[dnsext] Address privacy (was Re: afasterinternet.com trial and draft-vandergaast-edns-client-subnet-00)

[Masataka Ohta <[e-mail]>]

SM wrote:

> The above-mentioned DNS services are are supposed to speed
> up web browsing.

Do you mean that the motivation is to improve TCP performance by
reducing TTL and *NOT* to reduce privacy?

> I might describe the problem as follows. These DNS services provide an 
> "off-net" recursive resolver service for clients. Clients are generally 
> assigned a DNS server that is topologically close to them, i.e. their 
> ISP's DNS service.

Then, as as an IP address of "a DNS server (resolver is the
correct word, here) that is topologically close to them" is
known to OpenDNS and Google Public DNS, why do you have to
be bothered by client subnet?

I'm afraid your actual motivation is *NOT* performance *BUT*
precise geo-location of clients.

Yes, content providers can still know IP addresses of clietns,
from which precise geo-location may be obtained.

However, I can see no reason why clients privacy information
must unnecessarily known by OpenDNS and Google Public DNS
servers.

> That only works if the content provider can
> determine the "nearest" HTTP service from where the content can be
> served.

For performance purpose, HTTP server "nearest" to "a DNS
resolver that is topologically close to them" should be
enough.

						Masataka Ohta