On Tue, 10 Jan 2023, Philip Homburg wrote: [speaking as individual]
However, such a setup leaves the application with no control over which transport the proxy uses.
Why should the application have control over this? If you want to give control to the application, what should they control? What if two applications disagree? What if they look up the same thing, but the first application was okay with in the clear and the second was not. Will you use any proxy/cache or redo the request over secure transport? (assuming if you bother with a proxy, you might as well give the proxy a cache) To me, this seems more like an OS setting, and not an application setting. Paul _______________________________________________ DNSOP mailing list DNSOP@ietf.org https://www.ietf.org/mailman/listinfo/dnsop