[DNSOP] Paul Wouters' Yes on draft-ietf-dnsop-rfc8109bis-06: (with COMMENT)

[Paul Wouters via Datatracker <[e-mail]>]

Paul Wouters has entered the following ballot position for
draft-ietf-dnsop-rfc8109bis-06: Yes

When responding, please keep the subject line intact and reply to all
email addresses included in the To and CC lines. (Feel free to cut this
introductory paragraph, however.)


Please refer to https://www.ietf.org/about/groups/iesg/statements/handling-ballot-positions/ 
for more information about how to handle DISCUSS and COMMENT positions.


The document, along with other ballot positions, can be found here:
https://datatracker.ietf.org/doc/draft-ietf-dnsop-rfc8109bis/



----------------------------------------------------------------------
COMMENT:
----------------------------------------------------------------------

small update to my ballot. I saw and actually do agree with Mark Andrews that
the text about source port randomization should mention DNS COOKIES as well:

     I know this is late in the process but why is DNS COOKIE not suggested
     as it is much better than source port randomisation for eliminating spoofed
     responses?  It even works when NATs that de-randomise source ports are in
     the path.