Re: [Add] [EXTERNAL] Re: draft-grover-add-policy-detection-00

"Dixon, Hugh" <Hugh.Dixon@sky.uk> Tue, 16 July 2019 15:26 UTC

Return-Path: <Hugh.Dixon@sky.uk>
X-Original-To: add@ietfa.amsl.com
Delivered-To: add@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CA767120155 for <add@ietfa.amsl.com>; Tue, 16 Jul 2019 08:26:56 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.9
X-Spam-Level:
X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, HTTPS_HTTP_MISMATCH=0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=sky.uk
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id T7CT-LnlFexj for <add@ietfa.amsl.com>; Tue, 16 Jul 2019 08:26:53 -0700 (PDT)
Received: from EUR04-DB3-obe.outbound.protection.outlook.com (mail-eopbgr60088.outbound.protection.outlook.com [40.107.6.88]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 85968120154 for <add@ietf.org>; Tue, 16 Jul 2019 08:26:53 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=hanayEwzYr4hAkOV7kq0nCUgaS23owx1WaidRpPCThNxn2qh0N0prTEag+/xlMeLoKFyj1LLnNfMAhevg0I2OXUV1S2ebBktBR5DbDI5sHbCR2o7oacsrQRLmNiCmnsmQQpR9DLSotjdxW2jMaIo2tn9YjxKZ2gLWx5JXGkTG8/PHNZLQDee0s6PjKI5sdTEcYmNHCJQOnVEVcnJxnT9NyhBaIoZQ9WntmdquB5d3WByfGvhdcfY9tA1n3ggqVc5uXrzGjp8nUBP1Tv6J6cg3U1O7hLXvKAWYZEDdzGn0gSp1MThjtJV5YL2zxDoR+dEE6cgILP82A7uHBTJiyR68A==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=1XpTn8IG8BKUnk/vM/KdUt5VP+Iu60FQ4f0eQeEvkk8=; b=VBgljmAkoslCKx6gDoXFDZZAR7d0/6suxudzDGbE8gLVg4iVBrdnEXefIFJ/4JFSutCzkiFu8M3iZT0XMwGF6+XUxLNvX5cmxNBs6p7JrSfhIEwGyc4Wo6F1H2zp9RyL5gfz7Kb1HNdy34UhFvSA+zn8kyYIvTBGQalTSfo4+WA6mtmTycsSI2UGWN4MEyyGrZXzzUi5D+sI55sWLC4kqn9OWIuB50yrLZ4XJ/U8ftpveZrXL3OBtRaSZgBXk3GUuRLzkQhU5nELxCvhnoZGRIBSHEBtgHIva8KvirtRkb0M/f3q7Iq7x8oTfKj+EaV7pbiepXX70AOYBhC4WzQQDA==
ARC-Authentication-Results: i=1; mx.microsoft.com 1;spf=pass smtp.mailfrom=sky.uk;dmarc=pass action=none header.from=sky.uk;dkim=pass header.d=sky.uk;arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sky.uk; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=1XpTn8IG8BKUnk/vM/KdUt5VP+Iu60FQ4f0eQeEvkk8=; b=CWhOu+FX2auNPvzwadeG3pM88t6ygkr7TFUzm5Bd5tjQm6QQAi/+Jy8gJgMFkgEFhR5UZwvPo2BbBS4/2Lza+6j6e2ETCyUd6eDTU4d4VDH0n6K89yNnGHmJi0Kk57AzPUU1rhXq7O54AIooeg/MlhRJMxBX1x+6LXe5/tR6zFg=
Received: from DB6PR0602MB2805.eurprd06.prod.outlook.com (10.172.248.15) by DB6PR0602MB2792.eurprd06.prod.outlook.com (10.172.247.18) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2073.10; Tue, 16 Jul 2019 15:26:51 +0000
Received: from DB6PR0602MB2805.eurprd06.prod.outlook.com ([fe80::251a:5b99:bf14:1921]) by DB6PR0602MB2805.eurprd06.prod.outlook.com ([fe80::251a:5b99:bf14:1921%5]) with mapi id 15.20.2073.012; Tue, 16 Jul 2019 15:26:51 +0000
From: "Dixon, Hugh" <Hugh.Dixon@sky.uk>
To: "add@ietf.org" <add@ietf.org>
Thread-Topic: [Add] [EXTERNAL] Re: draft-grover-add-policy-detection-00
Thread-Index: AQHVO+HZi3y9aV95fEOFKTOmNKVStKbNXTUAgAARkoA=
Date: Tue, 16 Jul 2019 15:26:51 +0000
Message-ID: <D4D5BD8E-4BCE-4571-9A59-C139406C079D@sky.uk>
References: <CAChr6SwEUz9MrdRA0bnv9f-oNi0oUHkfRKjd9-o6jwhuckLXdw@mail.gmail.com> <CAFWeb9LNdT=EYVKTsYDxcBCQKoQFNShKotYtWujt4U9GA-V1mg@mail.gmail.com> <CAFWeb9+eWKSKY9O2JLn9-0+Zq7hrD48F-y+Y4T-iRaaF0vtdOA@mail.gmail.com> <A45F4F74-D6C1-435A-A52F-C2DEA82E2999@sky.uk> <CAFWeb9JVBj+Yehup5q4v9X-7XDY+02frd-04AQGL2HoSLON2qA@mail.gmail.com> <CABcZeBMY9q9vKGse1svzbvXF_dSHA+9q06j4ugDVCZP9VT1koQ@mail.gmail.com> <CAChr6Sz5Rfz=UxOYuPguSvVK2HCX2ZoA1-FytW7+EOUxN8y46Q@mail.gmail.com>
