[DNSOP] I-D Action: draft-ietf-dnsop-qname-minimisation-07.txt

2015-10-12 Thread internet-drafts
A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Domain Name System Operations Working Group of the IETF. Title : DNS query name minimisation to improve privacy Author : Stephane Bortzmeyer

Re: [DNSOP] Working Group Last Call on draft-ietf-dnsop-5966bis

2015-10-12 Thread Tony Finch
Tim Wicinski wrote: > > This starts a Working Group Last Call for draft-ietf-dnsop-5966bis I have re-read the draft and it looks good to me. A couple of suggestions for section 7: For the avoidance of future doubt, this requirement is clarified. Authoritative servers and recursive resolve

Re: [DNSOP] Working Group Last Call on draft-ietf-dnsop-5966bis

2015-10-12 Thread sara
> On 10 Oct 2015, at 17:34, Stephane Bortzmeyer wrote: > Joe, Stephane, (and I just saw Tim too) Many thanks for the detailed reviews. > > In the mean time, the issue I see is in section 7 "Since pipelined > responses can arrive out-of-order, clients MUST match responses to > outstanding que

Re: [DNSOP] Working Group Last Call on draft-ietf-dnsop-5966bis

2015-10-12 Thread Stephane Bortzmeyer
On Mon, Oct 12, 2015 at 01:09:38PM +0100, sara wrote a message of 107 lines which said: > So under normal circumstances matching on just the Message ID should > be sufficient for TCP, which was the reason the QCLASS+QNAME+QTYPE > part was removed when changing the ‘must' here to ‘MUST' in the

Re: [DNSOP] Working Group Last Call on draft-ietf-dnsop-5966bis

2015-10-12 Thread Sara Dickinson
> On 12 Oct 2015, at 13:36, Stephane Bortzmeyer wrote: > > On Mon, Oct 12, 2015 at 01:09:38PM +0100, > sara wrote > a message of 107 lines which said: > >> So under normal circumstances matching on just the Message ID should >> be sufficient for TCP, which was the reason the QCLASS+QNAME+QTYP

Re: [DNSOP] Working Group Last Call on draft-ietf-dnsop-5966bis

2015-10-12 Thread Visweswaran, Gowri
I spent some time reviewing this document and I have one point I would like some clarification on, is there any supporting documentation that outlines recommendations on how a recursive server can identify expected clients? "Operators of recursive servers are advised to ensure that they only ac

Re: [DNSOP] Working Group Last Call on draft-ietf-dnsop-5966bis

2015-10-12 Thread Tony Finch
Visweswaran, Gowri wrote: > I spent some time reviewing this document and I have one point I would > like some clarification on, is there any supporting documentation that > outlines recommendations on how a recursive server can identify expected > clients? Do you mean something like http://www.

Re: [DNSOP] Working Group Last Call on draft-ietf-dnsop-5966bis

2015-10-12 Thread Visweswaran, Gowri
Hi Tony, I was looking for guidelines similar to the link you sent below in an IETF document, and if anyone knows of any other documentation on the policies of the current major recursive servers. Gowri On 10/12/15, 9:49 AM, "Tony Finch" wrote: >Visweswaran, Gowri wrote: > >> I spent some tim

Re: [DNSOP] Working Group Last Call on draft-ietf-dnsop-5966bis

2015-10-12 Thread Stephane Bortzmeyer
On Mon, Oct 12, 2015 at 01:23:27PM +, Visweswaran, Gowri wrote a message of 51 lines which said: > is there any supporting documentation that outlines recommendations > on how a recursive server can identify expected clients? Don't think it is written down somewhere. The most common metho

Re: [DNSOP] Working Group Last Call on draft-ietf-dnsop-5966bis

2015-10-12 Thread Tony Finch
Visweswaran, Gowri wrote: > > I was looking for guidelines similar to the link you sent below in an > IETF document, There isn't anything AFAIK. Even the Open Resolver Project doesn't have any helpful guidance, as I thought it might. > and if anyone knows of any other documentation on the > poli

Re: [DNSOP] Working Group Last Call on draft-ietf-dnsop-5966bis

2015-10-12 Thread Mark Andrews
For de-multiplexing the responses off the socket the *only* field you should be using is the ID field. There are error conditions that result in only the DNS header being returned. All responses are *supposed* to be constucted in the DNS. Setting rcode to formerr/notimp and setting qr to 1 does

[DNSOP] Fwd: New Version Notification for draft-jabley-dnsop-refuse-any-01.txt

2015-10-12 Thread Joe Abley
New text added following review by Evan Hunt (on this list) and David Lawrence (at dns-oarc in Montréal, I think). Forwarded message: From: internet-dra...@ietf.org To: Marek Majkowski , Joe Abley , Olafur Gudmundsson Subject: New Version Notification for draft-jabley-dnsop-refuse-any-01.tx