IETF Logo Mail Archive

Re: [Doh] [dns-privacy] [DNSOP] New: draft-bertola-bcp-doh-clients

"Konda, Tirumaleswar Reddy" <TirumaleswarReddy_Konda@McAfee.com> Tue, 12 March 2019 05:32 UTC

Return-Path: <TirumaleswarReddy_Konda@mcafee.com>
X-Original-To: doh@ietfa.amsl.com
Delivered-To: doh@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0B67D131294; Mon, 11 Mar 2019 22:32:06 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.301
X-Spam-Level:
X-Spam-Status: No, score=-4.301 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=mcafee.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FBDXlFc_LKvj; Mon, 11 Mar 2019 22:32:03 -0700 (PDT)
Received: from DNVWSMAILOUT1.mcafee.com (dnvwsmailout1.mcafee.com [161.69.31.173]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0657913128C; Mon, 11 Mar 2019 22:32:02 -0700 (PDT)
X-NAI-Header: Modified by McAfee Email Gateway (5500)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mcafee.com; s=s_mcafee; t=1552368520; h=From: To:CC:Subject:Thread-Topic:Thread-Index:Date: Message-ID:References:In-Reply-To:Accept-Language: Content-Language:X-MS-Has-Attach:X-MS-TNEF-Correlator: dlp-product:dlp-version:dlp-reaction:authentication-results: x-originating-ip:x-ms-publictraffictype:x-ms-office365-filtering-correlation-id: x-microsoft-antispam:x-ms-traffictypediagnostic: x-microsoft-exchange-diagnostics:x-microsoft-antispam-prvs: x-forefront-prvs:x-forefront-antispam-report: received-spf:x-ms-exchange-senderadcheck:x-microsoft-antispam-message-info: Content-Type:Content-Transfer-Encoding:MIME-Version: X-MS-Exchange-CrossTenant-Network-Message-Id: X-MS-Exchange-CrossTenant-originalarrivaltime: X-MS-Exchange-CrossTenant-fromentityheader: X-MS-Exchange-CrossTenant-id:X-MS-Exchange-CrossTenant-mailboxtype: X-MS-Exchange-Transport-CrossTenantHeadersStamped: X-OriginatorOrg:X-NAI-Spam-Flag:X-NAI-Spam-Level: X-NAI-Spam-Threshold:X-NAI-Spam-Score:X-NAI-Spam-Version; bh=ZCvE1pzJoyuWAerJeWKGBciwA2TuLJsO4hNXHK PjhsA=; b=etrplUfKFDfJfinEtGLRKc6xRBdiMAT865L21WPA JuAnl/Mk/qjS27LvnlPUTa3zWE/NrP8mE33vq+Ad1ZkeefZ3mw F+wPWA8ZvoWjY6Sdafu/krJdXytsK/kDI5zrtEogfKGv7UU/Wl gb+O0BUdyWpwwBoU2lUPR7T7iw3HF88=
Received: from DNVEXAPP1N06.corpzone.internalzone.com (unknown [10.44.48.90]) by DNVWSMAILOUT1.mcafee.com with smtp (TLS: TLSv1/SSLv3,256bits,ECDHE-RSA-AES256-SHA384) id 0729_13c9_a26d656e_308c_497f_b3fe_a01976d057b1; Mon, 11 Mar 2019 23:28:39 -0600
Received: from DNVEXAPP1N04.corpzone.internalzone.com (10.44.48.88) by DNVEXAPP1N06.corpzone.internalzone.com (10.44.48.90) with Microsoft SMTP Server (TLS) id 15.0.1395.4; Mon, 11 Mar 2019 23:31:50 -0600
Received: from DNVO365EDGE1.corpzone.internalzone.com (10.44.176.66) by DNVEXAPP1N04.corpzone.internalzone.com (10.44.48.88) with Microsoft SMTP Server (TLS) id 15.0.1395.4 via Frontend Transport; Mon, 11 Mar 2019 23:31:49 -0600
Received: from NAM01-BN3-obe.outbound.protection.outlook.com (10.44.176.240) by edge.mcafee.com (10.44.176.66) with Microsoft SMTP Server (TLS) id 15.0.1395.4; Mon, 11 Mar 2019 23:31:49 -0600
Received: from BYAPR16MB2790.namprd16.prod.outlook.com (20.178.233.91) by BYAPR16MB3015.namprd16.prod.outlook.com (20.178.236.13) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1686.18; Tue, 12 Mar 2019 05:31:46 +0000
Received: from BYAPR16MB2790.namprd16.prod.outlook.com ([fe80::9c48:452b:e39c:ef39]) by BYAPR16MB2790.namprd16.prod.outlook.com ([fe80::9c48:452b:e39c:ef39%2]) with mapi id 15.20.1686.021; Tue, 12 Mar 2019 05:31:46 +0000
From: "Konda, Tirumaleswar Reddy" <TirumaleswarReddy_Konda@McAfee.com>
