I agree that DNSCurve is the best solution. Many of the proponents of TLS based solution haven't adequately considered how this affects anycast, DOS resistance, etc. Confidential-DNS can only be fixed by essentially becoming DNSCurve.
It's clear that deployed, working solutions need to be adopted. When people say it's easy to implement DNS-over-TCP/TLS, and haven't, I think that's a warning sign. Sincerely, Watson Ladd On Wed, Apr 22, 2015 at 7:19 AM, Simon Josefsson <[email protected]> wrote: > I support adopting 3) draft-hzhwm-dprive-start-tls-for-dns. It may not > be in shipping shape, but I think it is a worthy path to pursue and can > be tweaked further along. In particular, I think it would be a good > idea to consider pushing documents for DNS-over-TCP/TLS and > DNS-over-UDP/DTLS at the same time, with harmonized authentication > language. > > Re 1 and 2, I don't understand what advantage they would give compared > to DNS-over-TLS, DNS-over-DTLS, or DNSCurve. I believe a strong > justification is necessary to motivate adoption. Frankly, I would > prefer DNSCurve over both 1 and 2. > > /Simon > > Warren Kumari <[email protected]> writes: > >> Hi all, >> >> So, the big day has finally arrived -- we are initiating calls for >> adoption on the three documents. < http://i.imgur.com/SKX3P8J.gif > >> >> For *each* of the below documents, please **clearly** state if you >> would like DPRIVE to adopt it, or if you think that it will be a >> distraction / not helpful. >> >> 1) Confidential DNS: >> https://datatracker.ietf.org/doc/draft-wijngaards-dnsop-confidentialdns/ >> >> 2) Private-DNS: >> https://datatracker.ietf.org/doc/draft-hallambaker-privatedns/ >> >> 3) TLS for DNS: Initiation and Performance Considerations: >> http://datatracker.ietf.org/doc/draft-hzhwm-dprive-start-tls-for-dns/ >> >> >> This call for adoption will be wrapping up on April 30th. >> At that point we will decide on one or multiple of the documents.... >> >> W > > _______________________________________________ > dns-privacy mailing list > [email protected] > https://www.ietf.org/mailman/listinfo/dns-privacy > -- "Man is born free, but everywhere he is in chains". --Rousseau. _______________________________________________ dns-privacy mailing list [email protected] https://www.ietf.org/mailman/listinfo/dns-privacy
