Re: [dns-privacy] [Ext] WGLC : draft-ietf-dprive-unilateral-probing

Rob Sayre <sayrer@gmail.com> Thu, 08 June 2023 22:10 UTC

Return-Path: <sayrer@gmail.com>
X-Original-To: dns-privacy@ietfa.amsl.com
Delivered-To: dns-privacy@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E684AC151552 for <dns-privacy@ietfa.amsl.com>; Thu, 8 Jun 2023 15:10:49 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.097
X-Spam-Level:
X-Spam-Status: No, score=-2.097 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id NxQVnydvNO2j for <dns-privacy@ietfa.amsl.com>; Thu, 8 Jun 2023 15:10:45 -0700 (PDT)
Received: from mail-ej1-x629.google.com (mail-ej1-x629.google.com [IPv6:2a00:1450:4864:20::629]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6E95DC151089 for <dns-privacy@ietf.org>; Thu, 8 Jun 2023 15:10:45 -0700 (PDT)
Received: by mail-ej1-x629.google.com with SMTP id a640c23a62f3a-9745c5fed21so171852566b.3 for <dns-privacy@ietf.org>; Thu, 08 Jun 2023 15:10:45 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20221208; t=1686262243; x=1688854243; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:from:to:cc:subject:date:message-id:reply-to; bh=p/KpgwKV988aaKLgc2UqSBYVOumvudFgUSmWI7ZtT44=; b=KRqwS3MErjPIAO8zHnvfq1Nm4Cd4kaaaJDgyg7FuceDVxF94iKQ046mEadJCWlL5pF OyjRQIk5pwPmOuE4pdnQB4EJMuI6KqyyR53E6oaaN6KNFYAM0Y3CkdXeo0/xz/vUQ9da Qe/8r0RYx4YK80HGtp58mjwrqUY1VR5hHdkL/lt0b2JeTuc53YtsYCCWDa8W2Wd8jy2E X84iILExVb2QOYKaBDkns8VjKBYXZhhkPMMjxmj4z5+N4n7Pl4cKL64uSR9Whnc129Zx gp0TGL31pLxElxmuz90hLRoA9Ic4dzNhHlApAj7gj+aHBZ9ecSGarYXmytO9TKOBTmLR DV7g==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20221208; t=1686262243; x=1688854243; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=p/KpgwKV988aaKLgc2UqSBYVOumvudFgUSmWI7ZtT44=; b=lm+z4wbZzV6/XPrB7BojBe5al37TgU7ZMXdZhPvTSuQxV4F27PasJttqHgtcKUWruT zmzPIgAL0nUoqrcXeomN5Ljsfz+s361iGAOWvJdfSfOsXMpDfhxWnKWKwiLEFRzWTu5i Itk0rjFJvXEQShv2FSzknU+Bib8SC03/hOfVMud7+TM7Rriug0WLSoo29KhnTEwKxtM4 ONbn+seouhmtPWNanpIy/9tghxJpA0IdHG9ET+4nSSX2VpGBBMgw+/k1NMsu0fzF4cMM UVWTQa/0YXFI3e93cqNU2aeqFLuhCsBOJEABltr6sq4k1K9EBaohpGOm2qr1l1ia/5ow RhQQ==
X-Gm-Message-State: AC+VfDzMS9ULkJh1pTgtbZVgWVCeX9AFHMQeHFAaZil1NgrR9wOAf22Q RfvgnWJUTxGvEeI9uX4m3dUecfUHrcEjd4LcMIA=
X-Google-Smtp-Source: ACHHUZ71kVM8/BiR6O8of00NYU1Z2j503ky6+j1ApJTp92fKeWF/TrX0H4mHNPktXPrxjbfoQrp7omi4eeWS0BGj5PQ=
X-Received: by 2002:a17:906:a156:b0:96a:30b5:cfac with SMTP id bu22-20020a170906a15600b0096a30b5cfacmr302341ejb.28.1686262242812; Thu, 08 Jun 2023 15:10:42 -0700 (PDT)
MIME-Version: 1.0
References: <64e17d73-ea1a-00cb-a8a5-b5cfb39c37ae@innovationslab.net> <45ada5a8-b483-dae7-eb56-88411fb2f75c@innovationslab.net> <7a3cd83a-b80d-f00d-b050-0a1d4845146b@innovationslab.net> <D7C916AC-E47D-45FE-9976-188DAE0775EF@icann.org> <CADyWQ+HMj5NH1g_oCTNxYkGDmp2L3EwmMyOv2-bXeXvp5kvm0A@mail.gmail.com> <6B55CCC0-069F-43DD-B9DA-024E4334D6F4@icann.org> <20c5ac1666e4428b8ffa70c7b9e8a19c@verisign.com> <CADyWQ+HJ7ZLWfwxr6vb9HsERMJXuu-1zD_=cr4S+mZ1ieWrYwQ@mail.gmail.com> <0007CDA7-ADD3-43BB-B5D3-3B1810206E0E@icann.org> <8fbed8926b3f4e28b9f3f76a85e0b619@verisign.com> <CANMuhxt5cE--GUtapEL69dFkAFSU5dF3psMCgNRKj8_dXpsFLA@mail.gmail.com> <ABE27A4A-BA96-4505-A3E3-1FE83CAA5A63@icann.org> <e3f2e4716fcc4bd6839bf18d88148a16@verisign.com> <DECAD84F-903D-421C-935F-BD861D653EE6@icann.org> <d136ac53094b4a30aaab99be37751e29@verisign.com> <CAChr6SzyEHHP=eSr4Df9Lm4Ov9GEk5_VGmS1ZE+MD=O3NXV-Sw@mail.gmail.com> <B437746D-AB24-4507-A0CD-63CABCB32E34@verisign.com>
In-Reply-To: <B437746D-AB24-4507-A0CD-63CABCB32E34@verisign.com>
From: Rob Sayre <sayrer@gmail.com>
Date: Thu, 08 Jun 2023 23:10:31 +0100
Message-ID: <CAChr6Sy7KmVYmodQrzEbpXrZF6HmB9vniyGhdnUZN2CKFugc3g@mail.gmail.com>
To: "Hollenbeck, Scott" <shollenbeck@verisign.com>
Cc: "paul.hoffman@icann.org" <paul.hoffman@icann.org>, "dns-privacy@ietf.org" <dns-privacy@ietf.org>
Content-Type: multipart/alternative; boundary="000000000000fb27c305fda585aa"
Archived-At: <https://mailarchive.ietf.org/arch/msg/dns-privacy/ftfeDpuovAPMnOhhHT6qoGOVqnQ>
Subject: Re: [dns-privacy] [Ext] WGLC : draft-ietf-dprive-unilateral-probing
X-BeenThere: dns-privacy@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: Addition of privacy to the DNS protocol <dns-privacy.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dns-privacy>, <mailto:dns-privacy-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dns-privacy/>
List-Post: <mailto:dns-privacy@ietf.org>
List-Help: <mailto:dns-privacy-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dns-privacy>, <mailto:dns-privacy-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 08 Jun 2023 22:10:50 -0000

