Re: [Doh] [Ext] Associating a DoH server with a resolver

[Adam Roach <[e-mail]>]

On 10/25/18 9:57 AM, Paul Hoffman wrote:
>
>> Other minor comments:
>> On Section 4, User Interface: I don't see the need for a user interface here.  In my view, opportunistic security generally shouldn't require user action and shouldn't produce a user-visible change.
> Browser vendors might prefer that, privacy-concerned users might want a UI. I guess I'm targeting the latter.


You cast this as a matter of user agency, while the analysis that's been 
done in this space has concluded that these kinds of indicators for 
opportunistic security are quite hostile to user interests.

It's hard to convey the subtlety of "you might be talking to the wrong 
thing, and there might be undetectable on-path attackers reading and 
modifying your data, but at least passive attackers can't see what's 
going on." And users who overestimate the level of protection implied by 
security indicia run a high risk of behaving in a way that does not suit 
their interests.

/a