Re: [dnssd] Confirming consensus from DNSSD Privacy discussion in Bangkok

Christopher Wood <christopherwood07@gmail.com> Thu, 15 November 2018 01:51 UTC

Return-Path: <christopherwood07@gmail.com>
X-Original-To: dnssd@ietfa.amsl.com
Delivered-To: dnssd@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 898C6130E90 for <dnssd@ietfa.amsl.com>; Wed, 14 Nov 2018 17:51:52 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.75
X-Spam-Level:
X-Spam-Status: No, score=-1.75 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_ENVFROM_END_DIGIT=0.25, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=no autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id krrbLsXgWWsw for <dnssd@ietfa.amsl.com>; Wed, 14 Nov 2018 17:51:50 -0800 (PST)
Received: from mail-it1-x131.google.com (mail-it1-x131.google.com [IPv6:2607:f8b0:4864:20::131]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C32C7130D7A for <dnssd@ietf.org>; Wed, 14 Nov 2018 17:51:50 -0800 (PST)
Received: by mail-it1-x131.google.com with SMTP id f84-v6so5843354ita.1 for <dnssd@ietf.org>; Wed, 14 Nov 2018 17:51:50 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc:content-transfer-encoding; bh=Vjnk2TzZGrCBWqLBRHaBHFZlPCBUDv/PKiE0tciTZbw=; b=HaBnOD2gOMONhYVXX6iV2hD3vNF+khUpgcPItjUVSlChbmZOKnGtWC57IVzoMYEMOu MJJUPzvJTvDqAmO8TPtFrlN3X+G2oig6KiVzmqGaNmnSlQA+pAORwtbuJoLCVTQSpSQs 48cSo14veCRCOmw/U4Sek0SRfkMvfwYZFm0BTLy5182hqYmPqf3SFuxiqa5nLLhlzop7 KaVFN/bpWG0xsV2GuegyiRWA3TTMXMxRpO4nEIJXsEN7jVPcjbCpjCccHpWgqwYsj4/g rIigDHLvDtjtEv0RHBGLxc1l8Q+pCo96wJIaU8N8GgQrdWsv509KaY5QULmrn5nyT3A0 XjmA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc:content-transfer-encoding; bh=Vjnk2TzZGrCBWqLBRHaBHFZlPCBUDv/PKiE0tciTZbw=; b=ZAvahDFTNgMexxPpPe1DGzstD9lewPH1pBR1laBK8C8g9pz9q3y4Av5yY6N+v0GwqB VzrLwtFYxiTkifa2R02za6y2sJ35jP1A3dVrYUH7J9Jc77X/bJEp4vHFW9YCCh26TxVg n2HjC4FxXVJXUYQzRWpBxRyvHcfUjIrNV/SCyLDwjH5q3senE6j/8hOZptuDjCQoBYYD boxxDg8Up8cMxBOy6RAADQ7yzfT6bK7QM5kWUy1qSKOvi5Jud5VJi5v4nI4mDB0LJD5P jVgjd1hINGXbP4MGST6YhewZa1ALyyIO/QqHAw9fkm7yJfszzc1Xh0RPAviGB3C+tosV Na2w==
X-Gm-Message-State: AGRZ1gIB1A7Z+MKMMmdO9dPjH4Iw1u7V1jKVC3QSw+5d+XXN0kOz7vsD Y4EyjMBJYPhTR7sYeP3Dohd5gDiL9q3jkqBbdW8=
X-Google-Smtp-Source: AJdET5e7u9eohsomk5jx1pvQSgO2KekPri7IXuexeOBiDrLrLro/brV7I9F2HCrh77S72pJT38/0bDmY0YFqj90WQr8=
X-Received: by 2002:a24:a08a:: with SMTP id o132mr4383938ite.1.1542246709913; Wed, 14 Nov 2018 17:51:49 -0800 (PST)
MIME-Version: 1.0
References: <CAPDSy+6YyW_G7uwfwGPv1KLtJqL96dZ87R-5pnmmffEEniTigg@mail.gmail.com>
In-Reply-To: <CAPDSy+6YyW_G7uwfwGPv1KLtJqL96dZ87R-5pnmmffEEniTigg@mail.gmail.com>
From: Christopher Wood <christopherwood07@gmail.com>
Date: Wed, 14 Nov 2018 17:51:37 -0800
Message-ID: <CAO8oSXn4FiDF9FFPH4aHN80zH8+sQFswZzvCszvwCBvqFH9MFw@mail.gmail.com>
To: David Schinazi <dschinazi.ietf@gmail.com>
Cc: dnssd@ietf.org
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Archived-At: <https://mailarchive.ietf.org/arch/msg/dnssd/QLRWaB3wITDnQ9p6sSrEsDtyaIk>
Subject: Re: [dnssd] Confirming consensus from DNSSD Privacy discussion in Bangkok
X-BeenThere: dnssd@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "Discussion of extensions to DNS-based service discovery for routed networks." <dnssd.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnssd>, <mailto:dnssd-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dnssd/>
List-Post: <mailto:dnssd@ietf.org>
List-Help: <mailto:dnssd-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnssd>, <mailto:dnssd-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 15 Nov 2018 01:51:52 -0000

On Wed, Nov 14, 2018 at 5:37 PM David Schinazi <dschinazi.ietf@gmail.com> wrote:
>
> Hello everyone,
>
> It the room at IETF 103, there was a very productive discussion about DNSSD privacy:
> https://www.youtube.com/watch?v=hPuTD19R-uQ&t=28m43s
>
> During that discussion, the room reached consensus on the following items:
>
> 1) single-stage approach -- Up until now, we were considering two approaches: single-stage (send encrypted and authenticated service identifier, receive encrypted and authenticated service response) and two-stage (send encryption and authenticated identifier, receive encrypted and authenticated response, derive secrets, send and receive subsequent queries encrypted using derived secrets). There was consensus in the room to go with the single-stage approach.
>
> 2) Use of TLS -- The single-stage approach no longer requires a key exchange mechanism such as TLS. There was consensus in the room that we do not need TLS as part of this protocol.
>
> 3) Evolution of documents -- It was proposed that we would take all input and compound it into a single document and only advance that one. We will use draft-ietf-dnssd-privacy since that document has already been adopted by the working group. Christian Huitema has offered for Bob Bradley to join as co-author if Bob would like.
>
> If you disagree with any of these points, please say so before 2018-12-02.
>
> Thanks,
> David
> _______________________________________________
> dnssd mailing list
> dnssd@ietf.org
> https://www.ietf.org/mailman/listinfo/dnssd