IETF Logo Mail Archive

Re: [Doh] [Ext] panel discussion on DoH/DoC

bert hubert <bert.hubert@powerdns.com> Thu, 07 February 2019 16:58 UTC

Return-Path: <bert@hubertnet.nl>
X-Original-To: doh@ietfa.amsl.com
Delivered-To: doh@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D5383129532 for <doh@ietfa.amsl.com>; Thu, 7 Feb 2019 08:58:23 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: 0.001
X-Spam-Level:
X-Spam-Status: No, score=0.001 tagged_above=-999 required=5 tests=[HEADER_FROM_DIFFERENT_DOMAINS=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qDhAuONE5ELP for <doh@ietfa.amsl.com>; Thu, 7 Feb 2019 08:58:21 -0800 (PST)
Received: from xs.powerdns.com (xs.powerdns.com [82.94.213.34]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5145F124BF6 for <doh@ietf.org>; Thu, 7 Feb 2019 08:58:20 -0800 (PST)
Received: from server.ds9a.nl (ip565244ed.adsl-surfen.hetnet.nl [86.82.68.237]) by xs.powerdns.com (Postfix) with ESMTPS id 7281E9FD6E; Thu, 7 Feb 2019 16:58:17 +0000 (UTC)
Received: by server.ds9a.nl (Postfix, from userid 1000) id 47B02ACCEFF; Thu, 7 Feb 2019 17:58:17 +0100 (CET)
Date: Thu, 07 Feb 2019 17:58:17 +0100
From: bert hubert <bert.hubert@powerdns.com>
To: Adam Roach <adam@nostrum.com>
Cc: Eliot Lear <lear@cisco.com>, Paul Hoffman <paul.hoffman@icann.org>, DoH WG <doh@ietf.org>, Ted Lemon <mellon@fugue.com>, Joseph Lorenzo Hall <joe@cdt.org>
Message-ID: <20190207165817.GB17102@server.ds9a.nl>
References: <20190207105106.GB1772@server.ds9a.nl> <C7C3BAF7-4BD4-4EE2-B3F2-1F8B49222980@fugue.com> <20190207130313.7g7hf4swaopnr75e@nic.fr> <FD7BFAFF-88B9-49BF-A652-3649ADCD53F9@fugue.com> <7A2202F4-FAE9-4282-BC0B-8229A9A6E016@icann.org> <A0823A81-BE76-45F4-B5FF-0ADD82352922@cisco.com> <2073b35e-1383-bae1-b80e-3f3a0db6031f@nostrum.com>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Disposition: inline
In-Reply-To: <2073b35e-1383-bae1-b80e-3f3a0db6031f@nostrum.com>
User-Agent: Mutt/1.5.24 (2015-08-30)
Archived-At: <https://mailarchive.ietf.org/arch/msg/doh/UpuqHmRoGxMjOUrm58AXDEIBXiU>
Subject: Re: [Doh] [Ext] panel discussion on DoH/DoC
X-BeenThere: doh@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: DNS Over HTTPS <doh.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/doh>, <mailto:doh-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/doh/>
List-Post: <mailto:doh@ietf.org>
List-Help: <mailto:doh-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/doh>, <mailto:doh-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 07 Feb 2019 16:58:25 -0000

On Thu, Feb 07, 2019 at 10:49:06AM -0600, Adam Roach wrote:
> If there were a pat answer to this question, we would have gone to release
> with DoH last summer. The user experience around activating and configuring
> DoH remains, as you suggest, a research topic. The standard here is informed
> consent.

I just enabled DoH to Cloudflare with a single click in Firefox.

I did not get any warning or explanation what this would mean. It had a
prefilled entry for Cloudflare that I can't even change from the UI.

https://imgur.com/a/WQrRG5Z has a screenshot.

You might ponder if as a data controller you might have a duty to do more
than this, especially since it hardcodes Cloudflare. 

Because it does not look like informed consent to me.

	Bert

v2.23.0 | Report a Bug | By Email