-
Notifications
You must be signed in to change notification settings - Fork 3
Naming convention changes #13
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: main
Are you sure you want to change the base?
Conversation
Why? |
We don't want to have a separate namespace from DNS, so this is a step in that direction. We also have code for ndncert (which we'll merge once it's finished) that can use x509 certs as proof of name possession (DNS names in this case). |
|
Understood. Yeah, we've been talking about that (not having a separate namespace) for quite some time. Still, I don't see how (to make an example) |
|
It's a bit confusing what's the right thing to do here is. The name hierarchy should reflect some administrative / ownership hierarchy. DNS covers some aspects of this but not necessarily. For example, IMO a better naming scheme might be something like There are some engineering decisions to make here. But I feel like flattening name of a site down to a single machine is not the right thing to do. Perhaps we need to more clearly define what a "site" on the testbed is. |
There definitely is a hierarchy. In your example, Educause manages the
What do you mean by "control"? We're talking about names here, so that's the extent of "control" that is relevant to this discussion IMHO. I'm guessing you're talking about more than that? |
Yes, that's why
If the name has a structure, the structure needs to be meaningful, i.e. reflect some real-world semantics. Translating |
On emails, the CAs will give an option for the
/<ca-prefix>/<raw email>name. For example, the emailuser@sub.domain.tldfor a CA with prefix/ndn/ca-prefixwill be given the option to request the name/ndn/ca-prefix/user@sub.domain.tld.As a side note, the
@will convert into%40in the encoding, so it's a bit less human readable/typable.Sites now have the name
/ndn/<DNS name>