Re: [Doh] [dnssd] [DNSOP] Working Group Last Call - draft-ietf-dnsop-session-signal

Stuart Cheshire <cheshire@apple.com> Wed, 21 February 2018 18:39 UTC

Return-Path: <cheshire@apple.com>
X-Original-To: doh@ietfa.amsl.com
Delivered-To: doh@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 156AF124BAC for <doh@ietfa.amsl.com>; Wed, 21 Feb 2018 10:39:22 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.311
X-Spam-Level:
X-Spam-Status: No, score=-4.311 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=unavailable autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=apple.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id l4Hosomx53mm for <doh@ietfa.amsl.com>; Wed, 21 Feb 2018 10:39:21 -0800 (PST)
Received: from mail-in5.apple.com (mail-out5.apple.com [17.151.62.27]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D1F0E126CC7 for <doh@ietf.org>; Wed, 21 Feb 2018 10:39:20 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; d=apple.com; s=mailout2048s; c=relaxed/simple; q=dns/txt; i=@apple.com; t=1519238360; x=2383151960; h=From:Sender:Reply-To:Subject:Date:Message-id:To:Cc:MIME-version:Content-type: Content-transfer-encoding:Content-ID:Content-Description:Resent-Date:Resent-From: Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:In-reply-to:References:List-Id: List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive; bh=wr+Q+pTHR18PhpmaO1gR4lH0LomQ8hAu1UtrhIObbSE=; b=cTvbvukh5sBWnhVYTegNwmVH83f9BAl1ZDUAOki1vVId6/uoQ9nQhlRmZrWM9P6w lUfKjY2kxzBkBNCNnPbHBxMi3Fc5os1ls8U/vlg48owzmxSibUl9YJfA/doIW9A4 T/1kCH0MtcPJXwO5MpufjHTH/caAOT1PpG66CXn6IYLWejVQ3fK/MHodgHKDhe63 adhcTetyblkU9oCw1HeU9+d7z0rOFcqDse3b61ENrqeF6hj8rKZaGuJENqZ6F8MX SXVvKfgM04Sq0ZNrBp7QqfG6cfJIb68X54hUVVdEmpGO5txVmmK4nU3cK+ZUND6R rnIV8iFudECEAXk+PunosA==;
Received: from relay6.apple.com (relay6.apple.com [17.128.113.90]) (using TLS with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mail-in5.apple.com (Apple Secure Mail Relay) with SMTP id A7.61.13704.8DCBD8A5; Wed, 21 Feb 2018 10:39:20 -0800 (PST)
X-AuditID: 11973e13-efdff70000003588-c9-5a8dbcd83be7
Received: from nwk-mmpp-sz09.apple.com (nwk-mmpp-sz09.apple.com [17.128.115.80]) by relay6.apple.com (Apple SCV relay) with SMTP id 16.AA.23861.8DCBD8A5; Wed, 21 Feb 2018 10:39:20 -0800 (PST)
MIME-version: 1.0
Content-type: text/plain; charset="utf-8"
Received: from [17.234.51.43] by nwk-mmpp-sz09.apple.com (Oracle Communications Messaging Server 8.0.2.2.20180130 64bit (built Jan 30 2018)) with ESMTPSA id <0P4I000O9JTHRD60@nwk-mmpp-sz09.apple.com>; Wed, 21 Feb 2018 10:39:20 -0800 (PST)
Sender: cheshire@apple.com
From: Stuart Cheshire <cheshire@apple.com>
Content-transfer-encoding: quoted-printable
Date: Wed, 21 Feb 2018 10:39:15 -0800
References: <CADyWQ+GsU9dL8D58Eko0w9mVRMMTZ7f9NQKx3a0XS7oUGHjniQ@mail.gmail.com> <91E3DCED-7A40-4454-9809-EBF68E942DB0@vpnc.org> <02FF7C21-3421-40C5-A530-BE1D814237B2@cisco.com> <976312C8-4424-4642-A150-21F25FB137EE@fugue.com> <5AFBBFBE-CF5A-4F7A-9AC9-F7E0040BBABD@cisco.com>
To: "Jan Komissar (jkomissa)" <jkomissa@cisco.com>, Ted Lemon <mellon@fugue.com>, "dnssd@ietf.org" <dnssd@ietf.org>, dnsop <dnsop@ietf.org>, "doh@ietf.org" <doh@ietf.org>, Paul Hoffman <paul.hoffman@vpnc.org>
