[TLS] ECH: fuzzy DNS data
Stephen Farrell <stephen.farrell@cs.tcd.ie> Sun, 28 November 2021 20:17 UTC
Return-Path: <stephen.farrell@cs.tcd.ie>
X-Original-To: tls@ietfa.amsl.com
Delivered-To: tls@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B1B963A0964 for <tls@ietfa.amsl.com>; Sun, 28 Nov 2021 12:17:27 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.999
X-Spam-Level:
X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, MSGID_FROM_MTA_HEADER=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=cs.tcd.ie
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ysiJey_wEWFr for <tls@ietfa.amsl.com>; Sun, 28 Nov 2021 12:17:23 -0800 (PST)
Received: from EUR05-AM6-obe.outbound.protection.outlook.com (mail-am6eur05on20705.outbound.protection.outlook.com [IPv6:2a01:111:f400:7e1b::705]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AD5CF3A095F for <tls@ietf.org>; Sun, 28 Nov 2021 12:17:21 -0800 (PST)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=BZ5TOYeIouK+xqBtgskntvYOEfBVWb/HF74ei8N0pRJhVcPGb9ConmMPASsCMqnjUCJ2+l6xgEGQ3DvXtsr9RY59QnEm50qSJx3MjrFMGRPrX5FIlR/8OlIB5/mSPRlmi3zdSbh+nEZW8ilpovY5cfwS+ROmJA7mPC2F7S9f4pKokDmTplPsPr5HUumwlFFAAZZzCnB2kM2vjMXSTMz4ksbxHHGMm/UQgWiSRAiK4HTmsvDg6XrVipZvwy9kTsUo0jyQ6E3ptgahP6ErVNQUsYAmfDnLApUmCxUlsURkIOIKiUHrm3WXguQunvlGgReqLKGbOQ53YNTysI8sMnpwKw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=gT14knVndIQihx5JUp7gQEyJT4arVoQq9yjWCRyimRw=; b=Iq3lmxGtvygoOtFZVr3hwrw2bJq72wDXlG2pzCSX+A0teZRRJgLgnRrMG9ROwYLhHluZjtCmQ2/vRXrklni4SH4N3mhWTkcz/Da/adDzYvuqYLRaMUxLyZaI3RwA00/qATBJdpsWEYKwguiIJVJNEGrPBjnO4ueFJ7eie7TuU6fjLnCD68SYJCw/KmnXAzwXyohc97vegg7eZKYKC2FhcHyGxIZryk23bGdlt5V92aQUEq3jvPeFHn2QZ319R8zbygf+G6iEZrXOJMZFxzVdKhXL/SE70RANvWpl2gz6/vyzyPMWu7KLczmYiBye8alEicJVq4rNbs2JD41l0qkc4Q==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cs.tcd.ie; dmarc=pass action=none header.from=cs.tcd.ie; dkim=pass header.d=cs.tcd.ie; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cs.tcd.ie; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=gT14knVndIQihx5JUp7gQEyJT4arVoQq9yjWCRyimRw=; b=MV+N9T+5UK8KW8lMMxrU8ZiSrJaWDBo8ndfeY6nEN+hSd0ShVFcEIva2nkR7xMff6XopwtZl2ON4VlxH86HZ+ZSksovOM/5aUfTFFmIQDj34zSA0p1R9dQkYDuDSDBLf5F4WEiPjET5VrwwSKzN81si8XtCTHZXAuYkHS/COK1JrrBaPAglAIGmqqnQqLBLQ2jQcLt7kJ8LEUGgQJve1ULIzsw0b1BAyfbTbVSgsWhDB5xsfjcb7zgS4ikl2aC2Ui+HgF7Qt8uodkWnllazKSOsWq0glNHrd5NNMi7zUhKRDGoszQH00TR6BYaMb/S0Wp0xqsOElefooujaQWcKknA==
Authentication-Results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=cs.tcd.ie;
Received: from DB7PR02MB5113.eurprd02.prod.outlook.com (2603:10a6:10:77::15) by DB7PR02MB3979.eurprd02.prod.outlook.com (2603:10a6:10:4e::29) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.4734.23; Sun, 28 Nov 2021 20:17:14 +0000
Received: from DB7PR02MB5113.eurprd02.prod.outlook.com ([fe80::a85c:e144:6533:99ea]) by DB7PR02MB5113.eurprd02.prod.outlook.com ([fe80::a85c:e144:6533:99ea%4]) with mapi id 15.20.4734.024; Sun, 28 Nov 2021 20:17:14 +0000
Message-ID: <358f459c-1bc3-53c6-7525-e3c30f1f4fe0@cs.tcd.ie>
Date: Sun, 28 Nov 2021 20:17:12 +0000
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:91.0) Gecko/20100101 Thunderbird/91.3.1
Content-Language: en-US
To: "tls@ietf.org" <tls@ietf.org>
From: Stephen Farrell <stephen.farrell@cs.tcd.ie>
Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="------------FjhnR0SO9zIEx753pxmdHPu7"
