Re: [Doh] Privacy Considerations Text (#2)

[nusenu <[e-mail]>]

Sara Dickinson wrote:
> I’ve done a PR
> https://github.com/dohwg/draft-ietf-doh-dns-over-https/pull/205 <https://github.com/dohwg/draft-ietf-doh-dns-over-https/pull/205>
> which removes the above text and more clearly breaks down the issue along the lines of the layer model already used. Specifically it add this text:
> 
> ---
> Session resumption creates trivial mechanisms for a server to correlate TLS 
> connections together.
> 
> + ### DNS Specific considerations
> +
> + Whilst DNS transports will generally carry the same privacy properties of the
> + layers used to implement them the standard DNS wireformat itself notably
> + contains no client identifiers. Using HTTPS as a transport therefore introduces
> + new privacy concerns over DNS over UDP, TCP or TLS (RFC7858) with regard to
> + additional data that may be visible to a DoH server compared to a DNS resolver.

+1 to this, especially the following sentence is clear and explicit about the privacy delta of
DoH vs. i.e. DoT:
"Using HTTPS as a transport therefore introduces new privacy concerns over DNS over UDP, TCP or TLS (RFC7858)"



-- 
https://twitter.com/nusenu_
https://mastodon.social/@nusenu