IETF Logo Mail Archive

Re: [Doh] Request for the DOH WG to adopt draft-hoffman-resolver-associated-doh

Daniel Stenberg <daniel@haxx.se> Wed, 23 January 2019 14:17 UTC

Return-Path: <daniel@haxx.se>
X-Original-To: doh@ietfa.amsl.com
Delivered-To: doh@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3073712DF71 for <doh@ietfa.amsl.com>; Wed, 23 Jan 2019 06:17:26 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.201
X-Spam-Level:
X-Spam-Status: No, score=-4.201 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id d-begWjmYHS0 for <doh@ietfa.amsl.com>; Wed, 23 Jan 2019 06:17:24 -0800 (PST)
Received: from giant.haxx.se (www.haxx.se [IPv6:2a00:1a28:1200:9::2]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 110CF128CE4 for <doh@ietf.org>; Wed, 23 Jan 2019 06:17:23 -0800 (PST)
Received: from giant.haxx.se (mail [127.0.0.1]) by giant.haxx.se (8.15.2/8.15.2/Debian-4) with ESMTPS id x0NEGr3c005171 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Wed, 23 Jan 2019 15:16:53 +0100
Received: from localhost (dast@localhost) by giant.haxx.se (8.15.2/8.15.2/Submit) with ESMTP id x0NEGrrk005160; Wed, 23 Jan 2019 15:16:53 +0100
X-Authentication-Warning: giant.haxx.se: dast owned process doing -bs
Date: Wed, 23 Jan 2019 15:16:53 +0100
From: Daniel Stenberg <daniel@haxx.se>
X-X-Sender: dast@giant.haxx.se
To: Tony Finch <dot@dotat.at>
cc: Paul Hoffman <paul.hoffman@icann.org>, DoH WG <doh@ietf.org>
In-Reply-To: <alpine.DEB.2.20.1901231314000.3160@grey.csi.cam.ac.uk>
Message-ID: <alpine.DEB.2.20.1901231506430.17402@tvnag.unkk.fr>
References: <8999D6F3-600E-4F1A-903C-10F8CAA6E4F3@icann.org> <alpine.DEB.2.20.1901230812390.17402@tvnag.unkk.fr> <alpine.DEB.2.20.1901231314000.3160@grey.csi.cam.ac.uk>
User-Agent: Alpine 2.20 (DEB 67 2015-01-07)
X-fromdanielhimself: yes
MIME-Version: 1.0
Content-Type: text/plain; charset="US-ASCII"; format="flowed"
Archived-At: <https://mailarchive.ietf.org/arch/msg/doh/FrObafl3CCQg_wrfItM4xUy7ht4>
Subject: Re: [Doh] Request for the DOH WG to adopt draft-hoffman-resolver-associated-doh
X-BeenThere: doh@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: DNS Over HTTPS <doh.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/doh>, <mailto:doh-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/doh/>
List-Post: <mailto:doh@ietf.org>
List-Help: <mailto:doh-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/doh>, <mailto:doh-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 23 Jan 2019 14:17:26 -0000

On Wed, 23 Jan 2019, Tony Finch wrote:

> I'm not against them using other servers for off-site names (after all they 
> can usually just use their mobile provider instead) but there should at 
> least be a way for their device to automatically locate a local DNS server 
> with a transport it likes.

In this regard it is truly unfortunate that a user (application) can't tell if 
name is "local" or "remote" or perhaps which server it should ask for what 
names.

While you want your users to use that local server that you announce to them, 
when I go to my coffee shop or visit a friend of mine I'd rather *not* use 
whatever local server they advertise...

Right now the only way a user can use both local private names as well as 
remote names is by telling one of the resolvers *all* names and hope that it 
fails for the one set it doesn't know of so that the client can switch over 
and use the other server for those names. Not ideal, for privacy reasons and 
more.

-- 

  / daniel.haxx.se

v2.27.8 | Report a Bug | By Email | System Status