[dns-privacy] DNS Privacy requirements and PRIVATE-DNS

[Phillip Hallam-Baker <[e-mail]>]

I have a first cut of a use cases and requirements draft. It also
contains a description of my proposed solution.

http://www.ietf.org/id/draft-hallambaker-dnse-00.txt

I have not gone through and audited the proposal against the
requirements but I am pretty sure it meets them all.

The key is the division of the problem between the service connection
service and the query hosts. If we divide up the problem that way so
that the two are independent services that can be implemented
separately if desired, I have enough flexibility to meet pretty much
any set of requirements people want to throw at it. And none of the
consequences show through the query host part.


So looking at the way this might deploy on a service like
dnsbycomodo.com, the dns publication constellation does not need to be
affected very much. All I need to do is to rack up some Service
Connection hosts that can handle the new work. I have to deploy the
new message encapsulation format for the query hosts but that just
means doing a few simple symmetric crypto steps on each request. I
don't think its going to affect the server load at all.

-- 
Website: http://hallambaker.com/