From nobody Wed Apr 7 17:46:21 2021 Return-Path: X-Original-To: dns-privacy@ietfa.amsl.com Delivered-To: dns-privacy@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6F6E53A30CD for ; Wed, 7 Apr 2021 17:46:19 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0kYv2jRq1eP9 for ; Wed, 7 Apr 2021 17:46:15 -0700 (PDT) Received: from ppa3.lax.icann.org (ppa3.lax.icann.org [192.0.33.78]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 047D93A30CC for ; Wed, 7 Apr 2021 17:46:15 -0700 (PDT) Received: from MBX112-E2-CO-1.pexch112.icann.org (out.mail.icann.org [64.78.33.7]) by ppa3.lax.icann.org (8.16.0.43/8.16.0.43) with ESMTPS id 1380kDie006807 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT) for ; Thu, 8 Apr 2021 00:46:13 GMT Received: from MBX112-W2-CO-1.pexch112.icann.org (10.226.41.128) by MBX112-W2-CO-1.pexch112.icann.org (10.226.41.128) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.721.2; Wed, 7 Apr 2021 17:46:12 -0700 Received: from MBX112-W2-CO-1.pexch112.icann.org ([10.226.41.128]) by MBX112-W2-CO-1.pexch112.icann.org ([10.226.41.128]) with mapi id 15.02.0721.013; Wed, 7 Apr 2021 17:46:12 -0700 From: Paul Hoffman To: "dprive@ietf.org" Thread-Topic: [Ext] [dns-privacy] -02 of draft-ietf-dprive-opportunistic-adotq Thread-Index: AQHXJxv/+z2sk98FPE2qoTbxMJ1XT6qqSEUA Date: Thu, 8 Apr 2021 00:46:12 +0000 Message-ID: <7E9CC6DC-BCF5-4692-B59B-BB704603C76C@icann.org> References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: x-originating-ip: [192.0.32.234] x-source-routing-agent: Processed Content-Type: multipart/signed; boundary="Apple-Mail=_34FDC8FA-3A76-4410-A22C-04D9FE8D465D"; protocol="application/pkcs7-signature"; micalg=sha-256 MIME-Version: 1.0 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:6.0.391, 18.0.761 definitions=2021-04-07_11:2021-04-07, 2021-04-07 signatures=0 Archived-At: Subject: Re: [dns-privacy] [Ext] -02 of draft-ietf-dprive-opportunistic-adotq X-BeenThere: dns-privacy@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 08 Apr 2021 00:46:20 -0000 --Apple-Mail=_34FDC8FA-3A76-4410-A22C-04D9FE8D465D Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=us-ascii Nudge. Just wondering if anyone had read the -02 and had comments, given = the large number of changes (and the proposed change to the filename). --Paul Hoffman On Apr 1, 2021, at 10:25 AM, Paul Hoffman = wrote: >=20 > Greetings again. We have produced = draft-ietf-dprive-opportunistic-adotq-02 based on extensive WG feedback = before, during, and after the WG meeting. A couple of big changes = include: >=20 > - All