[Uri-review] Re: [Uri-review] http://www.ietf.org/internet-drafts/draft-josefsson-dns-url-06.txt

Thanks for looking at the document.

"Larry Masinter" <LMM@acm.org> writes:

> I'm having trouble imagining the applicability of
> this scheme, even in "DNS related software".
>
> Perhaps some examples of where/when you'd use a
> "dns" URL among many other kinds of URLs?

The document contains an example

,----
|    The following illustrate a DNS query for "simon.example.org" for the
|    CERT type in the Internet (IN) class:
|
|    dns:simon.example.org?type=CERT
`----

which in combination with, e.g., draft-ietf-tls-extensions-06.txt
illustrate how TLS servers may retrieve certificates for clients via
DNS.  The TLS extension solve how this is made secure even when the
protocol (like DNS) that retrieves the certificate is not secure.

Isn't the example sufficient?  I'm somewhat reluctant to add too much
detail on how the URI scheme is used by other protocols, because
people may then start to debate whether the example is secure or not.
I'd like to push that discussion to the security specifications that
uses the URI instead, where it belongs, is appropriate and productive.
In this regard, DNS URIs aren't different from any other URI scheme
that refer to data retrieved via insecure protocols.

Of course, if you like to contribute a specific thorough discussion
that you feel is appropriate, it could be incorporated.

_______________________________________________
Uri-review mailing list
Uri-review@ietf.org
https://www1.ietf.org/mailman/listinfo/uri-review