[dns-privacy] draft-hoffman-dns-tls-stub-01 posted

Paul Hoffman <paul.hoffman@vpnc.org> Wed, 20 August 2014 19:16 UTC

Return-Path: <paul.hoffman@vpnc.org>
X-Original-To: dns-privacy@ietfa.amsl.com
Delivered-To: dns-privacy@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9594A1A701E for <dns-privacy@ietfa.amsl.com>; Wed, 20 Aug 2014 12:16:22 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.647
X-Spam-Level:
X-Spam-Status: No, score=-3.647 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HELO_MISMATCH_COM=0.553, RCVD_IN_DNSWL_MED=-2.3] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qEKmTMYoKgwJ for <dns-privacy@ietfa.amsl.com>; Wed, 20 Aug 2014 12:16:20 -0700 (PDT)
Received: from proper.com (Hoffman.Proper.COM [207.182.41.81]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BABFF1A070C for <dns-privacy@ietf.org>; Wed, 20 Aug 2014 12:16:20 -0700 (PDT)
Received: from [10.20.30.90] (50-0-66-181.dsl.dynamic.sonic.net [50.0.66.181]) (authenticated bits=0) by proper.com (8.14.9/8.14.7) with ESMTP id s7KJGIHm015604 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=NO) for <dns-privacy@ietf.org>; Wed, 20 Aug 2014 12:16:20 -0700 (MST) (envelope-from paul.hoffman@vpnc.org)
X-Authentication-Warning: proper.com: Host 50-0-66-181.dsl.dynamic.sonic.net [50.0.66.181] claimed to be [10.20.30.90]
Content-Type: text/plain; charset="us-ascii"
Mime-Version: 1.0 (Mac OS X Mail 7.3 \(1878.6\))
From: Paul Hoffman <paul.hoffman@vpnc.org>
In-Reply-To: <01352FDA-D216-4BC6-B451-B4834A361F65@vpnc.org>
Date: Wed, 20 Aug 2014 12:16:18 -0700
Content-Transfer-Encoding: quoted-printable
Message-Id: <4C1491FF-9A54-42F8-956F-45E31D22941D@vpnc.org>
References: <20140818175701.12317.96810.idtracker@ietfa.amsl.com> <FF99C324-2959-48EB-A187-18007F7AA364@vpnc.org> <CAJE_bqeoUx2gFsnVgZYfoWASkHaMgKW4tR552YRmQ4ZNzH1M=g@mail.gmail.com> <361D96E3-CD31-4E2B-88E3-46E44D6F8C3D@vpnc.org> <alpine.LFD.2.10.1408191650420.22835@bofh.nohats.ca> <EFBD7F1F-EB4B-4EC4-BE08-C7C92EC471FF@vpnc.org> <CAFggDF2tdiUzGmEi9u68mubR6F+Lp7U4dy0N6R7PQVAQ_nNw=g@mail.gmail.com> <A22A1BAF-5B70-4574-AF92-B777FF5F89E9@vpnc.org> <CAFggDF0McW3JD9+mzSc2wpkorvkyR-v-GCn-FyhWUH9PcnCdMw@mail.gmail.com> <01352FDA-D216-4BC6-B451-B4834A361F65@vpnc.org>
To: dns-privacy@ietf.org
X-Mailer: Apple Mail (2.1878.6)
Archived-At: http://mailarchive.ietf.org/arch/msg/dns-privacy/5UsQVahnfxEmXtwLYa4zuT6INWU
Subject: [dns-privacy] draft-hoffman-dns-tls-stub-01 posted
X-BeenThere: dns-privacy@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: <dns-privacy.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dns-privacy>, <mailto:dns-privacy-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dns-privacy/>
List-Post: <mailto:dns-privacy@ietf.org>
List-Help: <mailto:dns-privacy-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dns-privacy>, <mailto:dns-privacy-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 20 Aug 2014 19:16:22 -0000

Thanks for the comments so far, clearly there is more to come. Even if this group doesn't go for this design, I think the discussion will be useful to most of the designs we have seen so far.

--Paul Hoffman

A new version of I-D, draft-hoffman-dns-tls-stub-01.txt
has been successfully submitted by Paul Hoffman and posted to the
IETF repository.

Name:		draft-hoffman-dns-tls-stub
Revision:	01
Title:		Using TLS for Privacy Between DNS Stub and Recursive Resolvers
Document date:	2014-08-20
Group:		Individual Submission
Pages:		7
URL:            http://www.ietf.org/internet-drafts/draft-hoffman-dns-tls-stub-01.txt
Status:         https://datatracker.ietf.org/doc/draft-hoffman-dns-tls-stub/
Htmlized:       http://tools.ietf.org/html/draft-hoffman-dns-tls-stub-01
Diff:           http://www.ietf.org/rfcdiff?url2=draft-hoffman-dns-tls-stub-01

Abstract:
  DNS queries and responses can contain information that reveals
  important information about the person who caused the queries, and it
  would be better if eavesdroppers were unable to see DNS traffic.
  This document describes how to use TLS for encrypting DNS traffic
  between a system acting as a DNS stub resolver and a system acting as
  a DNS recursive resolver.