IETF Logo Mail Archive

Re: [Add] fixing coffee shop brokenness with DoH

Ted Lemon <mellon@fugue.com> Wed, 24 July 2019 14:39 UTC

Return-Path: <mellon@fugue.com>
X-Original-To: add@ietfa.amsl.com
Delivered-To: add@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AA100120235 for <add@ietfa.amsl.com>; Wed, 24 Jul 2019 07:39:25 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.898
X-Spam-Level:
X-Spam-Status: No, score=-1.898 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=fugue-com.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id OrLXtIXEy-Dh for <add@ietfa.amsl.com>; Wed, 24 Jul 2019 07:39:23 -0700 (PDT)
Received: from mail-qt1-x82e.google.com (mail-qt1-x82e.google.com [IPv6:2607:f8b0:4864:20::82e]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 98B36120345 for <add@ietf.org>; Wed, 24 Jul 2019 07:39:23 -0700 (PDT)
Received: by mail-qt1-x82e.google.com with SMTP id y26so45703735qto.4 for <add@ietf.org>; Wed, 24 Jul 2019 07:39:23 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=fugue-com.20150623.gappssmtp.com; s=20150623; h=from:message-id:mime-version:subject:date:in-reply-to:cc:to :references; bh=GFTJKd2y5J8Toka1atA+Bax+ROyCdDUSvwjWI643LAo=; b=AYg05sw6/EXMj+to+mELudiQIX2fz9CL7+44sAJzS3Huruk4zsKNT2k+Td8TXBcvEU 4uUyf8d7q9kg9nGJyY9kvt9WKLsQgikxl5xWnrKeNJMxHDI77J0gpC6MlroZ2xXQlO82 wtVGXy2yZK15xkHwW9Uya9XUUOQHk8qq4C2lEnXncheqpCqEtHceEX3LGqqV6+EH5NgE PSEWBZaPeiiI49WUzyKkkULLBoOXEYrtzThhfFWNmAozc+Cw4hA2iYu3Rhk5ZB9Arwwm phoRB0O5y+t25bx7zcmY+szhF4vK0nffWlJH1XA66ZYH/fPujqnwey2l+orWBnrJvsfj GGkg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:message-id:mime-version:subject:date :in-reply-to:cc:to:references; bh=GFTJKd2y5J8Toka1atA+Bax+ROyCdDUSvwjWI643LAo=; b=ifpnHedBGZtlqFRXr6mybrcW5WANrBw9xyVm6LRUrKriyZcHQVnYqRTW9+rNlZlUvD iUzwrjDXASG7yya9SeCW1S9xcvEPxpnWc5DuVhy6DA4UkyMKS9ybshmrWdzPhpZpKhro /aBlv9yUDbKH0n382uiZXLTfHgLWIYz3pp5c+RlrMMLmMUijEICyuYZwnF6+JypMoVoZ rUJN0rBeI9fXuJD2ug4APwh0HCu2rDcxyLoEeGzZS93bhNmzIIAc6xyPTD4rmanUPQVp SMwDPUA8c8hd1GQMOg5phO4fq2Mf0FHZhkFvt27wmfFe/jydccFqQ8gumKagPo5hmPnE SkfQ==
X-Gm-Message-State: APjAAAU5WLGzizhxxRANt9FvHto0NkKzMwbYTOjTF8tE+Qmh1qoBo3cq SLCULHmrq971USEHp/VhT3zheA==
X-Google-Smtp-Source: APXvYqxmD8A7nfbsH4ngKadCfksn9BKhyA8FHGm5StTUDMrb2sXuyeUW9Xth3nh+5cauzG5hXlmj4w==
X-Received: by 2002:a0c:efc1:: with SMTP id a1mr59652903qvt.137.1563979162766; Wed, 24 Jul 2019 07:39:22 -0700 (PDT)
Received: from ?IPv6:2001:67c:370:128:b954:d2fe:7e59:68aa? ([2001:67c:370:128:b954:d2fe:7e59:68aa]) by smtp.gmail.com with ESMTPSA id d9sm20797279qke.136.2019.07.24.07.39.22 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Wed, 24 Jul 2019 07:39:22 -0700 (PDT)
From: Ted Lemon <mellon@fugue.com>
Message-Id: <F8A56D5D-B05E-4E80-880C-60D6B550F107@fugue.com>
Content-Type: multipart/alternative; boundary="Apple-Mail=_68DAD93D-2EDF-4DAE-A36C-857671A7CD08"
Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.11\))
Date: Wed, 24 Jul 2019 10:39:20 -0400
In-Reply-To: <CABcZeBP2MY3pjeZv4Q+1Kj3_GKOgVq8+OYe7im2gYvBzy=Mz7g@mail.gmail.com>
Cc: Jim Reid <jim@rfc1035.com>, "add@ietf.org" <add@ietf.org>, Rob Sayre <sayrer@gmail.com>
To: Eric Rescorla <ekr@rtfm.com>
References: <CAChr6Sx9TEt6CMzRRrdb-HwT_k987oW=4yF1FCbDF17zkaE2Vg@mail.gmail.com> <2D09D61DDFA73D4C884805CC7865E6114E23910C@GAALPA1MSGUSRBF.ITServices.sbc.com> <14DF8769-A817-4C06-9140-80198518244F@akamai.com> <CAChr6SzH1EycAr5n+dK5BQcG=0Zsw66qE=8Rptvq7SEoEvQQ=Q@mail.gmail.com> <E5A0DAE2-A718-41EA-B490-58ABD0F31CF2@rfc1035.com> <CABcZeBMqvZivS_Hk_2mSOAOnM+mHy1mtcwnHVFc14v_jdkgU=Q@mail.gmail.com> <4DE9B8B1-36D5-4EB5-BE84-D61C182F7372@fugue.com> <CABcZeBN+4RGWN0+xhtb-bMtSJ1B0FAU4JjRJTOSd1x_9JJZBWg@mail.gmail.com> <D361E72B-3783-4E57-8F08-8B418639BB29@fugue.com> <CABcZeBP2MY3pjeZv4Q+1Kj3_GKOgVq8+OYe7im2gYvBzy=Mz7g@mail.gmail.com>
X-Mailer: Apple Mail (2.3445.104.11)
Archived-At: <https://mailarchive.ietf.org/arch/msg/add/y3LvOkuzm0-yXzmk0kv9nPSQBWY>
Subject: Re: [Add] fixing coffee shop brokenness with DoH
X-BeenThere: add@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Applications Doing DNS <add.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/add>, <mailto:add-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/add/>
List-Post: <mailto:add@ietf.org>
List-Help: <mailto:add-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/add>, <mailto:add-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 24 Jul 2019 14:39:26 -0000

On Jul 24, 2019, at 10:37 AM, Eric Rescorla <ekr@rtfm.com> wrote:
> Yes. But that need not be cryptographically verifiable because the client really has no option but to abandon the connection at this point, even if it is suspicious of the DNSSEC status.

I think you reasoned a few steps faster than I am able to here, Eric.   Can you walk us through this step by step?

v2.23.0 | Report a Bug | By Email