Re: [dnssd] Confirming consensus from DNSSD Privacy discussion in Bangkok

Christopher Wood <christopherwood07@gmail.com> Wed, 27 February 2019 20:27 UTC

Return-Path: <christopherwood07@gmail.com>
X-Original-To: dnssd@ietfa.amsl.com
Delivered-To: dnssd@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 40DEF1310A8 for <dnssd@ietfa.amsl.com>; Wed, 27 Feb 2019 12:27:02 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.749
X-Spam-Level:
X-Spam-Status: No, score=-1.749 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_ENVFROM_END_DIGIT=0.25, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id o0iQ4avZQxSq for <dnssd@ietfa.amsl.com>; Wed, 27 Feb 2019 12:27:00 -0800 (PST)
Received: from mail-yw1-xc2b.google.com (mail-yw1-xc2b.google.com [IPv6:2607:f8b0:4864:20::c2b]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 890A512426A for <dnssd@ietf.org>; Wed, 27 Feb 2019 12:27:00 -0800 (PST)
Received: by mail-yw1-xc2b.google.com with SMTP id o184so9200927ywo.5 for <dnssd@ietf.org>; Wed, 27 Feb 2019 12:27:00 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=cBzr363oeiY2nWc2NUt8uCA2RA6HNb8pkb/9JzPHNXk=; b=gx26LmTAS7jOLbGkhE0hcoUqJ2r13w0Id+vaH8DgHh3R14G9WQVyhUT7t1sn3OhBoN 4Sxi78Q4N9okH5Qi9QcpxeMniyUcpqEEVsOwxWMwFoQU9U68YTcbuH46y3Vz8L7Xlnwh qqqPCqPZerBxgZPA0IoPp0DKOPQHEwceRsVO4facSoAyrCYUIyPHdv5QYABdrzIfe9Gw xC+9I1VfJ01yVevLAylyE8Dj/1uJLH4cDa7i0uRcFHdCsrAGiNYMp7uCZxiBSqjU3D29 HuSRdrqDnCuFzArydQWtmD60DOKp7CaV38qYjs7k48F3DiZUkDySsBzOr4sVEA6NfWgp fjwA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=cBzr363oeiY2nWc2NUt8uCA2RA6HNb8pkb/9JzPHNXk=; b=N19et1RxGDiqErI6VGJQryQNigoPETZiTAG/gEhzeBc0WJl0UfTvkyC9qdCZz0hqXv OD+E3LC049x+BH70S8mU2w9HqU2ay4b5zRs9ziNGw5HbNXmWqmr+i1wIKg51I1H6mVEN c/FXlYUL7YpWBMVImF5EquwdC1TrlnRjrJS5vbYTeULRNXldnz1Xg/CgmDCPD/R4so6R OoKLPM1lwSqJIdxhAF/8nXrrlJYztkC8YbH22zSQOM5jOlyhk8hcElB+CNaKCD7gBOLM YqZVHW4/kw3TU0wR7Jdd15X5taZvUPTNNrex141DoYA2WO1c91MZzbZMtnFQT51YMwv1 /nlw==
X-Gm-Message-State: AHQUAuZXF2BOvK4zClZ0D6239C93CWj6j7Hps/NwfobSpwwbyqERUsmL nlh1WOqACYCbXQrrzkAHRzexa64Ac8sDGQVE+3Y=
X-Google-Smtp-Source: AHgI3Ib54b9NJigQjmDxV7vnqrgRj6jSDt5a1JZHcrnD7Ds3zTed09HB9nuaMfvbMuTyngeJTPM3+iys/+gV3YGCvpQ=
X-Received: by 2002:a81:83c1:: with SMTP id t184mr2799069ywf.350.1551299219442; Wed, 27 Feb 2019 12:26:59 -0800 (PST)
MIME-Version: 1.0
References: <CAPDSy+6YyW_G7uwfwGPv1KLtJqL96dZ87R-5pnmmffEEniTigg@mail.gmail.com> <47A82E32-32B9-476F-AB79-76C8D182624F@apple.com> <CAO8oSXkGAErtKQgMGGT+88PY4Y+wJ_6Rz493exaymZ_L8F4FNg@mail.gmail.com> <CAPDSy+68V=rx8cAbVq6rKxNbb9yHisCCPURwHoLKsA179NooLw@mail.gmail.com> <e9b4900d-94e3-c79a-2a72-e2f996663b9d@huitema.net> <CAPDSy+4d27SQCStGzPpzzv=pjGiCM+0df988BesRGHdV_vvteA@mail.gmail.com>
In-Reply-To: <CAPDSy+4d27SQCStGzPpzzv=pjGiCM+0df988BesRGHdV_vvteA@mail.gmail.com>
From: Christopher Wood <christopherwood07@gmail.com>
Date: Wed, 27 Feb 2019 12:26:48 -0800
Message-ID: <CAO8oSXnXre29hjbNCZ1N7b8VBRMubS1yO5_XXr7VY2yxzNAWGw@mail.gmail.com>
To: David Schinazi <dschinazi.ietf@gmail.com>
Cc: Christian Huitema <huitema@huitema.net>, Bob Bradley <bradley@apple.com>, DNSSD <dnssd@ietf.org>
Content-Type: text/plain; charset="UTF-8"
Archived-At: <https://mailarchive.ietf.org/arch/msg/dnssd/8_ieqJvLjWsL8yC8nqrDCHZAaYA>
Subject: Re: [dnssd] Confirming consensus from DNSSD Privacy discussion in Bangkok
X-BeenThere: dnssd@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "Discussion of extensions to DNS-based service discovery for routed networks." <dnssd.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnssd>, <mailto:dnssd-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dnssd/>
List-Post: <mailto:dnssd@ietf.org>
List-Help: <mailto:dnssd-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnssd>, <mailto:dnssd-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 27 Feb 2019 20:27:02 -0000

On Wed, Feb 27, 2019 at 12:18 PM David Schinazi
<dschinazi.ietf@gmail.com> wrote:
>
> Thanks for writing this up Christian.
>
> I went through the minutes of our last in-person meeting in Bangkok and while we did not
> explicitly ask for consensus then, I got a feeling that the sense in the room was:
>
> 1) Is the server mode important for the scenarios that we are thinking about?
>     - No one in the room came out strongly in favor of server mode
>     - Server mode would add complexity
>
>     My personal recommendation: we declare server mode out of scope for now.
>
> 2) Do we care about compatibility with the existing DNS-SD formats?
>     - No one in the room came out strongly in favor of this
>     - It was mentioned it would be nice to have but not critical
>     - This would cause some security tradeoffs regarding hash size
>
>     My personal recommendation: we declare compatibility with existing formats out of scope for now.
>
> 3) Do we want private discovery to work as a system component, or as an app library? (a.k.a. per device or per app.)
>     - We had briefly discussed this at IETF 100 in Singapore following Stuart's discussion of requirements:
>         https://tools.ietf.org/html/draft-cheshire-dnssd-privacy-considerations-01#section-3
>     - I recall there was support in the room for having finer granularity such as per-app
>
>     My personal recommendation: we focus on per-app for now.
>
> Based on the above, as chair, I'm proposing we move forward with a reduced scope solution for now,
> that is without server mode, using binary formats, and runs as an app library.
> To clarify, this wouldn't mean we won't try to build a follow-up solution for those requirements later,
> this is just meant as framing to help us make progress towards a concrete proposal.
>
> Please share your opinions on this potential approach.

+1

This sounds reasonable to me!

Best,
Chris