Re: [DNSOP] on the subject of dnse

Phillip Hallam-Baker <hallam@gmail.com> Sun, 23 March 2014 01:17 UTC

MIME-Version: 1.0
In-Reply-To: <532C53BD.7030205@redbarn.org>
References: <532BB27F.9020208@bogus.com> <CAMm+Lwhpvc51WBgjs_TvgdmVG7hDBPKAt57zTtP3g2uFU2nnFg@mail.gmail.com> <532C53BD.7030205@redbarn.org>
Date: Sat, 22 Mar 2014 21:17:15 -0400
Message-ID: <CAMm+Lwjui5HniEPFrNPeFTqWx2PTfunE0KrVSh62r3mtHNcokg@mail.gmail.com>
From: Phillip Hallam-Baker <hallam@gmail.com>
To: Paul Vixie <paul@redbarn.org>
Content-Type: text/plain; charset="ISO-8859-1"
Archived-At: http://mailarchive.ietf.org/arch/msg/dnsop/lX-SyLhrQbrGVAw_OB0-L8Iibtg
Cc: joel jaeggli <joelja@bogus.com>, "dnsop@ietf.org" <dnsop@ietf.org>
Subject: Re: [DNSOP] on the subject of dnse
Precedence: list

On Fri, Mar 21, 2014 at 10:59 AM, Paul Vixie <paul@redbarn.org> wrote:
>
>
> Phillip Hallam-Baker wrote:
>> This was the use case that originally drove the development of OmniBroker.
>>
>> If we do DNS Encryption right it is going to be very easy for end
>> users to chose their DNS provider and very hard for the authorities to
>> block them.
>
> +1.
>
>> Security is a balance. Going through 8.8.8.8 rather than direct means
>> that you are leaking privacy sensitive information to Google. But that
>> is probably less important here than the censorship attack.
>
> noting, google's public claims about not data mining any part of the
> 8.8.8.8 query flow, are believable. we also now know that the greater
> risk is an on-path nation-state MiTM. i think we should solve for the
> latter and not worry about the former.
>
> vixie

I didn't want to bring this up earlier for obvious reasons, the
countermeasure that has been deployed is to just block Google DNS as
well.

We have to have a strategy that does not rely on one party to carry
the net. That just makes them a target.

-- 
Website: http://hallambaker.com/

[DNSOP] on the subject of dnse joel jaeggli
Re: [DNSOP] on the subject of dnse Phillip Hallam-Baker
Re: [DNSOP] on the subject of dnse Paul Vixie
Re: [DNSOP] on the subject of dnse Phillip Hallam-Baker