Re: [DNSOP] New Version Notification for draft-schmidt-brainpool-dnssec-00.txt

2014-03-21 Thread Olafur Gudmundsson
On Mar 21, 2014, at 3:39 AM, "Schmidt, Jörn-Marc" wrote: > Dear all, > > I've just submitted the draft below on using ECDSA with Brainpool Curves for > DNSSEC. > > The rationale behind this submission is the fact that the German electronic > health insurance card (Gesundheitskarte) mand

Re: [DNSOP] on the subject of dnse

2014-03-21 Thread Paul Vixie
Phillip Hallam-Baker wrote: > This was the use case that originally drove the development of OmniBroker. > > If we do DNS Encryption right it is going to be very easy for end > users to chose their DNS provider and very hard for the authorities to > block them. +1. > Security is a balance. Goin

Re: [DNSOP] Changes to Charter

2014-03-21 Thread Tim Wicinski
On 3/21/14, 9:50 AM, Andrew Sullivan wrote: On Fri, Mar 21, 2014 at 09:49:46AM -0400, Tim Wicinski wrote: But I understand what you mean here, and I was thinking it was a logical extension. Since the expansion of the term is "The DNS Security Extensions", it is indeed a natural extension at

Re: [DNSOP] Changes to Charter

2014-03-21 Thread Andrew Sullivan
On Fri, Mar 21, 2014 at 09:49:46AM -0400, Tim Wicinski wrote: > But I understand what you mean here, and I was thinking it was a > logical extension. Since the expansion of the term is "The DNS Security Extensions", it is indeed a natural extension at least. A -- Andrew Sullivan a...@anvilwalru

Re: [DNSOP] Changes to Charter

2014-03-21 Thread Tim Wicinski
On 3/21/14, 9:46 AM, Daniel Migault wrote: I am fine with these 2 items if DNS includes DNSSEC. Maybe replacing DNS by "DNS or DNSSEC" clarify this. Currently #2 of the charter states: 2. Publish documents concerning DNSSEC operational procedures. But I understand what you mean her

Re: [DNSOP] Changes to Charter

2014-03-21 Thread Daniel Migault
I am fine with these 2 items if DNS includes DNSSEC. Maybe replacing DNS by "DNS or DNSSEC" clarify this. On Fri, Mar 21, 2014 at 2:16 PM, Tim Wicinski wrote: > > > On 3/21/14, 7:38 AM, Warren Kumari wrote: >> >> On Wed, Mar 19, 2014 at 3:42 PM, Tim Wicinski wrote: >>> >>> >>> 6. Publish docume

Re: [DNSOP] Changes to Charter

2014-03-21 Thread Tim Wicinski
On 3/21/14, 7:38 AM, Warren Kumari wrote: On Wed, Mar 19, 2014 at 3:42 PM, Tim Wicinski wrote: 6. Publish documents which address DNS-related issues, by identifying and documenting the problem space around the issue. The group will then discuss these issues and decide if which group should

Re: [DNSOP] on the subject of dnse

2014-03-21 Thread Phillip Hallam-Baker
This was the use case that originally drove the development of OmniBroker. If we do DNS Encryption right it is going to be very easy for end users to chose their DNS provider and very hard for the authorities to block them. Security is a balance. Going through 8.8.8.8 rather than direct means tha

Re: [DNSOP] Changes to Charter

2014-03-21 Thread Warren Kumari
On Wed, Mar 19, 2014 at 3:42 PM, Tim Wicinski wrote: > > Hello > > This is a conversation I've scheduled a few times and I did poor time > mangement. After some discussion we're proposing adding two items to the > DNSOP charter: > > --- > > 5. Address possible minor changes or extensions to the D

[DNSOP] WG: New Version Notification for draft-schmidt-brainpool-dnssec-00.txt

2014-03-21 Thread Schmidt , Jörn-Marc
Dear all, I've just submitted the draft below on using ECDSA with Brainpool Curves for DNSSEC. The rationale behind this submission is the fact that the German electronic health insurance card (Gesundheitskarte) mandates the use of DNSSEC, while the use of Brainpool curves is recommended by