Re: [Doh] [Ext] a tad confused on response sizes
Patrick McManus <pmcmanus@mozilla.com> Wed, 06 June 2018 09:50 UTC
Return-Path: <pmcmanus@mozilla.com>
X-Original-To: doh@ietfa.amsl.com
Delivered-To: doh@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5467A130ED0 for <doh@ietfa.amsl.com>; Wed, 6 Jun 2018 02:50:19 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.234
X-Spam-Level:
X-Spam-Status: No, score=-1.234 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, SPF_SOFTFAIL=0.665] autolearn=no autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id EucYxYXW6Jxb for <doh@ietfa.amsl.com>; Wed, 6 Jun 2018 02:50:17 -0700 (PDT)
Received: from linode64.ducksong.com (www.ducksong.com [192.155.95.102]) by ietfa.amsl.com (Postfix) with ESMTP id 2DB9A130EDB for <doh@ietf.org>; Wed, 6 Jun 2018 02:50:17 -0700 (PDT)
Received: from mail-oi0-f44.google.com (mail-oi0-f44.google.com [209.85.218.44]) by linode64.ducksong.com (Postfix) with ESMTPSA id B109D3A055 for <doh@ietf.org>; Wed, 6 Jun 2018 05:50:15 -0400 (EDT)
Received: by mail-oi0-f44.google.com with SMTP id t22-v6so4842669oih.6 for <doh@ietf.org>; Wed, 06 Jun 2018 02:50:15 -0700 (PDT)
X-Gm-Message-State: APt69E1ldTxW5KfVY/U7wQW9R9MaAF28x4vpKf4a+VjWkyQAGMWOKp+S Ix4JRrNAMCNl9fBPP+UMwjlvVgYf+719fJUxTJQ=
X-Google-Smtp-Source: ADUXVKKkYQ5r7cJpD5RsaYsYf8DWA62le0eJm4OIvKKPXa/0UmXTYKZDbm4dqW6zEzr1PNQFZY6jxnCRsBFxPiDUe3E=
X-Received: by 2002:aca:acb:: with SMTP id k72-v6mr1174566oiy.132.1528278615406; Wed, 06 Jun 2018 02:50:15 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a4a:8a32:0:0:0:0:0 with HTTP; Wed, 6 Jun 2018 02:50:13 -0700 (PDT)
In-Reply-To: <20180606062352.GD3011@mx4.yitter.info>
References: <alpine.DEB.2.11.1806051710290.1809@grey.csi.cam.ac.uk> <BYAPR19MB22489BE90FE768BCB13BD40B94660@BYAPR19MB2248.namprd19.prod.outlook.com> <alpine.DEB.2.11.1806051759430.1809@grey.csi.cam.ac.uk> <BYAPR19MB2248B0ADD763FF82E8C6C2E194660@BYAPR19MB2248.namprd19.prod.outlook.com> <alpine.DEB.2.11.1806051908040.1809@grey.csi.cam.ac.uk> <BYAPR19MB22489076D7E7A6780F78CCF094660@BYAPR19MB2248.namprd19.prod.outlook.com> <alpine.DEB.2.11.1806052125170.1809@grey.csi.cam.ac.uk> <8CB4E291-95D8-4AC2-9CBA-84D54A6E93DA@icann.org> <1FA8A1B3-82F9-4D1E-A555-C82A8E745B53@dotat.at> <BYAPR19MB2248C54302A11BB5967F529994650@BYAPR19MB2248.namprd19.prod.outlook.com> <20180606062352.GD3011@mx4.yitter.info>
From: Patrick McManus <pmcmanus@mozilla.com>
Date: Wed, 06 Jun 2018 11:50:13 +0200
X-Gmail-Original-Message-ID: <CAOdDvNpdXBLK4VjHJXOoXF9Bi2N9tZVO169yXfh9y4+BUw4GbQ@mail.gmail.com>
Message-ID: <CAOdDvNpdXBLK4VjHJXOoXF9Bi2N9tZVO169yXfh9y4+BUw4GbQ@mail.gmail.com>
To: Andrew Sullivan <ajs@anvilwalrusden.com>
Cc: DoH WG <doh@ietf.org>
Content-Type: multipart/alternative; boundary="000000000000fd3d7b056df617ac"
Archived-At: <https://mailarchive.ietf.org/arch/msg/doh/FnMsExh2O5_dzto86YfwsdlAyGA>
Subject: Re: [Doh] [Ext] a tad confused on response sizes
X-BeenThere: doh@ietf.org
X-Mailman-Version: 2.1.26
Precedence: list
List-Id: DNS Over HTTPS <doh.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/doh>, <mailto:doh-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/doh/>
List-Post: <mailto:doh@ietf.org>
List-Help: <mailto:doh-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/doh>, <mailto:doh-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 06 Jun 2018 09:50:20 -0000
