[dns-privacy] I-D Action: draft-ietf-dprive-unilateral-probing-11.txt

[[e-mail]]

A New Internet-Draft is available from the on-line Internet-Drafts
directories. This Internet-Draft is a work item of the DNS PRIVate Exchange
(DPRIVE) WG of the IETF.

   Title           : Unilateral Opportunistic Deployment of Encrypted Recursive-to-Authoritative DNS
   Authors         : Daniel Kahn Gillmor
                     Joey Salazar
                     Paul Hoffman
   Filename        : draft-ietf-dprive-unilateral-probing-11.txt
   Pages           : 33
   Date            : 2023-08-08

Abstract:
   This document sets out steps that DNS servers (recursive resolvers
   and authoritative servers) can take unilaterally (without any
   coordination with other peers) to defend DNS query privacy against a
   passive network monitor.  The steps in this document can be defeated
   by an active attacker, but should be simpler and less risky to deploy
   than more powerful defenses.

   The goal of this document is to simplify and speed deployment of
   opportunistic encrypted transport in the recursive-to-authoritative
   hop of the DNS ecosystem.  Wider easy deployment of the underlying
   transport on an opportunistic basis may facilitate the future
   specification of stronger cryptographic protections against more
   powerful attacks.

The IETF datatracker status page for this Internet-Draft is:
https://datatracker.ietf.org/doc/draft-ietf-dprive-unilateral-probing/

There is also an htmlized version available at:
https://datatracker.ietf.org/doc/html/draft-ietf-dprive-unilateral-probing-11

A diff from the previous version is available at:
https://author-tools.ietf.org/iddiff?url2=draft-ietf-dprive-unilateral-probing-11

Internet-Drafts are also available by rsync at rsync.ietf.org::internet-drafts