[dns-privacy] Re: Verisign's RFC 9539 Experiment
Stephen Farrell <stephen.farrell@cs.tcd.ie> Sun, 15 June 2025 00:36 UTC
Return-Path: <stephen.farrell@cs.tcd.ie>
X-Original-To: dns-privacy@mail2.ietf.org
Delivered-To: dns-privacy@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 970893509627 for <dns-privacy@mail2.ietf.org>; Sat, 14 Jun 2025 17:36:07 -0700 (PDT)
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -1.998
X-Spam-Level:
X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, RCVD_IN_VALIDITY_SAFE_BLOCKED=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=cs.tcd.ie
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1SIBgQMoSa6H for <dns-privacy@mail2.ietf.org>; Sat, 14 Jun 2025 17:36:03 -0700 (PDT)
Received: from AS8PR03CU001.outbound.protection.outlook.com (mail-westeuropeazon11022140.outbound.protection.outlook.com [52.101.71.140]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-384) server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id EE83C3509613 for <dprive@ietf.org>; Sat, 14 Jun 2025 17:36:02 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=sEKwAFcBWKU6Z3poCSrP/6/BxItQiO249CHvI+WiJWp0T62I6vsUQkhyraNJB2uZ/L6+oo2EoF4y6g4W2413GO00yC0bqcs9w3I0shY88aOFF5U2z1oppF6XzWfG16S8i3oKScuo9eqiJeLbRWWJRF8sJle4XAuC5dxr9iaaw6GLfZghNcyXo1LcMwWS0EV5fv3hKlcMOBHG1e1wwAWyua43jmt+bQIyVgoKCtncM3c4GNG6Yp69wqelnGlEv+g33e55ARwrh99bqmK99V1dvohHc6FK2itoHS43ntgTErKgnE5Yvf40K9Hx2wZKolIGpDjm3Ui3StIiY1roYdfnPQ==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=ZArrKuHNBxLr3nZdpjRUCnX39+a/f35OEoINucAWs44=; b=ukhDf4WcKLAGjq7AMedQmd7tYWNQIy3HVx0OhzLnrIiEEekc4QJ79C6wz16TNQ710ZNFa67poZusXOWzl3KfNyLmFzZngvr4EiTUyWjd0wTc5qvcwzHOuW8o2A6OxPjYGLUaT8XWMjU50EAq5lAlgGt0+SrBojTOF3ObLQhF1Y9soruuTxf/7Q3u7IDEG0AoxQs+PpEruMLnsWBoFeHSS4fvR/HKpNiYtIJGbsR5sM27Y2dXj5jzMnTPsila2TJXoGiduzm3iaMmcxlpCPIxYXbbZN51TW8M8YSSEXfQgFflk3zgP7tikmy/EGKdnDqDOScYTv2tVZjIp27PvI+hrA==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cs.tcd.ie; dmarc=pass action=none header.from=cs.tcd.ie; dkim=pass header.d=cs.tcd.ie; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cs.tcd.ie; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=ZArrKuHNBxLr3nZdpjRUCnX39+a/f35OEoINucAWs44=; b=sB3M3mC2CNUWx4qmpNMYNOMxsNtEo1Iyvm67LE8LkFdV/9ce8vT4EqZUqGgPMIDOCNsN1RI9DmpsT7EI4fjnGi0DqaH4K6d4dfqqTxSvVAkwWYu0+uqM1ZmKBGlKX5p1Tyq6v74dgWAvIjtW53RoVcBSRKk+A3WoX4qRsRCcrYHK2aXo6OPfdnpa7PlgNFfZLQcZs78FqjN+P6Fh7xN2QUKZsYnQJ7cDayDSa+C9+rQSNgYmu4dlSrZW/6HiDe0gvYfuORzkRJPzxBpVK/D+hpH+H6rANPgSlrh793QjHYJzwlpi8D4f1Ga39fhBaDFpRZDvs4NO6ak1U4XaKbG9wA==
Authentication-Results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=cs.tcd.ie;
Received: from DB8PR02MB5946.eurprd02.prod.outlook.com (2603:10a6:10:11c::16) by VI6PPFD29923315.eurprd02.prod.outlook.com (2603:10a6:808:1::321) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8835.28; Sun, 15 Jun 2025 00:35:58 +0000
