Re: [Add] I-D Action: draft-btw-add-home-00.txt

Ian Maddison <ian@mad.paris> Tue, 10 March 2020 11:08 UTC

Return-Path: <ian@mad.paris>
X-Original-To: add@ietfa.amsl.com
Delivered-To: add@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 392973A10A8 for <add@ietfa.amsl.com>; Tue, 10 Mar 2020 04:08:38 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.097
X-Spam-Level:
X-Spam-Status: No, score=-2.097 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=mad.paris header.b=ryoVfTmO; dkim=pass (2048-bit key) header.d=messagingengine.com header.b=lwmSWpP4
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id F4lj2ELojFCl for <add@ietfa.amsl.com>; Tue, 10 Mar 2020 04:08:36 -0700 (PDT)
Received: from out1-smtp.messagingengine.com (out1-smtp.messagingengine.com [66.111.4.25]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E7BBB3A10A7 for <add@ietf.org>; Tue, 10 Mar 2020 04:08:35 -0700 (PDT)
Received: from compute7.internal (compute7.nyi.internal [10.202.2.47]) by mailout.nyi.internal (Postfix) with ESMTP id E207021D88; Tue, 10 Mar 2020 07:08:33 -0400 (EDT)
Received: from imap26 ([10.202.2.76]) by compute7.internal (MEProxy); Tue, 10 Mar 2020 07:08:33 -0400
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mad.paris; h= mime-version:message-id:in-reply-to:references:date:from:to :subject:content-type; s=fm2; bh=ZIHnubSbXvjb/LPkkj4qja/BAdvLNv9 V6ebN56bMwMs=; b=ryoVfTmOTdmTKuUwKAR9xDd2AQ4LpgkKWDPjg5t7Jxs8h8U KgPtAsZp1tsCm3ygMIb4e7D/JZw8/h7eLYG9ZeVCxX3HPV0mQxbzj5JJc2Dy6EK+ mBZ7CfzfGIWDxwX2qoQihyMUjE4LRqoqEUKTMSs73+RIDP/bBGvZXrwWdOM/wpGK QAMpU0n1ja1k4SkpdaGZRDVVmxMdinjplV/Ajgptt1d/KlQ5KAB2RWtOohwbFySW nohVzYh/zm4Cux8+g+tODmOLlaDcGUlybgYnrv3AMZfZJedXWw25JrBYk0ob569q CBCySXXyaBwEwxwkMXOQgNB2TBCjPtaO2Rw91Pw==
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=content-type:date:from:in-reply-to :message-id:mime-version:references:subject:to:x-me-proxy :x-me-proxy:x-me-sender:x-me-sender:x-sasl-enc; s=fm2; bh=ZIHnub SbXvjb/LPkkj4qja/BAdvLNv9V6ebN56bMwMs=; b=lwmSWpP4G4dibEgcc1IJhE LUI1RS/Vm23DJG+ogfvxcju3rF9lAQLfEhqxa2JGosiM+5hyQDvJapq7OGDUk+Tx 0LnlcNqDhWxlILVRi8SSRe9Q5HXt15Kli6+OF9ZxUJkQ6DjHaj+bNP8niRzwlaNj kNAcJu9usnKe3zUS7dsihIdY9nmjKq7gLsgIuFlHn9yJ/VAevQGzC9lQxtzOVpV7 QrxcQmOO1h+54Gwgc2Rmuyt6GLaNqlJsjQNXNXw4UW8pnxVbZ6gNcdAGCGsyACMp ehSNJESdqQUJiKkxkDlS14dj7y+S9Occ1wWzCA2APTCcOz6wIY+sbvTo9CV57nMw ==
X-ME-Sender: <xms:MXVnXljaRyyWaqQAU7JjzEqxHGr2UjkHeYmCj3d3geO9YPzcER_C3A>
X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgedugedruddvtddgvdegucetufdoteggodetrfdotf fvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdfqfgfvpdfurfetoffkrfgpnffqhgen uceurghilhhouhhtmecufedttdenucenucfjughrpefofgggkfgjfhffhffvufgtsegrtd erreerredtnecuhfhrohhmpedfkfgrnhcuofgrugguihhsohhnfdcuoehirghnsehmrggu rdhprghrihhsqeenucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmhepmhgrihhlfh hrohhmpehirghnsehmrggurdhprghrihhs
X-ME-Proxy: <xmx:MXVnXtQPYTbcg7QkUVjEe4K7YWgGBGOOtT62Xya2Wv--IXa5bjTZeg> <xmx:MXVnXui4xrMFiKdvkHfVkQ165ej3m7NfdfewFxLKjdvaiHtQZCMy9A> <xmx:MXVnXl6m_iVHR8YiEzTZ_zcYctllEWOOHW0gR1oK1UGLD0uNdz4GSw> <xmx:MXVnXti-XO1mZTM1dbw11T9M76M7ralz6brdBKQzTuLq0xx578yg3A>
Received: by mailuser.nyi.internal (Postfix, from userid 501) id 4065514200A2; Tue, 10 Mar 2020 07:08:33 -0400 (EDT)
X-Mailer: MessagingEngine.com Webmail Interface
User-Agent: Cyrus-JMAP/3.1.7-991-g5a577d3-fmstable-20200305v3
Mime-Version: 1.0
Message-Id: <0cd22a55-305f-42ec-a152-64bb5b9910a2@www.fastmail.com>
In-Reply-To: <1659773937.38028.1583835522817@appsuite-gw2.open-xchange.com>
References: <158330934617.29404.4287578882183435520@ietfa.amsl.com> <787AE7BB302AE849A7480A190F8B93303145E6CC@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <MW2PR00MB0410F2E1D3575DD07752082AFAE30@MW2PR00MB0410.namprd00.prod.outlook.com> <787AE7BB302AE849A7480A190F8B933031463FFC@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <1659773937.38028.1583835522817@appsuite-gw2.open-xchange.com>
Date: Tue, 10 Mar 2020 12:08:12 +0100
From: Ian Maddison <ian@mad.paris>
To: Vittorio Bertola <vittorio.bertola=40open-xchange.com@dmarc.ietf.org>, ADD Mailing list <add@ietf.org>
Content-Type: multipart/alternative; boundary="4ef5f64115e449d78ce1da143f8f7395"
Archived-At: <https://mailarchive.ietf.org/arch/msg/add/1MRvPnPzm3gd7EXcctKeRqnqhVE>
Subject: Re: [Add] I-D Action: draft-btw-add-home-00.txt
X-BeenThere: add@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Applications Doing DNS <add.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/add>, <mailto:add-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/add/>
List-Post: <mailto:add@ietf.org>
List-Help: <mailto:add-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/add>, <mailto:add-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 10 Mar 2020 11:08:38 -0000

Hi Vittorio,

On Tue, 10 Mar 2020, at 11:18, Vittorio Bertola wrote:
> 
> On the other hand, if the consent is tied to the degree of channel security that is offered, then indeed the switch of channel might affect the user's desire to consent. Still, if we can assume that DoT/DoH towards the same operator always offers more security than Do53, and that the user has already consented to Do53, then we can also assume that the user will be happy with DoT/DoH as well. 

That sounds fine until you consider the probable DNS performance degradation of DoT/DoH compared to Do53. Perhaps users prefer to give prior consent to anything that affects their performance. Apologies if this isn't currently in scope, but nonetheless I feel it would be wise to also consider DNS performance aspects here.