Re: [DNSOP] [Ext] Re: [Doh] Alternate proposal for transport indication in draft-ietf-dnsop-dns-wireformat-http

Ben Schwartz <bemasc@google.com> Wed, 04 April 2018 16:44 UTC

Return-Path: <bemasc@google.com>
X-Original-To: dnsop@ietfa.amsl.com
Delivered-To: dnsop@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C217F120724 for <dnsop@ietfa.amsl.com>; Wed, 4 Apr 2018 09:44:53 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.71
X-Spam-Level:
X-Spam-Status: No, score=-2.71 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=google.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id LtxkxUhJQQvN for <dnsop@ietfa.amsl.com>; Wed, 4 Apr 2018 09:44:50 -0700 (PDT)
Received: from mail-io0-x234.google.com (mail-io0-x234.google.com [IPv6:2607:f8b0:4001:c06::234]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BA1FE126D3F for <dnsop@ietf.org>; Wed, 4 Apr 2018 09:44:50 -0700 (PDT)
Received: by mail-io0-x234.google.com with SMTP id q80so27089875ioi.13 for <dnsop@ietf.org>; Wed, 04 Apr 2018 09:44:50 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20161025; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=fAfL9CeTxiVljnKCE4wW7hB2E8BFjDDU68UOjBx7pvA=; b=sDM6uH5FV4dm+tzdKS7XT/LRhbjP1o2NQmPJcTU8T8jh3SdmoNKHBslbv4g8zzq/gh leWMFwWSV11BBhysrvlAEJ9Ry9tir5nnCupG34QUjIhqYv5p/oX2UwNIqirGKrX5FmCY jP16FBP6dU+SbLIjST6a9yfLYlDgYep31lla9kQSEFtDItj/usgtSouPXDwS42jyNw+C iFfJns9ujZfEeWhUbL9Z3oOWImDej2sDtieyn5uAmkAcotK2tFWgMWS7VzgYBV1GBN2U c1sfELUS6QtFLwDiSGU77vfxq12AOTz7Fta9ZrQ13/NE2tUOhpkRSESIp1U2qGl/DuZn I2rw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=fAfL9CeTxiVljnKCE4wW7hB2E8BFjDDU68UOjBx7pvA=; b=NCOifmn5/x8/1LkSqXYu8lCn88Hh7UsCJxdFM2cX7JLmXZH1k9W6YA0+MhJ79Zu4Dc pSr2NaikfT6m1y22/TTE/hHSb3miVZYntd9yN/TTRlqJyPnnPGIXgM6CViLyItTIvhXZ 0hL81d+xql+n7RUKooSQwbkVgN5Zn+VzMZlFy3sPP5nrhE4td/zR+SYI7foBhS3+pI2v +V+S77znn/cGyO1l9cHg2ObjGN8xacPgZ99wcVdMwCc2cdH6aJyNHsSOTz8SL9FL12bm lUU091Ii/7Y3aTC6qFXwPLg5FD979jCYwfgj96ONs2aZWmEoB7F6HnUr6Zs3WRPDDBtQ U6ww==
X-Gm-Message-State: AElRT7HITmyA9oB6LLQDRooAUA/TpsgULyhq5ZYc2K//+qo23L7lv9KA vl1tOFoPGL6ChxM1atD6M7sVVua0hy6dPFynWg3pwFAG
X-Google-Smtp-Source: AIpwx4+qfUIaEiOAGdfGllZK1NXkwm4OUdgfrvYgyP6DxNpNX+f/2A4AW5unmLj8alq2K2aXrkG1wNcab2prLx0VxwY=
X-Received: by 10.107.174.102 with SMTP id x99mr17960826ioe.18.1522860289469; Wed, 04 Apr 2018 09:44:49 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.107.168.210 with HTTP; Wed, 4 Apr 2018 09:44:48 -0700 (PDT)
In-Reply-To: <5AC5006C.4050308@redbarn.org>
References: <152168039295.5550.9572034766968749020.idtracker@ietfa.amsl.com> <CA+nkc8ANQh2wAr6==eNuM82mbD+E2ELzHGizdqF_sGdY-kkOqg@mail.gmail.com> <5AB3E3B7.3080607@redbarn.org> <69AA6C5D-D348-4956-8A31-FE1EC3A2042E@icann.org> <CABkgnnX2jGY_JpVbqJuQdDVUyVzsuM_2CDg4nppfqQHZQm0F+w@mail.gmail.com> <CAAObRXKHhk51DxNt5uiYB0gunJ=DNde2j9FJSU=Ky2m4Q1UkhQ@mail.gmail.com> <CABkgnnVL0XaUDS-WzDGaN9-kLx9p3x1+UVuWhvx=Zyo5oRos+w@mail.gmail.com> <19BED07A-942E-4A46-93A6-09770083EFF9@icann.org> <CABkgnnX-=n-reO9yjA8a2pHAD+JtoS5wX1w-dXMnDFdt4HXu-g@mail.gmail.com> <23236.18671.182273.977633@gro.dd.org> <28199575-e2e2-6966-fe17-f678f9f397f3@bellis.me.uk> <5AC4C2F7.7050906@redbarn.org> <3630b151-9628-235e-a5b1-c838b777d9d2@bellis.me.uk> <5AC4E70C.7020003@redbarn.org> <A0A55AED-0CB2-478C-913A-DCA678FBAC33@fugue.com> <5AC4F11F.3050009@redbarn.org> <602DF02A-3A85-4B3B-9E11-F7A701BD25B5@fugue.com> <5AC4F3F5.6080408@redbarn.org> <C2CAFEF1-7A0B-496E-9AE0-7229E4B4062F@fugue.com> <5AC5006C.4050308@redbarn.org>
From: Ben Schwartz <bemasc@google.com>
Date: Wed, 04 Apr 2018 12:44:48 -0400
Message-ID: <CAHbrMsDLTD=O1SPQe=1axQ-DmVCo_UPx0JPNw8iWtnJCMoCA3w@mail.gmail.com>
To: Paul Vixie <paul@redbarn.org>
Cc: Ted Lemon <mellon@fugue.com>, dnsop@ietf.org, DoH WG <doh@ietf.org>, Ray Bellis <ray@bellis.me.uk>
Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg="sha-256"; boundary="001a11449fe4a58ef20569088a84"
Archived-At: <https://mailarchive.ietf.org/arch/msg/dnsop/D9FrJEV6WHEzZrPhoiW-gF6J-F4>
Subject: Re: [DNSOP] [Ext] Re: [Doh] Alternate proposal for transport indication in draft-ietf-dnsop-dns-wireformat-http
X-BeenThere: dnsop@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnsop>, <mailto:dnsop-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dnsop/>
List-Post: <mailto:dnsop@ietf.org>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 04 Apr 2018 16:44:54 -0000

