[DNSOP] I-D Action: draft-ietf-dnsop-dnssec-iana-cons-00.txt

2021-01-22 Thread internet-drafts
A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Domain Name System Operations WG of the IETF. Title : Revised IANA Considerations for DNSSEC Author : Paul Hoffman Filename: draft-i

Re: [DNSOP] SVCB without A/AAAA records at the service name

2021-01-22 Thread Ben Schwartz
On Fri, Jan 22, 2021 at 12:43 PM Hollenbeck, Scott wrote: > *From:* DNSOP *On Behalf Of * Ben Schwartz > *Sent:* Tuesday, January 19, 2021 10:01 PM > *To:* Martin Thomson > *Cc:* dnsop > *Subject:* [EXTERNAL] Re: [DNSOP] SVCB without A/ records at the > service name > > > > > > > > On Tue,

Re: [DNSOP] SVCB without A/AAAA records at the service name

2021-01-22 Thread Hollenbeck, Scott
From: DNSOP On Behalf Of Ben Schwartz Sent: Tuesday, January 19, 2021 10:01 PM To: Martin Thomson Cc: dnsop Subject: [EXTERNAL] Re: [DNSOP] SVCB without A/ records at the service name On Tue, Jan 19, 2021 at 7:40 PM Martin Thomson mailto:m...@lowentropy.net>> wrote: On Wed, Jan 2

[DNSOP] Summary of Call for Adoption on draft-hoffman-dnssec-iana-cons

2021-01-22 Thread Tim Wicinski
All Thanks for your patience in getting back to you the resolution of this document. I had concerns about adopting the document in its current form, which was my motivation for the suggestions on splitting the registry. That spurred some healthy discussion. I also like the idea of integratin

Re: [DNSOP] NSA says don't use public DNS or DoH servers

2021-01-22 Thread Stephane Bortzmeyer
On Mon, Jan 18, 2021 at 04:27:20PM -0500, John Levine wrote a message of 18 lines which said: > They think DoH is swell, but not when it bypasses security controls > and leaks info to random outside people I will certainly do as the NSA says, since they are experts in privacy-related issues

Re: [DNSOP] NSA says don't use public DNS or DoH servers

2021-01-22 Thread Vladimír Čunát
On 1/22/21 3:10 AM, Tom Pusateri wrote: Would it be ok to allow DNSSEC signed responses from any server? If they’re signed and verified, does it matter how you got them? Another missing part is privacy, i.e. even if you get exactly the same answers, it doesn't imply you get similar (privacy)