Re: [Doh] [Ext] Goals of DOH

[Paul Hoffman <[e-mail]>]

On Apr 23, 2018, at 5:27 PM, Ted Lemon <[e-mail]> wrote:
> 
> On Apr 23, 2018, at 6:06 PM, Paul Hoffman <[e-mail]> wrote:
>> Can you point to the part of the draft (which is in WG Last Call) where it says that? If so, I promise to fix it because that is not an intended goal.
> 
> From the WG Charter:
> 
> The primary focus of this working group is to develop a mechanism that
> provides confidentiality and connectivity between DNS clients (e.g., operating
> system stub resolvers) and recursive resolvers. 
> 
> From the document's introduction:
> 
>   Two primary uses cases were considered during this protocol's
>   development.  They included preventing on-path devices from
>   interfering with DNS operations and allowing web applications to
>   access DNS information via existing browser APIs in a safe way
>   consistent with Cross Origin Resource Sharing (CORS) [CORS].  There
>   are certainly other uses for this work.
> 
> The first of these two use cases is to subvert the intentions of the network operator.

There are plenty of network operators who want to prevent on-path devices from interfering with DNS operations, and there are plenty who don't want that. 

> Providing confidentiality and connectivity is as well.  Of course, a less provoking way of saying what I said might be "to prevent abuse by network operators," but it's kind of a toss-up.

It's focusing on a subset of "network operators" and pretending that it is the complete set.

> Anyway, if you think this is not the goal of the document, there may be some kind of communication problem here to resolve... :)

So far, you're the only one to have had it, so hopefully this message fixes it.

--Paul Hoffman