In-reply-to: <5AFBBFBE-CF5A-4F7A-9AC9-F7E0040BBABD@cisco.com>
Message-id: <8225F726-323C-4078-9CB5-C6672025494B@apple.com>
X-Mailer: Apple Mail (2.3445.5.20)
X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFjrFLMWRmVeSWpSXmKPExsUi2FAYpXtjT2+Uwb2VohZ331xmsXi/dBaj xbW7F9ksGpctZbJ4s+YIk8Wt9V9YHdg8pvzeyOrRdGEZu8eSJT+ZPD7PvsocwBLFZZOSmpNZ llqkb5fAldE+oYet4ApbxfH17A2MS1m7GDk5JARMJI70/WHsYuTiEBJYzSSxt/EJcxcjB1ji 16lyiPhBRokfD1YygjTwCghK/Jh8jwWkhllAXWLKlFyQsJDAF0aJW3dkQGxhASmJVys/M4PY bAJaEi8+X2EDsZkFtCWevLvAClETIXHuyEl2kDEsAqoSd6+xQKyayyTR+PE5O4gjInCNUeLr +g/sIA2cArYSTVMusEPcYCNx8/81NogHlCSmf78NZS9hkzi1qXgCo9AsJKfOQjh1FpIzFjAy r2IUyk3MzNHNzDPVSywoyEnVS87P3cQICvzpdsI7GE+vsjrEKMDBqMTDu6GsN0qINbGsuDL3 EKM0B4uSOK/fzp4oIYH0xJLU7NTUgtSi+KLSnNTiQ4xMHJxSDYxbjqhm9+U6BXe+40u47KjG +G7bn6dneC7Nal1z6me/Sq+vW8mhqHeTnp1uFMssnutzZem9CaFmLVLX61ZsWfdi3jU+o2VN L36d5nv0WnCl0sm7F3oF/92p+djGsXmT/6uprg6Ta2Y+yll68aXz/E3hdfF/RNbM/q5glPlU 6OSMhnfzGwxl9aU7lFiKMxINtZiLihMBlSXiGV0CAAA=
X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFtrHLMWRmVeSWpSXmKPExsUi2FAcoHtjT2+UwbzJQhZ331xmsXi/dBaj xbW7F9ksGpctZbJ4s+YIk8Wt9V9YHdg8pvzeyOrRdGEZu8eSJT+ZPD7PvsocwBLFZZOSmpNZ llqkb5fAldE+oYet4ApbxfH17A2MS1m7GDk4JARMJH6dKu9i5OIQEjjIKPHjwUrGLkZODl4B QYkfk++xgNQwC6hLTJmSCxIWEvjCKHHrjgyILSwgJfFq5WdmEJtNQEvixecrbCA2s4C2xJN3 F1ghaiIkzh05yQ4yhkVAVeLuNRaIVXOZJBo/PmcHcUQErjFKfF3/gR2kgVPAVqJpygV2iBts JG7+vwY2VEJASWL699tsExj5ZyE5bxbCebOQrF7AyLyKUaAoNSex0kwvsaAgJ1UvOT93EyM4 VAujdjA2LLc6xCjAwajEw7uhrDdKiDWxrLgy9xCjBAezkgjviQSgEG9KYmVValF+fFFpTmrx IUZpDhYlcd5GD6CUQHpiSWp2ampBahFMlomDU6qB0XMt284Xkw8s0dH83Kl3lmuHflPJ+jkO X9z4lvRffPlpjmbis+eaM9rrvh9yYKp/FFD6csrp6x/LJlvMqv3tsfOk7NOL5/T+95cpbeRr 2+uwkbFBWHyS+05fvnO1XgdlLh4+5L/c2D96X3eVirBXtgdH47nAyN25xs8TduuGquRMDTvx 1YN7nRJLcUaioRZzUXEiAPXc+I1RAgAA
Archived-At: <https://mailarchive.ietf.org/arch/msg/doh/M-Dgg2WQTWYIvUfSNzT26t8Ve24>
Subject: Re: [Doh] [dnssd] [DNSOP] Working Group Last Call - draft-ietf-dnsop-session-signal
X-BeenThere: doh@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: DNS Over HTTPS <doh.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/doh>, <mailto:doh-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/doh/>
List-Post: <mailto:doh@ietf.org>
List-Help: <mailto:doh-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/doh>, <mailto:doh-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 21 Feb 2018 18:39:22 -0000

I think Jan makes a good point.

Suppose there’s a server that supports DNS over TCP, and DSO signaling, and Push Notifications, and DNS Update, and maybe other things.

Now suppose a client connects to that server. The server doesn’t know what that client is going to do. The client may do queries over TCP, or DNS updates. It may do queries over TCP and use the DSO signaling to request a longer inactivity timeout. It may request Push Notifications (which are currently specified to require TLS). It may do all of those.

When the server receives an incoming TCP connection request from a client, what are the first bytes received over that TCP connection? Are they a DNS header and message body? Are they a TLS handshake message? Can it be either? How does the server know?

Stuart Cheshire