[dnsext] EDNS client IP should be opt-in (Was: I-D ACTION:draft-vandergaast-edns-client-ip-00.txt

Stephane Bortzmeyer <bortzmeyer@nic.fr> Tue, 02 February 2010 11:41 UTC

Return-Path: <owner-namedroppers@ops.ietf.org>
X-Original-To: ietfarch-dnsext-archive@core3.amsl.com
Delivered-To: ietfarch-dnsext-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 907DC3A6902; Tue, 2 Feb 2010 03:41:16 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -106.237
X-Spam-Level:
X-Spam-Status: No, score=-106.237 tagged_above=-999 required=5 tests=[AWL=0.012, BAYES_00=-2.599, HELO_EQ_FR=0.35, RCVD_IN_DNSWL_MED=-4, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id L44RN2jik8FK; Tue, 2 Feb 2010 03:41:15 -0800 (PST)
Received: from psg.com (psg.com [147.28.0.62]) by core3.amsl.com (Postfix) with ESMTP id E23A03A67F0; Tue, 2 Feb 2010 03:41:15 -0800 (PST)
Received: from majordom by psg.com with local (Exim 4.71 (FreeBSD)) (envelope-from <owner-namedroppers@ops.ietf.org>) id 1NcH1V-0000Xc-Az for namedroppers-data0@psg.com; Tue, 02 Feb 2010 11:34:25 +0000
Received: from [2001:660:3003:2::4:11] (helo=mx2.nic.fr) by psg.com with esmtp (Exim 4.71 (FreeBSD)) (envelope-from <bortzmeyer@nic.fr>) id 1NcH1S-0000X6-HV for namedroppers@ops.ietf.org; Tue, 02 Feb 2010 11:34:22 +0000
Received: from mx2.nic.fr (localhost [127.0.0.1]) by mx2.nic.fr (Postfix) with SMTP id 590241C0134; Tue, 2 Feb 2010 12:34:21 +0100 (CET)
Received: from relay2.nic.fr (relay2.nic.fr [192.134.4.163]) by mx2.nic.fr (Postfix) with ESMTP id 54C271C012B; Tue, 2 Feb 2010 12:34:21 +0100 (CET)
Received: from bortzmeyer.nic.fr (batilda.nic.fr [192.134.4.69]) by relay2.nic.fr (Postfix) with ESMTP id 48D1B7B0034; Tue, 2 Feb 2010 12:34:21 +0100 (CET)
Date: Tue, 02 Feb 2010 12:34:21 +0100
From: Stephane Bortzmeyer <bortzmeyer@nic.fr>
To: Carlo Contavalli <ccontavalli@google.com>
Cc: Ond??ej Surý <ondrej.sury@nic.cz>, namedroppers@ops.ietf.org
Subject: [dnsext] EDNS client IP should be opt-in (Was: I-D ACTION:draft-vandergaast-edns-client-ip-00.txt
Message-ID: <20100202113421.GA31244@nic.fr>
References: <7c31c8cc1001271556w4918093er6e94e07cb92c4dc4@mail.gmail.com> <4B66E441.6090104@nic.cz> <4966825a1002010729m32b5ccfel94f7cb09d8b5e458@mail.gmail.com>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Disposition: inline
In-Reply-To: <4966825a1002010729m32b5ccfel94f7cb09d8b5e458@mail.gmail.com>
X-Operating-System: Debian GNU/Linux 5.0.3
X-Kernel: Linux 2.6.26-2-686 i686
Organization: NIC France
X-URL: http://www.nic.fr/
User-Agent: Mutt/1.5.18 (2008-05-17)
Sender: owner-namedroppers@ops.ietf.org
Precedence: bulk
List-ID: <namedroppers.ops.ietf.org>
List-Unsubscribe: To unsubscribe send a message to namedroppers-request@ops.ietf.org with
List-Unsubscribe: the word 'unsubscribe' in a single line as the message text body.
List-Archive: <http://ops.ietf.org/lists/namedroppers/>

On Mon, Feb 01, 2010 at 03:29:39PM +0000,
 Carlo Contavalli <ccontavalli@google.com> wrote 
 a message of 44 lines which said:

> recursive resolvers do not have to implement edns-client-ip, and
> they do not have to turn it on.

Yes, they have to, if they want to keep the SAME level of privacy as
today (not solve every privacy problem, just keep the CURRENT
level). That's the biggest problem with the proposal.