Re: [Add] Fwd: New Version Notification for draft-reddy-add-delegated-credentials-03.txt

[tirumal reddy <[e-mail]>]

On Sat, 9 Dec 2023 at 03:03, Ben Schwartz <[e-mail]> wrote:

> The normative content of this specification (i.e. the SVCB parameter)
> looks good to me (although I wish for a better name than "tlsdelegation",
> perhaps "tls-dc" or "delegated-credentials").
>

"tls-dc" sounds good to me.


> Editorially, I think some improvements will be needed.  This SVCB
> parameter is generally applicable to any TLS-based protocol (not just in
> the context of DNS), but the draft is largely an argument for why this is a
> good idea in the DNS home CPE context.  It seems to me that this is
> backward: the document should present a technical element, and then an
> example of how it can be used.  Lengthy discussion about why it's useful
> might be more appropriate on the mailing list than in RFC text.
>

The detailed description was added to convince the WG members about
the necessity of the proposal, it can be removed from the document or moved
to Appendix after the draft is adopted.

-Tiru


>
> --Ben Schwartz
> ------------------------------
> *From:* Add <[e-mail]> on behalf of tirumal reddy <
> [e-mail]>
> *Sent:* Monday, December 4, 2023 12:30 AM
> *To:* ADD Mailing list <[e-mail]>
> *Subject:* [Add] Fwd: New Version Notification for
> draft-reddy-add-delegated-credentials-03.txt
>
> This revision of the draft https: //datatracker. ietf.
> org/doc/html/draft-reddy-add-delegated-credentials has been updated to
> address comments during the presentation at IETF-118. -Tiru ----------
> Forwarded message --------- From: <internet-drafts@ ietf. org>Date:
> ZjQcmQRYFpfptBannerStart
> This Message Is From an External Sender
>
> ZjQcmQRYFpfptBannerEnd
> This revision of the draft
> https://datatracker.ietf.org/doc/html/draft-reddy-add-delegated-credentials
> has been updated to address comments during the presentation at IETF-118.
>
> -Tiru
>
> ---------- Forwarded message ---------
> From: <[e-mail]>
> Date: Fri, 1 Dec 2023 at 18:23
> Subject: New Version Notification for
> draft-reddy-add-delegated-credentials-03.txt
> To: Tirumaleswar Reddy.K <[e-mail]>, Dan Wing <
> [e-mail]>, Mohamed Boucadair <[e-mail]>,
> Shashank Jain <[e-mail]>, Shashank Jain <
> [e-mail]>
>
>
> A new version of Internet-Draft
> draft-reddy-add-delegated-credentials-03.txt
> has been successfully submitted by Tirumaleswar Reddy and posted to the
> IETF repository.
>
> Name:     draft-reddy-add-delegated-credentials
> Revision: 03
> Title:    Delegated Credentials to Host Encrypted DNS Forwarders on CPEs
> Date:     2023-12-01
> Group:    Individual Submission
> Pages:    15
> URL:
> https://www.ietf.org/archive/id/draft-reddy-add-delegated-credentials-03.txt
> Status:
> https://datatracker.ietf.org/doc/draft-reddy-add-delegated-credentials/
> HTMLized:
> https://datatracker.ietf.org/doc/html/draft-reddy-add-delegated-credentials
> Diff:
> https://author-tools.ietf.org/iddiff?url2=draft-reddy-add-delegated-credentials-03
>
> Abstract:
>
>    An encrypted DNS server is authenticated by a certificate signed by a
>    Certificate Authority (CA).  However, for typical encrypted DNS
>    server deployments on Customer Premise Equipment (CPEs), the
>    signature cannot be obtained or requires excessive interactions with
>    a Certificate Authority.
>
>    This document explores the use of TLS delegated credentials for a DNS
>    server deployed on a CPE.  This approach is meant to ease operating
>    DNS forwarders in CPEs while allowing to make use of encrypted DNS
>    capabilities.
>
>
>
> The IETF Secretariat
>
>
>