Re: [Add] Fwd: New Version Notification for draft-mglt-abcd-doh-privacy-analysis-00.txt

Hi Stephen,

Thank you for the feed back and taking the time to read the draft.

To answer to your question, the purpose of this draft is to provide an
analysis of the privacy impact of the deployment of DoH. In that sense it
addresses two of your concerns -- "this is yet another one-sided
description of the issues."--, that is:
* 1) clarification of (potential) issues - and the context in which there
may be issues.
* 2) misleading communications

It seems, at least to me, two valid reasons for having the analysis as an
internet draft.

Regarding your comment, as the author whose english is not his native
language, I can guarantee there is no intention of carrying a pejorative
meaning nor that the document being one sided. For instance, the term
"threat" was used as in a similar way as in RFC6973 [1].

"""
   Although recipients, intermediaries, and enablers may not generally
   be considered as attackers, they may all pose privacy threats
   (depending on the context) because they are able to observe, collect,
   process, and transfer privacy-relevant data.
"""
The cambridge dictionnary [2] provides for threat "A threat of rain is in
today’s forecast." and I do not see any intention of being pejorative as
well.

Comments regarding the content of the draft are more than welcome as usual!

Yours,
Daniel

[1] https://tools.ietf.org/html/rfc6973#section-5.1.1
[2] https://dictionary.cambridge.org/dictionary/english/threat?q=threat+

On Wed, Nov 6, 2019 at 9:20 AM Stephen Farrell <stephen.farrell@cs.tcd.ie>
wrote:

>
> Hi Daniel,
>
> On 05/11/2019 20:40, Daniel Migault wrote:
> > Please find an analysis on DoH and privacy. The intent is to provide an
> > analysis. Any feed backs are welcome!
>
> My feedback:
>
> - I don't see how this adds to the discussion. ISTM this
> is yet another one-sided description of the issues. What do
> you think is the added benefit of having this text in an
> Internet-draft? Honestly, I don't get it.
>
> - In particular, I don't think your "conclusion" that "the
> overall picture of concentration shows that it represents
> a threat to the end user's privacy" can be justified based
> on the content. I'm assuming "represents a threat" is not
> just weasel-wording for "might be" which is trivially
> true. If you mean anything stronger than "might be" then
> that's not justified IMO and if you mean "might be" or
> anything weaker, then it looks like stretching to find
> a pejorative way to describe things.
>
> Cheers,
> S.
>
> PS: In saying the above, I do think there are dangers in
> how DoH deployments might increase centralisation. But I
> also think that one-sided descriptions of those dangers
> make the conversations more, and not less, difficult.
>
> >
> > Yours,
> > Daniel
> > ---------- Forwarded message ---------
> > From: <internet-drafts@ietf.org>
> > Date: Mon, Nov 4, 2019 at 11:20 AM
> > Subject: New Version Notification for
> > draft-mglt-abcd-doh-privacy-analysis-00.txt
> > To: Daniel Migault <mglt.ietf@gmail.com>
> >
> >
> >
> > A new version of I-D, draft-mglt-abcd-doh-privacy-analysis-00.txt
> > has been successfully submitted by Daniel Migault and posted to the
> > IETF repository.
> >
> > Name:           draft-mglt-abcd-doh-privacy-analysis
> > Revision:       00
> > Title:          A privacy analysis on DoH deployment
> > Document date:  2019-11-04
> > Group:          Individual Submission
> > Pages:          11
> > URL:
> >
> https://www.ietf.org/internet-drafts/draft-mglt-abcd-doh-privacy-analysis-00.txt
> > Status:
> > https://datatracker.ietf.org/doc/draft-mglt-abcd-doh-privacy-analysis/
> > Htmlized:
> > https://tools.ietf.org/html/draft-mglt-abcd-doh-privacy-analysis-00
> > Htmlized:
> >
> https://datatracker.ietf.org/doc/html/draft-mglt-abcd-doh-privacy-analysis
> >
> >
> > Abstract:
> >    This document provides an analysis on DoH impact on privacy
> >
> >
> >
> >
> > Please note that it may take a couple of minutes from the time of
> submission
> > until the htmlized version and diff are available at tools.ietf.org.
> >
> > The IETF Secretariat
> >
> >
> --
> Add mailing list
> Add@ietf.org
> https://www.ietf.org/mailman/listinfo/add
>