[Iotops] Fwd: New Version Notification for draft-ietf-iotops-iot-dns-guidelines-04.txt

[Jim Mozley <[e-mail]>]

Hi all,

A new version of this draft is now published. Changes are primarily based on feedback from Dhyanam HP on the previous version, leading to us reviewing some sections. Thanks to Dhyanam for the review and comments.

- Section 3.1 - clarified "Device management software” to "Device management software authorized for configuration purposes”, but we didn’t want to stray into specifying device management software characteristics as this would be out of scope
- Section 3.2 - Improved the section on source port and transaction ID randomization to be clearer on the expected device behaviour
- Section 3.6 - Changed to be clear that implementation of Do[HQT] should be done as long as it “does not impair device operation because of power, memory, computational, or other deployment constraints.”
- Section 3.7.2 - added that manufacturers would need to allow for updated trust anchors and cryptographic algorithms *if* the device performed DNSSEC validation itself. Note we think it is unlikely that devices will perform DNSSEC validation themselves, but we have this section in the draft to cover that potential case.
- Section 5.2 - clarified that manufacturers would need to let operators know of domains outside of their direct control which they use for device operations, such as CDNs

Additional feedback and comments are always welcome :-)

Cheers, Jim

> Begin forwarded message:
> 
> Name:     draft-ietf-iotops-iot-dns-guidelines
> Revision: 04
> Title:    IoT DNS Security and Privacy Guidelines
> Date:     2026-07-06
> Group:    iotops
> Pages:    17
> URL:      https://www.ietf.org/archive/id/draft-ietf-iotops-iot-dns-guidelines-04.txt
> Status:   https://datatracker.ietf.org/doc/draft-ietf-iotops-iot-dns-guidelines
> HTMLized: https://datatracker.ietf.org/doc/html/draft-ietf-iotops-iot-dns-guidelines 
> Diff:     https://author-tools.ietf.org/iddiff?url2=draft-ietf-iotops-iot-dns-guidelines-04
> 
> Abstract:
> 
>   This document outlines guidance for Internet of Things (IoT)
>   manufacturers regarding the implementation of DNS stub resolver
>   software on devices, and for the management zones used for purposes
>   such as device configuration and software upgrades.  It aims to
>   mitigate security threats, enhance privacy, and to address
>   operational security challenges.
> 
>   DNS resolution between devices and management zone servers depends
>   upon DNS services within operator networks, and these services and
>   operator networks can be impacted by device behavior.  Hence this
>   document also provides guidance to network operators that deploy IoT
>   devices to mitigate the specific risks identified in this document
>   and take advantage of improved DNS security mechanisms provided by
>   manufacturers.
> 
> 
> 
> The IETF Secretariat
> 
>