[dns-privacy] WG strategy on opportunistic vs authenticated moving forward

[Tim Wicinski <[e-mail]>]

All,


The chairs have been watching the working group while we prepare for the
upcoming meeting, and working through the proposals and arguments that keep
coming up. We feel there is strong consensus to work on opportunistic
encryption and that it may be beneficial to discuss possible experimental
deployments with a version of the currently documented approach
(draft-ietf-dprive-unauth-to-authoritative).

The concern with lumping the root, TLDs, and SLDs into one solution is that
there are contractual issues with what can be in a zone above an SLD. These
limitations are potentially an issue with some solutions that need/want new
records in the parent’s zone. We feel like the WG will not be able to make
additional progress on any of the proposed solutions until we can reach
consensus on whether the solution should be homogeneous from the root down
or that the real focus is on SLDs and down.

We've asked Paul and Petr to not focus on the common-features document and
move that content  back into their draft.  The authors of
draft-rescorla-dprive-adox-latest will be incorporating concepts from
draft-schwartz-dprive-name-signal as a next step for the authenticated
encryption proposal. This should provide a more concrete proposal that can
be considered for WG adoption.

The chairs would like to solicit any input/feedback on the above as we
prepare for our session during IETF 111.

Tim & Brian