Re: [Doh] panel discussion on DoH/DoC

[Shane Kerr <[e-mail]>]

Ted,

On 07/02/2019 14.08, Ted Lemon wrote:
> On Feb 7, 2019, at 8:03 AM, Stephane Bortzmeyer <[e-mail]> wrote:
>> The protocols are not innocent (they enable, they encourage, they
>> discourage) but they are not everything either. The dominance of Gmail
>> is not written in RFC 5321. DoH helps DoC ("helps", not "enables", DNS
>> over HTTPS was possible before), it does not decide DoC.
> 
> Of course, but in fact it appears that one of the primary use cases for DoH is DoC.   I would have thought that the primary use case for DoH was to bypass network censorship, but when I suggested as much during the discussion on the draft, the response I got suggested that the authors really hadn’t had that in mind, and that indeed the use case they had had in mind was DNS resolution in HTTP sessions by Javascript clients.   Which is, pretty much, DoC, although not the use case that subsequently emerged, where browsers do it instead of using the local resolver.

In theory one could send DoH queries to the server where you were 
getting an HTML page from, for any names that need resolution on that 
page. This would be a anti-DoC, indeed probably more decentralized than 
DNS itself is today.

If this model requires DNSSEC then it's not even that horrible, since 
web server operators would not be able to spoof or hijack DNS names.

Cheers,

--
Shane