IETF Logo Mail Archive

Re: [dnsext] Re: Privacy vs EDNS Client IP...

Nicholas Weaver <nweaver@ICSI.Berkeley.EDU> Wed, 03 February 2010 15:11 UTC

Return-Path: <owner-namedroppers@ops.ietf.org>
X-Original-To: ietfarch-dnsext-archive@core3.amsl.com
Delivered-To: ietfarch-dnsext-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 114613A6C44; Wed, 3 Feb 2010 07:11:43 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -5.714
X-Spam-Level:
X-Spam-Status: No, score=-5.714 tagged_above=-999 required=5 tests=[AWL=-0.666, BAYES_00=-2.599, FH_RELAY_NODNS=1.451, RCVD_IN_DNSWL_MED=-4, RDNS_NONE=0.1]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id YrS0ebxIuPL5; Wed, 3 Feb 2010 07:11:42 -0800 (PST)
Received: from psg.com (psg.com [IPv6:2001:418:1::62]) by core3.amsl.com (Postfix) with ESMTP id 8D94328C11D; Wed, 3 Feb 2010 07:11:41 -0800 (PST)
Received: from majordom by psg.com with local (Exim 4.71 (FreeBSD)) (envelope-from <owner-namedroppers@ops.ietf.org>) id 1Ncgpl-000Asc-92 for namedroppers-data0@psg.com; Wed, 03 Feb 2010 15:08:01 +0000
Received: from [192.150.186.11] (helo=fruitcake.ICSI.Berkeley.EDU) by psg.com with esmtps (TLSv1:AES256-SHA:256) (Exim 4.71 (FreeBSD)) (envelope-from <nweaver@ICSI.Berkeley.EDU>) id 1Ncgpi-000As6-46 for namedroppers@ops.ietf.org; Wed, 03 Feb 2010 15:07:58 +0000
Received: from [IPv6:::1] (jack.ICSI.Berkeley.EDU [192.150.186.73]) by fruitcake.ICSI.Berkeley.EDU (8.12.11.20060614/8.12.11) with ESMTP id o13F7tZk001026; Wed, 3 Feb 2010 07:07:55 -0800 (PST)
Subject: Re: [dnsext] Re: Privacy vs EDNS Client IP...
Mime-Version: 1.0 (Apple Message framework v1077)
Content-Type: text/plain; charset="us-ascii"
From: Nicholas Weaver <nweaver@ICSI.Berkeley.EDU>
In-Reply-To: <d791b8791002030637x481dab45mc7270a63a1b24f22@mail.gmail.com>
Date: Wed, 03 Feb 2010 07:07:55 -0800
Cc: Nicholas Weaver <nweaver@ICSI.Berkeley.EDU>, namedroppers@ops.ietf.org
Content-Transfer-Encoding: quoted-printable
Message-Id: <9A190BC7-D52E-4BF4-825A-F15AB4F7596F@icsi.berkeley.edu>
References: <6e04e83a1002010944q7abfabc6h892ce4cbb1bddcbf@mail.gmail.com> <6e04e83a1002011402u395f599g74180d28fdbe5707@mail.gmail.com> <D8848FB8-3523-4580-A93F-764494531788@ICSI.Berkeley.EDU> <6e04e83a1002011640t1b637e30gd7d0150eeb0fae8d@mail.gmail.com> <E9A13A5C-73A7-4F66-9617-482551A9BA84@ICSI.Berkeley.EDU> <6e04e83a1002021155kcb908b1v71d362e03e7c4002@mail.gmail.com> <AB78D628-8A01-4742-B32A-90FC6806201E@ICSI.Berkeley.EDU> <20100203031042.GE1374@vacation.karoshi.com.> <7c31c8cc1002030135w183db140vd1c638bbdc999800@mail.gmail.com> <13956.1265204281@nsa.vix.com> <d791b8791002030637x481dab45mc7270a63a1b24f22@mail.gmail.com>
To: Matthew Dempsky <matthew@dempsky.org>
X-Mailer: Apple Mail (2.1077)
Sender: owner-namedroppers@ops.ietf.org
Precedence: bulk
List-ID: <namedroppers.ops.ietf.org>
List-Unsubscribe: To unsubscribe send a message to namedroppers-request@ops.ietf.org with
List-Unsubscribe: the word 'unsubscribe' in a single line as the message text body.
List-Archive: <http://ops.ietf.org/lists/namedroppers/>

On Feb 3, 2010, at 6:37 AM, Matthew Dempsky wrote:
>> you may think it's silly that most examples of "how could this violate my
>> privacy" are of illegal activities which the internet ought probably not
>> support in any case.  substitute the jailing of a dissident if you wish.
> 
> I wish you guys would have a consistent stance on privacy.  Apparently
> letting sniffing attackers see your DNS traffic is of no concern, but
> letting the authoritative server see it is terrifying.

They don't actually care about privacy, at least real privacy.  (if you care about privacy, you flip out about google public DNS)

Rather, they don't like the idea of CDN tricks, and things which would make these tricks continue to work in the face of third party resolvers are to be opposed, so come up with any opposition possible.

Paul Vixie in particular is a zealot on DNS issues.  EG, Bind does't do 0x20, which is proven safe, and still is pretty damn acceptable on accepting AND PROMOTING glue records.

v2.23.0 | Report a Bug | By Email