IETF Logo Mail Archive

Re: [Add] [EXTERNAL] Re: Firefox DoH behaviour

"Deen, Glenn (NBCUniversal)" <Glenn.Deen@nbcuni.com> Tue, 16 July 2019 18:56 UTC

Return-Path: <Glenn.Deen@nbcuni.com>
X-Original-To: add@ietfa.amsl.com
Delivered-To: add@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 091AB1200E0 for <add@ietfa.amsl.com>; Tue, 16 Jul 2019 11:56:36 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.598
X-Spam-Level:
X-Spam-Status: No, score=-2.598 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lujQ3ZX2JdfE for <add@ietfa.amsl.com>; Tue, 16 Jul 2019 11:56:33 -0700 (PDT)
Received: from mx0a-00176a04.pphosted.com (mx0b-00176a04.pphosted.com [67.231.157.49]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4B8B1120071 for <add@ietf.org>; Tue, 16 Jul 2019 11:56:33 -0700 (PDT)
Received: from pps.filterd (m0049465.ppops.net [127.0.0.1]) by mx0b-00176a04.pphosted.com (8.16.0.27/8.16.0.27) with SMTP id x6GIqsUp002058 for <add@ietf.org>; Tue, 16 Jul 2019 14:56:32 -0400
Received: from usushmgip002.mail.tfayd.com ([216.178.109.236]) by mx0b-00176a04.pphosted.com with ESMTP id 2tqajfehm4-1 (version=TLSv1.2 cipher=RC4-SHA bits=128 verify=NOT) for <add@ietf.org>; Tue, 16 Jul 2019 14:56:31 -0400
Received: from unknown (HELO potemwp00048.mail.tfayd.com) ([10.40.33.204]) by usushmgip002.mail.tfayd.com with ESMTP; 16 Jul 2019 11:56:30 -0700
Received: from potemwp00029.mail.tfayd.com (100.124.56.53) by potemwp00025.mail.tfayd.com (100.124.56.49) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.669.32; Tue, 16 Jul 2019 12:56:29 -0600
Received: from potemwp00029.mail.tfayd.com ([100.124.56.53]) by potemwp00029.mail.tfayd.com ([100.124.56.53]) with mapi id 15.01.0669.032; Tue, 16 Jul 2019 12:56:29 -0600
From: "Deen, Glenn (NBCUniversal)" <Glenn.Deen@nbcuni.com>
To: Eric Rescorla <ekr@rtfm.com>
CC: Jim Reid <jim@rfc1035.com>, "add@ietf.org" <add@ietf.org>
Thread-Topic: [EXTERNAL] Re: [Add] Firefox DoH behaviour
Thread-Index: AQHVO//NilnU2/FvgU2eegw5EZ0O4qbNmFqX
Date: Tue, 16 Jul 2019 18:56:29 +0000
Message-ID: <C587AEA7-E9EF-42D7-95D6-CAD416F1BF56@nbcuni.com>
References: <CAChr6SwEUz9MrdRA0bnv9f-oNi0oUHkfRKjd9-o6jwhuckLXdw@mail.gmail.com> <CAFWeb9LNdT=EYVKTsYDxcBCQKoQFNShKotYtWujt4U9GA-V1mg@mail.gmail.com> <CAFWeb9+eWKSKY9O2JLn9-0+Zq7hrD48F-y+Y4T-iRaaF0vtdOA@mail.gmail.com> <A45F4F74-D6C1-435A-A52F-C2DEA82E2999@sky.uk> <CAFWeb9JVBj+Yehup5q4v9X-7XDY+02frd-04AQGL2HoSLON2qA@mail.gmail.com> <CABcZeBMY9q9vKGse1svzbvXF_dSHA+9q06j4ugDVCZP9VT1koQ@mail.gmail.com> <CAChr6Sz5Rfz=UxOYuPguSvVK2HCX2ZoA1-FytW7+EOUxN8y46Q@mail.gmail.com> <CABcZeBNB7ASu2U3ZMBZ+OOxEhbSnhDXwFN3Lsex1uzVSDv3R=Q@mail.gmail.com> <c9c83673-c12e-0093-3873-0f2c03155fa5@brokendns.net> <CABcZeBP50XudcymGzTJP7XBZzBNw-SsVHFS07wJ++FxoHMHtNw@mail.gmail.com> <A1B73CC9-0A06-4D7D-8AF0-041AE5719B60@rfc1035.com>, <CABcZeBPo3Li6BTKzWiK+TCmQDOMs07rOTPuXUxiiofK5xgW8pw@mail.gmail.com>
In-Reply-To: <CABcZeBPo3Li6BTKzWiK+TCmQDOMs07rOTPuXUxiiofK5xgW8pw@mail.gmail.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-exclaimer-md-config: 47edc00f-f2d6-45ef-be83-8a353bd47e45
Content-Type: multipart/alternative; boundary="_000_C587AEA7E9EF42D795D6CAD416F1BF56nbcunicom_"
MIME-Version: 1.0
X-CFilter-Loop: Forward
X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:, , definitions=2019-07-16_04:, , signatures=0
X-Proofpoint-Spam-Details: rule=outbound_notspam policy=outbound score=0 priorityscore=1501 malwarescore=0 suspectscore=0 phishscore=0 bulkscore=0 spamscore=0 clxscore=1011 lowpriorityscore=0 mlxscore=0 impostorscore=0 mlxlogscore=999 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1810050000 definitions=main-1907160231
Archived-At: <https://mailarchive.ietf.org/arch/msg/add/mWoZVPuDDeiXuYYlSOwUPHKu3eU>
Subject: Re: [Add] [EXTERNAL] Re: Firefox DoH behaviour
X-BeenThere: add@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Applications Doing DNS <add.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/add>, <mailto:add-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/add/>
List-Post: <mailto:add@ietf.org>
List-Help: <mailto:add-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/add>, <mailto:add-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 16 Jul 2019 18:56:36 -0000

Hi

On Jul 16, 2019, at 1:56 PM, Eric Rescorla <ekr@rtfm.com<mailto:ekr@rtfm.com>> wrote:

Sorry, this was badly written. Here's an attempt to clarify:

if there is an enterprise policy that is set and it configures or enables DoH, then when we will respect that. If there is an enterprise policy set and it says nothing about DoH, then our plan is to disable DoH on the theory that with high probability the enterprise would want DoH off.

When I refer to enterprise policy I mean: https://support.mozilla.org/en-US/products/firefox-enterprise/policies-customization-enterprise/policies-overview-enterprise

Just so I understand, this looks like it only applies to enterprise managed desktops, or to PCs enrolled in a managed AD environment.

Is there a general means for the enterprise to communicate it's policy for any Firefox instance that runs in its network?

-Glenn

v2.23.0 | Report a Bug | By Email