Re: [Add] [Ext] Mozilla's DoH resolver policy

Brian Dickson <brian.peter.dickson@gmail.com> Fri, 12 April 2019 00:24 UTC

Return-Path: <brian.peter.dickson@gmail.com>
X-Original-To: add@ietfa.amsl.com
Delivered-To: add@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A60C81200F9 for <add@ietfa.amsl.com>; Thu, 11 Apr 2019 17:24:37 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.998
X-Spam-Level:
X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id USE_XoBB3tqs for <add@ietfa.amsl.com>; Thu, 11 Apr 2019 17:24:35 -0700 (PDT)
Received: from mail-qk1-x729.google.com (mail-qk1-x729.google.com [IPv6:2607:f8b0:4864:20::729]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5075412007C for <add@ietf.org>; Thu, 11 Apr 2019 17:24:35 -0700 (PDT)
Received: by mail-qk1-x729.google.com with SMTP id k130so4663921qke.3 for <add@ietf.org>; Thu, 11 Apr 2019 17:24:35 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=fJwINI/OdbKIAuiZJjB8hA2yN5gLwqcAGwoOs9YlL0g=; b=Bzw9sun81ZCQ+Z/O5dTtHNbXITZgL3YYLoIvVNxo2ImFajHuFgAtEzDu2eX5r02Dfp Gun7R3sXsh/mh79CC++mSJUyllcHvO3F8DA0MwjipGy8wbnALef8eKszmkgDxzcZzS5j 703An3SSGB06jtWS7VlPHjpes8igyh+TnHrsB2g7bBP4Bh9VjU5ECqS/Bk9dMZcmhQPS ddzmXfUXAUww4i5ArEyMABFWxgUPFIPvhgrrGWoz0qQuGH6x/PJHJb6WBKNqbcQMbteC 4lxyE681RdLmGKuKsVt/RsMHjiix1xPMM6GYshD2cYiO8eHeIpy5j5byGeu1yPBNAFq4 y9oQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=fJwINI/OdbKIAuiZJjB8hA2yN5gLwqcAGwoOs9YlL0g=; b=ZwBAZ4NEADZ1lhwFC1bLntU5vU4tJw+8DPVS+licCOcEi015oAQiYLV2HZ6Hy/VlmE Ci4hN8+TN3gQ0gChmejkUvoWgtvHW+dNuowarsgTmNhumNYvhGVjtrN6GVSFG+4lhchr kB71t+2B/lZ1HRVXwacE4gm8MxUT6aCBvhdx8RZsuzGl67bQm3xxluyGu1r2IESU+7Y+ V6FXKu43YKbNvKtDl/3GBIHhEweQZGAr05yQapkTCBh49bDD1Ryhyh1rXX2OsO91Y1Hy YLuOzMK+dRO28QcHmyhZ/O3syXuymFizwBIDC3rspA7I8OyVH5ZQTNiD60LRal1SLexc Hb5A==
X-Gm-Message-State: APjAAAV8nwTjUaj3jGPgD16vfxHxFvFlTanw14SmWM+VvdO7qep/S4yJ 2U++VZcvD7KlMS1lnCLzfGCHPlL7SXlFJ6f4Juk=
X-Google-Smtp-Source: APXvYqw2r+2GxjODDP8oapWxWP6PmKITyBHRkXzySXVebuYZsaiowU9knBZzVowGJcnlKrfkZyzccJXin8mYHAat6+k=
X-Received: by 2002:a37:dd8:: with SMTP id 207mr41772421qkn.278.1555028674366; Thu, 11 Apr 2019 17:24:34 -0700 (PDT)
MIME-Version: 1.0
References: <297C80CE-F017-4F4A-80E2-79941E8B9E02@icann.org> <b64761dc-dfab-e4e1-4bfb-82d607efa590@riseup.net> <alpine.LRH.2.21.1904101324530.9940@bofh.nohats.ca> <64aeff58-6d68-4c4f-b991-2b2f62d193a0@www.fastmail.com> <90A5C5C4-373C-4B39-80C2-C115CD23CB4D@fl1ger.de> <CACQYfiJa1i2LVgQDcHi_OknmDDKZiaw=++Y6imn34LcPULP3bQ@mail.gmail.com> <E0CA1520-74D4-4A41-9B44-10946FAB4534@fl1ger.de> <CACQYfiKeh=FgmB9RN=eJ-2tq4jyTg55fep4au9SeGe3U5VkMBQ@mail.gmail.com> <ED802588-CD5D-4F80-914D-CA25EE234424@fl1ger.de> <alpine.DEB.2.20.1904111144200.31156@tvnag.unkk.fr> <792D4346-DE43-4BFC-85D4-FC58366E38B5@fl1ger.de> <945967b1-581f-e603-49f1-b9f173decb39@nic.cz> <6c11589f-fb00-e15d-9c16-a22368351c50@mozilla.com> <1A4EBCEB-4779-4407-90D5-D1733E0BB9F8@icann.org> <5bb4970e-376d-44e8-95cc-0040bc2eac4d@nostrum.com>
In-Reply-To: <5bb4970e-376d-44e8-95cc-0040bc2eac4d@nostrum.com>
From: Brian Dickson <brian.peter.dickson@gmail.com>
Date: Thu, 11 Apr 2019 17:24:23 -0700
Message-ID: <CAH1iCipE7e_zoAZew6HNGaC8k6sgK2vnmmvtcK+m4cDVpL2Fwg@mail.gmail.com>
To: Adam Roach <adam@nostrum.com>
Cc: Paul Hoffman <paul.hoffman@icann.org>, Peter Saint-Andre <stpeter@mozilla.com>, "add@ietf.org" <add@ietf.org>
Content-Type: multipart/alternative; boundary="000000000000c04fe105864a5356"
Archived-At: <https://mailarchive.ietf.org/arch/msg/add/8aTNEBF0wHUULNvPYhXGZjNaX0o>
Subject: Re: [Add] [Ext] Mozilla's DoH resolver policy
X-BeenThere: add@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Applications Doing DNS <add.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/add>, <mailto:add-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/add/>
List-Post: <mailto:add@ietf.org>
List-Help: <mailto:add-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/add>, <mailto:add-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 12 Apr 2019 00:24:38 -0000

