanded text in <xref target="security"/></t> | ||||
</list> | ||||
</t> | ||||
</section> | ||||
<section title="Changes from -01 to -02"> | ||||
<t> | ||||
<list style="symbols"> | ||||
<t>Fixed bug in .xml file</t> | ||||
</list> | ||||
</t> | ||||
</section> | ||||
<section title="Changes from -02 to -03"> | ||||
<t> | ||||
<list style="symbols"> | ||||
<t>Reworded fallback text in <xref target="intro"/></t> | ||||
</list> | ||||
</t> | ||||
</section> | ||||
<section title="Changes from -03 to -04"> | ||||
<t> | ||||
<list style="symbols"> | ||||
<t>Fixed some references to <xref target="RFC4848"/> that should be | ||||
to <xref target="RFC5222"/> in sections <xref target="intro"/> and <xref target= | ||||
"LoST-Validation"/></t> | ||||
<t>Added clarifying text in Abstract</t> | ||||
<t>Copied text from Abstract to <xref target="scope"/></t> | ||||
<t>Added clarifying text in <xref target="intro"/></t> | ||||
</list> | ||||
</t> | ||||
</section> | ||||
<section title="Changes from -04 to -05"> | ||||
<t> | ||||
<list style="symbols"> | ||||
<t>Added reference to <xref target="RFC5222"/> in <xref target="secu | ||||
rity"/></t> | ||||
<t>Added clarifying text to <xref target="intro"/></t> | ||||
<t>Moved some text from <xref target="intro"/> to <xref target="LoST | ||||
-Validation"/></t> | ||||
<t>Added new section <xref target="back"/></t> | ||||
</list> | ||||
</t> | ||||
</section> | ||||
<section title="Changes from -05 to -06"> | ||||
<t> | ||||
<list style="symbols"> | ||||
<t>Changed intended status from Informational to Standards Track</t> | ||||
<t>Added indication that the document (if approved) updates RFC 5222 | ||||
</t> | ||||
<t>Added text to Abstract, Document Scope (<xref target="scope"/>), | ||||
and Introduction (<xref target="intro"/>) to better explain document purpose.</t | ||||
> | ||||
<t>Added Informational reference to <xref target="RFC5582"/></t> | ||||
<t>Minor wording improvements in multiple sections</t> | ||||
</list> | ||||
</t> | ||||
</section> | ||||
<section title="Changes from -06 to -07"> | ||||
<t> | ||||
<list style="symbols"> | ||||
<t>Minor editorial changes to Introduction (<xref target="intro"/>)< | ||||
/t> | ||||
</list> | ||||
</t> | ||||
</section> | ||||
<section title="Changes from -07 to -08"> | ||||
<t> | ||||
<list style="symbols"> | ||||
<t>Added text in Abstract and Document Scope (<xref target="scope"/> | ||||
) clarifying the updates to <xref target="RFC5582"/></t> | ||||
</list> | ||||
</t> | ||||
</section> | ||||
<section title="Changes from -08 to -09"> | ||||
<t> | ||||
<list style="symbols"> | ||||
<t>Added text in Security Considerations (<xref target="security"/>) | ||||
making the use of DNS Security <xref target="RFC4033"/> a SHOULD</t> | ||||
</list> | ||||
</t> | ||||
</section> | </section> | |||
<?rfc compact="no" ?> | ||||
<?rfc subcompact="no" ?> | ||||
</section> | </section> | |||
</middle> | </middle> | |||
<back> | <back> | |||
<references> | ||||
<name>References</name> | ||||
<references> | ||||
<name>Normative References</name> | ||||
<xi:include href="https://xml2rfc.ietf.org/public/rfc/bibxml/reference.R | ||||
FC.2119.xml"/> | ||||
<xi:include href="https://xml2rfc.ietf.org/public/rfc/bibxml/reference.R | ||||
FC.8174.xml"/> | ||||
<xi:include href="https://xml2rfc.ietf.org/public/rfc/bibxml/reference.R | ||||
FC.3958.xml"/> | ||||
<xi:include href="https://xml2rfc.ietf.org/public/rfc/bibxml/reference.R | ||||
FC.4033.xml"/> | ||||
<xi:include href="https://xml2rfc.ietf.org/public/rfc/bibxml/reference.R | ||||
FC.4848.xml"/> | ||||
<xi:include href="https://xml2rfc.ietf.org/public/rfc/bibxml/reference.R | ||||
FC.5222.xml"/> | ||||
</references> | ||||
<references> | ||||
<name>Informative References</name> | ||||
<references title="Normative References"> | <xi:include href="https://xml2rfc.ietf.org/public/rfc/bibxml/reference.R | |||
<!-- &RFC2119; --> | FC.5582.xml"/> | |||
&RFC3958; | <reference anchor="NENA-i3" target="https://www.nena.org/page/i3_Stage3" | |||
<?rfc include="reference.RFC.4033.xml"?> | > | |||
<?rfc include="reference.RFC.4848.xml"?> | <front> | |||
<?rfc include="reference.RFC.5222.xml"?> | ||||
</references> | ||||
<references title="Informative references"> | ||||
<?rfc include="reference.RFC.5582.xml"?> | ||||
<reference anchor="NENA-i3" | ||||
target="https://www.nena.org/page/i3_Stage3"> | ||||
<front> | ||||
<title>Detailed Functional and Interface Standards for the NENA i3 S olution</title> | <title>Detailed Functional and Interface Standards for the NENA i3 S olution</title> | |||
<author fullname="" initials="" surname="National Emergency Number A ssociation (NENA) Interconnection and Security Committee, i3 Architecture Workin g Group"/> | <author fullname="" initials="" surname="National Emergency Number A ssociation (NENA) Interconnection and Security Committee, i3 Architecture Workin g Group"/> | |||
<date year="2016"/> | <date year="2016"/> | |||
</front> | </front> | |||
</reference> | </reference> | |||
</references> | </references> | |||
</references> | ||||
<section numbered="false" toc="default"> | ||||
<name>Acknowledgements</name> | ||||
<t>Many thanks to <contact fullname="Ted Hardie"/>, <contact fullname="Ben | ||||
Campbell"/>, <contact fullname="Dan Banks"/>, <contact fullname="Pete Resnick"/ | ||||
>, <contact fullname="Shawn Emery"/>, <contact fullname="Robert Wilton"/>, <cont | ||||
act fullname="Roman Danyliw"/>, and <contact fullname="Benjamin Kaduk"/> for the | ||||
ir helpful reviews and suggestions and to <contact fullname="Barry Leiba"/> for | ||||
shepherding the document.</t> | ||||
</section> | ||||
</back> | </back> | |||
</rfc> | </rfc> | |||
End of changes. 25 change blocks. | ||||
364 lines changed or deleted | 268 lines changed or added | |||
This html diff was produced by rfcdiff 1.48. The latest version is available from http://tools.ietf.org/tools/rfcdiff/ |