Re: [homenet] DoH??

Ted Lemon <mellon@fugue.com> Wed, 18 September 2019 22:12 UTC

Return-Path: <mellon@fugue.com>
X-Original-To: homenet@ietfa.amsl.com
Delivered-To: homenet@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C3D8C1200E6 for <homenet@ietfa.amsl.com>; Wed, 18 Sep 2019 15:12:10 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.898
X-Spam-Level:
X-Spam-Status: No, score=-1.898 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=fugue-com.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id UJPyDeD5aUHV for <homenet@ietfa.amsl.com>; Wed, 18 Sep 2019 15:12:09 -0700 (PDT)
Received: from mail-qk1-x731.google.com (mail-qk1-x731.google.com [IPv6:2607:f8b0:4864:20::731]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id EFFDC1200C7 for <homenet@ietf.org>; Wed, 18 Sep 2019 15:12:08 -0700 (PDT)
Received: by mail-qk1-x731.google.com with SMTP id i78so1129511qke.11 for <homenet@ietf.org>; Wed, 18 Sep 2019 15:12:08 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=fugue-com.20150623.gappssmtp.com; s=20150623; h=from:message-id:mime-version:subject:date:in-reply-to:cc:to :references; bh=ONR4xclrW3yluXYWwqR+OvbqTre/sqgPF1yxHJcSEaU=; b=wnyfkKcM8TK8OvgwWiD8FTC2tHFiyXLEgu5wZpS5I2Ob2Ot2bQEsIujpsSsznq/2S8 Nb+He5E+j1JFr2f3rwKJAr0TG/x4gnS16iVDdWRg5K7SWuqqTXbfhOryY1Nos0D6LQsf iEstSc3XsDnCwkpSGrIf2pGiItc6+F7Gdu2plOaHgWlZeLxykWW6tGisegurtcRKWVl4 3tuuMTOVQOJ7sBW3EbBgOdp07Zpd7rzXQ7aw5vOdyDm68B0qdvivcCr6UEZvQqpjdDG3 vvdOKBVrWt/uFDA432PrxDWAjLtZASe6a0M0n0GJ0mK2CM07ldDuIGwDSkYkAJ998oxP EQMQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:message-id:mime-version:subject:date :in-reply-to:cc:to:references; bh=ONR4xclrW3yluXYWwqR+OvbqTre/sqgPF1yxHJcSEaU=; b=WrN5NLkKClYRcaBBglq77a7mhxZn3XEjAYoEeYZtfHpgA5dsSmsLDGRFwdE7a4IPbb T+L+lFZPlbmpBeasGFS1dg9zrz+BXFqpN9lf7NgSj2SynMz5V7e3ByjteIdncH58Zyx/ ZpgxXacDRUPW5C4A/QUvEOopRGLtYh3iXh+At1CbMzhNTEV97BVfasDWhervxMzNWZwN Ht1y2ngXd5s8eAl9vmrft+TCRld2HbZl5Tx7puzpwhVaSZ1yfhEZtiS4fW2Z7iwkGGp2 FPNBnVi/OAEkvH3XbFlci/ObvrQ3d5tpQc2zzEOCMCfD0u585vTSqnUeP/H1Luy9bElW bt3A==
X-Gm-Message-State: APjAAAUKXsm5Ja/njWn525oVSrDUpw2X/AYUHX6FjFdKfhcxCxwUqzwm ncfrFPgdmc5IqjQCt6KfWMsxDvfh0Vu1PQ==
X-Google-Smtp-Source: APXvYqzlR6/FQ96GlYNR1Zt1QrDX5Bl5/YPFY8iLSD3Pjw6AiZWGcPCPeTWbw3VJOiQtOg/doRuRMw==
X-Received: by 2002:a37:e47:: with SMTP id 68mr6556822qko.26.1568844727928; Wed, 18 Sep 2019 15:12:07 -0700 (PDT)
Received: from [10.0.10.46] (c-73-186-137-119.hsd1.ma.comcast.net. [73.186.137.119]) by smtp.gmail.com with ESMTPSA id j80sm3369004qke.94.2019.09.18.15.12.07 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Wed, 18 Sep 2019 15:12:07 -0700 (PDT)
From: Ted Lemon <mellon@fugue.com>
Message-Id: <9D2AC2B5-1F61-458E-95B1-8707D4B7FEEF@fugue.com>
Content-Type: multipart/alternative; boundary="Apple-Mail=_64920E4D-775C-429E-80DC-8F62DAA48226"
Mime-Version: 1.0 (Mac OS X Mail 13.0 \(3578.1\))
Date: Wed, 18 Sep 2019 18:12:05 -0400
In-Reply-To: <e5de498a-2555-bf88-4f7a-bf5e06019236@mtcc.com>
Cc: "homenet@ietf.org" <homenet@ietf.org>
To: Michael Thomas <mike@mtcc.com>
References: <e5de498a-2555-bf88-4f7a-bf5e06019236@mtcc.com>
X-Mailer: Apple Mail (2.3578.1)
Archived-At: <https://mailarchive.ietf.org/arch/msg/homenet/MDU_IRmN6yy1xPqZIsNmdcx1tMw>
Subject: Re: [homenet] DoH??
X-BeenThere: homenet@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: IETF Homenet WG mailing list <homenet.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/homenet>, <mailto:homenet-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/homenet/>
List-Post: <mailto:homenet@ietf.org>
List-Help: <mailto:homenet-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/homenet>, <mailto:homenet-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 18 Sep 2019 22:12:11 -0000

On Sep 18, 2019, at 6:07 PM, Michael Thomas <mike@mtcc.com> wrote:
> So I'm a little unclear about the specifics of Firefox using DNS over HTTP, but wouldn't this affect homenet naming, or any split horizon kind of naming?

In order for DoH to not break lots of things, it has to be implemented in such a way that special-use names are not resolved using a global resolver, and that VPN-supported names are looked up using the VPN resolver.   It would also be nice if there were a way for the homenet to signal that a public domain belonging to it is resolved locally, so that split-horizon naming on the homenet works correctly.  Similar functionality will be required for corporate networks that do split-horizon naming.