To: Eliot Lear <lear@cisco.com>, Paul Vixie <paul@redbarn.org>
CC: nalini elkins <nalini.elkins@e-dco.com>, "doh@ietf.org" <doh@ietf.org>, "dnsop@ietf.org" <dnsop@ietf.org>, "Ackermann, Michael" <mackermann@bcbsm.com>, Christian Huitema <huitema@huitema.net>, "dns-privacy@ietf.org" <dns-privacy@ietf.org>, Vittorio Bertola <vittorio.bertola=40open-xchange.com@dmarc.ietf.org>, Stephen Farrell <stephen.farrell@cs.tcd.ie>
Thread-Topic: [Doh] [dns-privacy] [DNSOP] New: draft-bertola-bcp-doh-clients
Thread-Index: AQHU2C+f7jidn2WHF0WeuF/A93J/OKYGu6uAgAABpwCAALdfMA==
Date: Tue, 12 Mar 2019 05:31:46 +0000
Message-ID: <BYAPR16MB27900AFE0CCF4E7CF6A35F6CEA490@BYAPR16MB2790.namprd16.prod.outlook.com>
References: <1700920918.12557.1552229700654@appsuite.open-xchange.com> <7667c4d7-2e78-0a27-84af-cf1c00fd4897@cs.tcd.ie> <1991054337.12802.1552259263075@appsuite.open-xchange.com> <eea64b30-aad0-a030-5360-1b1484f1d0e3@huitema.net> <CAPsNn2WhjHSEHJUEL8GB6X0d24fkajgPnY4YgkOQbXjyxb5q8Q@mail.gmail.com> <e62efaf3-4a35-4a52-5ed4-dee2e7fafe72@huitema.net> <69f989ba-0939-b917-b586-9e3af3fb8b74@redbarn.org> <CAPsNn2XNCzgAdfJtxBVboAe+d6sbCiV2fZv9185wm+HN+3zRdg@mail.gmail.com> <BYAPR16MB279065EE519680E7FC9A637CEA480@BYAPR16MB2790.namprd16.prod.outlook.com> <CAPsNn2Up1AtJJCdmu_9NC4jfzc-8dtE+QjUzRxMBUwaN44gvOg@mail.gmail.com> <76386691-c1aa-c48a-9b0d-67eb36a08a4f@redbarn.org> <36C6BE4B-5919-4658-9AF1-AB1572E5999C@cisco.com>
In-Reply-To: <36C6BE4B-5919-4658-9AF1-AB1572E5999C@cisco.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
dlp-product: dlpe-windows
dlp-version: 11.2.0.6
dlp-reaction: no-action
authentication-results: spf=none (sender IP is ) smtp.mailfrom=TirumaleswarReddy_Konda@McAfee.com;
x-originating-ip: [103.245.47.20]
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: c68451ee-938c-4104-d358-08d6a6ac04b3
x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600127)(711020)(4605104)(2017052603328)(7153060)(7193020); SRVR:BYAPR16MB3015;
x-ms-traffictypediagnostic: BYAPR16MB3015:
x-microsoft-exchange-diagnostics: =?utf-8?B?MTtCWUFQUjE2TUIzMDE1OzIzOm51V2Fhdmx3L1dPblJ1OE1nR0lucEQvM0RG?= =?utf-8?B?TFFvZUQrZVQzTE95V1VaSktHcWNwQTRCdXlPbiswWk4yT3lVYzNrdXBYdFI5?= =?utf-8?B?K05rYU5wT3F3bzNXOGZBeXJMQklkSGwvZURwWE55dUJmcThOKzBnN0hjOEZ5?= =?utf-8?B?M1FHZ1g4WVhLajVjZXBwSXR0SWlIVzZuUHIvWTJaWU14OVdCbHFnQUxGd0FI?= =?utf-8?B?U1AxZ2FxYVVRVUFPUm5ubTdDYzNZMVVOc0pxZkpJK05ydnZpcFltbThxdmI1?= =?utf-8?B?NW5PNTY4Q3phYmJHUGVGaW8rNFdaMmxMSzlXWHNIdkYzWm50VmM1ZEhnMU1s?= =?utf-8?B?blczUU5hKy85d2xyS2lTVk5iTkE1YmNKMlJNa0xoYkIwVEtMcFlNakozYzJK?= =?utf-8?B?N3U5S2lFbzFwZUwwbGY2cXYxRkRKSHR6WENJaVJyWm9GVTlNSzJrU25hQWZz?= =?utf-8?B?VFRqemx4UWtueWhPWUV5OU96ckdyL3U3VnVEdVh1bW5xSnpJaDl6YnJFTGtl?= =?utf-8?B?czFZZ2pxbjNBK1B4ODAxZm0zUTJOMmxDajZtRTEvWXlxeEtydTN0WkdPZ1VZ?= =?utf-8?B?ZVJqNDlkdjZCMGx6VzhZYngyK0FGVlJacU9PNWRwNC9vV3ZlN1haSmR6VkxQ?= =?utf-8?B?VXBOTGNCZjN2YVhTbnA5WEdTZkw2Vjd0ODNmdUQ1dUI5UWNiclpFcDNTb1ZZ?= =?utf-8?B?N3U0eHpXUWtiLytDaDlrOTVaSk1OMU1PbUpVcVJ3UlR3cFp0Tm9GSDNGdTlk?= =?utf-8?B?RmhOckhKdkpNV2ovOVBxci93Q0dBLzJTSVVRM0VaRHhYRTh2S2x0ZHNLQTA3?= =?utf-8?B?d0hDTWhjelNXUzVKRHpBVXBEOU1qVmYxbG93bkN3eHFEejJLZDVyQW9ZRUtp?= =?utf-8?B?dk0rWDlZcjVLV1FNbHdjWG1wS0NFRmwzZDl0WDJaL0hKeUFqK0tZeUxDM2Ez?= =?utf-8?B?R0JBU09YMGNUVEdVbVNOY2pEZ2xmUlQ4d3E5SUwyalkydEsxZU52eXNXNjZL?= =?utf-8?B?WWJnWEQ2NkFWc215eUFQczdZQ2NQcHFLVW5nWS9OS25uWlpWUStBeXhpM0JN?= =?utf-8?B?WTlwRy9uUzEvcEVnaTVaRkVxZEs1K2RtRGk0RU9IWEZPSjgyRSt1YTdDMnRi?= =?utf-8?B?VWUxUWJkMzROYUZMV2t6N1l6QjJ2bHRUQ3h6WGdRYmpNRDBDbWFReDVWQ1Nr?= =?utf-8?B?T1EyaHpuemsyV3ZRSTFWN3lZa0djNWxwS3BMSlNIRis3MXkwNC8xeklkOS9h?