[DNSOP] Fwd: New Version Notification for draft-reddy-dnsop-error-page-03.txt

tirumal reddy <kondtir@gmail.com> Wed, 26 August 2020 07:04 UTC

Return-Path: <kondtir@gmail.com>
X-Original-To: dnsop@ietfa.amsl.com
Delivered-To: dnsop@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8DB323A0937 for <dnsop@ietfa.amsl.com>; Wed, 26 Aug 2020 00:04:23 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.097
X-Spam-Level:
X-Spam-Status: No, score=-2.097 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1Qk0aRw5vzid for <dnsop@ietfa.amsl.com>; Wed, 26 Aug 2020 00:04:22 -0700 (PDT)
Received: from mail-io1-xd36.google.com (mail-io1-xd36.google.com [IPv6:2607:f8b0:4864:20::d36]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DA78A3A043E for <dnsop@ietf.org>; Wed, 26 Aug 2020 00:04:07 -0700 (PDT)
Received: by mail-io1-xd36.google.com with SMTP id d18so1021903iop.13 for <dnsop@ietf.org>; Wed, 26 Aug 2020 00:04:07 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to; bh=gmVRMFlceMLna8zPUD7EKd+izLXjdz2Bu/HgcSJjIig=; b=BdRb/XRf1H9Cu3KmOBZ1WtIQjeTuhIr+Gv6wCoYemooHOW+x+oKMpLWev1cJRa2TnY p012fZSR5TVC01OgVUYNJ876TbXRx2CqmoHFHFqc/f5lxIpKU6k3ThnrRmoYWTJn9DQ1 LKlsyBeTsnh64xaTFol4aOs/Waqo9WVX/kS3HRRP0ippvccy4zOgeA880e+vYVG3cjeD M2gxKwDvw8UVr3XK4gY6F17rxVOatIuAxwlrRVFEoIwe6AkFFjaK9xJWzkJhSzc0Lrfp DUXtV+dS0rPbNjKPmCRmg2xfX60H8AksQEhKpllJMl96Ar650kAKgZ5CmqjKssv4LSnv 4uVA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to; bh=gmVRMFlceMLna8zPUD7EKd+izLXjdz2Bu/HgcSJjIig=; b=DT7B4z9SpjauYNm3xhcvJo8I1eYwYyB4xFToPlcKcW3ewybPx+D7ilAhRlYaMvVz71 nc2fU/17lQC6YCttM7sXccgu9vQM0e2C3lrhzfDTZ01TWmioLnVOgpQ2dPhNsP8P9Ee7 I1hNW6Fh3u1sZ//5kOq3rc5rohualpjpFFtGiIpkLOSmSpQpapcUBjH4ALW9DgBBI4xK kgjT+nnvhIC8IIwVeMteLgtXEzkhTmHgl9a0MBL5b0w9DP1fbm5xBKml1OKPUuvs2ZIK U9PFk4iRbjNPEgyhlnnMgohxOoEXPRoz9y/pj6Qvja/q7IBfiyg0J48k3k3S5h8c+iwr vTCA==
X-Gm-Message-State: AOAM5319bJ4clF2+0QNDDaJZAH1jOji8QGI5JofoZ+cI7PJeE6gPPimI MhsaErh4xd0s+a/mhjfjgmOXXjJNOqEIjc2mXTRfe5yEZqg=
X-Google-Smtp-Source: ABdhPJxmDGDcXEsiDzHqpz4F1955twf5WApgNspq9CJ/E2D5MAjhAVj+00RH3djdCQkv6iLU6Z89jDftfJ1/kDOsPLM=
X-Received: by 2002:a5e:d514:: with SMTP id e20mr12036320iom.183.1598425446787; Wed, 26 Aug 2020 00:04:06 -0700 (PDT)
MIME-Version: 1.0
References: <159834034577.11007.18047016120698625174@ietfa.amsl.com>
In-Reply-To: <159834034577.11007.18047016120698625174@ietfa.amsl.com>
From: tirumal reddy <kondtir@gmail.com>
Date: Wed, 26 Aug 2020 12:33:55 +0530
Message-ID: <CAFpG3gey-1aGMMaDnUZrouFVaHj8db-br1R1r6nALiFXZ+BN+w@mail.gmail.com>
To: dnsop <dnsop@ietf.org>
Content-Type: multipart/alternative; boundary="000000000000f4ac4405adc26c56"
Archived-At: <https://mailarchive.ietf.org/arch/msg/dnsop/4uM4VypnHQ78yGK68LKnX0yioZY>
Subject: [DNSOP] Fwd: New Version Notification for draft-reddy-dnsop-error-page-03.txt
X-BeenThere: dnsop@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnsop>, <mailto:dnsop-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dnsop/>
List-Post: <mailto:dnsop@ietf.org>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 26 Aug 2020 07:04:24 -0000

Hi all,

This revision https://tools.ietf.org/html/draft-reddy-dnsop-error-page-03
addresses
several comments from the WG during the presentation at IETF-108.

Major updates are listed below:

1. Error page URI EDNS0 option to return an URI Template which when
accessed provides the reason the DNS query was filtered.
2. The Error Page URI Template is protected with a signature for data
origin authentication.
3. Mandatory rules (e.g., DoH and strict privacy profile in DoT) to process
the Error page URI EDNS0 option.
4. Updates to security consideration section to discuss threats and
mechanisms to address them.

Further comments and suggestions are welcome.

Cheers,
-Tiru

---------- Forwarded message ---------
From: <internet-drafts@ietf.org>
Date: Tue, 25 Aug 2020 at 12:55
Subject: New Version Notification for draft-reddy-dnsop-error-page-03.txt
To: Neil Cook <neil.cook@noware.co.uk>, Dan Wing <dwing-ietf@fuggles.com>,
Tirumaleswar Reddy.K <kondtir@gmail.com>, Mohamed Boucadair <
mohamed.boucadair@orange.com>



A new version of I-D, draft-reddy-dnsop-error-page-03.txt
has been successfully submitted by Tirumaleswar Reddy and posted to the
IETF repository.

Name:           draft-reddy-dnsop-error-page
Revision:       03
Title:          DNS Access Denied Error page
Document date:  2020-08-24
Group:          Individual Submission
Pages:          16
URL:
https://www.ietf.org/internet-drafts/draft-reddy-dnsop-error-page-03.txt
Status:
https://datatracker.ietf.org/doc/draft-reddy-dnsop-error-page/
Htmlized:       https://tools.ietf.org/html/draft-reddy-dnsop-error-page-03
Htmlized:
https://datatracker.ietf.org/doc/html/draft-reddy-dnsop-error-page
Diff:
https://www.ietf.org/rfcdiff?url2=draft-reddy-dnsop-error-page-03

Abstract:
   When a DNS server filters a query the response conveys no detailed
   explanation of why the query was blocked, leading to end-user
   confusion.  This document defines a method to return an URI that
   explains the reason the DNS query was filtered.




Please note that it may take a couple of minutes from the time of submission
until the htmlized version and diff are available at tools.ietf.org.

The IETF Secretariat