Re: [Add] Updated charter proposal for ADD

[Neil Cook <[e-mail]>]

I support this proposed charter with the exception of the following language:

> Any mechanisms that specify interactions between clients and
> servers must provide the security properties expected of IETF
> protocols, e.g., confidentiality protection, integrity protection,
> and authentication with strong work factor.

I agree with Stephen Farrell's comments on the other thread on this topic, namely:

> On 14 Jan 2020, at 23:23, Stephen Farrell <[e-mail]> wrote:

> I do think there's value in opportunistic approaches so
> long as there's some kind of credible longer term story
> as to how we get to better than opportunistic. I read
> your charter text as strongly discouraging that.
Neil

> On 14 Jan 2020, at 22:38, Tommy Pauly <tpauly=[e-mail]> wrote:
> 
> Hi all,
> 
> I wanted to share an updated proposal for an ADD charter, based on the feedback and discussion on the list in the past several weeks.
> 
> This is based on the original proposal that was sent in December, taking into account various comments and suggestions. Glenn Deen, Andrew Campling, and I worked on this revision together and came to consensus on its contents.
> 
> Thoughts and comments are welcome as always!
> 
> (Note that the proposed name of the group was not changed, and is entirely open to bikeshedding. Naming is hard!)
> 
> Best,
> Tommy
> 
> 
> 
> Adaptive DNS Discovery (ADD)
> ====================================
> Proposed Working Group Charter
> 
> Sending DNS messages over encrypted transports, as defined in DNS over
> TLS (DoT) [RFC 7858] and DNS over HTTPS (DoH) [RFC 8484], provides
> benefits to the security and privacy of DNS data. Clients, such as
> applications and host operating systems, have started adopting these
> protocols to provide these user benefits.
> 
> This working group will focus on discovery and selection of DNS resolvers
> by DNS clients in a variety of networking environments, including public
> networks, private networks, and VPNs; supporting both encrypted and
> unencrypted resolvers.
> 
> Clients adopting encrypted DNS protocols need to determine which DNS
> servers support encrypted transports, and which server to use for specific
> queries if multiple servers are available. These decisions can vary based
> on the network environment, and also based on the content and purpose of
> the client queries.
> 
> Network operators that start offering DNS encryption on their servers also
> need a way to indicate this support to clients. Communicating information
> about resolver configuration and behavior allows clients to make more
> informed decisions about which DNS servers to use. For example, a resolver
> may be able to resolve private or local names as a split DNS server.
> 
> The Adaptive DNS Discovery (ADD) working group will work on the following
> deliverables:
> 
> - define a mechanism that allows clients to discover DNS resolvers,
> including encrypted DNS servers, that are available to the client
> either on the public Internet or on private or local networks;
> 
> - define a mechanism that allows communication of DNS resolver
> information to clients for use in selection decisions;
> 
> - develop an informational document that describes how client
> applications and systems can manage selection of DNS resolvers
> in various network environments and use cases.
> 
> Any mechanisms that specify interactions between clients and
> servers must provide the security properties expected of IETF
> protocols, e.g., confidentiality protection, integrity protection,
> and authentication with strong work factor.
> 
> This working group will coordinate with dnsop, doh, and dprive for any
> changes required in DNS protocols. It will also work with capport to
> ensure that solutions are applicable to captive networks.
> 
> -- 
> Add mailing list
> [e-mail]
> https://www.ietf.org/mailman/listinfo/add


Neil Cook
[e-mail]

-------------------------------------------------------------------------------------
Open-Xchange AG, Rollnerstr. 14, 90408 Nuremberg, District Court Nuremberg HRB 24738
Managing Board: Rafael Laguna de la Vera, Carsten Dirks, Michael Knapstein, Stephan Martin 
Chairman of the Board: Richard Seibt

European Office: 
Open-Xchange GmbH, Olper Huette 5f, D-57462 Olpe, Germany, District Court Siegen, HRB 8718 
Managing Director: Frank Hoberg

US Office: 
Open-Xchange. Inc., 530 Lytton Avenue, Palo Alto, CA 94301, USA 
-------------------------------------------------------------------------------------