that fully-authenticated description we added to -01 before the = WG meeting because we didn't know that draft-rescorla-dprive-adox-latest = was coming? We removed that from our draft and point to = draft-rescorla-dprive-adox-latest instead. >=20 > - The WG has not agreed on any reason to do authentication in = opportunistic resolver-to-authoritative DNS, so we removed any mention = of it, and now just talk about unauthenticated encryption. >=20 > - We changed the signaling mechanism to SVCB to align with = draft-rescorla-dprive-adox-latest. >=20 > - Even though -01 stated explicitly that the protocol was optional for = all authoritative servers, it seems that people want more. We now say = more and point to the new RootOps document. >=20 > - Given that the WG is getting close to finishing DoQ, we put DoQ on = the same footing as DoT in the document. We added DoH because it comes = for free with using SVCB as a signal. >=20 > Given that the document is no longer about full opportunistic = encryption (just about unauthenticated encryption), and that it not just = about DoT and DoQ, we propose that we change the file name to = draft-ietf-dprive-unauth-to-authoritative after the WG has had some time = to comment on this -02. >=20 > --Peter and Paul >=20 > _______________________________________________ > dns-privacy mailing list > dns-privacy@ietf.org > https://www.ietf.org/mailman/listinfo/dns-privacy --Apple-Mail=_34FDC8FA-3A76-4410-A22C-04D9FE8D465D Content-Disposition: attachment; filename="smime.p7s" Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 MIAGCSqGSIb3DQEHAqCAMIACAQExDzANBglghkgBZQMEAgEFADCABgkqhkiG9w0BBwEAAKCCBrYw ggayMIIFmqADAgECAhMwAAAV3RBqFEZex8dMAAMAABXdMA0GCSqGSIb3DQEBCwUAMF8xEzARBgoJ kiaJk/IsZAEZFgNvcmcxFTATBgoJkiaJk/IsZAEZFgVpY2FubjESMBAGCgmSJomT8ixkARkWAmRz MR0wGwYDVQQDExRhZDEtbGF4LmRzLmljYW5uLm9yZzAeFw0yMDA5MTkxODA3MTlaFw0yMjA5MTkx ODA3MTlaMIGUMRMwEQYKCZImiZPyLGQBGRYDb3JnMRUwEwYKCZImiZPyLGQBGRYFaWNhbm4xEjAQ BgoJkiaJk/IsZAEZFgJkczEUMBIGA1UECxMLSUNBTk4tVXNlcnMxFTATBgNVBAMTDFBhdWwgSG9m Zm1hbjElMCMGCSqGSIb3DQEJARYWcGF1bC5ob2ZmbWFuQGljYW5uLm9yZzCCASIwDQYJKoZIhvcN AQEBBQADggEPADCCAQoCggEBAMyCemeYYZjhFjqol6d0KFelzUOUxRgoLxxuCY67ssb2elDgD8Vu 0O5fqMb5GwKWGZknC9uG3l3Of8pnfMlHpeFpLz9abvV/esea+JDxt+RgZLZRvJtZ/lVV86BZnjAO kKtLboRpfXTAobOllRTMcDaRksynf2FiF8VPB9vIsAxNT6/p8P3X84zAkBUX9BI1p9Pf/+ksRkau c40q/N7AuAVYAQlOwnN2QG+64T6ofP6kr3DanHuYg2C/5G3RXX58azNgSYnopJ0AiFY9e4M7iVxm Ll5wgmBGtVoLdjFe9HnCk5EdqKk5CE1ll7akYuvMNUqK1ingA5IjAvRZc9hD818CAwEAAaOCAy8w ggMrMB0GA1UdDgQWBBSh5qyXEQo8kO1LLYUKzpRiMxIHMzAfBgNVHSMEGDAWgBTpKerCBbuXyks/ cnl6+luCS7lqhDCB2QYDVR0fBIHRMIHOMIHLoIHIoIHFhoHCbGRhcDovLy9DTj1hZDEtbGF4LmRz LmljYW5uLm9yZygxKSxDTj1hZDEtbGF4LENOPUNEUCxDTj1QdWJsaWMlMjBLZXklMjBTZXJ2aWNl cyxDTj1TZXJ2aWNlcyxDTj1Db25maWd1cmF0aW9uLERDPWRzLERDPWljYW5uLERDPW9yZz9jZXJ0 aWZpY2F0ZVJldm9jYXRpb25MaXN0P2Jhc2U/b2JqZWN0Q2xhc3M9Y1JMRGlzdHJpYnV0aW9uUG9p bnQwgcoGCCsGAQUFBwEBBIG9MIG6MIG3BggrBgEFBQcwAoaBqmxkYXA6Ly8vQ049YWQxLWxheC5k cy5pY2Fubi5vcmcsQ049QUlBLENOPVB1YmxpYyUyMEtleSUyMFNlcnZpY2VzLENOPVNlcnZpY2Vz LENOPUNvbmZpZ3VyYXRpb24sREM9ZHMsREM9aWNhbm4sREM9b3JnP2NBQ2VydGlmaWNhdGU/YmFz ZT9vYmplY3RDbGFzcz1jZXJ0aWZpY2F0aW9uQXV0aG9yaXR5MA4GA1UdDwEB/wQEAwIFoDA9Bgkr BgEEAYI3FQcEMDAuBiYrBgEEAYI3FQiBurJNhMjIaoOtkz+HlPRag/mIbk6H68s/hoOYWgIBZAIB BzApBgNVHSUEIjAgBgorBgEEAYI3CgMEBggrBgEFBQcDBAYIKwYBBQUHAwIwNQYJKwYBBAGCNxUK BCgwJjAMBgorBgEEAYI3CgMEMAoGCCsGAQUFBwMEMAoGCCsGAQUFBwMCMEkGA1UdEQRCMECgJgYK KwYBBAGCNxQCA6AYDBZwYXVsLmhvZmZtYW5AaWNhbm4ub3JngRZwYXVsLmhvZmZtYW5AaWNhbm4u b3JnMEQGCSqGSIb3DQEJDwQ3MDUwDgYIKoZIhvcNAwICAgCAMA4GCCqGSIb3DQMEAgIAgDAHBgUr DgMCBzAKBggqhkiG9w0DBzANBgkqhkiG9w0BAQsFAAOCAQEATidKimzbAoiiUW1wn7PWGyvBra29 qfQFUkoiN910zUtEigII3eYlf6lgokLPem1VGMAbRDJaDZNDy/1piuJFxtH2qLqqM1KL0jhLD62I 1JlpoUSSVCs0I0c+WoMafG1+TxDHvKOJ+88uR5EE61qoeHBe5pCIeQYzPyEbcJRIqavNj6DKg5Nm AwkwZwCSPGwb7WlKwxnf3X+Zx2emG+AB6k+q+jZA3obglwR5NFov1CeOuW5qQNzB9FIzbZGDjNsJ SwY0ygGnYItvhxb+if9I4NnuZGy41dwwDql40ZGmJg1yUV8niDpUxFUdAdXdeCoVoTPAK7ZDUS8y bo/Iyo/aEzGCAyAwggMcAgEBMHYwXzETMBEGCgmSJomT8ixkARkWA29yZzEVMBMGCgmSJomT8ixk ARkWBWljYW5uMRIwEAYKCZImiZPyLGQBGRYCZHMxHTAbBgNVBAMTFGFkMS1sYXguZHMuaWNhbm4u b3JnAhMwAAAV3RBqFEZex8dMAAMAABXdMA0GCWCGSAFlAwQCAQUAoIIBezAYBgkqhkiG9w0BCQMx CwYJKoZIhvcNAQcBMBwGCSqGSIb3DQEJBTEPFw0yMTA0MDgwMDQ2MTJaMC8GCSqGSIb3DQEJBDEi BCBISmWdOVxucC8/dtiegLdHP6CqGhfg9VgdexifBm248TCBhQYJKwYBBAGCNxAEMXgwdjBfMRMw EQYKCZImiZPyLGQBGRYDb3JnMRUwEwYKCZImiZPyLGQBGRYFaWNhbm4xEjAQBgoJkiaJk/IsZAEZ FgJkczEdMBsGA1UEAxMUYWQxLWxheC5kcy5pY2Fubi5vcmcCEzAAABXdEGoURl7Hx0wAAwAAFd0w gYcGCyqGSIb3DQEJEAILMXigdjBfMRMwEQYKCZImiZPyLGQBGRYDb3JnMRUwEwYKCZImiZPyLGQB GRYFaWNhbm4xEjAQBgoJkiaJk/IsZAEZFgJkczEdMBsGA1UEAxMUYWQxLWxheC5kcy5pY2Fubi5v cmcCEzAAABXdEGoURl7Hx0wAAwAAFd0wDQYJKoZIhvcNAQELBQAEggEAcZt+uV71Ndg7fH9urqsi 9ikFOWihctHzIV5Za4ojAPiSmN/q9WPrbj+Y51+GiOmvEtAvX/H7S5NMaINBf8xa9wVxmmrl8pKo Cw9vwVZ3Vi5F1w5ZUwqYSYtIrGHF71vJ4dIueuVkcBIu9TcZ+neqDcLMlFnnZ/XaBFd+w8sTftUt GAImEC1xuRoA8sL7f7k3UGrRL8aROH37lLzl2j4wR09n1WlN/mc6D1KvA9PkYcLXFPGwymrYtcNk KgTUCPVL2qXCJ24GA5hZUBxWaRYPSyphn2LgEwyckZxjVIjbvZf2znqBxjC6ooMe3esaZ/t+pRuq clR22jZZ9Ol/Tk6q8QAAAAAAAA== --Apple-Mail=_34FDC8FA-3A76-4410-A22C-04D9FE8D465D--