IETF Logo Mail Archive

Re: [DNSOP] I-D Action: draft-ietf-dnsop-dns-wireformat-http-03.txt

Bob Harold <rharolde@umich.edu> Fri, 06 July 2018 13:06 UTC

Return-Path: <rharolde@umich.edu>
X-Original-To: dnsop@ietfa.amsl.com
Delivered-To: dnsop@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C398A130EF4 for <dnsop@ietfa.amsl.com>; Fri, 6 Jul 2018 06:06:21 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.999
X-Spam-Level:
X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=umich.edu
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id PKelh1FP6Y_v for <dnsop@ietfa.amsl.com>; Fri, 6 Jul 2018 06:06:19 -0700 (PDT)
Received: from mail-lj1-x22d.google.com (mail-lj1-x22d.google.com [IPv6:2a00:1450:4864:20::22d]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A24AC130E06 for <dnsop@ietf.org>; Fri, 6 Jul 2018 06:06:18 -0700 (PDT)
Received: by mail-lj1-x22d.google.com with SMTP id t21-v6so9123022lji.0 for <dnsop@ietf.org>; Fri, 06 Jul 2018 06:06:18 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=umich.edu; s=google-2016-06-03; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=yqpCRrb4kxizG9r9TQRFLu6B6xj4YWKUG5GoEPPGrk4=; b=Z9mPlJYorCjjPyLdAFzjY3FdKLrbjCrunt3wQ/happAG7AmEQ0Q2nMdH8uZhPDSlRU 7NJ5ouZA5H6QLiWTIJJeIpVdCMoRYTj3YXmxPSK4nCqT4hN1F5AdD6ukuR9ImWkq/LKw ONbtElZXJqtW0ldifvlv0yvK43zok0R6iOMdFQf5bgW+dECMuLSfM3/ZBBLpwOHjVQ7M uMFQAzOqfZwzfFmDQ/OBZKMlhT3tKcAlDJWaKccuGQroSEDqYqPx1O5ArsZuppZXwwWP 9I0MYLr1MeYT8330Gawv7w3ISt1uKUNL3GgoCLac8zzQzgUdvknE11l/TWFkoNkQDDoU iukQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=yqpCRrb4kxizG9r9TQRFLu6B6xj4YWKUG5GoEPPGrk4=; b=O9KWo8GcejaBCC+3pdrUd5/WyNW9hwAJTfu8UzBWBBmTMqj99BtQwnTPRhu50cHeMm zUNyhPacE0LsJm7edhI7Rd+YI3a7MIMs/y5O5tHehPKf0Lsxa6uVAVGPE08HflOVHFCk 2Cj9nrCiLsSphgM1AkdryBO+BjL3LDLeP6Q+NcIuwHKFzr3nI8+tsHgt+Zm95+XsBwfd VjhoXuYP6xCpHtGGlRHAvF/AnCMRuaO5D8hazpgcZip/AdA8RlX5YXmJatNOAMWSvWU5 qJvkrHfAijWWGmz6tegL521zNTCODBNiRaD2jtBikf+P7+ICiCgsymEu8hH0hkjPyjrU F8IQ==
X-Gm-Message-State: APt69E3BdIsp1kfk1Uj24oIwUBjiq0I1boeIk4VQU8lilPBfwqhhZXeh qdRbsMvBbXV76PFqvwXBFvzIMSbi0rLHvg0ota8jfekl
X-Google-Smtp-Source: AAOMgpcqutn+DkXHYoi5uOsrr74obhyNekUmQPSte77WF7KVrik5LIlP/woqv/Qs0fXP/D28kAKiBfmbfsupczHgW2o=
X-Received: by 2002:a2e:52c3:: with SMTP id n64-v6mr6365452lje.90.1530882376843; Fri, 06 Jul 2018 06:06:16 -0700 (PDT)
MIME-Version: 1.0
References: <153056942905.16408.4051289359722201152@ietfa.amsl.com> <CAHbrMsBbsXiTdRhytjFZ9vGwS_wEFMbobRA42sJ0RduQaBh+rQ@mail.gmail.com>
In-Reply-To: <CAHbrMsBbsXiTdRhytjFZ9vGwS_wEFMbobRA42sJ0RduQaBh+rQ@mail.gmail.com>
From: Bob Harold <rharolde@umich.edu>
Date: Fri, 06 Jul 2018 09:06:05 -0400
Message-ID: <CA+nkc8B7f=4t6GsfgqBcN007FW7weBUi8Vi4ZaYQ+_X92jaFzw@mail.gmail.com>
To: bemasc=40google.com@dmarc.ietf.org
Cc: IETF DNSOP WG <dnsop@ietf.org>
Content-Type: multipart/alternative; boundary="00000000000043d2bb0570545447"
Archived-At: <https://mailarchive.ietf.org/arch/msg/dnsop/8YFifRYn88Q_3KCLoR0pH31QE3U>
Subject: Re: [DNSOP] I-D Action: draft-ietf-dnsop-dns-wireformat-http-03.txt
X-BeenThere: dnsop@ietf.org
X-Mailman-Version: 2.1.26
Precedence: list
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnsop>, <mailto:dnsop-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dnsop/>
List-Post: <mailto:dnsop@ietf.org>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 06 Jul 2018 13:06:22 -0000

On Tue, Jul 3, 2018 at 12:36 PM Ben Schwartz <bemasc=
40google.com@dmarc.ietf.org> wrote:

> Thanks for improving the clarity of this draft.
>
> Could you provide an example of a use case where the baseline DOH behavior
> is not sufficient, to motivate the "proto" parameter?  The text mentions a
> "transparency principle" as motivation, but I don't understand the
> significance of this principle.
>
> In particular, I think the draft should explain why it's not sufficient to
> apply truncation when the proxy packages an HTTP DOH response into a DNS
> response over UDP.
>
>
As I understand it, there are cases where TCP is handled differently than
UDP.  TCP has a session and is less susceptible to source address
spoofing,  so things like "ANY" responses, or longer answers, might be
handled differently.

-- 
Bob Harold


On Mon, Jul 2, 2018 at 6:10 PM <internet-drafts@ietf.org> wrote:
>
>>
>> A New Internet-Draft is available from the on-line Internet-Drafts
>> directories.
>> This draft is a work item of the Domain Name System Operations WG of the
>> IETF.
>>
>>         Title           : An Proxy Use Case of DNS over HTTPS
>>         Authors         : Linjian Song
>>                           Paul Vixie
>>                           Shane Kerr
>>         Filename        : draft-ietf-dnsop-dns-wireformat-http-03.txt
>>         Pages           : 6
>>         Date            : 2018-07-02
>>
>> Abstract:
>>    This memo introduces a DNS proxy use case to tunnel DNS query and
>>    response using DNS over HTTPs (DOH) protocol, a newly proposed DNS
>>    transport.  The proxy use case is useful as a incremental adoption
>>    tool when DOH is not widely available in old-transport client and
>>    server.
>>
>>
>> The IETF datatracker status page for this draft is:
>> https://datatracker.ietf.org/doc/draft-ietf-dnsop-dns-wireformat-http/
>>
>> There are also htmlized versions available at:
>> https://tools.ietf.org/html/draft-ietf-dnsop-dns-wireformat-http-03
>>
>> https://datatracker.ietf.org/doc/html/draft-ietf-dnsop-dns-wireformat-http-03
>>
>> A diff from the previous version is available at:
>> https://www.ietf.org/rfcdiff?url2=draft-ietf-dnsop-dns-wireformat-http-03
>>
>

v2.23.0 | Report a Bug | By Email