Re: [DNSOP] WG review of draft-ietf-homenet-dot-03

Ray Bellis <ray@bellis.me.uk> Tue, 21 March 2017 18:36 UTC

Return-Path: <ray@bellis.me.uk>
X-Original-To: dnsop@ietfa.amsl.com
Delivered-To: dnsop@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DC89512E852 for <dnsop@ietfa.amsl.com>; Tue, 21 Mar 2017 11:36:21 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.901
X-Spam-Level:
X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9KNaYdcqKuHc for <dnsop@ietfa.amsl.com>; Tue, 21 Mar 2017 11:36:18 -0700 (PDT)
Received: from hydrogen.portfast.net (hydrogen.portfast.net [188.246.200.2]) (using TLSv1 with cipher AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B7B50127F0E for <dnsop@ietf.org>; Tue, 21 Mar 2017 11:36:18 -0700 (PDT)
Received: from dhcp-wifi-246.sql1.isc.org ([149.20.50.246]:56813) by hydrogen.portfast.net ([188.246.200.2]:465) with esmtpsa (fixed_plain:ray@bellis.me.uk) (TLS1.0:DHE_RSA_AES_128_CBC_SHA1:16) id 1cqOdi-00087W-BZ (Exim 4.72) for dnsop@ietf.org (return-path <ray@bellis.me.uk>); Tue, 21 Mar 2017 18:36:14 +0000
To: dnsop@ietf.org
References: <E07AFAEB-2B84-4610-87E7-94CF32CF3761@fugue.com> <7652B138-FEAB-4138-91FB-D71AFE6BEF2C@vigilsec.com> <6DCFBC9D-666A-4A3C-A418-82BB6AE3D25D@gmail.com> <alpine.LRH.2.20.999.1703210928390.28925@bofh.nohats.ca> <1A714782-2EE5-49F8-A6C0-29852E90DA9C@rfc1035.com> <AA7C5D4D-CE9E-41D4-9382-A232D379ACCD@gmail.com>
From: Ray Bellis <ray@bellis.me.uk>
Message-ID: <bec379e0-3253-7ef1-693f-fdeaa1420e26@bellis.me.uk>
Date: Tue, 21 Mar 2017 11:36:15 -0700
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.12; rv:45.0) Gecko/20100101 Thunderbird/45.8.0
MIME-Version: 1.0
In-Reply-To: <AA7C5D4D-CE9E-41D4-9382-A232D379ACCD@gmail.com>
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 8bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/dnsop/kAYan34kGa3iwphv6g3Eo79vthc>
Subject: Re: [DNSOP] WG review of draft-ietf-homenet-dot-03
X-BeenThere: dnsop@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnsop>, <mailto:dnsop-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dnsop/>
List-Post: <mailto:dnsop@ietf.org>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 21 Mar 2017 18:36:22 -0000


On 21/03/2017 10:30, Suzanne Woolf wrote:

> Is there any evidence connecting the use of the string “.home” in
> queries to the DNS with any particular protocol, type of equipment,
> network configuration, or software?

It's known to be the default domain configured in 5+ million BT home
gateway routers, although I don't know if those have been shown to be
the cause of any leakage towards the root system.

Ray