IETF Logo Mail Archive

Re: [Doh] [Ext] panel discussion on DoH/DoC

Eliot Lear <lear@cisco.com> Thu, 07 February 2019 17:00 UTC

Return-Path: <lear@cisco.com>
X-Original-To: doh@ietfa.amsl.com
Delivered-To: doh@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B0D94129508 for <doh@ietfa.amsl.com>; Thu, 7 Feb 2019 09:00:25 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -12.6
X-Spam-Level:
X-Spam-Status: No, score=-12.6 tagged_above=-999 required=5 tests=[DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id U-OkylLmk_4U for <doh@ietfa.amsl.com>; Thu, 7 Feb 2019 09:00:23 -0800 (PST)
Received: from aer-iport-4.cisco.com (aer-iport-4.cisco.com [173.38.203.54]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 823D4129284 for <doh@ietf.org>; Thu, 7 Feb 2019 09:00:21 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=5131; q=dns/txt; s=iport; t=1549558821; x=1550768421; h=from:message-id:mime-version:subject:date:in-reply-to:cc: to:references; bh=3VdBXMrYCm0jAD9wkr+jqDqKWYxIq1cnFYa8uC+6YVg=; b=RW0RgQdL0sX6no2V//ckVEJomP/FLwE8kBnngU7Fw0QocN330I83FHHx pZr4e3ta/SankzSrXITqSQvIDVLER4xgO2agZclib4qch/mV7QPa+hTNd +rkRYXBgU02fl3Gk35jo2hQ8pX82h8S4r1VotkftXUCUfC2oFfn8QpBJJ E=;
X-Files: signature.asc : 488
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: A0AEAADZY1xc/xbLJq1kGgEBAQEBAgEBAQEHAgEBAQGBUQUBAQEBCwGDOzInhAOIGl+NHXyRJoVvgXsIAwEBhGwCg0o0CQ0BAwEBAgEBAm0ohUoBAQEDASNWBQsLBBQqAgJXBhODJAGBeQitS4EvhUSEVw+CLj+JbYF/gREnH4IXNYgKMYIEIgKRAJIQCYRGjX8ZikqIC5kSgmoCBAYFAhSBRjiBVjMaCBsVZQGCQT6QID4DMI56AQE
X-IronPort-AV: E=Sophos;i="5.58,344,1544486400"; d="asc'?scan'208,217";a="9879799"
Received: from aer-iport-nat.cisco.com (HELO aer-core-4.cisco.com) ([173.38.203.22]) by aer-iport-4.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 07 Feb 2019 17:00:19 +0000
Received: from [10.61.203.34] ([10.61.203.34]) by aer-core-4.cisco.com (8.15.2/8.15.2) with ESMTPS id x17H0I3d030098 (version=TLSv1.2 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NO); Thu, 7 Feb 2019 17:00:18 GMT
From: Eliot Lear <lear@cisco.com>
Message-Id: <FEA4458B-3B11-4BD3-91DC-F5A4A4B27691@cisco.com>
Content-Type: multipart/signed; boundary="Apple-Mail=_68649E47-3EE6-4408-8263-89E1CC4CA047"; protocol="application/pgp-signature"; micalg="pgp-sha256"
Mime-Version: 1.0 (Mac OS X Mail 12.2 \(3445.102.3\))
Date: Thu, 07 Feb 2019 18:00:16 +0100
In-Reply-To: <2073b35e-1383-bae1-b80e-3f3a0db6031f@nostrum.com>
Cc: Paul Hoffman <paul.hoffman@icann.org>, DoH WG <doh@ietf.org>, Ted Lemon <mellon@fugue.com>, Joseph Lorenzo Hall <joe@cdt.org>
To: Adam Roach <adam@nostrum.com>
References: <20190207105106.GB1772@server.ds9a.nl> <C7C3BAF7-4BD4-4EE2-B3F2-1F8B49222980@fugue.com> <20190207130313.7g7hf4swaopnr75e@nic.fr> <FD7BFAFF-88B9-49BF-A652-3649ADCD53F9@fugue.com> <7A2202F4-FAE9-4282-BC0B-8229A9A6E016@icann.org> <A0823A81-BE76-45F4-B5FF-0ADD82352922@cisco.com> <2073b35e-1383-bae1-b80e-3f3a0db6031f@nostrum.com>
X-Mailer: Apple Mail (2.3445.102.3)
X-Outbound-SMTP-Client: 10.61.203.34, [10.61.203.34]
X-Outbound-Node: aer-core-4.cisco.com
Archived-At: <https://mailarchive.ietf.org/arch/msg/doh/75tlZem10nSOkU11sU-do1rzsD0>
Subject: Re: [Doh] [Ext] panel discussion on DoH/DoC
X-BeenThere: doh@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: DNS Over HTTPS <doh.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/doh>, <mailto:doh-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/doh/>
List-Post: <mailto:doh@ietf.org>
List-Help: <mailto:doh-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/doh>, <mailto:doh-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 07 Feb 2019 17:00:26 -0000

Hi Adam,

> On 7 Feb 2019, at 17:49, Adam Roach <adam@nostrum.com> wrote:
> 
> On 2/7/19 10:04 AM, Eliot Lear wrote:
>> And so this brings up a key research question that would be useful to answer, and perhaps those at FF and Chromium could answer it:
>> 
>> Is there a suitable user interface that will keep users from harming themselves with DoH?
> 
> 
> If there were a pat answer to this question, we would have gone to release with DoH last summer. The user experience around activating and configuring DoH remains, as you suggest, a research topic. The standard here is informed consent.


Again, I haven’t been tracking this for quite some time, and so I didn’t want to presume that there wasn’t work done in this space.  Also, I’m quite certain you meant “meaningful consent” above.  Another question I wonder is whether there are times when DoH will be active and when it will not be active, again somewhat based on the enterprise use case, or whether it should either be enabled or disabled.  The issue is that if it can flip from one to the other, do you have to signal the user?  If you do, that becomes both real estate and signalling issues, the latter of which is subject to habituation.

Again, researchy stuff.  Which leads me to another question- if DoH has mostly finished in the IETF, maybe this becomes more of a topic for the IRTF?

Eliot

v2.23.0 | Report a Bug | By Email