Re: [DNSOP] EDNS0 clientID is a wider-internet question

2017-07-25 Thread Barry Raveendran Greene
> On Jul 25, 2017, at 8:53 PM, Christopher Morrow > wrote: > > I don't believe the goal of the draft is to enable filtering. The goal of the draft is to provide options. How those options are deployed is between the customer and the operator as defined by their contract. signature.asc Descr

Re: [DNSOP] EDNS0 clientID is a wider-internet question

2017-07-25 Thread Barry Raveendran Greene
The irony to the privacy and client-id discussion is that we have another “DNS Privacy” WG which gives me wonderful ID from the crypto termination on the resolver. The reality with client ID is just like RPZ adoption. Operators need flexibility to face reality. If the DNSOP’s choice is to not

Re: [DNSOP] DNSOP Call for Adoption - draft-tale-dnsop-serve-stale

2017-09-06 Thread Barry Raveendran Greene
+1 > On Sep 6, 2017, at 1:04 PM, Jared Mauch wrote: > > I support adoption of the document. > > - Jared > >> On Sep 5, 2017, at 3:25 PM, tjw ietf wrote: >> >> August is over and my self-imposed holiday is over, so it's time to get busy >> again. We have this document marked as a candidate

Re: [DNSOP] DNSOP Call for Adoption draft-vixie-dns-rpz

2017-01-03 Thread Barry Raveendran Greene
> On Jan 1, 2017, at 6:00 AM, Ted Lemon wrote: > > There is no _way_ to make it easier for said outside forces to pressure > providers. They have the force of law on their side. What we do makes no > difference in that arena. The arena in which it _does_ make a difference is > protectin

Re: [DNSOP] DNSOP Call for Adoption draft-vixie-dns-rpz

2017-01-08 Thread Barry Raveendran Greene
> On Jan 8, 2017, at 6:54 AM, Scott Schmit wrote: > > Eventually, if DNSSEC verification on endpoints becomes widespread, > operators will need to turn to other means or break DNSSEC in these > cases (but redirection will stop working). Bad guys are not going to take the time to use DNSSEC to b

Re: [DNSOP] DNSOP Call for Adoption draft-vixie-dns-rpz

2017-03-13 Thread Barry Raveendran Greene
> On Mar 13, 2017, at 4:11 AM, Paul Wouters wrote: > > The draft breaks DNSSEC The draft does not break DNSSEC. How version of DNS software implement RPZ can have issues with DNSSEC. There are some software that can inject a RPZ feed and not break DNSSEC.

Re: [DNSOP] DNSOP Call for Adoption draft-vixie-dns-rpz

2017-03-17 Thread Barry Raveendran Greene
Paul - changes to existing practice is a _new_ document. You take the existing, coded, and deployed specification in as an informational RFC. Then you start a new working group document for the full “IETF version.” We’ve done this for many other protocols over the last several decades. Why the

Re: [DNSOP] FW: New Version Notification for draft-pan-dnsop-edns-isp-location-00

2017-03-18 Thread Barry Raveendran Greene
Hello Yu Fu, I was not at the workshop. Warren already mentioned some issues. I second what he is saying in a stronger terms: + What you are proposing has no value for optimizing content delivery on the Internet. Physical location and the topology of content delivery do not match. Also, Anycas

Re: [DNSOP] [dns-privacy] FW: New Version Notification for draft-pan-dnsop-edns-isp-location-00

2017-03-23 Thread Barry Raveendran Greene
> On Mar 21, 2017, at 11:38 PM, Lanlan Pan wrote: > > However, if you know about the geolocation , you can > make a better response, most of time, is the best response too. Your statement is not matching the operational realities I live in. I understand how mapping is done in my current envi

Re: [DNSOP] draft-tale-dnsop-edns-clientid

2017-03-28 Thread Barry Raveendran Greene
> On Mar 28, 2017, at 12:31 PM, Peter van Dijk > wrote: > > Please note that neither draft handles the use case of also passing the port > number, which in a world of growing CGN deployment, may soon prove quite > important. Can you elaborate? ___