= =?utf-8?B?TGxsUGoxWkZlajdhR2g3eVoxV1N5RXlCSkRBR3VSZS9GdFJJWmhmaEoyQ2JZ?= =?utf-8?B?cHhpRTg2Tkp1U01NYStESU1hWXUvQTFFNWt2ZkJmcDQrR1RIL0IydEhFMkZN?= =?utf-8?B?UExyNFNDak56VS8yYldaeEg3L3NZNm96enhzS2MxS3F2QUp4cTI1OEUveUNo?= =?utf-8?B?V2dISyszM0NteTlyODFEaE41WCtyQVJKbWtLRTJwY2s2UW9hbEtpYmxaMzhS?= =?utf-8?B?dWtYRm5aUDdRbFNuaGY3M1hFcUNWZ3kvd0JKSjVoNGRQTlEwR0RINDJiRVIx?= =?utf-8?B?UTVPTU1FeEdDRnlpd3RZa1RpODMybHVZMFd2T0lGODc1WER3ODFKR1FGQ0Qw?= =?utf-8?B?UVJUaWIxaDRuK2FObm9oYXdqTFRYNU1Pbm4ydFRoOGJUSHh0S1QvSmJ1ZmZP?= =?utf-8?B?eU9HRnFPS3YrWG5jdlQ4REYzQXhoOEFVLzkyelZwTm5pWm1Wc0FRTjhSWmFp?= =?utf-8?B?RFVaVWtIQ3h6c2xjRFZNSUI5ZS9TdXQ1MlA4a0d4NmhMa1MvUzdmY0FVWjJH?= =?utf-8?B?WVNkUTVpUjF2b0pRU2w2ZWFyNVViYVExa1pkSjIyWDNwNHhVRDJKNDA3bEpt?= =?utf-8?Q?OFXE220SA31K5So1rZLXzqETcIxMa9fn?=
x-microsoft-antispam-prvs: <BYAPR16MB301564C8620B3F065091D282EA490@BYAPR16MB3015.namprd16.prod.outlook.com>
x-forefront-prvs: 09749A275C
x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(396003)(366004)(346002)(376002)(39860400002)(136003)(32952001)(13464003)(189003)(199004)(54094003)(305945005)(8936002)(7696005)(66066001)(80792005)(99286004)(74316002)(81156014)(81166006)(478600001)(2906002)(11346002)(72206003)(5660300002)(6116002)(8676002)(52536013)(14454004)(446003)(7736002)(486006)(3846002)(33656002)(97736004)(476003)(54906003)(110136005)(102836004)(86362001)(9686003)(106356001)(316002)(229853002)(55016002)(93886005)(25786009)(68736007)(26005)(186003)(6436002)(256004)(6246003)(7416002)(76176011)(105586002)(71200400001)(71190400001)(4326008)(53546011)(53936002)(6506007)(85282002); DIR:OUT; SFP:1101; SCL:1; SRVR:BYAPR16MB3015; H:BYAPR16MB2790.namprd16.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1;
received-spf: None (protection.outlook.com: McAfee.com does not designate permitted sender hosts)
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam-message-info: kX2753YEVReiV88UtB6HFyAHzySIhtle3ZBWiLj8b4EVr5lzjT4A96UnOhPjO46u17ePttgknla81qbf3EGTuAh4wUvS9sgNAIL9P8mvvhIr1JAFoyeGJcxQ2J5xvn69XZGpXwUO++NM9RaAj6U8hVbh/rREHOuwRkR11G3CDwVYAeC+81dtlHICi3Nij3LuZ5B42z7cP8vFFHEOJloXFGWOT5h+rF7+JcDPxe6RqbqussV4cF/RQLE3ZuNbFNx1oUIHlK7dgArOJRRCy1xYepcbiRXymGCfj8nSY59UKp02mj4X7ow7O4Srkk4R1rrw+bY1aFSwGFcSbOU4rdjbbvQVcdjSLE+fHk/dQy4q+RLWQfIFhL3fX4/WB5C/6Fwug+bBKxfRH1TJKJApNuY5GuwF6HEhFQ5Xkk/lFJyBQDw=
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-MS-Exchange-CrossTenant-Network-Message-Id: c68451ee-938c-4104-d358-08d6a6ac04b3
X-MS-Exchange-CrossTenant-originalarrivaltime: 12 Mar 2019 05:31:46.1722 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 4943e38c-6dd4-428c-886d-24932bc2d5de
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BYAPR16MB3015
X-OriginatorOrg: mcafee.com
X-NAI-Spam-Flag: NO
X-NAI-Spam-Level:
X-NAI-Spam-Threshold: 15
X-NAI-Spam-Score: 0.1
X-NAI-Spam-Version: 2.3.0.9418 : core <6500> : inlines <7031> : streams <1815461> : uri <2811194>
Archived-At: <https://mailarchive.ietf.org/arch/msg/doh/Uavf1pjKOV5BtJ8mWav6tlg4_jk>
X-Mailman-Approved-At: Tue, 12 Mar 2019 11:36:43 -0700
Subject: Re: [Doh] [dns-privacy] [DNSOP] New: draft-bertola-bcp-doh-clients
X-BeenThere: doh@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: DNS Over HTTPS <doh.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/doh>, <mailto:doh-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/doh/>
List-Post: <mailto:doh@ietf.org>
List-Help: <mailto:doh-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/doh>, <mailto:doh-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 12 Mar 2019 05:32:06 -0000

