IETF Logo Mail Archive

[dns-privacy] Fwd: I-D Action: draft-ietf-dprive-dns-over-tls-08.txt

Allison Mankin <allison.mankin@gmail.com> Wed, 16 March 2016 05:07 UTC

Return-Path: <allison.mankin@gmail.com>
X-Original-To: dns-privacy@ietfa.amsl.com
Delivered-To: dns-privacy@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C688912DF89 for <dns-privacy@ietfa.amsl.com>; Tue, 15 Mar 2016 22:07:15 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.699
X-Spam-Level:
X-Spam-Status: No, score=-2.699 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GU6E-afkSVuq for <dns-privacy@ietfa.amsl.com>; Tue, 15 Mar 2016 22:07:14 -0700 (PDT)
Received: from mail-ob0-x22d.google.com (mail-ob0-x22d.google.com [IPv6:2607:f8b0:4003:c01::22d]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D46D812DF83 for <dns-privacy@ietf.org>; Tue, 15 Mar 2016 22:07:13 -0700 (PDT)
Received: by mail-ob0-x22d.google.com with SMTP id ts10so40172182obc.1 for <dns-privacy@ietf.org>; Tue, 15 Mar 2016 22:07:13 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to; bh=p7hOMG9jPED8GYthhjGqsUlb0SMYDthkbN7cVdR95UQ=; b=U2c9nYLbpclcbi8OYUVeomenDQF0yep+Wu9wPjznAit6fTDMjMppAMhe2ydKo9YMVF ktL5Z8hnYk9MuuA2NAAjCXc3K/xDRwmiqPiscT9KSW/8srj07A+4QhnUdD669R5PgB+O VjAVEWnt6ZeeZhaPiwdvGsNE7tGiyslPeiZlSGpIaHgE0k84B+P0n1NbAIgk3GZAT4xy ZnF/i7qDRdcZgQXvQ34xVjy3nk0nw2eGxG4B6T0l9hOOBX4hyQtto3n/UnAeGRHSPt0m FksTSftBh36e9cl7RB/pFH8oj/YGKNpb9mm5osPJAPgzjK76dYqrJsFIATADBJX6S+MF UA3w==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:date :message-id:subject:from:to; bh=p7hOMG9jPED8GYthhjGqsUlb0SMYDthkbN7cVdR95UQ=; b=O9LxT1IhwJwsO85nrm0/EgH/fMYPGv2yTgWjKSEIrn/2UrlxkWS86C0YLTqLTkT7B5 0iyk7liopThHhtC0yc0RFuK1WW2k3YDJ82cmVHy7qZBxl3UytB+d9+9ptz59/hVOSkLe 5ElA1xjXjwwK5yCMX0yqu2BdbqlUUO0casVNrrSBJBi4Qf1YciWN0L3VmStAtSLrqQS1 qQuVXYr/aqIUghxKf+Rvi+X+KvqcwyYNTlAoiui5tLVA2Nqxgy94CAuzTiOxvpuetmdz l7dP1I7gS2QGrgUHXyaznfiLGUT0dyaerJjthOG20Z3rKtlsLH1ovk2eFP6idLJ2vPd2 XbqQ==
X-Gm-Message-State: AD7BkJLnyoim9aYCo2+j9HJ9mIWQIDIxSLp/3g5/PQnZ8yILjjTv8NBb7ds5bDDa2U/os+SL7HQMRajNqvOYWw==
MIME-Version: 1.0
X-Received: by 10.182.252.65 with SMTP id zq1mr1146912obc.46.1458104833258; Tue, 15 Mar 2016 22:07:13 -0700 (PDT)
Received: by 10.202.182.193 with HTTP; Tue, 15 Mar 2016 22:07:13 -0700 (PDT)
Received: by 10.202.182.193 with HTTP; Tue, 15 Mar 2016 22:07:13 -0700 (PDT)
In-Reply-To: <CAP8yD=vfKTodgkt7ocpKN1xfU0ZZgGWg5TH_x+VqvRe_EFzsHA@mail.gmail.com>
References: <20160316043926.2806.69546.idtracker@ietfa.amsl.com> <CAP8yD=vfKTodgkt7ocpKN1xfU0ZZgGWg5TH_x+VqvRe_EFzsHA@mail.gmail.com>
Date: Wed, 16 Mar 2016 01:07:13 -0400
Message-ID: <CAP8yD=veoQNUS=VTWRKMzszh1nEZ3DZk7Mk+7pfe-7pKMv4Xbg@mail.gmail.com>
From: Allison Mankin <allison.mankin@gmail.com>
To: dns-privacy@ietf.org
Content-Type: multipart/alternative; boundary="001a1134b882a1c0e6052e237c7d"
Archived-At: <http://mailarchive.ietf.org/arch/msg/dns-privacy/IUMLC51ZgyBfQIybKmSnSOOmyao>
Subject: [dns-privacy] Fwd: I-D Action: draft-ietf-dprive-dns-over-tls-08.txt
X-BeenThere: dns-privacy@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: <dns-privacy.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dns-privacy>, <mailto:dns-privacy-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dns-privacy/>
List-Post: <mailto:dns-privacy@ietf.org>
List-Help: <mailto:dns-privacy-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dns-privacy>, <mailto:dns-privacy-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 16 Mar 2016 05:07:15 -0000

