[DNSOP] Secdir last call review of draft-ietf-dnsop-must-not-sha1-03

2025-02-27 Thread Yoav Nir via Datatracker
Reviewer: Yoav Nir Review result: Has Issues Hi. I agree with what the draft says, and also wth Barry Leiba's comments about terminology. Still, there are two things in the draft text that stood out as strange: In the introduction, we have "DNSSEC [RFC9364] originally made extensive use of SHA-1

[DNSOP] Protocol Action: 'Compact Denial of Existence in DNSSEC' to Proposed Standard (draft-ietf-dnsop-compact-denial-of-existence-07.txt)

2025-02-27 Thread The IESG
The IESG has approved the following document: - 'Compact Denial of Existence in DNSSEC' (draft-ietf-dnsop-compact-denial-of-existence-07.txt) as Proposed Standard This document is the product of the Domain Name System Operations Working Group. The IESG contact persons are Warren Kumari and Mahe

[DNSOP] Re: [EXTERNAL] Re: [EXT] New Version Notification for draft-nottingham-public-resolver-errors-01.txt

2025-02-27 Thread tojens.ietf
> Most people are aware of their untrustworthiness, though, which is not limited > just to DNS resolution. It would be nice if devices had a reliable concept of > "home > network" and "away network" and applied different UXs and protections. Windows had that exact same thought many years ago, and

[DNSOP] Roman Danyliw's No Objection on draft-ietf-dnsop-generalized-notify-06: (with COMMENT)

2025-02-27 Thread Roman Danyliw via Datatracker
Roman Danyliw has entered the following ballot position for draft-ietf-dnsop-generalized-notify-06: No Objection When responding, please keep the subject line intact and reply to all email addresses included in the To and CC lines. (Feel free to cut this introductory paragraph, however.) Please

[DNSOP] Re: Fwd: New Version Notification for draft-ietf-dnsop-compact-denial-of-existence-07.txt

2025-02-27 Thread Warren Kumari
[ - IESG for clutter] On Thu, Feb 27, 2025 at 1:21 PM, Shumon Huque wrote: > This revision addresses all the IESG review feedback. > Ta! Also thanks to Murray for the discussion and clearing his DISCUSS; I've just approved publication. Much thanks to the authors and WG, W > Shumon. > > ---

[DNSOP] Re: [EXT] New Version Notification for draft-nottingham-public-resolver-errors-01.txt

2025-02-27 Thread Vittorio Bertola
> Il 27/02/2025 11:18 CET Mark Nottingham ha > scritto: > > > On 27 Feb 2025, at 8:55 pm, Vittorio Bertola > > wrote: > > > > This depends on the definition of "censorship", and also on whether you > > envisage this system only for EDE 17 (user-requested blocking) or also for > > EDE 16 a

[DNSOP] Fwd: New Version Notification for draft-ietf-dnsop-compact-denial-of-existence-07.txt

2025-02-27 Thread Shumon Huque
This revision addresses all the IESG review feedback. Shumon. -- Forwarded message - From: Date: Thu, Feb 27, 2025 at 1:16 PM Subject: New Version Notification for draft-ietf-dnsop-compact-denial-of-existence-07.txt To: Christian Elmerot , Olafur Gudmundsson < o...@ogud.com>, Shu

[DNSOP] I-D Action: draft-ietf-dnsop-compact-denial-of-existence-07.txt

2025-02-27 Thread internet-drafts
Internet-Draft draft-ietf-dnsop-compact-denial-of-existence-07.txt is now available. It is a work item of the Domain Name System Operations (DNSOP) WG of the IETF. Title: Compact Denial of Existence in DNSSEC Authors: Shumon Huque Christian Elmerot Olafur Gudmundsso

[DNSOP] Re: I-D Action: draft-ietf-dnsop-ns-revalidation-09.txt

2025-02-27 Thread Willem Toorop
Dear all, This updated version of the Delegation Revalidation by DNS Resolvers draft has the review feedback from Duane Wessels addressed. More specifically: * The abstract is corrected to mention that the idea is to revalidate "at the expiration of the TTL of either the parent or child N

[DNSOP] I-D Action: draft-ietf-dnsop-ns-revalidation-09.txt

2025-02-27 Thread internet-drafts
Internet-Draft draft-ietf-dnsop-ns-revalidation-09.txt is now available. It is a work item of the Domain Name System Operations (DNSOP) WG of the IETF. Title: Delegation Revalidation by DNS Resolvers Authors: Shumon Huque Paul Vixie Willem Toorop Name:draft-i

[DNSOP] Re: Murray Kucherawy's Discuss on draft-ietf-dnsop-compact-denial-of-existence-06: (with DISCUSS and COMMENT)

2025-02-27 Thread Shumon Huque
On Thu, Feb 27, 2025 at 8:09 AM Christian Elmerot wrote: > Thank you for the helpful review, Murray! > > > > > Why the "SHOULD" in Section 3.1? What is the impact if I don't do > > that? Why > > might I legitimately choose not to do that? "SHOULD" implies there > > are answers

[DNSOP] Re: Murray Kucherawy's Discuss on draft-ietf-dnsop-compact-denial-of-existence-06: (with DISCUSS and COMMENT)

2025-02-27 Thread Christian Elmerot
Thank you for the helpful review, Murray! On 2025-02-23 12:35, Shumon Huque wrote: On Thu, Feb 20, 2025 at 3:17 AM Murray Kucherawy via Datatracker mailto:nore...@ietf.org>> wrote: Murray Kucherawy has entered the following ballot position for draft-ietf-dnsop-compact-denial-of-existen

[DNSOP] Re: [EXT] New Version Notification for draft-nottingham-public-resolver-errors-01.txt

2025-02-27 Thread Mark Nottingham
Hi Vittorio, I'm going to answer your questions from my standpoint, but realise that the browser folks may not agree with what I say, or have additional context. Much of the draft's design is attempting to be responsive to them, and I don't want to try to represent their positions too much. >

[DNSOP] Re: [EXT] Re: New Version Notification for draft-nottingham-public-resolver-errors-01.txt

2025-02-27 Thread Vittorio Bertola
> Il 26/02/2025 08:20 CET Mark Nottingham ha > scritto: > > The intent is not to scale to that degree -- indeed, that would be considered > a failure, because it would indicate widespread censorship on the Internet. > Instead, it's to selectively surface legally mandated censorship when it