Re: [dnsoverhttp] [Ext] DNS over HTTP: next steps?

Erik Kline <ek@google.com> Sun, 08 January 2017 11:34 UTC

Return-Path: <ek@google.com>
X-Original-To: dnsoverhttp@ietfa.amsl.com
Delivered-To: dnsoverhttp@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5E391126D73 for <dnsoverhttp@ietfa.amsl.com>; Sun, 8 Jan 2017 03:34:48 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -5.9
X-Spam-Level:
X-Spam-Status: No, score=-5.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_LOW=-0.7, RP_MATCHES_RCVD=-3.199, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=google.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id t8PFbOJzhdH5 for <dnsoverhttp@ietfa.amsl.com>; Sun, 8 Jan 2017 03:34:46 -0800 (PST)
Received: from mail-wm0-x229.google.com (mail-wm0-x229.google.com [IPv6:2a00:1450:400c:c09::229]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6069F129408 for <dnsoverhttp@ietf.org>; Sun, 8 Jan 2017 03:34:46 -0800 (PST)
Received: by mail-wm0-x229.google.com with SMTP id k184so85097866wme.1 for <dnsoverhttp@ietf.org>; Sun, 08 Jan 2017 03:34:46 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20161025; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=3e/y7P5rTmpdgZZTXiP9TBZqA2spFbIcMcXgycruQSE=; b=MX9cN9RubHq77QCmx9GICwmVN3d8Tw4dyI3b8faDgE34Svl5DqygMwpYeUbQqTAIfs NSQRosVeVgUnL+NtGvjfWrxvtBByE72EHFnJ5KDYFJZrO5uiiiLsrtytlKhdBeAjom8m c+GnmtnyvdBmsUl4TxJVp7NzsZFOywPv441dT+u8VJW6PEwhZPzQkzxW9KY77E020T7R pP+aSCTxAyzKgiifaoxxw+w8UCreL36xP67xVHSOZMHAMbaP1eZXdwKw0LtkB/Sg15AB 4AYbLIQRckzGbKltIkw8gD8g3EkL7GK4REXn8sYSXGTri3Qy54DX9Pfujn75Zgp5oobD uGPg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=3e/y7P5rTmpdgZZTXiP9TBZqA2spFbIcMcXgycruQSE=; b=DalVC15VEurQ8kkeEIDUCLcv6aIyW/eAlN5RkdObi4Yt4ciWcR4RYFwvd9HFoDMxkU yNKzXJ8jjTzPvO9C7dWAfpvonCDHFH+Ek/Ipu/JuIfU8WgQhq1YRWYVJvEgBpA6zjGx4 DU8QVZTvHi5BdVkJ62uZlSLI1ch9TAZCoCH0PflFFcgLX2XycbcAtZNfb5xQvsk/syHy /wXLoTi8aZ3lrx4gOTmh1GXD84PcfGTg66+i8dGeyUDPrFrlzLR6rqnGpGl1dcsMBmm7 veh73XgKDuSgiF+3mYaKwwU9Kpbx1kon+DpPILSvOLOUX0nsmuQxarb5IWCpOwr6X/lR OJOg==
X-Gm-Message-State: AIkVDXJHhh31IpnGfefkY/8YXI1jDbl1f0+f4Hb0qDWOSgyy1gs5dnp3/OwOspO64oxbvGpe1o/ZN5FKLkNg1cdb
X-Received: by 10.28.215.6 with SMTP id o6mr2424473wmg.5.1483875284613; Sun, 08 Jan 2017 03:34:44 -0800 (PST)
MIME-Version: 1.0
Received: by 10.28.11.195 with HTTP; Sun, 8 Jan 2017 03:34:23 -0800 (PST)
In-Reply-To: <20170106110522.7f181abf@pallas.home.time-travellers.org>
References: <20161221171207.06fb9acb@pallas.home.time-travellers.org> <AE968DEF-3E00-420E-9EC6-6D12AF81E3E7@icann.org> <CAOdDvNpOPE7rD6Hqeeo-xf1co6HG2+Jx_BSFG4hLeFA9GC4=HQ@mail.gmail.com> <CABWuLVetY+2ocnVAn-AhfuJ=GqEQFqmHtsapXE9Ef7uyaM4JEA@mail.gmail.com> <20170106110522.7f181abf@pallas.home.time-travellers.org>
From: Erik Kline <ek@google.com>
Date: Sun, 08 Jan 2017 20:34:23 +0900
Message-ID: <CAAedzxrui3ayuurjYxv+d1A1ghnaQWS1-VXFuOVpLKm+CB2jEQ@mail.gmail.com>
To: Shane Kerr <shane@time-travellers.org>
Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg="sha-256"; boundary="001a11471a14400d93054593a32d"
Archived-At: <https://mailarchive.ietf.org/arch/msg/dnsoverhttp/0jAhKaR_0VLpqE-NBx3btB5ZTf8>
Cc: "dnsoverhttp@ietf.org" <dnsoverhttp@ietf.org>, Zach Lym <zachlym@indolering.com>
Subject: Re: [dnsoverhttp] [Ext] DNS over HTTP: next steps?
X-BeenThere: dnsoverhttp@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: Discussion of DNS over HTTP <dnsoverhttp.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnsoverhttp>, <mailto:dnsoverhttp-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dnsoverhttp/>
List-Post: <mailto:dnsoverhttp@ietf.org>
List-Help: <mailto:dnsoverhttp-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsoverhttp>, <mailto:dnsoverhttp-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sun, 08 Jan 2017 11:34:48 -0000

Shane,

Can you clarify something for me about the wireformat draft, section 3.4?

I believe that a client proxy does not include the DNS-over-TCP 2 byte
length toward the server, instead relying on the HTTP content-length.
Is it fair (and would be more clear) to simply say that the
DNS-over-TCP 2 byte length is *never* included when encapsulating over
HTTP regardless of role and query vs. response status?

I'm also a tad confused about how things look if one was, for example,
doing a zone transfer via DNS-over-HTTP and the server wanted to send
things with Transfer-Encoding of type chunked?

Actually, re-reading RFC 7230 sections 3.3.1 and 3.3.2, I believe that
if it's a requirement to include a Content-Length header then that
means Transfer-Encoding MUST NOT be used.  Is this fair to say, and is
it true of all DNS-over-HTTP data streams, regardless of role and
direction (i.e. it doesn't just apply to client requests)?

My apologies if I'm focusing on minutiae too early in the process.

Thanks.
-ek