Re: [DNSOP] I-D Action: draft-ietf-dnsop-dns-wireformat-http-03.txt

Ben Schwartz <bemasc@google.com> Tue, 03 July 2018 16:36 UTC

Return-Path: <bemasc@google.com>
X-Original-To: dnsop@ietfa.amsl.com
Delivered-To: dnsop@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D30EA130E66 for <dnsop@ietfa.amsl.com>; Tue, 3 Jul 2018 09:36:03 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -17.51
X-Spam-Level:
X-Spam-Status: No, score=-17.51 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, ENV_AND_HDR_SPF_MATCH=-0.5, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, T_DKIMWL_WL_MED=-0.01, USER_IN_DEF_DKIM_WL=-7.5, USER_IN_DEF_SPF_WL=-7.5] autolearn=unavailable autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=google.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id mtx_AcS3JZng for <dnsop@ietfa.amsl.com>; Tue, 3 Jul 2018 09:35:53 -0700 (PDT)
Received: from mail-it0-x236.google.com (mail-it0-x236.google.com [IPv6:2607:f8b0:4001:c0b::236]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C7580130E30 for <dnsop@ietf.org>; Tue, 3 Jul 2018 09:35:52 -0700 (PDT)
Received: by mail-it0-x236.google.com with SMTP id o5-v6so4009124itc.1 for <dnsop@ietf.org>; Tue, 03 Jul 2018 09:35:52 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=SE9yG+ndZ2cEp94tbUXJ6y1gU9cqc3D7YU64njU8MQI=; b=X08CbNEzuGSU2DHrQODRLYmle9TD/UN780EOjrGNyZWfsVqMY6sfq9zZVbATpWGVWX DWdikOcqe+CbRbTUfPPEN1tKHhKTKbVhWGQ5KRl4vArHilfPVVoYSS8QVBRYEeRNLzBZ xfaqDoD08jMyMkf9OXrOENYKQVIXDVTA0AN+iCJ3kxb7z3wORB97z9i8mt+9zP82Kv8P LPZr87q7AjGyWy2OtHlxDzg1/zose2qS/zBc+8K+vUl4cl/aDeIm3EMJiezWetz5dPPd TzY/0E3Hb/I+QgndyiY7F+60GWHnEo1at9y8PGz657U2EYGbMg5BuTDd2Mbth4OxeBIi RQ9w==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=SE9yG+ndZ2cEp94tbUXJ6y1gU9cqc3D7YU64njU8MQI=; b=go1Np/Cx6BcTduDoFXLXp7D9rd6ZD1kmcYG6sz9C4JFYEKwwoXAo6sMkAlbsxKtvfP 1v9wWry+mbRXp6B+8cWBv+ntgv3JvKu9phAwOmmIRstd4693QfVG/AZ1MSNIrqH+JnDg 6lyTHGADDWbWNaLWygCrbRPJcYTYbDXh9Y/aBanRF3GjF5Q3r5BIjeuPNRQh7hW28AFQ AFDER4NXSYiL34OFA49wTiChjYWNVV5eQOah/LqjrPu71Tcg8J9kq/1Gi63BPGWmrTUn O2c5C690wYFt/F0JGzKzIINEGY7NG5dRRWpIlr19VTh3k2dkt91wv184QRYM/FQ9HAAD mzSA==
X-Gm-Message-State: APt69E1x1AK8VPw3vtw4FNzjfNtREjbD8qwYt8r8WQw/xPwfd/25l3dE K68MSlkR+0ESz7TSzSdPVGoTpK0EfRuLxKuj04nXkg==
X-Google-Smtp-Source: AAOMgpd5V5tHtoogQm6wW6snSp0Ul7E/u89pjfzIOwyR6xrm8PsAnRjEwfB/cNPn+uezg5IZl/wIJX1uzIggMqHf6a4=
X-Received: by 2002:a24:ce81:: with SMTP id v123-v6mr9681834itg.119.1530635751687; Tue, 03 Jul 2018 09:35:51 -0700 (PDT)
MIME-Version: 1.0
References: <153056942905.16408.4051289359722201152@ietfa.amsl.com>
In-Reply-To: <153056942905.16408.4051289359722201152@ietfa.amsl.com>
From: Ben Schwartz <bemasc@google.com>
Date: Tue, 03 Jul 2018 12:35:40 -0400
Message-ID: <CAHbrMsBbsXiTdRhytjFZ9vGwS_wEFMbobRA42sJ0RduQaBh+rQ@mail.gmail.com>
To: internet-drafts@ietf.org
Cc: i-d-announce@ietf.org, dnsop@ietf.org
Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg="sha-256"; boundary="0000000000004cbfe505701ae8c4"
Archived-At: <https://mailarchive.ietf.org/arch/msg/dnsop/mI6PCb_fsUYiK3xVnQdnQBEZXUQ>
Subject: Re: [DNSOP] I-D Action: draft-ietf-dnsop-dns-wireformat-http-03.txt
X-BeenThere: dnsop@ietf.org
X-Mailman-Version: 2.1.26
Precedence: list
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnsop>, <mailto:dnsop-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dnsop/>
List-Post: <mailto:dnsop@ietf.org>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 03 Jul 2018 16:36:04 -0000

Thanks for improving the clarity of this draft.

Could you provide an example of a use case where the baseline DOH behavior
is not sufficient, to motivate the "proto" parameter?  The text mentions a
"transparency principle" as motivation, but I don't understand the
significance of this principle.

In particular, I think the draft should explain why it's not sufficient to
apply truncation when the proxy packages an HTTP DOH response into a DNS
response over UDP.

On Mon, Jul 2, 2018 at 6:10 PM <internet-drafts@ietf.org> wrote:

>
> A New Internet-Draft is available from the on-line Internet-Drafts
> directories.
> This draft is a work item of the Domain Name System Operations WG of the
> IETF.
>
>         Title           : An Proxy Use Case of DNS over HTTPS
>         Authors         : Linjian Song
>                           Paul Vixie
>                           Shane Kerr
>         Filename        : draft-ietf-dnsop-dns-wireformat-http-03.txt
>         Pages           : 6
>         Date            : 2018-07-02
>
> Abstract:
>    This memo introduces a DNS proxy use case to tunnel DNS query and
>    response using DNS over HTTPs (DOH) protocol, a newly proposed DNS
>    transport.  The proxy use case is useful as a incremental adoption
>    tool when DOH is not widely available in old-transport client and
>    server.
>
>
> The IETF datatracker status page for this draft is:
> https://datatracker.ietf.org/doc/draft-ietf-dnsop-dns-wireformat-http/
>
> There are also htmlized versions available at:
> https://tools.ietf.org/html/draft-ietf-dnsop-dns-wireformat-http-03
>
> https://datatracker.ietf.org/doc/html/draft-ietf-dnsop-dns-wireformat-http-03
>
> A diff from the previous version is available at:
> https://www.ietf.org/rfcdiff?url2=draft-ietf-dnsop-dns-wireformat-http-03
>
>
> Please note that it may take a couple of minutes from the time of
> submission
> until the htmlized version and diff are available at tools.ietf.org.
>
> Internet-Drafts are also available by anonymous FTP at:
> ftp://ftp.ietf.org/internet-drafts/
>
> _______________________________________________
> DNSOP mailing list
> DNSOP@ietf.org
> https://www.ietf.org/mailman/listinfo/dnsop
>