Subject: [BEHAVE] [Errata Rejected] RFC7050 (5152)

From: RFC Errata System <[email-masked]>
Date: Wed, 13 Jan 2021 07:21:10 -0800 (PST)

The following errata report has been rejected for RFC7050,
"Discovery of the IPv6 Prefix Used for IPv6 Address Synthesis".

--------------------------------------
You may review the report below and at:
https://www.rfc-editor.org/errata/eid5152

--------------------------------------
Status: Rejected
Type: Technical

Reported by: Mark Andrews <[email-masked]>
Date Reported: 2017-10-11
Rejected by: Magnus Westerlund (IESG)

Section: IANA Conside

Original Text
-------------
N/A 

Corrected Text
--------------
8.x DNSSEC

    ipv4only.arpa MUST be insecurely delegated.  This allows ISP's to
    modify / generate AAAA responses for ipv4only.arpa AAAA queries that
    will pass through unmodified caching servers as required by 8.1 (4).

Notes
-----
The protocol as described does not work when there is a validating caching server in the resolution path.  

IANA should have been instructed to insecurely delegate ipv4only.arpa.  This allows ISP's to modify the
AAAA response without running foul of DNSSEC  validation.
 --VERIFIER NOTES-- 
So this errata was correct on the issue, but errata was not the appropriate way of resolving this issue. RFC 8880 that updates RFC 7050 specifies a resolution to this errata. 

--------------------------------------
RFC7050 (draft-ietf-behave-nat64-discovery-heuristic-17)
--------------------------------------
Title               : Discovery of the IPv6 Prefix Used for IPv6 Address Synthesis
Publication Date    : November 2013
Author(s)           : T. Savolainen, J. Korhonen, D. Wing
Category            : PROPOSED STANDARD
Source              : Behavior Engineering for Hindrance Avoidance
Area                : Transport
Stream              : IETF
Verifying Party     : IESG