Re: [Doh] [DNSOP] [dns-privacy] New: draft-bertola-bcp-doh-clients

[Paul Vixie <[e-mail]>]

On Tuesday, 12 March 2019 23:12:37 UTC Brian Dickson wrote:
>...
> I think there is a way to use technical design(s) to split hairs, i.e. I
> think the side meeting
> has the possibility of bearing fruit which is palatable enough for all
> parties.

i hope so. i will only be in prague from saturday evening 'til monday morning.

> 
> The crux of the problem is how to determine if the network operator is
> truly hostile (GFC),
> or merely restrictive (Paul's network, Paul's rules.)

no, that's not the crux. it's only one problem, the one being had by a user or 
application wondering which dns server and what protocol to use.

there's another problem, considered the crux by some, but still only one 
problem, and that's how to prevent truly hostile users or apps from bypassing 
the security policy implemented in the local RDNS control plane.

neither one gets to call itself the crux, i think.

vixie