Re: [dnssd] Stephen Farrell's No Objection on draft-ietf-dnssd-requirements-05: (with COMMENT)

[Ralph Droms <[e-mail]>]

Stephen - let me summarize the responses to your comments; please let us know if these responses will be sufficient to address your comments...

> ----------------------------------------------------------------------
> COMMENT:
> ----------------------------------------------------------------------
> 
> 
> - section 6 intro: I'm not sure I buy that the set of relevant
> threats is only a union as stated. There are often new threats
> in new environments.

As Kerry wrote, the text is "the security issues are likely to include the union of those discussed in the Multicast DNS [mDNS] and DNS-Based Service Discovery [DNS-SD] specifications."  Given that this text allows for other issues, and the rest of section 6 raises other issues, are you OK with the text as it exists in draft-ietf-dnssd-requirements-05?

> - 6.6: I think one can also leak private information by
> searching in too broad a scope, e.g. if the client can be
> fingerprinted allowing re-identification. I think that's
> different from the example given, and maybe worth noting too.

Kerry pointed out that the difference between the threat from searching for services as opposed to other forms of name resolution in arbitrary zones is unclear.  While it would be possible to edit this text to include searching as well as registration, I think the resulting text would be too restrictive to allow for useful solutions.  Would you be willing to accept the text as it exists or do you have some other new text to suggest?

- Ralph