[dns-privacy] Considering DHCP

2015-04-14 Thread Linhui Sun
HI, Daniel I think there is no difference when we considering which to do first. If the DHCP could offer a better way, that would be fine. However, there are several problems in the authentication mechanism defined in RFC3118, thus the dhc WG developed another mechanism called secure DHCP ( h

Re: [dns-privacy] Considering DHCP

2015-04-14 Thread Zhiwei Yan
+1 Best Regards, Zhiwei Yan > 在 2015年4月14日,下午5:46,Linhui Sun 写道: > > HI, Daniel > > I think there is no difference when we considering which to do first. If the > DHCP could offer a better way, that would be fine. However, there are several > problems in the authentication mechanism define

Re: [dns-privacy] Considering DHCP

2015-04-14 Thread Zhiwei Yan
We should solve two problems: 1) trust problem 2) encryption problem No matter whether we adopt DHCP, it's better to solve them separately. I mean that it's OK if two solutions are used for these two problems. Best Regards, Zhiwei Yan > 在 2015年4月14日,下午5:46,Linhui Sun 写道: > > HI, Daniel > > I

Re: [dns-privacy] Starting call for adoptions for "the 3 documents"

2015-04-14 Thread Stephane Bortzmeyer
On Mon, Apr 13, 2015 at 05:36:10PM -0400, Daniel Migault wrote a message of 149 lines which said: > Just for information, what are the technical reasons IPsec has not > been considered at all for providing DNS privacy. It _was_ considered during the meeting in London: http://www.ietf.org/pro

Re: [dns-privacy] Considering IPsec

2015-04-14 Thread Paul Hoffman
DNS is an application that runs on a single port between two hosts. In that environment, TLS is always a much more appropriate protection mechanism than IPsec for the numerous reasons PaulW gave. We don't need to document this decision any more than we need to document every application's choic

Re: [dns-privacy] Considering IPsec

2015-04-14 Thread manning
Or… include the first sentence (with a slight editorial change) in the document. manning bmann...@karoshi.com PO Box 12317 Marina del Rey, CA 90295 310.322.8102 On 14April2015Tuesday, at 7:33, Paul Hoffman wrote: > DNS is an application that runs on a single port between two hosts. In tha

Re: [dns-privacy] Considering IPsec

2015-04-14 Thread Phillip Hallam-Baker
On Tue, Apr 14, 2015 at 10:33 AM, Paul Hoffman wrote: > DNS is an application that runs on a single port between two hosts. In that > environment, TLS is always a much more appropriate protection mechanism than > IPsec for the numerous reasons PaulW gave. > > We don't need to document this decis

Re: [dns-privacy] Starting call for adoptions for "the 3 documents"

2015-04-14 Thread 神明達哉
At Mon, 13 Apr 2015 10:57:05 -0400, Warren Kumari wrote: > What do other think here -- do we want to decide on the discovery and > binding problem first, or do we think that we should choose a document > and start working on that (and possibly add in discovery / binding > later)? > > > I'd perso

Re: [dns-privacy] Starting call for adoptions for "the 3 documents"

2015-04-14 Thread Warren Kumari
On Tue, Apr 14, 2015 at 2:08 PM, 神明達哉 wrote: > At Mon, 13 Apr 2015 10:57:05 -0400, > Warren Kumari wrote: > >> What do other think here -- do we want to decide on the discovery and >> binding problem first, or do we think that we should choose a document >> and start working on that (and possibly

Re: [dns-privacy] AD review of draft-ietf-dprive-problem-statement

2015-04-14 Thread Terry Manderson
Hi Stephane, On 11/04/2015 12:42 am, "Stephane Bortzmeyer" wrote: >On Fri, Apr 10, 2015 at 03:49:32AM +, > Terry Manderson wrote > a message of 237 lines which said: > >> I have performed my AD evaluation of >> draft-ietf-dprive-problem-statement. > >Thanks. Most remarks have been fixed in