Re: [Doh] A question of trust (was Re: Draft -09 and WGLC #2)

[Sara Dickinson <[e-mail]>]

> On 29 May 2018, at 02:30, Patrick McManus <[e-mail]> wrote:
> 
> 
> If we change the text, I think that we could avoid the MUST and say that
> this document assumes that DNS API clients configure a single DNS API
> server and do not send queries to, or accept answers from, other servers.
> 
>  I don't think 'single' is the operative part there - and I don't think the document assumes that beyond a single request needing a single URI. But, yes, its the "others" that it is looking to exclude.

+1 Do not limit this to a single configured server. 

> 
> I also think you're right to imply that we have a tension here between what we want to exclude now (stumbling across websites offering to be recursives) and what we want to enable exploring later (stumbling across websites offering to be recursives :)) in a more comprehensive manor. I'll offer up some text inspired by 7540's handling of client certs which has a somewhat similar profile.
> 
> This might not be hard to solve - the section is really just using configuration and trust synonymously and a bit redundanty, but people are reading more into trust. So perhaps we can just use one term. wdyt of: 
> 
> "A DNS API client uses configuration to select the URI, and thus the DNS API server, used for resolution. [RFC2818] defines how HTTPS verifies the server's identity.
> 
> A client MUST NOT use a different URI simply because it was discovered outside of configuration. Specifically, this specification does not extend DNS resolution privileges to URIs that are not recognized by the DNS API client as configured URIs. A future specification may support this case.”

I much prefer the approach of just discussing configuration but I don’t think this goes far enough in answering Andrews question or helping implementors work out exactly what to to. So….

What does ‘configuration’ cover?
- Just direct configuration e.g. via a client API or config file
- Or also dynamic configuration e.g. via DHCP, assuming a future option for this (which raises the question of trust again….)? 

I support only specifying direct configuration in this document but either way making it more explicit.

Sara.