If the stub and forwarder are both on your laptop, why do you need to
truncate?  Local UDP should have extremely large MTU.

On Wed, Apr 4, 2018 at 12:42 PM, Paul Vixie <paul@redbarn.org> wrote:

>
>
> Ted Lemon wrote:
>
>> On Apr 4, 2018, at 11:49 AM, Paul Vixie <paul@redbarn.org
>> <mailto:paul@redbarn.org>> wrote:
>>
>>> this is a far thinner solution than a full-service resolver, which
>>> would require local configuration and monitoring and so on, as well as
>>> topology stability that can't be guaranteed.
>>>
>>
>> For your laptop use case, why wouldn't you just have the thing running
>> on the laptop do truncation if the answer is too long?
>>
>
> that would be low fidelity. i need to run clients whose internet
> experience will not be influenced by middleboxes.
>
> I admit that this is more code, but it's not a lot more code, and
>> what you're doing instead is pretty hacky.
>>
>
> feel free to try it out:
>
> https://github.com/BII-Lab/DNSoverHTTP
>
> or:
>
> https://github.com/BII-Lab/DNSoverHTTPinGO
>
> these are out of date with respect to the current draft, but each works. i
> would like to see a standard that they can conform to, so that i'm safe
> building a larger infrastructure.
>
> The fact that it's not required to implement doesn't mean that it
>> doesn't contribute to the camel problem.
>>
>
> are we at the point where any of us can call anything we see no use for
> part of the camel problem? i'm hoping not, and so i'm going to ignore your
> statement here.
>
> "if you want to do this, here's an interoperable method" is this group's
> meme. it's not "this is the best engineering solution we were able to
> create for the problem we are willing to admit you might have."
>
>
> --
> P Vixie
>
> _______________________________________________
> DNSOP mailing list
> DNSOP@ietf.org
> https://www.ietf.org/mailman/listinfo/dnsop
>