Re: [dns-privacy] [Ext] AD review of draft-ietf-dprive-unilateral-probing-09

Brian Haberman <brian@innovationslab.net> Mon, 07 August 2023 17:19 UTC

Return-Path: <brian@innovationslab.net>
X-Original-To: dns-privacy@ietfa.amsl.com
Delivered-To: dns-privacy@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 41F87C13AE38 for <dns-privacy@ietfa.amsl.com>; Mon, 7 Aug 2023 10:19:59 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.996
X-Spam-Level:
X-Spam-Status: No, score=-1.996 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, NICE_REPLY_A=-0.091, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=innovationslab-net.20221208.gappssmtp.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id uuoYhB0Ql3ju for <dns-privacy@ietfa.amsl.com>; Mon, 7 Aug 2023 10:19:54 -0700 (PDT)
Received: from mail-oi1-x233.google.com (mail-oi1-x233.google.com [IPv6:2607:f8b0:4864:20::233]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BEAC2C151091 for <dns-privacy@ietf.org>; Mon, 7 Aug 2023 10:19:54 -0700 (PDT)
Received: by mail-oi1-x233.google.com with SMTP id 5614622812f47-3a7a180c3faso546682b6e.2 for <dns-privacy@ietf.org>; Mon, 07 Aug 2023 10:19:54 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=innovationslab-net.20221208.gappssmtp.com; s=20221208; t=1691428793; x=1692033593; h=in-reply-to:from:references:to:content-language:subject:user-agent :mime-version:date:message-id:from:to:cc:subject:date:message-id :reply-to; bh=120FndUvcLTUL1x1Nqaezv7xkSSr+FZeJhy1R0lzEd8=; b=vQT40bfno1QAqMkU2357QHbGXFZrqjEfZ7ZUooKn8DDleUjfEeKu3JAxrp+PQZHdOD RTlbBP0e7y2Xt+Gz7nMA/TgjuVicwtIcrT+ROEd/NQUX8zKmvbHJb+/+ZIrV3jTqc9WU WNXjwpOjRPHhJ3bX25RY/W1qg1jJuZSOZ7qNoY4vsMclPJUrOokJfKaTIFgdYTe/KGiD XFkfDC7sNdLvO1kVfFlVs47KnPocaA43daoONOBA5TPfXzKD6i9aickp3g7qKjkZmKnM lpg2L24bsA8/N01mA1IOzNEKjLS7j0K8NHua0ShAsL3hKmee1hnxSBHfTR+2JWKu9MTu djpg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20221208; t=1691428793; x=1692033593; h=in-reply-to:from:references:to:content-language:subject:user-agent :mime-version:date:message-id:x-gm-message-state:from:to:cc:subject :date:message-id:reply-to; bh=120FndUvcLTUL1x1Nqaezv7xkSSr+FZeJhy1R0lzEd8=; b=KhT0vI8wawUIAjncJQuWdNNhnoZR9CVUKnbz4176Sj4LUGePKU936zftEpnETxXs3t qpwYCpCpTJVM0Ok9kX4CjL9UUsRxV5uL2whGjBjVSMF+wbLgeQveuWGXWfpm3wahcWE+ NzqdLeG2uugfiTWBZ0WKkFS1aZqXzZ43KIMdIaHgF3GPQcDOsGW6EwVEDTvgPxnMpdB0 iHWM5s2QaLeApG4lrfkYT7tml2FHXES7N7BFsG6BOWfvzypQUadwXwcrPwdT3v7KpYCJ 55XfsFLxM/+TlzAkXjw+TKuqKIqRx+4BMCPgsl4zT5gwBS5MaoFfyLtWxXN5C27gRmKZ Wx/g==
X-Gm-Message-State: AOJu0YwsPMiwbHd19ZB0v+JCYTLFnr1RiKZgokgTqlYE0VGxPp9WCVUC fEcwu5atqHwubXcdpe5F/3rysKWigTFC20Nvgw4=
X-Google-Smtp-Source: AGHT+IG5wJT8JlJ6LnIq3J72UWCqxbNtvEbvQJ+/iRHTMGWxGGB4WRqyojuaUOfDhXazAapZK9o7vQ==
X-Received: by 2002:a05:6358:7e93:b0:134:f0c7:90ae with SMTP id o19-20020a0563587e9300b00134f0c790aemr7375512rwn.5.1691428793415; Mon, 07 Aug 2023 10:19:53 -0700 (PDT)
Received: from [192.168.1.17] ([172.59.113.156]) by smtp.gmail.com with ESMTPSA id m15-20020ae9e00f000000b0076cb3690ae7sm2713305qkk.68.2023.08.07.10.19.52 for <dns-privacy@ietf.org> (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Mon, 07 Aug 2023 10:19:52 -0700 (PDT)
Message-ID: <506f9467-a748-4fac-c3e9-fe07e3934825@innovationslab.net>
Date: Mon, 07 Aug 2023 13:19:50 -0400
MIME-Version: 1.0
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:102.0) Gecko/20100101 Thunderbird/102.12.0
Content-Language: en-US
To: dns-privacy@ietf.org
References: <C0F3EA5F-96EF-4777-94E3-3B3913134483@cisco.com> <0BCDA17C-0FC3-41B4-9348-AD4DDC0AF5EA@cisco.com> <E1597D75-8454-4396-ABE6-1D51C30FE1BE@icann.org> <178FF090-BEA3-4F92-9ACB-A7675DA4C7AD@cisco.com>
From: Brian Haberman <brian@innovationslab.net>
In-Reply-To: <178FF090-BEA3-4F92-9ACB-A7675DA4C7AD@cisco.com>
Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="------------j4xa6siCUI8Eoe6sBW1FPpL7"
Archived-At: <https://mailarchive.ietf.org/arch/msg/dns-privacy/eItiMI4UDrJts6voGbndxri6eQU>
Subject: Re: [dns-privacy] [Ext] AD review of draft-ietf-dprive-unilateral-probing-09
X-BeenThere: dns-privacy@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: Addition of privacy to the DNS protocol <dns-privacy.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dns-privacy>, <mailto:dns-privacy-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dns-privacy/>
List-Post: <mailto:dns-privacy@ietf.org>
List-Help: <mailto:dns-privacy-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dns-privacy>, <mailto:dns-privacy-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 07 Aug 2023 17:19:59 -0000

