Re: [Doh] New Version Notification for draft-dickinson-doh-dohpe-00.txt

I think this draft could use review from readers familiar with HTTP.  I
hope that people with knowledge of HTTP will help us to understand whether
this draft's recommendations would result in a significant increase in user
privacy.

For the draft's authors, I have a question: does this draft's "privacy
threat model" include a DOH server that uses active measures to
differentiate clients?  Or is it scoped only to passive discrimination
between different client implementations?

As for other issues, I think the draft might need to consider header
order.  I also couldn't find an easy list of mandatory headers in RFC 7540,
so that list might be worth repeating.

On Wed, Jul 18, 2018 at 10:03 AM Sara Dickinson <sara@sinodun.com> wrote:

> Hi All,
>
> We’ve just submitted a very short draft outlining a privacy profile for
> DoH called DoHPE.
>
> It is very basic at the moment but it would be great to get some feedback
> on the idea here and to see if the WG sees this as something that should go
> through this group or head somewhere else. Since the guidelines are purely
> HTTP related, this does feel like the right audience to review the document
> at least in the first instance.
>
> Sara.
>
>
> Begin forwarded message:
>
> *From: *internet-drafts@ietf.org
> *Subject: **New Version Notification for draft-dickinson-doh-dohpe-00.txt*
> *Date: *18 July 2018 at 09:58:48 GMT-4
> *To: *"Sara Dickinson" <sara@sinodun.com>, "Willem Toorop" <
> willem@nlnetlabs.nl>
>
>
> A new version of I-D, draft-dickinson-doh-dohpe-00.txt
> has been successfully submitted by Sara Dickinson and posted to the
> IETF repository.
>
> Name: draft-dickinson-doh-dohpe
> Revision: 00
> Title: DoHPE: DoH with Privacy Enhancements
> Document date: 2018-07-18
> Group: Individual Submission
> Pages: 8
> URL:
> https://www.ietf.org/internet-drafts/draft-dickinson-doh-dohpe-00.txt
> Status:
> https://datatracker.ietf.org/doc/draft-dickinson-doh-dohpe/
> Htmlized:       https://tools.ietf.org/html/draft-dickinson-doh-dohpe-00
> Htmlized:
> https://datatracker.ietf.org/doc/html/draft-dickinson-doh-dohpe
>
>
> Abstract:
>   This document describes DoHPE (DoH with Privacy Enhancements) - a
>   privacy and anonymity profile for DoH [I-D.ietf-doh-dns-over-https]
>   clients.  The profile provides guidelines on the composition of DoH
>   messages, designed to minimize disclosure of identifying information.
>
>
>
>
> Please note that it may take a couple of minutes from the time of
> submission
> until the htmlized version and diff are available at tools.ietf.org.
>
> The IETF Secretariat
>
>
> _______________________________________________
> Doh mailing list
> Doh@ietf.org
> https://www.ietf.org/mailman/listinfo/doh
>

Re: [Doh] New Version Notification for draft-dickinson-doh-dohpe-00.txt

Attachment: smime.p7s