Re: [Add] What to do in this potential working group

[Vittorio Bertola <[e-mail]>]

> Il 20 agosto 2019 22:01 Jari Arkko <[e-mail]> ha scritto:
> 
> I’ve been on vacation and doing some other things for the last couple of weeks, and now I’ve been trying to read the mailing list discussions. Not easy!

I am also trying to clear the backlog - still 300+ messages left (though almost half of them seem to come from a single person).

> In any case, to start with the parts that we possibly do agree on, there is at least a beginning of a list of work items. For instance:
> 
> * Improved mechanisms for discovery and selection of encrypted DNS transports
> * Best operational practices for running an encrypted DNS transport service (possibly subdivided for the type of deployment, e.g., ISP or global service)
> * Recommendation for precedence of configuration mechanisms
> * Recommendation that having devices or apps “call home” for every user action to a centralised global service is bad practice and should be avoided

I still think that having an agreed write-up of the issues and/or of the use cases, even without any recommendation on how to deal with them, could also be useful. This was the main subject of the original three drafts presented in Prague.

This said, the elephant in the room is the use of DNS as a control surface. The IETF as a community disagrees on whether this should exist or not, but as Patrik pointed out, many sovereign countries have already decided that a control surface has to exist, and the industry is required to provide it (or go to jail). There are also plenty of cases in which end-users themselves ask the industry to provide similar control features to them.

A clear and final agreement on whether the IETF is ever going to work on providing such a control surface in a standard way (either DNS-based or in some other way that is at least as effective as DNS filtering is today), or whether the part of the industry that is required to provide it should work on it somewhere else, would IMHO make the rest of the discussion much more focused.

-- 
 
Vittorio Bertola | Head of Policy & Innovation, Open-Xchange
[e-mail] 
Office @ Via Treviso 12, 10144 Torino, Italy