Re: [Add] New Version Notification for draft-pauly-add-resolver-discovery-01.txt

[Stephane Bortzmeyer <[e-mail]>]

On Mon, Jul 27, 2020 at 07:51:04PM -0400,
 Ted Lemon <[e-mail]> wrote 
 a message of 234 lines which said:

> This sounds like you are just asking for the equivalent of an HTTP
> 451 response.

And it exists, in draft-ietf-dnsop-extended-error.

4.16.  Extended DNS Error Code 15 - Blocked

   The server is unable to respond to the request because the domain is
   blacklisted due to an internal security policy imposed by the
   operator of the server resolving or forwarding the query.

4.17.  Extended DNS Error Code 16 - Censored

   The server is unable to respond to the request because the domain is
   blacklisted due to an external requirement imposed by an entity other
   than the operator of the server resolving or forwarding the query.
   Note that how the imposed policy is applied is irrelevant (in-band
   DNS filtering, court order, etc).

4.18.  Extended DNS Error Code 17 - Filtered

   The server is unable to respond to the request because the domain is
   blacklisted as requested by the client.  Functionally, this amounts
   to "you requested that we filter domains like this one."

4.19.  Extended DNS Error Code 18 - Prohibited

   An authoritative server or recursive resolver that receives a query
   from an "unauthorized" client can annotate its REFUSED message with
   this code.  Examples of "unauthorized" clients are recursive queries
   from IP addresses outside the network, blacklisted IP addresses,
   local policy, etc.