Re: [dnsext] draft-mohan-dns-query-xml-00.txt

[Paul Wouters <[e-mail]>]

On Wed, 28 Sep 2011, Mohan Parthasarathy wrote:

> DNSSEC validation is stub resolver is dependent on DNSSEC-aware CPEs,
> recursive servers etc. Here is a draft that we submitted yesterday to
> address this problem.
>
> http://www.ietf.org/id/draft-mohan-dns-query-xml-00.txt
>
> Please send your comments/feedback to the list.

Have you done any research on running DNS over port 80/443? That seems
to work quite often (after hotspot auth that breaks all dns)

I'm wondering about the difference in working with running dns over http
on port 80/443 and running plain dns over port 80/443

Also, if this is considered a good idea (of which I am not yet convinced),
why not add a mode similar to the "dnssec chains" proposal to speed things up
for the resolver, as we're already on TCP so response size shouldn't matter
as much as latency does.

You can test running dns over port 80/443 using ounbound and forwarding it
to open.nlnetlabs.nl

Paul
_______________________________________________
dnsext mailing list
[e-mail]
https://www.ietf.org/mailman/listinfo/dnsext