Re: [dns-privacy] draft-ietf-dprive-dtls-and-tls-profiles: configuration

[Sara Dickinson <[e-mail]>]

> On 23 Oct 2016, at 00:26, Paul Hoffman <[e-mail]> wrote:
> 
> Greetings. Someone reading this document for the first time might not understand where the DNS name that is being discussed in the main body of the document was found. It is not until Section 8 ("Out of Band Sources of Domain Name") that this is mentioned, and that feels much too late.
> 
> The document might be much more approachable if Section 8 was moved to immediately after Section 3, and if it was re-titled "Configuration of the Domain Name for Verification

Hi Paul, 

This is a good point. As suggested in my other email I propose including a definition in the Terminology section of ‘authentication domain name’. Here is what I suggest:

* Authentication domain name: A domain name that can be used to authenticate a DNS Privacy enabling server. Sources of authentication domain names are
   discussed in Section * and Section *. 

And then also moving sections 7 and 8 to immediately after section 4. I suggest after section 4 rather than 3 because 4 is currently the ‘Discussion’.  However I’m not averse to splitting the Discussion section up as it is rather large now….

Sara