In-Reply-To: <CAChr6Sz5Rfz=UxOYuPguSvVK2HCX2ZoA1-FytW7+EOUxN8y46Q@mail.gmail.com>
Accept-Language: en-GB, en-US
Content-Language: en-GB
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
user-agent: Microsoft-MacOutlook/10.1b.0.190708
authentication-results: spf=none (sender IP is ) smtp.mailfrom=Hugh.Dixon@sky.uk;
x-originating-ip: [90.216.150.239]
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: b3114d66-e3fd-4407-7c0f-08d70a0206ad
x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600148)(711020)(4605104)(1401327)(2017052603328)(7193020); SRVR:DB6PR0602MB2792;
x-ms-traffictypediagnostic: DB6PR0602MB2792:
x-ms-exchange-purlcount: 2
x-microsoft-antispam-prvs: <DB6PR0602MB279287346946F76A3625879FE3CE0@DB6PR0602MB2792.eurprd06.prod.outlook.com>
x-ms-oob-tlc-oobclassifiers: OLM:7219;
x-forefront-prvs: 0100732B76
x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(4636009)(376002)(346002)(396003)(39860400002)(136003)(366004)(199004)(189003)(66946007)(66556008)(91956017)(76116006)(66476007)(236005)(102836004)(66446008)(2906002)(64756008)(81156014)(256004)(5024004)(229853002)(58126008)(53546011)(8676002)(1730700003)(81166006)(68736007)(14444005)(33656002)(2351001)(26005)(5640700003)(2501003)(54896002)(25786009)(6306002)(6512007)(6436002)(36756003)(6486002)(966005)(5660300002)(186003)(14454004)(6116002)(3846002)(6506007)(76176011)(6916009)(53936002)(606006)(7736002)(66574012)(8936002)(478600001)(86362001)(11346002)(66066001)(476003)(446003)(6246003)(486006)(71190400001)(71200400001)(316002)(2616005)(99286004); DIR:OUT; SFP:1101; SCL:1; SRVR:DB6PR0602MB2792; H:DB6PR0602MB2805.eurprd06.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:0; MX:1;
received-spf: None (protection.outlook.com: sky.uk does not designate permitted sender hosts)
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam-message-info: a5cRMkFC30zwXubGTVaW5agr2GW87QwtQ9r+hTqyqRVd5ZmIptSesV/FrNggSB15rOo+UJtqHuYK8cDQYAmgDv44Rx/d/J6y/29LitQPhsOcDCmk/1DbuYmd5KZ+NXiG6HKcFGfGsWh7qc+fKCDnOp5iG2G6vy0Wf41QarQ1jx3ZfBVBtO2lgqFohZZjqNUN5L1GvyMAJJUTnuCYREYJmOSUfRjRj96c483ZCgyej0k5x2LbY3UaIPQJbdFFv+BAzBKORh+x4lPcMDZLJqsghJYBqQBhims1vTgf46XN+RCcng/FKwgJXbDti8cPW8gy26+dC5h6Zh7EpaSaH+9RBJEu9oEPMjAL6r9UxDs38NTbdTNS733YsdWN8CLh/2AgyUjuYL+BY39bD1F/nAwtpIrNR3W0tzJE+toYWfg+Jyk=
Content-Type: multipart/alternative; boundary="_000_D4D5BD8E4BCE45719A59C139406C079Dskyuk_"
MIME-Version: 1.0
X-OriginatorOrg: sky.uk
X-MS-Exchange-CrossTenant-Network-Message-Id: b3114d66-e3fd-4407-7c0f-08d70a0206ad
X-MS-Exchange-CrossTenant-originalarrivaltime: 16 Jul 2019 15:26:51.3729 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 68b865d5-cf18-4b2b-82a4-a4eddb9c5237
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: hugh.dixon@sky.uk
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DB6PR0602MB2792
Archived-At: <https://mailarchive.ietf.org/arch/msg/add/JEacpc5EKgVedEdjEjg4v8_xzps>
Subject: Re: [Add] [EXTERNAL] Re: draft-grover-add-policy-detection-00
X-BeenThere: add@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Applications Doing DNS <add.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/add>, <mailto:add-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/add/>
List-Post: <mailto:add@ietf.org>
List-Help: <mailto:add-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/add>, <mailto:add-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 16 Jul 2019 15:26:57 -0000

