[Doh] draft-ietf-doh-dns-over-https-04 feedback

Ray Bellis <ray@bellis.me.uk> Thu, 22 March 2018 10:01 UTC

Return-Path: <ray@bellis.me.uk>
X-Original-To: doh@ietfa.amsl.com
Delivered-To: doh@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8489012DA1A for <doh@ietfa.amsl.com>; Thu, 22 Mar 2018 03:01:39 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.901
X-Spam-Level:
X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id e64b2o7ZnfiM for <doh@ietfa.amsl.com>; Thu, 22 Mar 2018 03:01:32 -0700 (PDT)
Received: from hydrogen.portfast.net (hydrogen.portfast.net [188.246.200.2]) (using TLSv1 with cipher AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CCC9F12E8AC for <doh@ietf.org>; Thu, 22 Mar 2018 03:01:27 -0700 (PDT)
Received: from dhcp-9ab5.meeting.ietf.org ([31.133.154.181]:53748) by hydrogen.portfast.net ([188.246.200.2]:465) with esmtpsa (fixed_plain:ray@bellis.me.uk) (TLS1.0:DHE_RSA_AES_128_CBC_SHA1:16) id 1eyx2D-0004jd-Mx (Exim 4.72) for doh@ietf.org (return-path <ray@bellis.me.uk>); Thu, 22 Mar 2018 10:01:25 +0000
To: doh@ietf.org
From: Ray Bellis <ray@bellis.me.uk>
Message-ID: <96afa3b5-2925-8276-9374-082b491f4216@bellis.me.uk>
Date: Thu, 22 Mar 2018 10:01:25 +0000
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.13; rv:52.0) Gecko/20100101 Thunderbird/52.6.0
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Language: en-US
Content-Transfer-Encoding: 8bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/doh/uF1Ub_U3KGduWc-87qXycuQm4Ls>
Subject: [Doh] draft-ietf-doh-dns-over-https-04 feedback
X-BeenThere: doh@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: DNS Over HTTPS <doh.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/doh>, <mailto:doh-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/doh/>
List-Post: <mailto:doh@ietf.org>
List-Help: <mailto:doh-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/doh>, <mailto:doh-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 22 Mar 2018 10:01:41 -0000

I've just done a quick read of yesterday's -04 update.

I think §5.0 could benefit from a reference to RFC 2308 to clarify that
it's talking about negative answer caching.

It also says:

> A DNS API server SHOULD respond with HTTP status code 415 
> (Unsupported Media Type) upon receiving a media type it is unable to 
> process.

why not "MUST" ?

In §7.1, the wire format description which only refers to RFC 1035 could
be read as too prescriptive w.r.t. the packet length since it's limited
to 512 bytes in RFC 1035.

There's no need for that limitation, but consideration should be given
to how a DNS API Server that is actually a proxy between DOH and real
wire format should behave in the presence of a longer packet that isn't
accompanied by an EDNS OPT RR.

Ray