IETF Logo Mail Archive

Re: [DNSOP] Multiplexing DNS & HTTP over TLS

Klaus Malorny <Klaus.Malorny@knipp.de> Thu, 14 February 2019 13:01 UTC

Return-Path: <Klaus.Malorny@knipp.de>
X-Original-To: dnsop@ietfa.amsl.com
Delivered-To: dnsop@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B1EB5131052 for <dnsop@ietfa.amsl.com>; Thu, 14 Feb 2019 05:01:15 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.9
X-Spam-Level:
X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id PR-w_FNrFmFq for <dnsop@ietfa.amsl.com>; Thu, 14 Feb 2019 05:01:08 -0800 (PST)
Received: from kmx5b.knipp.de (s671.bbone.dtm.knipp.de [195.253.6.105]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A006712F1A2 for <dnsop@ietf.org>; Thu, 14 Feb 2019 05:01:08 -0800 (PST)
Received: from hp9000.do.knipp.de (hp9000.do.knipp.de [195.253.2.54]) by kmx5b.knipp.de (Postfix) with ESMTP id 414F33000F4; Thu, 14 Feb 2019 13:01:06 +0000 (UTC)
Received: from [195.253.2.27] (mclane.do.knipp.de [195.253.2.27]) by hp9000.do.knipp.de (Postfix) with ESMTP id 0746B9AE90; Thu, 14 Feb 2019 14:00:35 +0100 (MEZ)
To: Shane Kerr <shane@time-travellers.org>, dnsop@ietf.org
References: <C5525DE2-DCF3-43E5-8C41-BAA58049DC3A@verisign.com> <edc1d393-ad19-2f8e-5f58-367d9b7e3290@nic.cz> <20190214080508.zab7r6hzkbj7kp54@nic.fr> <3baf795c-46ff-3993-4cb1-fff10295bc0a@time-travellers.org>
From: Klaus Malorny <Klaus.Malorny@knipp.de>
Message-ID: <01d20441-8533-9a35-70f1-58cb4b6d8960@knipp.de>
Date: Thu, 14 Feb 2019 14:00:32 +0100
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:67.0) Gecko/20100101 Thunderbird/67.0a1
MIME-Version: 1.0
In-Reply-To: <3baf795c-46ff-3993-4cb1-fff10295bc0a@time-travellers.org>
Content-Type: text/plain; charset="utf-8"; format="flowed"
Content-Language: en-US
Content-Transfer-Encoding: 7bit
X-Spamd-Bar: /
Authentication-Results: kmx5b.knipp.de
X-Rspamd-Server: s671
X-Rspamd-Queue-Id: 414F33000F4
X-Spamd-Result: default: False [0.00 / 15.00]; IP_WHITELIST(0.00)[195.253.2.54]; NEURAL_HAM(-0.00)[-0.758,0]; ASN(0.00)[asn:8391, ipnet:195.253.0.0/16, country:DE]
Archived-At: <https://mailarchive.ietf.org/arch/msg/dnsop/7Mb8ktyertqCAmouNnMFndOXCss>
Subject: Re: [DNSOP] Multiplexing DNS & HTTP over TLS
X-BeenThere: dnsop@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnsop>, <mailto:dnsop-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dnsop/>
List-Post: <mailto:dnsop@ietf.org>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 14 Feb 2019 13:01:16 -0000

On 14.02.19 11:03, Shane Kerr wrote:
> Stephane,
> 

> Is there a write-up on this?
> 
> Thinking about it naively, a demultiplexer really only needs to say "is there a 
> non-ASCII character in the first 2 or 3 bytes of a TLS session?".
> 
>

Hi,

please think of HTTP/2, which is a binary protocol (although I don't know what 
the first bytes are). But I guess ALPN (RFC 7301) would do the trick.

Regards,

Klaus

v2.23.0 | Report a Bug | By Email