Re: Mozilla Firefox DoH to CloudFlare by default (for US users)?

2019-09-08 Thread Robert Edmonds
The entire DNS root zone is only 1 MB compressed and is updated about once a day. It would be even better for privacy if the whole root zone were distributed via HTTPS, as the initiator would not reveal to the server any information about what TLD is being looked up. There are currently ~1500 TLDs

Re: Mozilla Firefox DoH to CloudFlare by default (for US users)?

2019-09-08 Thread Ondřej Surý
On the privacy topic... Slides: https://irtf.org/anrw/2019/slides-anrw19-final44.pdf Paper: https://dl.acm.org/authorize.cfm?key=N687437 And you can get to the video recording from the ANRW 2019 pages: https://irtf.org/anrw/2019/program.html We can discuss (and it has been discussed) ad nauseam

Re: Git Packaging Round 2: When to Salsa mirror

2019-09-08 Thread Geert Stappers
On Sun, Sep 08, 2019 at 10:05:17PM -0700, Russ Allbery wrote: > Sean Whitton writes: > > On Sun 08 Sep 2019 at 05:35PM -04, Sam Hartman wrote: > > >> You are encouraged to mirror your repository to Salsa so that people can > >> find more of the Debian packaging in one place. > > > Hmm, if the Vc

Re: Git Packaging Round 2: When to Salsa

2019-09-08 Thread Russ Allbery
Sean Whitton writes: > On Sun 08 Sep 2019 at 05:35PM -04, Sam Hartman wrote: >> You are encouraged to mirror your repository to Salsa so that people can >> find more of the Debian packaging in one place. > Hmm, if the Vcs-* are set correctly, what's the value of mirroring to > salsa? (I don't o

Re: Git Packaging Round 2: When to Salsa

2019-09-08 Thread Sean Whitton
Hello, On Sun 08 Sep 2019 at 05:35PM -04, Sam Hartman wrote: > You are encouraged to mirror your repository to Salsa so that people can > find more of the Debian packaging in one place. Hmm, if the Vcs-* are set correctly, what's the value of mirroring to salsa? (I don't object in the least; ju

Re: Mozilla Firefox DoH to CloudFlare by default (for US users)?

2019-09-08 Thread Ondřej Surý
DNSCurve - probably never DoT - the current profiles are stub to resolver, when they are profiles for resolver to authoritative and a solid support in the software, the RSSAC will surely talk about this. The deployment will have impact (switching all traffics to TCP? Yay?) DoH - I am not sure

Re: Mozilla Firefox DoH to CloudFlare by default (for US users)?

2019-09-08 Thread Paul Wise
On Mon, Sep 9, 2019 at 2:31 AM Ondřej Surý wrote: > Mozilla plans to enable DoH to CloudFlare by default to US based users Does anyone know if there is any plan for the DNS root servers to enable any of the DNS privacy options? AFAIK the available options are DNSCurve, DoT or DoH. -- bye, pabs

Re: Mozilla Firefox DoH to CloudFlare by default (for US users)?

2019-09-08 Thread Adam Borowski
On Sun, Sep 08, 2019 at 11:17:13PM +0200, Marco d'Itri wrote: > On Sep 08, Ondřej Surý wrote: > > > I would rather see an explicit statement. I would be very surprised > > with Debian’s usual stance regarding the users’ privacy that we would > > not consider this as a privacy violation, but aga

Re: Mozilla Firefox DoH to CloudFlare by default (for US users)?

2019-09-08 Thread Jeremy Stanley
On 2019-09-08 23:17:13 +0200 (+0200), Marco d'Itri wrote: [...] > I think that this is a privacy enhancement, since it prevents some > major ISPs from spying on users DNS queries. [...] While at the same time legitimizing Cloudflare spying on users' DNS queries, right? How is one necessarily bette

Git Packaging Round 2: When to Salsa

2019-09-08 Thread Sam Hartman
So, this is much harder than the dh discussion. Here, we're not trying to come to a consensus on policy changes. And here, the level of agreement is not as high. I'd like to start by thanking the Salsa admins for running a great service and for answering some naive questions I had while putting

Re: Mozilla Firefox DoH to CloudFlare by default (for US users)?

2019-09-08 Thread Marco d'Itri
On Sep 08, Ondřej Surý wrote: > I would rather see an explicit statement. I would be very surprised > with Debian’s usual stance regarding the users’ privacy that we would > not consider this as a privacy violation, but again I am not Firefox > maintainer in Debian and I would rather hear from

Bug#939796: ITP: lxqt-kcm-integration -- Integration package for several KDE control modules into LXQt

2019-09-08 Thread Alf Gaida
Package: wnpp Severity: wishlist Owner: Alf Gaida * Package name: lxqt-kcm-integration Version : 0.0.1 Upstream Author : Alf Gaida * URL : https://github.com/lxqt/lxqt-kcm-integration * License : (LGPL2+) Programming Lang: (desktop files) Description :

Mozilla Firefox DoH to CloudFlare by default (for US users)?

2019-09-08 Thread Ondřej Surý
Hi, I haven’t found any discussion on the topic (although I haven’t searched very hard and only looked for DoH and DNS keywords in the BTS), but since Mozilla plans to enable DoH to CloudFlare by default to US based users: https://blog.mozilla.org/futurereleases/2019/09/06/whats-next-in-making-

Bug#939772: ITP: node-es-abstract -- ECMAScript spec abstract operations

2019-09-08 Thread Bastien Roucariès
Package: wnpp Severity: wishlist Owner: Bastien Roucariès Package name: node-es-abstract Version : 1.14.2 Upstream Author : Jordan Harband (ljharb) URL : https://github.com/ljharb/es-abstract License : expat Programming Lang: javascript Description

Bug#939771: ITP: node-es-abstract -- ECMAScript spec abstract operations.

2019-09-08 Thread Bastien Roucariès
Package: wnpp Severity: wishlist Owner: Bastien Roucariès Package name: node-es-abstract Version : 1.14.2 Upstream Author : Jordan Harband (ljharb) URL : https://github.com/ljharb/es-abstract License : expat Programming Lang: javascript Description

Bug#939759: ITP: libnet-acme2-perl -- Client logic for the ACME (Let's Encrypt) protocol

2019-09-08 Thread Salvatore Bonaccorso
Package: wnpp Owner: Salvatore Bonaccorso Severity: wishlist X-Debbugs-CC: debian-devel@lists.debian.org, debian-p...@lists.debian.org * Package name: libnet-acme2-perl Version : 0.32 Upstream Author : Felipe Gasper * URL : https://metacpan.org/release/Net-ACME2 * Lice