Re: [I18ndir] I18ndir early review of draft-schanzen-gns-10

[Paul Hoffman <[e-mail]>]

On 7 Mar 2022, at 10:45, Schanzenbach, Martin wrote:

> Ah I think this brings us on the right path.
> I am thinking about adding a security/privacy consideration with 
> respect to name leakage:
>
> """
> Name Leakage
>
> GNS names are indistiguishable from DNS names or other special-use 
> domain names [RFC6761].

This statement is not technically true, and making it definitively true 
is difficult in the protocol. To help clarify, I think you mean "GNS 
display names", not on-the-wire names; GNS on-the-wire names are quite 
different than DNS on-the-wire names.

But more significantly, the GNS spec in many places optionally allows 
GNS names and labels (display) to use Unicode characters and label/name 
lengths different from the DNS. Thus many GNS names are distinguishable, 
but many are not, so any security consideration becomes much more 
involved than the wording you proposed.

--Paul Hoffman