Received: from DB8PR02MB5946.eurprd02.prod.outlook.com ([fe80::e0d3:772e:a68d:d54a]) by DB8PR02MB5946.eurprd02.prod.outlook.com ([fe80::e0d3:772e:a68d:d54a%2]) with mapi id 15.20.8835.027; Sun, 15 Jun 2025 00:35:57 +0000
Message-ID: <957379ca-3472-48f3-a7a5-ecf42cefabcd@cs.tcd.ie>
Date: Sun, 15 Jun 2025 01:35:56 +0100
User-Agent: Mozilla Thunderbird
To: "Hollenbeck, Scott" <shollenbeck=40verisign.com@dmarc.ietf.org>, "dprive@ietf.org" <dprive@ietf.org>
References: <49d12c67a4494e259ce2882988f48ebf@verisign.com>
Content-Language: en-US
From: Stephen Farrell <stephen.farrell@cs.tcd.ie>
Autocrypt: addr=stephen.farrell@cs.tcd.ie; keydata= xjMEY9GzphYJKwYBBAHaRw8BAQdAo6JvjmSbxHdQWPZdvciQYsHhM1NxQBU398Mmimoy4p7N M1N0ZXBoZW4gRmFycmVsbCAoMjU1MTkpIDxzdGVwaGVuLmZhcnJlbGxAY3MudGNkLmllPsKQ BBMWCAA4FiEEMG54R8tZDyZFrDOn5Njp+ZeoM90FAmPRs6YCGwMFCwkIBwIGFQoJCAsCBBYC AwECHgECF4AACgkQ5Njp+ZeoM93bogEA25ElRyX0wwg+kGEN1AoL60MoZfvQZ/VtmXY6IC5j +csBAIBpkL5ySuzJK2zLNZn9qQGht8IaUcA7cvDcLvS2uHUEzjgEY9GzphIKKwYBBAGXVQEF AQEHQILCPWOwW36e8D3pY8GmvvtItIT+A5uV80ist+WokVsQAwEIB8J4BBgWCAAgFiEEMG54 R8tZDyZFrDOn5Njp+ZeoM90FAmPRs6YCGwwACgkQ5Njp+ZeoM92bcAEA8R+8cpqRUIS+SoAN iO05xE6O/wEx8/e88BqzAYki3SoBAOQdwiPX+MQrAxkWD8xxOsdMOAtxYKpkD1n8aPJUw6QJ
In-Reply-To: <49d12c67a4494e259ce2882988f48ebf@verisign.com>
Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="------------sawwVSR0aMrPIhlst7ubQm8Y"
X-ClientProxiedBy: DUZPR01CA0030.eurprd01.prod.exchangelabs.com (2603:10a6:10:46b::19) To DB8PR02MB5946.eurprd02.prod.outlook.com (2603:10a6:10:11c::16)
MIME-Version: 1.0
X-MS-Exchange-MessageSentRepresentingType: 1
X-MS-PublicTrafficType: Email
X-MS-TrafficTypeDiagnostic: DB8PR02MB5946:EE_|VI6PPFD29923315:EE_
X-MS-Office365-Filtering-Correlation-Id: 9eae3eed-be51-4deb-9e35-08ddaba4984a
X-MS-Exchange-SharedMailbox-RoutingAgent-Processed: True
X-TCD-Routed-via-EOP: Routed via EOP
X-TCD-ROUTED: Passed-Transport-Routing-Rules
X-MS-Exchange-SenderADCheck: 1
X-MS-Exchange-AntiSpam-Relay: 0
X-Microsoft-Antispam: BCL:0;ARA:13230040|10070799003|366016|4022899009|1800799024|376014;
X-Microsoft-Antispam-Message-Info: 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
X-Forefront-Antispam-Report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:DB8PR02MB5946.eurprd02.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230040)(10070799003)(366016)(4022899009)(1800799024)(376014);DIR:OUT;SFP:1102;
X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1
X-MS-Exchange-AntiSpam-MessageData-0: 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
X-OriginatorOrg: cs.tcd.ie
X-MS-Exchange-CrossTenant-Network-Message-Id: 9eae3eed-be51-4deb-9e35-08ddaba4984a
X-MS-Exchange-CrossTenant-AuthSource: DB8PR02MB5946.eurprd02.prod.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 15 Jun 2025 00:35:57.8535 (UTC)
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-CrossTenant-Id: d595be8d-b306-45f4-8064-9e5b82fbe52b