> -----Original Message-----
> From: Eliot Lear <lear@cisco.com>
> Sent: Monday, March 11, 2019 11:49 PM
> To: Paul Vixie <paul@redbarn.org>
> Cc: nalini elkins <nalini.elkins@e-dco.com>om>; Konda, Tirumaleswar Reddy
> <TirumaleswarReddy_Konda@McAfee.com>om>; doh@ietf.org; dnsop@ietf.org;
> Ackermann, Michael <mackermann@bcbsm.com>om>; Christian Huitema
> <huitema@huitema.net>et>; dns-privacy@ietf.org; Vittorio Bertola
> <vittorio.bertola=40open-xchange.com@dmarc.ietf.org>rg>; Stephen Farrell
> <stephen.farrell@cs.tcd.ie>
> Subject: Re: [Doh] [dns-privacy] [DNSOP] New: draft-bertola-bcp-doh-clients
> 
> Hi Paul,
> 
> > On 11 Mar 2019, at 19:12, Paul Vixie <paul@redbarn.org> wrote:
> >
> >
> >
> > nalini elkins wrote on 2019-03-11 10:26:
> >> Tiru,
> >> Thanks for your comments.
> >> > Enterprise networks are already able to block DoH services,
> > i wonder if everyone here knows that TLS 1.3 and encrypted headers is
> going to push a SOCKS agenda onto enterprises that had not previously
> needed one, and that simply blocking every external endpoint known or
> tested to support DoH will be the cheaper alternative, even if that makes
> millions of other endpoints at google, cloudflare, cisco, and ibm unreachable
> as a side effect?
> 
> That or it will require a bit more management at the MDM level.  I’m hoping
> the latter.  And I hope that one output of all of these documents will be a
> recommendation regarding MDM interfaces.

I don't think MDM is required to use the DoT/DoH servers provided by the local network.

-Tiru

> 
> Eliot

v2.8.7 | Report a Bug | By Email