> Il 10/11/2021 17:17 Petr Špaček <pspa...@isc.org> ha scritto:
> 
> 1. Input from browser vendors
> -----------------------------
> I believe we really really _really_ need input from end-client vendors, 
> most importantly Google Chrome and Safari. Is there any indication that 
> they might be interested? If not, why?

I don't want to speak for them (I don't know if they are on this list, but they 
definitely are on ADD) but in past discussions around this concept they 
recognized its potential usefulness (apart maybe from a specific browser which 
seems to have a principle stance against DNS filters) but were concerned about 
the security of the mechanism, i.e. the risk that it could be used to present 
to the user a phishing or misleading page, either by an attacker or by the 
network itself, with the risk of the user not realizing that this is not their 
intended destination but a page generated by someone else. This explains many 
of the restrictions and requirements in the document, including the restriction 
to encrypted DNS connections.

-- 
Vittorio Bertola | Head of Policy & Innovation, Open-Xchange
vittorio.bert...@open-xchange.com 
Office @ Via Treviso 12, 10144 Torino, Italy

_______________________________________________
DNSOP mailing list
DNSOP@ietf.org
https://www.ietf.org/mailman/listinfo/dnsop

Reply via email to