Re: [dns-privacy] Last Call: <draft-ietf-dprive-rfc7626-bis-03.txt> (DNS Privacy Considerations) to Informational RFC

[S Moonesamy <[e-mail]>]

Dear Sara,
At 05:15 AM 23-01-2020, Sara Dickinson wrote:
> > Section 3.2 discusses what a user does and use a DNS query 
> related to email as an example.  Is the MUA expected to validated 
> the MX RR or is it the role of the MSA?
>
>I think questions of validation are out of scope for this draft.

Apologies for not explaining this correctly.  The draft is described 
as a document about the use of DNS.  Section 3.2 has the following: 
"It gives information about what the user does ("What are the MX 
records of example.net?" means he probably wants to send email to 
someone at example.net ..."  My question was about that DNS 
query.  Could you or the WG Chairs please explain why the question 
which I asked is out of scope for this draft?

>Looking back, this text was introduced into the original I-D before 
>RFC7624 was published and wasn't updated. Suggest:
>
>OLD: The IAB privacy and security program also have a work in 
>progress [RFC7624] that considers such inference-based attacks in a 
>more general framework.
>
>OLD: The IAB privacy and security program has also produced 
>[RFC7624] that considers such inference-based attacks in a more 
>general framework."

I gather that you meant "NEW" for the second part.  I am okay with that text.

>The text says "to our knowledge"; no DPRIVE or IETF review comment 
>to date (or errata to RFC7626) has contradicted this statement so I 
>think it is a fair representation of the community knowledge on this 
>matter. If you are aware of such a law please suggest text.

I asked whether there was a study.  According to the above, it is 
what the DPRIVE Working Group believes even though there wasn't any 
study.  I would like to thank you for the response as it addresses my question.

Regards,
S. Moonesamy