Dear DPRIVE,

his 08 version of the DNS-over-TLS draft addresses Brian Carpenter's
GEN-ART review and also IESG review comments of Brian Habermann, Stephen
Farrell, and Ben Campbell.

> ---------- Forwarded message ----------
> From: <internet-drafts@ietf.org>
> Date: Mar 16, 2016 00:39
> Subject: [dns-privacy] I-D Action: draft-ietf-dprive-dns-over-tls-08.txt
> To: <i-d-announce@ietf.org>
> Cc: <dns-privacy@ietf.org>
>
>
> A New Internet-Draft is available from the on-line Internet-Drafts
directories.
> This draft is a work item of the DNS PRIVate Exchange of the IETF.
>
>         Title           : Specification for DNS over TLS
>         Authors         : Zi Hu
>                           Liang Zhu
>                           John Heidemann
>                           Allison Mankin
>                           Duane Wessels
>                           Paul Hoffman
>         Filename        : draft-ietf-dprive-dns-over-tls-08.txt
>         Pages           : 21
>         Date            : 2016-03-15
>
> Abstract:
>    This document describes the use of TLS to provide privacy for DNS.
>    Encryption provided by TLS eliminates opportunities for eavesdropping
>    and on-path tampering with DNS queries in the network, such as
>    discussed in RFC 7626.  In addition, this document specifies two
>    usage profiles for DNS-over-TLS and provides advice on performance
>    considerations to minimize overhead from using TCP and TLS with DNS.
>
>    This document focuses on securing stub-to-recursive traffic, as per
>    the charter of the DPRIVE working group.  It does not prevent future
>    applications of the protocol to recursive-to-authoritative traffic.
>
>    Note: this document was formerly named
>    draft-ietf-dprive-start-tls-for-dns.  Its name has been changed to
>    better describe the mechanism now used.  Please refer to working
>    group archives under the former name for history and previous
>    discussion.  [RFC Editor: please remove this paragraph prior to
>    publication]
>
>
> The IETF datatracker status page for this draft is:
> https://datatracker.ietf.org/doc/draft-ietf-dprive-dns-over-tls/
>
> There's also a htmlized version available at:
> https://tools.ietf.org/html/draft-ietf-dprive-dns-over-tls-08
>
> A diff from the previous version is available at:
> https://www.ietf.org/rfcdiff?url2=draft-ietf-dprive-dns-over-tls-08
>
>
> Please note that it may take a couple of minutes from the time of
submission
> until the htmlized version and diff are available at tools.ietf.org.
>
> Internet-Drafts are also available by anonymous FTP at:
> ftp://ftp.ietf.org/internet-drafts/
>
> _______________________________________________
> dns-privacy mailing list
> dns-privacy@ietf.org
> https://www.ietf.org/mailman/listinfo/dns-privacy

v2.23.0 | Report a Bug | By Email