Re: [DNSOP] draft-tale-dnsop-edns-clientid

[Ray Bellis <[e-mail]>]

On 27/03/2017 17:49, Dave Lawrence wrote:

> As Sara commented on Ray's draft that proposes a very similar option,
> draft-bellis-dnsop-xpf, this sort of thing clearly needs a close look
> at privacy, and I whole-heartedly agree.  I've already been directly
> poking privacy-concerned individuals for feedback.
> 
> Speaking of Ray's draft, our proposal is able to handle his use case
> but unfortunately our use cases are not achievable in his.  I'd
> welcome joining up.

Let's see how it goes first :)

I'm somewhat philosophically opposed to anything that injects client
related information such that it's shared between different parties.

A large point of my draft is that it's *not* designed to be used that
way (but I accept Sara's point that the text around this could be stronger).

It's only intended for use within a single network, to allow _already
known_ client related information that would otherwise be obscured by an
L3 proxy to be carried through to the end server.

Ray