Re: [secdir] Security review of draft-ietf-dnsop-onion-tld-00.txt

[Alec Muffett <[e-mail]>]

Hello All!

Back from some manner of brief holiday, and I’ll try and pick up some loose ends without treading on Mark’s epic work.

>> The goal of leak-reduction is to reduce leaks, rather
>> than to assure security.
> 
> Are there privacy considerations with leak reduction?

Either leaks exist (likely) or they do not. It’s hard to conceive of where a reduction in efficacy of leak-prevention would benefit privacy, so onion-leak-reduction would seem to be one of those things that can be classified as "net win at scale” and the need for it should reduce with time.


>> Tor security does not rely on blackholing DNS requests, it relies upon
>> cryptographic technology.
>> 
>> Tools which are Tor-aware will not have the leakage problem.
> 
> OK, great, so I think just adding something on this point in the
> security considerations would be good.  We are fine on the other
> points and I just have the question about security properties for
> section 2.

I think Mark’s revisions nail this with the “legacy client” paragraph.  :-)

I will skim the rest of the mails and try to consolidate the next response, if any is required.

    -a