IETF Logo Mail Archive

Re: [dns-privacy] Start of WGLC for draft-ietf-dprive-dns-over-tls-01

"Tirumaleswar Reddy (tireddy)" <tireddy@cisco.com> Tue, 27 October 2015 12:32 UTC

Return-Path: <tireddy@cisco.com>
X-Original-To: dns-privacy@ietfa.amsl.com
Delivered-To: dns-privacy@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A1B501A87EC for <dns-privacy@ietfa.amsl.com>; Tue, 27 Oct 2015 05:32:11 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -14.51
X-Spam-Level:
X-Spam-Status: No, score=-14.51 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kd032mInmwE6 for <dns-privacy@ietfa.amsl.com>; Tue, 27 Oct 2015 05:32:10 -0700 (PDT)
Received: from alln-iport-5.cisco.com (alln-iport-5.cisco.com [173.37.142.92]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DB4271A87EB for <dns-privacy@ietf.org>; Tue, 27 Oct 2015 05:32:09 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=10296; q=dns/txt; s=iport; t=1445949130; x=1447158730; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=jsqB7TTEkpF7ORVuSf91mTYHuZVwCt8BAWaFUh1IRS8=; b=F0czu8blgn8LGnWvSpkPUzy76AXVIqlpMDGCd2MXYyqdAeQmCNtfGykH psourq2N54eVErCzPPdS+x/RnZWhKWxXz1sVQO7qE3fz2KLtyyw38AFds WW82wq2/Q8AOkpSCUwBwO6BbVhsXG+LaLDHp5+VXII4twhKYoEBcyZtlO o=;
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: A0D5AQApbi9W/5ldJa1egmlNVG8GulmEIQENgVohhXkCHIEkOBQBAQEBAQEBgQqEMgEBAQQjCkwQAgEGAhEEAQEoAwICAjAUCQgCBA4FCIgoDZVLnTeSKgEBAQEBAQEBAQEBAQEBAQEBAQEBARQEhneEfoRCRwQGAYJpgUUFkmODVQGFG4gBnDgBHwEBQoIRHYFWcgGEZ4EGAQEB
X-IronPort-AV: E=Sophos;i="5.20,205,1444694400"; d="scan'208,217";a="202103788"
Received: from rcdn-core-2.cisco.com ([173.37.93.153]) by alln-iport-5.cisco.com with ESMTP; 27 Oct 2015 12:32:07 +0000
Received: from XCH-RCD-018.cisco.com (xch-rcd-018.cisco.com [173.37.102.28]) by rcdn-core-2.cisco.com (8.14.5/8.14.5) with ESMTP id t9RCW7KK031916 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Tue, 27 Oct 2015 12:32:07 GMT
Received: from xch-rcd-017.cisco.com (173.37.102.27) by XCH-RCD-018.cisco.com (173.37.102.28) with Microsoft SMTP Server (TLS) id 15.0.1104.5; Tue, 27 Oct 2015 07:31:43 -0500
Received: from xch-rcd-017.cisco.com ([173.37.102.27]) by XCH-RCD-017.cisco.com ([173.37.102.27]) with mapi id 15.00.1104.000; Tue, 27 Oct 2015 07:31:43 -0500
From: "Tirumaleswar Reddy (tireddy)" <tireddy@cisco.com>
To: sara <sara@sinodun.com>
Thread-Topic: [dns-privacy] Start of WGLC for draft-ietf-dprive-dns-over-tls-01
Thread-Index: AQHRDY9R6s1LsA/1LkivUA4/BLI1Up55d6SAgATn2oCAARNvAP//xTzQgABedQD//7RpQA==
Date: Tue, 27 Oct 2015 12:31:42 +0000
Message-ID: <af61d3cb9f0f4d0fbd54b2b4c24d69b6@XCH-RCD-017.cisco.com>
References: <CAHw9_i+8Jxs1ZFOUS5DJ46GJugJzQq6NGOMJbDMPgLvT9AZAag@mail.gmail.com> <87fv113gq6.fsf@latte.josefsson.org> <D2500269.1270%paul.hoffman@icann.org> <CAJE_bqf-sEJuq+_oA6stYS=gW2DSuk_ivkpUdo=AEZyX29gcrA@mail.gmail.com> <837F97E2-47E2-4106-B907-DF144EFCF575@sinodun.com> <1f981f52279347f2b0b119a0ac942457@XCH-RCD-017.cisco.com> <9B6EB2BA-35E0-4B2C-8D84-177974D678DF@sinodun.com>
In-Reply-To: <9B6EB2BA-35E0-4B2C-8D84-177974D678DF@sinodun.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-ms-exchange-transport-fromentityheader: Hosted
x-originating-ip: [173.39.66.16]
Content-Type: multipart/alternative; boundary="_000_af61d3cb9f0f4d0fbd54b2b4c24d69b6XCHRCD017ciscocom_"
MIME-Version: 1.0
Archived-At: <http://mailarchive.ietf.org/arch/msg/dns-privacy/s7bVAv6GP_VrvAfGdWugklKUrck>
Cc: "dns-privacy@ietf.org" <dns-privacy@ietf.org>, Simon Josefsson <simon@josefsson.org>, Paul Hoffman <paul.hoffman@icann.org>, 神明達哉 <jinmei@wide.ad.jp>
Subject: Re: [dns-privacy] Start of WGLC for draft-ietf-dprive-dns-over-tls-01
X-BeenThere: dns-privacy@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: <dns-privacy.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dns-privacy>, <mailto:dns-privacy-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dns-privacy/>
List-Post: <mailto:dns-privacy@ietf.org>
List-Help: <mailto:dns-privacy-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dns-privacy>, <mailto:dns-privacy-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 27 Oct 2015 12:32:11 -0000

Inline [TR]

From: sara [mailto:sara@sinodun.com]
Sent: Tuesday, October 27, 2015 5:30 PM
To: Tirumaleswar Reddy (tireddy)
Cc: 神明達哉; Simon Josefsson; Paul Hoffman; dns-privacy@ietf.org
Subject: Re: [dns-privacy] Start of WGLC for draft-ietf-dprive-dns-over-tls-01


On 27 Oct 2015, at 11:24, Tirumaleswar Reddy (tireddy) <tireddy@cisco.com<mailto:tireddy@cisco.com>> wrote:

Authenticating the DNS privacy server is discussed in https://tools.ietf.org/html/draft-ietf-dprive-dnsodtls-02#section-3.2 and is applicable for both TLS and DTLS.

It does and I don’t think there is anything there which is incompatible with what is said about authenticating the server in section 5 of
https://datatracker.ietf.org/doc/draft-ietf-dprive-dns-over-tls-01/

However section 2 of https://tools.ietf.org/html/draft-ietf-dprive-dnsodtls-02 clearly states “The scope of this document, however, is only UDP. “


I’m saying I think creating a separate document that specifically covers authentication for both TLS and DTLS makes most sense to me and will be clearer for consumers of the documents.

[TR] We can move this Section to https://tools.ietf.org/html/draft-wing-dprive-profile-and-msg-flows-00 and that will take care both (D)TLS profile for DNS privacy and authenticating the server.

-Tiru

Sara.

v2.23.0 | Report a Bug | By Email