X-MS-Exchange-CrossTenant-MailboxType: HOSTED
X-MS-Exchange-CrossTenant-UserPrincipalName: wHL8rXLhdGA6GWSvFlV7H3XXze+GV1RnhaRO09WKrEVAkj84SiH7U1Tbe93U6Zpq
X-MS-Exchange-Transport-CrossTenantHeadersStamped: VI6PPFD29923315
Message-ID-Hash: LPXCM72F4ETPKQIIBDUZ5BHFMOADDDHL
X-Message-ID-Hash: LPXCM72F4ETPKQIIBDUZ5BHFMOADDDHL
X-MailFrom: stephen.farrell@cs.tcd.ie
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-dns-privacy.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [dns-privacy] Re: Verisign's RFC 9539 Experiment
List-Id: Addition of privacy to the DNS protocol <dns-privacy.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/dns-privacy/pz1Uwr4qfLDhKbgIDUjy1fquCPw>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dns-privacy>
List-Help: <mailto:dns-privacy-request@ietf.org?subject=help>
List-Owner: <mailto:dns-privacy-owner@ietf.org>
List-Post: <mailto:dns-privacy@ietf.org>
List-Subscribe: <mailto:dns-privacy-join@ietf.org>
List-Unsubscribe: <mailto:dns-privacy-leave@ietf.org>
Hi Scott, On 12/06/2025 20:36, Hollenbeck, Scott wrote: > Earlier today I added text describing Verisign's RFC 9539 Experiment to GitHub: > > https://github.com/ietf-wg-dprive/9539-data/blob/main/Verisign's%20RFC%209539%20Experiment Thanks for posting that summary. I do wonder though how much weight ought be attached to experiments unless those can be replicated, so have you considered posting more detail so that others (other TLD operators for example) could try to do commensurate experiments? Without the ability to replicate an experiment, it's hard to evaluate anything. Thanks, S. PS: Having said that, encrypted DNS to a large TLD operator poses obviously hard problems, so I'm not expecting confirmatory studies could show hugely different results, but if we want to experiment in a scientific manner, the ability to replicate is crucial. PPS: Apologies if I missed where there's more information about the experiment somewhere else, which is entirely possible;-) > Scott > > _______________________________________________ > dns-privacy mailing list -- dns-privacy@ietf.org > To unsubscribe send an email to dns-privacy-leave@ietf.org
- [dns-privacy] Verisign's RFC 9539 Experiment Hollenbeck, Scott
- [dns-privacy] Re: Verisign's RFC 9539 Experiment Peter Thomassen
- [dns-privacy] Re: Verisign's RFC 9539 Experiment Hollenbeck, Scott
- [dns-privacy] Re: Verisign's RFC 9539 Experiment Allison Mankin
- [dns-privacy] Re: [Ext] Verisign's RFC 9539 Exper… Paul Hoffman
- [dns-privacy] Re: [Ext] Verisign's RFC 9539 Exper… Hollenbeck, Scott
- [dns-privacy] Re: Verisign's RFC 9539 Experiment Watson Ladd
- [dns-privacy] Re: Verisign's RFC 9539 Experiment Christian Huitema
- [dns-privacy] Re: Verisign's RFC 9539 Experiment Stephen Farrell
- [dns-privacy] Re: Verisign's RFC 9539 Experiment Petr Špaček
- [dns-privacy] Re: Verisign's RFC 9539 Experiment Hollenbeck, Scott