Re: [dnssd] I-D Action: draft-ietf-dnssd-mdns-dns-interop-01.txt

[Tim Chown <[e-mail]>]

Hi Doug,

> On 18 Jul 2015, at 14:20, Douglas Otis <[e-mail]> wrote:
> 
> ...
> 
> The chartered goal was largely aimed at solving Apple's
> connectivity issues within school environments.  Satisfying
> such a goal should be met while also not exposing hybrid
> resources to the Internet or while strictly moderating the
> amount of mDNS resources exposed.

> …


I’ve listened to the recent exchange between yourself and Andrew, and while I feel you have raised some valid points, I don’t see that they are addressing the core topic being discussed in this draft, which is interoperability between labels used in different naming systems, as the title and name of the draft very clearly states.

On that basis, I don’t see any specific valid issues being raised against the content of this document. There have been no other issues raised during WGLC. Ralph and I are also discussing the draft with the dnsop chairs, with a view to ensuring appropriate review has been given from that WG.

Having said that, I believe you are asking some valid questions about the threat model of the hybrid DNS approach, including:
a) potential for use in DDoS attack
b) leakage of information (though wide area DNS-SD is possible in one form already now as Stuart has demonstrated in previous meetings)
c) scope of addressing being used

What I encourage is that you discuss these with Hosnieh, as author of the (currently personal) threat draft, see:
https://tools.ietf.org/html/draft-rafiee-dnssd-mdns-threatmodel-03 <https://tools.ietf.org/html/draft-rafiee-dnssd-mdns-threatmodel-03>

You’ll see that section 3.5 talk about leakage, for example. 

Ralph and I would like to see the WG agree on the key areas for this draft to cover, with a view to adoption as a WG item, so that will be a focus in Wednesday’s session, and subsequently on the list here.

As a final point, while the Educause petition was one driver for the dnssd WG work, there are five scenarios under consideration, including unmanaged home networks, for example.

Tim