IETF Logo Mail Archive

[DNSOP] Re: Synchronizing caches of DNS resolvers ("poisonlicious" draft)

Stephane Bortzmeyer <bortzmeyer@nic.fr> Tue, 28 July 2026 13:25 UTC

Return-Path: <bortzmeyer@nic.fr>
X-Original-To: dnsop@mail2.ietf.org
Delivered-To: dnsop@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 9B26111FD20A5 for <dnsop@mail2.ietf.org>; Tue, 28 Jul 2026 06:25:09 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1785245109; bh=X8qr8iJRWDd6luPorzZzOeBolfdvDz2FjLq6Y/guhno=; h=Date:From:To:Cc:Subject:References:In-Reply-To; b=oPV/cJJ72SYN/MsnK0LB4CcLhiFX+5IgxgR4SMqBI58ONzYKPKBrrX+punvvJORZ6 wFPkjnQicY7TPgwgtTiLRKIw4jTbkoQ/o1NhRXKMyU9hpr4A867behc8WknyK4PF0m qbEq1ZNR8YFkFoJabq/Dx7iaP5A9Vk1Jzd49+Sew=
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -2.1
X-Spam-Level:
X-Spam-Status: No, score=-2.1 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=unavailable autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=nic.fr
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ASUmLTijlXYo for <dnsop@mail2.ietf.org>; Tue, 28 Jul 2026 06:25:09 -0700 (PDT)
Received: from mx2.nic.fr (mx2.nic.fr [IPv6:2001:67c:2219:10::51:2]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id D990111FD1EAF for <dnsop@ietf.org>; Tue, 28 Jul 2026 06:19:45 -0700 (PDT)
Received: from pps.filterd (mx2.nic.fr [127.0.0.1]) by mx2.nic.fr (8.18.1.11/8.18.1.11) with ESMTP id 66SCcKDJ3967318; Tue, 28 Jul 2026 13:19:44 GMT
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nic.fr; h=cc :content-type:date:from:in-reply-to:message-id:mime-version :references:subject:to; s=nic-20240601; bh=54qBu5Hlqs6Jl1CIGmAOS iqciu5qe2ZWzc7+A8AwwDM=; b=npF4AbHkCEEAfkNlaTDut8ZfG8XmQGHmqdmIo tcTrEBzshQZowo6brLYrfZkp+l7t4QsHxxbWaq/tXiXEAhyPlAbyN7tupyFnYy3n /TXkxopXgz1NNKxgD02356o2SMepHdqzFCUwhGR3g5qAuSlDOjZ9ZoAgxlaOSEhn 3hTUzN6KRROyDXyAUbJUfh2lAfQ9nY3W04bBjqFpoDXxzKYzamX0jqArDIEMa9le 5fbo6ZhAH1zEV/p6kwOmroUMlYU+ClUqHQPZk91VaM3pLBlnFAhWtKQyRWuQAgUi ZxSsyVGQL1H8UoPyKewWPZ2kvJ7uzF0jdQSdi60sed9KdsDXA==
Received: from relay01.prive.nic.fr (relay01.prive.nic.fr [10.1.50.11]) by mx2.nic.fr (PPS) with ESMTP id 4fpu4cg0mu-1; Tue, 28 Jul 2026 13:19:44 +0000 (GMT)
Received: from b12.nic.fr (b12.users.prive.nic.fr [10.10.23.33]) by relay01.prive.nic.fr (Postfix) with ESMTP id 7EBBD6067D4F; Tue, 28 Jul 2026 15:19:44 +0200 (CEST)
Received: by b12.nic.fr (Postfix, from userid 1000) id 13BC4403D1; Tue, 28 Jul 2026 15:19:44 +0200 (CEST)
Date: Tue, 28 Jul 2026 15:19:44 +0200
From: Stephane Bortzmeyer <bortzmeyer@nic.fr>
To: Bill Woodcock <woody@pch.net>
Message-ID: <amiscEHPF0L5_wEF@nic.fr>
References: <al4QKxmXzVPfghm9@nic.fr> <C7BA4A7F-4EB8-48B8-A45E-3CCF33F209B0@pch.net>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Disposition: inline
In-Reply-To: <C7BA4A7F-4EB8-48B8-A45E-3CCF33F209B0@pch.net>
X-Operating-System: Debian GNU/Linux 13.6
X-Kernel: Linux 6.12.96+deb13-amd64 x86_64
X-Charlie: Je suis Charlie
Organization: NIC France
X-URL: http://www.nic.fr/
X-Proofpoint-ORIG-GUID: _gLb-fu1ElPdmh0s53pRFLuwpM0awS5M
X-Proofpoint-Spam-Details-Enc: AW1haW4tMjYwNzI4MDExOCBTYWx0ZWRfX8NaQSOtCFx+s v3I6JCzzT6werF35R3eCuInl73RimVfY7OO2R9HordplQOUJ6NRdzpvJm70gtKQrk6o/hSJfDq8 nOq6KLUgv8CP4FGojOiUlx9daCJoQbXilDzHuSy5IC5SnD8bOzTnkfRmBSDa9tj8aXLgt9cW79a Q31xoPn3yr92sH9+RnWc8M5XLpOd89+hHdUMn3y1xII/BmbGzaYGeb743Go+qS8A1BI8dBy1vHJ KCwQohiUw7Ryg/7FVqXYMki6F+in/yiofwLkuDrCgYcngSTRdkANmP4Zn0RAi3VgxLgSRb2VIMH HIxwRxv3avuhszbJJ9LNqpf9vtw/Wk1aE5lTk6ajAfmqyFTjTyqEbICi9WLW7eBaR6u6Mp8/Vbb M2cpoLBz
X-Proofpoint-Spam-Info: AW1haW4tMjYwNzI4MDExOCBTYWx0ZWRfXyDE+caVz9Zwn LfGb7POiVVz4IVQSaztrCYKNbxV3f7i75Idnn7QzYvbYJqMIyuJRVfCGysvNzhsIYWYGJYH27Rl 5z5/PkftWGVQRBTuC+Nxrwf6/w6GnQE=
X-Proofpoint-GUID: _gLb-fu1ElPdmh0s53pRFLuwpM0awS5M
Message-ID-Hash: FN2LQOL2RNONU6IHV5RBDQS3IN6QW5JK
X-Message-ID-Hash: FN2LQOL2RNONU6IHV5RBDQS3IN6QW5JK
X-MailFrom: bortzmeyer@nic.fr
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-dnsop.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: dnsop@ietf.org
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [DNSOP] Re: Synchronizing caches of DNS resolvers ("poisonlicious" draft)
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/dnsop/-UsbIFGIwvksRh9BICw1hWMivYI>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dnsop>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Owner: <mailto:dnsop-owner@ietf.org>
List-Post: <mailto:dnsop@ietf.org>
List-Subscribe: <mailto:dnsop-join@ietf.org>
List-Unsubscribe: <mailto:dnsop-leave@ietf.org>

On Mon, Jul 27, 2026 at 11:39:59AM +0545,
 Bill Woodcock <woody@pch.net> wrote 
 a message of 64 lines which said:

> I strongly support the effort, but would prefer DoT to be mandatory,

Is it lightweight enough, if each peer has to maintain DoT
sessions with all the other peers?

Also, DoT for encryption (risk of snooping) or authentication? (I don't
think there is an easy way to authenticate the client with DoT.)

v2.46.0 | Report a Bug | By Email | System Status