Re: [Add] [EXTERNAL] Re: New Version Notification for draft-reddy-add-enterprise-split-dns-01.txt

[Paul Wouters <[e-mail]>]

On Mar 12, 2021, at 20:08, Stephen Farrell <[e-mail]> wrote:
> 
> 
>> On 12/03/2021 21:24, Tommy Jensen wrote:
>> Summary, my personal dead horse: if we do want networks to be able to
>> communicate policy to a client in a way that can be differentiated
>> from an attacker, it should be more general than DNS and it should be
>> not in ADD.
> FWIW, I think the above is correct. That said, we have some
> serious obstacles in the way of figuring out how to do that.

Agreed. And this was clear when discussing the charter.

> For example, I don't think we even know the potential set of
> possible policies for when there's a "smart speaker" and a
> house-guest involved, never mind how to possibly represent,
> secure and process those in some electronic format.

One feature of Apple that is great is the ability for phones to communicate if you are in each other’s address book. It is used to share the wifi password when my friends visit when they try to join the network.

It would be great if something like that is standardized and with options for the network owner to give out access to specific devices like TV, security cameras, etc.

Making special rules for DNS doesn’t seem to address the issues of real users. I suspect we are reaching the point soon where we don’t really want to join random networks for just internet access - we would only do it to reach certain devices otherwise not reachable.

Paul