Re: [hrpc] "Paul Vixie and Peter Lowe on Why DoH is Politically Motivated"

Ted Lemon <mellon@fugue.com> Tue, 16 November 2021 19:19 UTC

Return-Path: <mellon@fugue.com>
X-Original-To: hrpc@ietfa.amsl.com
Delivered-To: hrpc@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 70BF43A07E2 for <hrpc@ietfa.amsl.com>; Tue, 16 Nov 2021 11:19:05 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.898
X-Spam-Level:
X-Spam-Status: No, score=-1.898 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=fugue-com.20210112.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id A1R2aa4d8tYg for <hrpc@ietfa.amsl.com>; Tue, 16 Nov 2021 11:19:00 -0800 (PST)
Received: from mail-oi1-x231.google.com (mail-oi1-x231.google.com [IPv6:2607:f8b0:4864:20::231]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9B33D3A07DF for <hrpc@irtf.org>; Tue, 16 Nov 2021 11:19:00 -0800 (PST)
Received: by mail-oi1-x231.google.com with SMTP id bj13so774626oib.4 for <hrpc@irtf.org>; Tue, 16 Nov 2021 11:19:00 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=fugue-com.20210112.gappssmtp.com; s=20210112; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=AmcWQyRO1JyovlQ2kPSjRxXG8PmYVJsCqEvSm7vS6ME=; b=eQMrLR2HoBYqGYsouTiACPIYLNyjvGqywViATg9RF7YtalvY3KI1ZmIIptpYY6jfFn Ku/ybU1gt7icadeM+V/+ebz4bmwckzH7VkslJhjhotJp5aPpruSLUGNZt3DBAaJ65x8P DtmNuW9LjoJWe7zwsigVSXxWiZqGL1Px6RSKD6pV2zJZpCI3LiKV2GQkNKIf85AsmhwR xJsoXrkRH3i044AJEZRq1+XfBxfK5P/dRu6h6n5TcUc0zSU2FO6rzartAU4bcEUXMgKm tmQ8JgfrWZQs56viMmOiAlFl0jl65mAvTPMyU86hyTwmQPBTW5d8w3m04QRrBxK2QFyX iNUQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=AmcWQyRO1JyovlQ2kPSjRxXG8PmYVJsCqEvSm7vS6ME=; b=aV2AhIOSAhXwKqxCJ7+fkCXk13q9E9Wi5MbUl0cn1lBRc4ixqI73M0js7gzCdJoaHT ZsMWVYjLmq8VM6r54I1hHQC1fM4w+1FSm4yUw4/XrBpvuTx1z6uqBv+hSmXSPw3r9M4f knRNLYvEbzh9DB5evpoXEdWdN3JrQWYw22an9FcTT8IvS/hdmhZq4Jg/nug77HwBhL/6 Po3QUb6tHLAmWcQr2+0nIfdqopkIshSlnOVLc5TDIb8tPJCFEMmlBFVEYEgYYT+8+CjE BVkIxHQWkFzxO1NSYRyYaEFmMS3b1YAn8axBDahRy5x33zzqxYtdDU+/pOkQ1VQ9KOxb sslg==
X-Gm-Message-State: AOAM531OiAFGVu6W9V3W7DSilJuC9X6Zl2pwcApqQvh3c1UaWvczcFmG SIThl29S8YDHau7rG1NGMsNSGkWRfOQW3ms24f9AYw==
X-Google-Smtp-Source: ABdhPJz+9n+/jxHwtgW1PiAfjCnn/EkKbb1h8pHYzs12HJdbVvqe00J0nFgdFXU6etv1hN1ijMsOkPagupAWQvJv7cU=
X-Received: by 2002:a05:6808:1389:: with SMTP id c9mr8684017oiw.55.1637090337852; Tue, 16 Nov 2021 11:18:57 -0800 (PST)
MIME-Version: 1.0
References: <YZJPwEUqvCvCUVRz@sources.org> <9AB66003-9285-4418-9BC4-9A415F033F26@pch.net> <CABcZeBOoxRMNBwMCMSsTGM_3YgbZs15ZAyxwd61=PhM05QCTRQ@mail.gmail.com> <1440178333.50167.1636999766064@appsuite-gw2.open-xchange.com> <CABcZeBMFsozNWN-Stcctr-i=xGd0OchJZj_6szazYAPVdygk8Q@mail.gmail.com> <1522915630.55835.1637080576757@appsuite-gw2.open-xchange.com>
In-Reply-To: <1522915630.55835.1637080576757@appsuite-gw2.open-xchange.com>
From: Ted Lemon <mellon@fugue.com>
Date: Tue, 16 Nov 2021 14:18:22 -0500
Message-ID: <CAPt1N1mb-eZovh3QC6D0Ot2UrKMn-cmvxYeBumcu83_1gMhssw@mail.gmail.com>
To: Vittorio Bertola <vittorio.bertola=40open-xchange.com@dmarc.ietf.org>
Cc: Eric Rescorla <ekr@rtfm.com>, hrpc@irtf.org
Content-Type: multipart/alternative; boundary="0000000000000da23305d0eccc59"
Archived-At: <https://mailarchive.ietf.org/arch/msg/hrpc/0yWlXhytnh6gYV9-ag3c2hjAajQ>
Subject: Re: [hrpc] "Paul Vixie and Peter Lowe on Why DoH is Politically Motivated"
X-BeenThere: hrpc@irtf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: hrpc discussion list <hrpc.irtf.org>
List-Unsubscribe: <https://www.irtf.org/mailman/options/hrpc>, <mailto:hrpc-request@irtf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/hrpc/>
List-Post: <mailto:hrpc@irtf.org>
List-Help: <mailto:hrpc-request@irtf.org?subject=help>
List-Subscribe: <https://www.irtf.org/mailman/listinfo/hrpc>, <mailto:hrpc-request@irtf.org?subject=subscribe>
X-List-Received-Date: Tue, 16 Nov 2021 19:19:05 -0000

On Tue, Nov 16, 2021 at 11:36 AM Vittorio Bertola <vittorio.bertola=
40open-xchange.com@dmarc.ietf.org> wrote:

> That's exactly why the difference between DoT and DoH is political way
> more than technical: I trust you that both may be used in ways that make
> them hard to block, but for DoT it is an unintended consequence, while for
> DoH it is an intended objective of the designers, stated in the
> specification itself and in several public statements.
>
> And this is a great illustration of the good reason why we talk about
political versus technical in the IETF: because if we consider only the
political and not the technical, we can wander off into the weeds doing
things that don't matter.

In this case, you're drawing a distinction of intent, but what matters is
the effect of the protocol, not what was intended. As an example, we've
seen a few people assert that DoH is bad because it makes it possible to
bypass the local resolver in a way that is difficult to detect (which is
actually debatable). But in fact it's trivial without the DoH protocol to
do the same thing—it's just not standardized. So the difference between DoH
and this non-standard protocol that I speculate might exist is merely that
one is documented and the other isn't.

So if we imagine that we are somehow protected when we don't document the
protocol, we are whistling past the graveyard. This is the important
distinction that we lose when we reduce this to a political discussion, and
it's the reason we shouldn't.