On Wed, Jun 6, 2018 at 8:23 AM, Andrew Sullivan <ajs@anvilwalrusden.com> wrote: > > > TC-bit-containing DOH message is almost certainly garbage that needs > to be resolved via a different path, and it's therefore pretty hard > for me to see why this isn't just an error condition. It is my understanding that the TC bearing response is the best one that the DOH Server could generate. The assumption is that this is better than returning no response at all (i.e. just an error) because the client might be able to make use of it. If it has no value, then it should be an error (which probably means must not send and if received must be treated as error). But my understanding is it may have value to some clients. Set me straight as necessary. It is what it is - if you need more information and have another path available then try and resolve it that way assuming it meets whatever security requirements you have - but beware that some clients won't have another path.. for example javascript clients have only access to http, and the servers they may connect to are constrained via same origin policy. In practice DoH isn't constrained by size - so shifting to another transport with the same recursive isn't likely to improve things; I would think using a different recursive would be more likely to bear fruit. There's obviously no way to say that definitely.
- Re: [Doh] [Ext] a tad confused on response sizes Star Brilliant
- Re: [Doh] [Ext] a tad confused on response sizes Andrew Sullivan
- Re: [Doh] [Ext] a tad confused on response sizes Patrick McManus
- Re: [Doh] [Ext] a tad confused on response sizes Massimiliano Fantuzzi
- Re: [Doh] [Ext] a tad confused on response sizes Ray Bellis
- [Doh] a tad confused on response sizes bert hubert
- Re: [Doh] a tad confused on response sizes Dave Lawrence
- Re: [Doh] [Ext] a tad confused on response sizes Paul Hoffman
- Re: [Doh] a tad confused on response sizes Tony Finch
- Re: [Doh] [Ext] a tad confused on response sizes Tony Finch
- Re: [Doh] [Ext] a tad confused on response sizes Paul Hoffman
- Re: [Doh] [Ext] a tad confused on response sizes Andrew Sullivan
- Re: [Doh] [Ext] a tad confused on response sizes Tony Finch
- Re: [Doh] [Ext] a tad confused on response sizes Stephane Bortzmeyer
- Re: [Doh] [Ext] a tad confused on response sizes Stephane Bortzmeyer
- Re: [Doh] [Ext] a tad confused on response sizes Tony Finch
- Re: [Doh] [Ext] a tad confused on response sizes Andrew Sullivan
- Re: [Doh] [Ext] a tad confused on response sizes Star Brilliant
- Re: [Doh] [Ext] a tad confused on response sizes Tony Finch
- Re: [Doh] [Ext] a tad confused on response sizes Paul Hoffman
- Re: [Doh] [Ext] a tad confused on response sizes Dave Lawrence
- Re: [Doh] [Ext] a tad confused on response sizes Dave Lawrence
- Re: [Doh] [Ext] a tad confused on response sizes Star Brilliant
- Re: [Doh] [Ext] a tad confused on response sizes Tony Finch
- Re: [Doh] [Ext] a tad confused on response sizes Tony Finch
- Re: [Doh] [Ext] a tad confused on response sizes Star Brilliant
- Re: [Doh] [Ext] a tad confused on response sizes Tony Finch
- Re: [Doh] [Ext] a tad confused on response sizes Paul Hoffman
- Re: [Doh] [Ext] a tad confused on response sizes Andrew Sullivan
- Re: [Doh] [Ext] a tad confused on response sizes Tony Finch