Re: [DNSOP] Fwd: New Version Notification for draft-reddy-dnsop-error-page-00.txt

tirumal reddy <kondtir@gmail.com> Thu, 09 July 2020 06:53 UTC

Return-Path: <kondtir@gmail.com>
X-Original-To: dnsop@ietfa.amsl.com
Delivered-To: dnsop@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 08E523A05AA for <dnsop@ietfa.amsl.com>; Wed, 8 Jul 2020 23:53:28 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.097
X-Spam-Level:
X-Spam-Status: No, score=-2.097 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6nktJVbwRwW4 for <dnsop@ietfa.amsl.com>; Wed, 8 Jul 2020 23:53:26 -0700 (PDT)
Received: from mail-io1-xd36.google.com (mail-io1-xd36.google.com [IPv6:2607:f8b0:4864:20::d36]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7C7123A05A4 for <dnsop@ietf.org>; Wed, 8 Jul 2020 23:53:26 -0700 (PDT)
Received: by mail-io1-xd36.google.com with SMTP id l1so1230721ioh.5 for <dnsop@ietf.org>; Wed, 08 Jul 2020 23:53:26 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=7nH6Z6p5l8KGZtnTHak4Rlo+o/t+0KQnad2vZx0mMc4=; b=dypetIv4XZEu0ljeyIWL3pQKCfqTkwaoh+jwfvG0xb80x/S3OeAaOKOTcPPBG0BlUW 560LUNrGCGYigEmaFylTFGwZwZS0o+KBAjKSJxHdELqE3xrZzNaxVRz3wln28I4XNQhG dxHhwSnqmKwc1/I5XfXB/pK//Eu9hE5JzG2D0aFkZzzNbKG/A9XfFLxAPxiJUVDYAdt6 eV464X0QvGnUucImwmX7v97CH95ZUD3tOdfJMkyc7tDAwFQcGpD2eOKnTiH/WCKckUJC 88lMnDmTE3zcuYMO9mxaQvAfnxE7r2gvUY0Z7x6EZRARgtVQhsMIUbJVgS2pgy4rpjDG g4fA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=7nH6Z6p5l8KGZtnTHak4Rlo+o/t+0KQnad2vZx0mMc4=; b=EUfuhb3N+33K/uxkFF43MZjfe6fqcK75rSZT8Z0N2EQ/jV+69/X10GLBD7Xn0MZFyb ENA1cVB72sH8djR6agK16bVrGdnb9wHDfxT94015IbHROThSipYfAW5dcuJc8XkWcEq1 YhnYjF+u9uWNbKh/1KHhdT2ybS4qvsMVL600PioGerNJa+QnxKDwKfY3DoFIwwUeznEY 77atIeuk8bslb/MhMPeopQfducL2mMd8hKqkw3iYrHfW1QvlXUSI9fzKf09eW9Fou7zc o/rUJB0fqtpglJohmp4L8QQ3LBSBa/AT/a6rh71TGKGqU/0Y8nFYpcJet8QFI7/hdpIw mc8g==
X-Gm-Message-State: AOAM533cgDLBtaaXSCNv73r4NiNH3P9gnqjvtl1DKR+PE42WujTH7bVD U5LbPi4bfEVXdD5jH6r+4OAfhek3UrA3Ogy9Y4QUEqIw
X-Google-Smtp-Source: ABdhPJyYKF2PcHXvwMWSyS/uhr6J/1DQiSGGdDxE9gLeFDSo0deb2oeA4LuQfNQScBBVShe4WJNKajeQR2pVcQ8/izI=
X-Received: by 2002:a02:5b83:: with SMTP id g125mr70442226jab.91.1594277605606; Wed, 08 Jul 2020 23:53:25 -0700 (PDT)
MIME-Version: 1.0
References: <159419312721.4560.7461331648236111056@ietfa.amsl.com> <CAFpG3gcKVHxQo0USq-K3-jYnVUULiHU=asBx4P8bFm0Rw6V42Q@mail.gmail.com> <1932065230.926.1594213116969@appsuite-dev-gw1.open-xchange.com>
In-Reply-To: <1932065230.926.1594213116969@appsuite-dev-gw1.open-xchange.com>
From: tirumal reddy <kondtir@gmail.com>
Date: Thu, 09 Jul 2020 12:23:14 +0530
Message-ID: <CAFpG3gft=HFvqfmCHk29FWuwmdTj9sAZhosHgjQib6c_BSXQeA@mail.gmail.com>
To: Vittorio Bertola <vittorio.bertola@open-xchange.com>
Cc: dnsop <dnsop@ietf.org>
Content-Type: multipart/alternative; boundary="0000000000005b096205a9fcae8d"
Archived-At: <https://mailarchive.ietf.org/arch/msg/dnsop/NLc4kiFDccRJtoICUrhNchclFY8>
Subject: Re: [DNSOP] Fwd: New Version Notification for draft-reddy-dnsop-error-page-00.txt
X-BeenThere: dnsop@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnsop>, <mailto:dnsop-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dnsop/>
List-Post: <mailto:dnsop@ietf.org>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 09 Jul 2020 06:53:28 -0000

On Wed, 8 Jul 2020 at 18:28, Vittorio Bertola <
vittorio.bertola@open-xchange.com> wrote:

>
> Il 08/07/2020 09:37 tirumal reddy <kondtir@gmail.com> ha scritto:
>
>
> Hi all,
>
> This draft https://tools.ietf.org/html/draft-reddy-dnsop-error-page-00
> discusses a method to return an URL that explains the reason the DNS query
> was filtered. It is useful for HTTPS enabled domain names blocked by DNS
> firewalls for non-managed devices in Enterprise and Home networks. The
> error page URL is returned along with the "Forged Answer" extended error
> code defined in ietf-dnsop-extended-error.
>
> Comments and suggestions are welcome.
>
> This would be actually useful in real world use cases, together with the
> new EDE codes, so it would benefit from standardization.
>

Yes.


>
>
> Regarding section 4, in DPRIVE (on draft bcp-op) we have recently been
> told that the IETF does not recommend in its best practices anything which
> is not strictly technical (in that case, it was about communicating to
> users the jurisdiction under which DNS resolution is provided):
>
>
> https://mailarchive.ietf.org/arch/msg/dns-privacy/rJ7R3OBUyySfEyJgwhoxs1DNGuc/
>
> So I would assume that that section is out of scope as well, and I would
> remove it.
>

My understanding is the "jurisdiction" is out of scope but not RPS (see
https://tools.ietf.org/html/draft-ietf-dprive-bcp-op-12#section-6)

-Tiru


>
> --
>
> Vittorio Bertola | Head of Policy & Innovation, Open-Xchange
> vittorio.bertola@open-xchange.com
> Office @ Via Treviso 12, 10144 Torino, Italy
>
>