The shepherd's write-up has been updated to align with the draft.

Brian

On 8/5/23 2:01 AM, Eric Vyncke (evyncke) wrote:
> Hello Paul,
> 
> Thanks for your reply, look below for EV2> but, in short, we are all set *except* for the shepherd's write-up .
> 
> Regards
> 
> -éric
> 
> On 05/08/2023, 02:53, "Paul Hoffman" <paul.hoffman@icann.org <mailto:paul.hoffman@icann.org>> wrote:
> 
> 
> On Jul 31, 2023, at 8:29 AM, Eric Vyncke (evyncke) <evyncke=40cisco.com@dmarc.ietf.org <mailto:40cisco.com@dmarc.ietf.org>> wrote:
>> # Shepherd's write-ip
>>
>>
>> The shepherd's write-up states "the WG would like to ensure that this list remains in the document once it is published as an RFC" but the appendix A states "RFC Editor: please remove this section before publication". I.e., the shepherd's write-up and the I-D MUST be coherent ;-)
>>
>> EV> we do need the shepherd's write-up and I-D being consistent on this point. *Let me know when either the shepherd's write-up or the I-D is modified.*
> 
> 
> You and the shepherd are already discussing this on the mailing list.
> 
> EV2> I guess you meant "we" and not "you", but whatever we need a resolution for this.
> 
>> # Section 1.1
>>
>> I am always uneasy with the use of BCP14 normative language outside of a standard track or BCP document.
>>
>> EV> I have read Paul's reply, as long as authors are aware, let it be. Expect some non-blocking comments by some ADs during the IESG evaluation.
> 
> 
> This is a ripe topic for a statement from the various RFC stream managers so that we document authors will know what to expect. I do hope those comments are non-blocking.
> 
> 
> EV2> of course this is not blocking, sorry if I was not clear.
> 
>> # Section 3
>>
>> This was probably discussed over the mailing list, but must DoT & DoQ replies be also identical to Do53 replies ? The current text is a little underspecified.
>>
>> Paul> The last paragraph of Section 3 says "An authoritative server implementing DoT or DoQ MUST authoritatively serve the same zones over all supported transports." How should we say that differently to be more specfied?
>>
>> EV> I still find the text a little unclear about the returned DNS replies (e.g., the answer section must be identical in Do53 and DoT). I am leaving the choice to the authors about whether to add further clarification text.
> 
> 
> Got it: "serve the same zones" versus "have the same replies". We'll make that change in -10.
> 
> EV2> Thanks
> 
>> # Section 3.5
>>
>> Expect some comments during the IESG review if the SHOULDs do not have some wording about when the SHOULDs does not apply.
>>
>> EV> thanks, Paul, for explaining the somehow convoluted/complex clause "this might be limited by e.g. not receiving an EDNS(0) option in the query". You may consider rendering it easier to parse though.
> 
> 
> Sure, I'll make a run at that for -10 as well.
> 
> 
>> # Section 4.2
>>
>> Is there any chance to also use an IPv6 example ?
>>
>> EV> Obviously, there was no chance ;-)
> 
> 
> We chose to keep the examples consistent with each other.
> 
> EV2> fait enough, though the 2 examples could be IPv6 ;-) (kidding here)
> 
> I'll prep a -10, and we'll submit it next week.
> 
> 
> --Paul Hoffman
> 
> _______________________________________________
> dns-privacy mailing list
> dns-privacy@ietf.org
> https://www.ietf.org/mailman/listinfo/dns-privacy