X-ClientProxiedBy: DB7PR05CA0029.eurprd05.prod.outlook.com (2603:10a6:10:36::42) To DB7PR02MB5113.eurprd02.prod.outlook.com (2603:10a6:10:77::15)
MIME-Version: 1.0
X-MS-Exchange-MessageSentRepresentingType: 1
Received: from [IPV6:2001:bb6:5e5e:b458:300:e9d8:7504:309f] (2001:bb6:5e5e:b458:300:e9d8:7504:309f) by DB7PR05CA0029.eurprd05.prod.outlook.com (2603:10a6:10:36::42) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.4734.22 via Frontend Transport; Sun, 28 Nov 2021 20:17:14 +0000
X-MS-PublicTrafficType: Email
X-MS-Office365-Filtering-Correlation-Id: 0b293848-1f44-4b0d-f5ac-08d9b2ac1151
X-MS-TrafficTypeDiagnostic: DB7PR02MB3979:
X-MS-Exchange-SharedMailbox-RoutingAgent-Processed: True
X-Microsoft-Antispam-PRVS: <DB7PR02MB39795F59447F685126FDB9ADA8659@DB7PR02MB3979.eurprd02.prod.outlook.com>
X-TCD-Routed-via-EOP: Routed via EOP
X-TCD-ROUTED: Passed-Transport-Routing-Rules
X-MS-Oob-TLC-OOBClassifiers: OLM:1148;
X-MS-Exchange-SenderADCheck: 1
X-MS-Exchange-AntiSpam-Relay: 0
X-Microsoft-Antispam: BCL:0;
X-Microsoft-Antispam-Message-Info: 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
X-Forefront-Antispam-Report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:DB7PR02MB5113.eurprd02.prod.outlook.com; PTR:; CAT:NONE; SFS:(4636009)(366004)(66476007)(235185007)(5660300002)(38100700002)(66556008)(8936002)(31686004)(86362001)(21480400003)(786003)(316002)(66946007)(83380400001)(44832011)(508600001)(36756003)(8676002)(2616005)(6486002)(33964004)(186003)(6916009)(966005)(2906002)(7116003)(31696002)(45980500001)(43740500002); DIR:OUT; SFP:1102;
X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1
X-MS-Exchange-AntiSpam-MessageData-0: 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
X-OriginatorOrg: cs.tcd.ie
X-MS-Exchange-CrossTenant-Network-Message-Id: 0b293848-1f44-4b0d-f5ac-08d9b2ac1151
X-MS-Exchange-CrossTenant-AuthSource: DB7PR02MB5113.eurprd02.prod.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 28 Nov 2021 20:17:14.5308 (UTC)
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-CrossTenant-Id: d595be8d-b306-45f4-8064-9e5b82fbe52b
X-MS-Exchange-CrossTenant-MailboxType: HOSTED
X-MS-Exchange-CrossTenant-UserPrincipalName: Bet08OyZOIHreArhyZB74ZPuhpPxtDUm81PGVbp2mkTLxLIYZ7k6dro3hQjOAwIG
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DB7PR02MB3979
Archived-At: <https://mailarchive.ietf.org/arch/msg/tls/X5GlQp7lKnx8Um5vFss9NJ3yLyI>
Subject: [TLS] ECH: fuzzy DNS data
X-BeenThere: tls@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/tls>, <mailto:tls-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tls/>
List-Post: <mailto:tls@ietf.org>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/tls>, <mailto:tls-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sun, 28 Nov 2021 20:17:28 -0000
Hiya, Recently I've been doing a bit of testing of the effects of retrieving dodgy or possibly unexpected ECH-related data from DNS. I've setup a repo with a few of those and am publishing 'em in DNS (one randomly selected every 30 minutes). That's explained at [1]. It might be useful for others testing ECH clients. If anyone has any other bad values to suggest, I'd be happy to add 'em to [1] (either a PR or email would be fine). Cheers, S. [1] https://github.com/sftcd/echdnsfuzz
- [TLS] ECH: fuzzy DNS data Stephen Farrell