“usually” is a distinctly statistical term.  Do you have any data ?


On Tue, Jul 16, 2019 at 7:22 AM Eric Rescorla <ekr@rtfm.com<mailto:ekr@rtfm.com>> wrote:
Hi Alec,

This is a good question.

As I alluded to in my response to Robert Sayre, DoH has a difficult
deployment problem. Specifically, whether we like it or not, there are
some environments in which DNS filtering is in place and the user
wants it that way (parental [0] or anti-malware filtering are good
examples of this).

Parental controls and malware detection are usually done on the device.

https://www.apple.com/newsroom/2019/04/the-facts-about-parental-control-apps/<https://eur01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.apple.com%2Fnewsroom%2F2019%2F04%2Fthe-facts-about-parental-control-apps%2F&data=02%7C01%7CHugh.Dixon%40sky.uk%7C3de4c155bbd6433210b308d70a01a74c%7C68b865d5cf184b2b82a4a4eddb9c5237%7C0%7C0%7C636988874526692307&sdata=eQOV2bY5YeT%2Frhcox%2FcfmcJq8i1UyjXQlZg7GHTU%2FJ0%3D&reserved=0>
https://blog.google/products/chrome/cleaner-safer-web-chrome-cleanup/<https://eur01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fblog.google%2Fproducts%2Fchrome%2Fcleaner-safer-web-chrome-cleanup%2F&data=02%7C01%7CHugh.Dixon%40sky.uk%7C3de4c155bbd6433210b308d70a01a74c%7C68b865d5cf184b2b82a4a4eddb9c5237%7C0%7C0%7C636988874526692307&sdata=%2FpcZybWQN%2BhtlAJAvDok%2F8rHvsQy6Nw0oHKf6Y9ajfY%3D&reserved=0>


In any case, hopefully this clarifies the situation.

It does not.

thanks,
Rob


Information in this email including any attachments may be privileged, confidential and is intended exclusively for the addressee. The views expressed may not be official policy, but the personal views of the originator. If you have received it in error, please notify the sender by return e-mail and delete it from your system. You should not reproduce, distribute, store, retransmit, use or disclose its contents to anyone. Please note we reserve the right to monitor all e-mail communication through our internal and external networks. SKY and the SKY marks are trademarks of Sky Limited and Sky International AG and are used under licence.

Sky UK Limited (Registration No. 2906991), Sky-In-Home Service Limited (Registration No. 2067075), Sky Subscribers Services Limited (Registration No. 2340150) and Sky CP Limited (Registration No. 9513259) are direct or indirect subsidiaries of Sky Limited (Registration No. 2247735). All of the companies mentioned in this paragraph are incorporated in England and Wales and share the same registered office at Grant Way, Isleworth, Middlesex TW7 5QD