On Wed, Jun 7, 2023 at 2:05 PM Hollenbeck, Scott <shollenbeck@verisign.com>
wrote:

>
> On Jun 6, 2023, at 8:42 PM, Rob Sayre <sayrer@gmail.com> wrote
>
> On Tue, Jun 6, 2023 at 11:23 AM Hollenbeck, Scott <shollenbeck=
> 40verisign.com@dmarc.ietf.org> wrote:
>
> Measurement of CPU and memory use between Do53 and DoT or DoQ.
>> Measurement of query response rates between Do53 and DoT or DoQ.
>> Measurement of server authentication successes and failures.
>> Measurement and descriptions of observed attack traffic, if any.
>
> ...

> [SAH] It would be unreasonable if we were discussing a proposal that had
> no impact on root and TLD name servers. Under some conditions, this
> proposal can affect their ability to perform their primary function of
> responding to DNS queries. Those conditions need to be understood.
>

I think the measurements you suggest make perfect sense. I don't think
there is anything in the IETF process that leads to the conclusion that
this draft must be Experimental as a result, though. So, my objection is
about the ad-hoc process created for this draft. I also don't get the
impression that this draft would enjoy instant adoption, so there would be
time to slowly ramp it up. For example, 23 years separate RFC 2616 from
RFC 9112, but they are both on the standards track.


> Additionally, some of the operators of those services are subject to
> regulators who commonly require them to implement, deploy, and operate IETF
> standards. That’s another good reason to do our best to understand the
> operational impact before this becomes a proposed standard.
>

I never like to read stuff like this. Each of us probably has a regulator
that annoys us in their treatment of some issue. But we can't really make
decisions based on guesses about the future actions of unnamed regulators.
I'm also sure you know the document ladder quite well, but you've used
imprecise terms here. In the first sentence, you say "IETF standards". But
the last sentence says "proposed standard".

thanks,
Rob