Re: [DNSOP] New Version Notification for draft-muks-dns-message-checksums-00.txt

Hi Mukund，

I review the problem statement in this draft: the cache poison threat during IP fragmentation. I think we address and try to solve  this problem by application-level fragment draft, right?   I would like to introduce this draft into this thread. Hopefully more people can read this draft and compare the merit of the two approaches. I personally prefer application-lelvel fragment because it is a cure for a broader problems, the old problem related packs size and IP fragmentation.

***********************************************************************
 A New Internet-Draft is available from the on-line Internet-Drafts directories.

       Title           : DNS message fragments
       Authors         : Mukund Sivaraman
                         Shane Kerr
                         Linjian Song
	Filename        : draft-muks-dns-message-fragments-00.txt
	Pages           : 13
	Date            : 2015-07-20

Abstract:
  This document describes a method to transmit DNS messages over
  multiple UDP datagrams by fragmenting them at the application layer.
  The objective is to allow authoriative servers to successfully reply
  to DNS queries via UDP using multiple smaller datagrams, where larger
  datagrams may not pass through the network successfully.

The IETF datatracker status page for this draft is:
https://datatracker.ietf.org/doc/draft-muks-dns-message-fragments/ <https://datatracker.ietf.org/doc/draft-muks-dns-message-fragments/>

There's also a htmlized version available at:
https://tools.ietf.org/html/draft-muks-dns-message-fragments-00 <https://tools.ietf.org/html/draft-muks-dns-message-fragments-00>

Please note that it may take a couple of minutes from the time of submission
until the htmlized version and diff are available at tools.ietf.org <http://tools.ietf.org/>.

Internet-Drafts are also available by anonymous FTP at:
ftp://ftp.ietf.org/internet-drafts/ <ftp://ftp.ietf.org/internet-drafts/>

> 在 2015年9月27日，03:15，Mukund Sivaraman <muks@isc.org <mailto:muks@isc.org>> 写道：
> 
> Hi everybody
> 
> On Sat, Sep 26, 2015 at 12:10:09PM -0700, internet-drafts@ietf.org <mailto:internet-drafts@ietf.org> wrote:
>> 
>> A new version of I-D, draft-muks-dns-message-checksums-00.txt
>> has been successfully submitted by Mukund Sivaraman and posted to the
>> IETF repository.
>> 
>> Name:		draft-muks-dns-message-checksums
>> Revision:	00
>> Title:		DNS message checksums
>> Document date:	2015-09-27
>> Group:		Individual Submission
>> Pages:		7
>> URL:            https://www.ietf.org/internet-drafts/draft-muks-dns-message-checksums-00.txt <https://www.ietf.org/internet-drafts/draft-muks-dns-message-checksums-00.txt>
>> Status:         https://datatracker.ietf.org/doc/draft-muks-dns-message-checksums/ <https://datatracker.ietf.org/doc/draft-muks-dns-message-checksums/>
>> Htmlized:       https://tools.ietf.org/html/draft-muks-dns-message-checksums-00 <https://tools.ietf.org/html/draft-muks-dns-message-checksums-00>
>> 
>> 
>> Abstract:
>>   This document describes a method for a client to be able to verify
>>   that IP-layer PDU fragments of a UDP DNS message have not been
>>   spoofed by an off-path attacker.
> 
> This is a new draft on DNS message checksums. I look forward to hearing
> review comments.
> 
> 		Mukund
> _______________________________________________
> DNSOP mailing list
> DNSOP@ietf.org <mailto:DNSOP@ietf.org>
> https://www.ietf.org/mailman/listinfo/dnsop

------------------------------
Davey Song(宋林健)
BII Lab
songlinjian@gmail.com <mailto:songlinjian@gmail.com>