On Thu, Apr 11, 2019 at 1:51 PM Adam Roach <adam@nostrum.com> wrote:

> On 4/11/19 3:34 PM, Paul Hoffman wrote:
> > On Apr 11, 2019, at 8:46 AM, Peter Saint-Andre <stpeter@mozilla.com>
> wrote:
> >>> If Firefox is to be taken mainly as a real-life example on this
> >>> mailing-list, is there a suitable Firefox-specific place to discuss
> >>> related issues?
> >> The Networking:DNS component is the one to watch:
> >>
> >>
> https://bugzilla.mozilla.org/buglist.cgi?product=Core&component=Networking%3A%20DNS&bug_status=__open__&list_id=14662850
> >>
> >> We don't (yet) have a discussion list for "Firefox Doing DNS".
> >>
> >>> (Assuming Mozilla is actually interested in that.)
> >> Feedback is always welcome. :-)
> > Do you mean "feedback on the ADD list" or "feeback in the Bugzilla
> tracker" or both?
> >
> > --Paul Hoffman
>
>
> I think we'd like to prevent the "Applications Doing DNS" list from
> becoming just the "Mozilla Doing DNS" list. To the extent that you'd
> like to engage with a broader slice of Mozilla than just those of us who
> participate in the IETF, I'd encourage you to take Mozilla-specific
> concerns to the mailing lists I pointed to earlier.
>

Hmm...

I disagree on multiple distinct fronts.
One is "Note Well", whereby all the IETF protections/restrictions are
applied to IETF-hosted mailing lists and all other IETF activities. I
believe there is benefit in keeping this discussion here.

The second is, even if some of these appear to be Mozilla issues, those are
mostly because they're visible (not sure if "first" applies, but it could
as well).

Whatever surfaces here, is valuable to capture here, as a way of helping
inform anyone else that tries to do similar stuff (whether in a browser, or
in any other app) in future.
At a minimum, being able to search this mailing list is probably very
helpful.

The third issue is that whatever is done, might well be appropriate to
"standardize", at least in the sense of establishing expectations for how
any given vendor should do whatever is being done.

Ideally, the outcome could be actual interoperability between apps and some
common "substrate", whether it is implemented as an API, a protocol (if we
can consider "loopback" as qualifying for "on-the-wire" treatment), or a
configuration file or set of files.

Note that DNS itself standardized on the "master file format" for zones,
even though that was one specific implementation of not-on-the-wire data
(plus some metadata?). So, from the DNS perspective, it has significant
precedence which is maintained, including on such things as "presentation
format" (which often is a 1:1 mapping for "master file format").

Brian