[dns-privacy] Ben Campbell's No Objection on draft-ietf-dprive-dnsodtls-13: (with COMMENT)

["Ben Campbell" <[e-mail]>]

Ben Campbell has entered the following ballot position for
draft-ietf-dprive-dnsodtls-13: No Objection

When responding, please keep the subject line intact and reply to all
email addresses included in the To and CC lines. (Feel free to cut this
introductory paragraph, however.)


Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html
for more information about IESG DISCUSS and COMMENT positions.


The document, along with other ballot positions, can be found here:
https://datatracker.ietf.org/doc/draft-ietf-dprive-dnsodtls/



----------------------------------------------------------------------
COMMENT:
----------------------------------------------------------------------

Update: Looks like the address for Dan Wing needs to be updated.

-1: Is TCP head of line blocking considered a problem between the client
and cacheing resolver? Otherwise, between that and the potential to use
TCP fast open, the motivation for not just using TLS seems weak (which
may not be a problem for an experimental RFC.)

- 3.1: "DNS clients and servers MUST NOT use port 853 to transport
cleartext
   DNS messages. "
Am I correct to assume that this requirement is really about clients and
servers that do not implement this spec? While I see the point, how would
such a client or server even know about the restriction?