Re: [dns-privacy] [Add] Draft on the use of multiple recursive resolvers

Jari Arkko <jari.arkko@piuha.net> Mon, 18 November 2019 22:51 UTC

Return-Path: <jari.arkko@piuha.net>
X-Original-To: dns-privacy@ietfa.amsl.com
Delivered-To: dns-privacy@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D7103120B9C; Mon, 18 Nov 2019 14:51:51 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.898
X-Spam-Level:
X-Spam-Status: No, score=-1.898 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id m5DHwyYExu_V; Mon, 18 Nov 2019 14:51:50 -0800 (PST)
Received: from p130.piuha.net (p130.piuha.net [IPv6:2001:14b8:1829::130]) by ietfa.amsl.com (Postfix) with ESMTP id 08664120BB6; Mon, 18 Nov 2019 14:51:50 -0800 (PST)
Received: from localhost (localhost [127.0.0.1]) by p130.piuha.net (Postfix) with ESMTP id F08B666018F; Tue, 19 Nov 2019 00:51:48 +0200 (EET)
Received: from p130.piuha.net ([127.0.0.1]) by localhost (p130.piuha.net [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id UIE_9Uts1Ooq; Tue, 19 Nov 2019 00:51:47 +0200 (EET)
Received: from [127.0.0.1] (p130.piuha.net [IPv6:2001:14b8:1829::130]) by p130.piuha.net (Postfix) with ESMTPS id DA4316600AB; Tue, 19 Nov 2019 00:51:45 +0200 (EET)
Content-Type: text/plain; charset="us-ascii"
Mime-Version: 1.0 (Mac OS X Mail 10.3 \(3273\))
From: Jari Arkko <jari.arkko@piuha.net>
In-Reply-To: <CAH1iCiqBCEZ6tvV0Fzt+C2xNHehPm9aymQbFryiJir7KpM5VaA@mail.gmail.com>
Date: Tue, 19 Nov 2019 06:51:42 +0800
Cc: dns-privacy@ietf.org, ADD Mailing list <add@ietf.org>, Ted Hardie <ted.ietf@gmail.com>, Martin Thomson <mt@lowentropy.net>
Content-Transfer-Encoding: quoted-printable
Message-Id: <60E5B91A-68A3-4799-B365-CDF261DAB133@piuha.net>
References: <680390BE-E819-4951-98EE-C77E9C60E495@piuha.net> <CAH1iCiqBCEZ6tvV0Fzt+C2xNHehPm9aymQbFryiJir7KpM5VaA@mail.gmail.com>
To: Brian Dickson <brian.peter.dickson@gmail.com>
X-Mailer: Apple Mail (2.3273)
Archived-At: <https://mailarchive.ietf.org/arch/msg/dns-privacy/YdgoQnvY-uPyMDunkD3kBdGuo8E>
Subject: Re: [dns-privacy] [Add] Draft on the use of multiple recursive resolvers
X-BeenThere: dns-privacy@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: <dns-privacy.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dns-privacy>, <mailto:dns-privacy-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dns-privacy/>
List-Post: <mailto:dns-privacy@ietf.org>
List-Help: <mailto:dns-privacy-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dns-privacy>, <mailto:dns-privacy-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 18 Nov 2019 22:51:58 -0000

Brian,

Thanks for your comments.

Focusing on one item:

> Using bind-style syntax, I would imagine something like:

Something like this would definitely be useful. It is important to observe though that there are interactions with the ability to keep things private and excessive round-robining/going-to-alternate. The second bullet in Section 3 talks about this in the draft. With that caveat, having an expressive way to define which resolvers you want to talk to is much needed.

Jari