Re: [dns-privacy] I-D Action: draft-ietf-dprive-dtls-and-tls-profiles-10.txt

Stephane Bortzmeyer <bortzmeyer@nic.fr> Wed, 19 July 2017 07:56 UTC

Return-Path: <bortzmeyer@nic.fr>
X-Original-To: dns-privacy@ietfa.amsl.com
Delivered-To: dns-privacy@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3A8FF131BFE for <dns-privacy@ietfa.amsl.com>; Wed, 19 Jul 2017 00:56:38 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.9
X-Spam-Level:
X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id chyPxmi3uXwD for <dns-privacy@ietfa.amsl.com>; Wed, 19 Jul 2017 00:56:36 -0700 (PDT)
Received: from mail.bortzmeyer.org (aetius.bortzmeyer.org [217.70.190.232]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D2F51131C17 for <dns-privacy@ietf.org>; Wed, 19 Jul 2017 00:56:35 -0700 (PDT)
Received: by mail.bortzmeyer.org (Postfix, from userid 10) id 2026231C83; Wed, 19 Jul 2017 09:56:33 +0200 (CEST)
Received: by godin (Postfix, from userid 1000) id 87A0CEC0B1C; Wed, 19 Jul 2017 09:52:39 +0200 (CEST)
Date: Wed, 19 Jul 2017 09:52:39 +0200
From: Stephane Bortzmeyer <bortzmeyer@nic.fr>
To: tjw ietf <tjw.ietf@gmail.com>
Cc: Sara Dickinson <sara@sinodun.com>, "dns-privacy@ietf.org" <dns-privacy@ietf.org>
Message-ID: <20170719075239.GA15785@laperouse.bortzmeyer.org>
References: <149760298355.24202.1993259713348794426@ietfa.amsl.com> <380A58CC-0127-454B-8507-DF2C844FF662@sinodun.com> <CADyWQ+HnR6BEZqTkeLdM7RRgghdfaYZSdvnK33cQwykBXYwG1w@mail.gmail.com>
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
In-Reply-To: <CADyWQ+HnR6BEZqTkeLdM7RRgghdfaYZSdvnK33cQwykBXYwG1w@mail.gmail.com>
X-Transport: UUCP rules
X-Operating-System: Ubuntu 16.04 (xenial)
X-Charlie: Je suis Charlie
User-Agent: Mutt/1.5.24 (2015-08-30)
Archived-At: <https://mailarchive.ietf.org/arch/msg/dns-privacy/yc9Qm_CaXWDt4A-xhhHXkz4wlyA>
Subject: Re: [dns-privacy] I-D Action: draft-ietf-dprive-dtls-and-tls-profiles-10.txt
X-BeenThere: dns-privacy@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: <dns-privacy.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dns-privacy>, <mailto:dns-privacy-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dns-privacy/>
List-Post: <mailto:dns-privacy@ietf.org>
List-Help: <mailto:dns-privacy-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dns-privacy>, <mailto:dns-privacy-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 19 Jul 2017 07:56:39 -0000

On Mon, Jul 03, 2017 at 05:15:35PM -0400,
 tjw ietf <tjw.ietf@gmail.com> wrote 
 a message of 12 lines which said:

> The diffs between -09 and -10 are fairly large

Large in bytes, but most of them don't change the meaning of the text
(it is my opinion that most remarks during the IESG phase were
nitpicking, and that the new -10 version is not an improvment, but it
is not a degradation either.) The whole DHCP discussion is a good
example.

This being said, I've read -10, _and_ the diff, and I believe that, as
I said before, the document is OK and can move forward.

> Before we go and poke the ADs to clear their DISCUSS positions, we
> want to make sure the WG has reviewed Sarah's updates

I'm surprised by the new sentence in section 5 "it provides the
maximum protection an attacker will allow". Surely, the attacker, if
s·he has the choice, will not allow anything?