If you want to do anything useful in counter-censorship then you have to think of using steganography
So don't call it DNS and don't put the parts of the plan designed for counter censorship prominently in the draft Port 443 is loaded with censorship issues. If you want to get your packets past a censor then any well known port is a red flag. > On Nov 9, 2014, at 11:38 AM, David Conrad <d...@virtualized.org> wrote: > > Another argument for DNS-over-443. > > I think the slogan "F* it, just put it into the DNS" should probably be > modified to: > > "F* it, just put it into the DNS over HTTPS" > > Sigh. > > Regards, > -drc > >> On Nov 8, 2014, at 11:07 PM, dikshie <diks...@gmail.com> wrote: >> >> Hi, >> In Indonesia case: >> 1.Government asks everyone that MUST use ISPs' DNS servers. >> No third party DNS servers are allowed (for example: Google's DNS). >> Although I am not sure about the real implementation, ISPs will >> redirect DNS request traffic from customers to their DNS servers. >> >> 2.ISPs' DNS servers MUST contain blacklist domain names (provided by >> government). >> see here: http://trustpositif.kominfo.go.id/ to see domain name >> blacklists. >> >> >> >> Best Regards, >> >> Dikshie Fauzie >> >> >> >> >> >> >> >> >> >>> On Sat, Nov 8, 2014 at 1:39 AM, Stephane Bortzmeyer <bortzme...@nic.fr> >>> wrote: >>> There is an Internet-Draft "A Survey of Worldwide Censorship >>> Techniques" draft-hall-censorship-tech-00 which is on the agenda of >>> the Security Area Open Meeting next week at IETF 91 Honolulu. >>> >>> I applaud the effort, I've reviewed the DNS part and I find it of low >>> quality, with sloppy terminology. I sent my remarks to the authors but >>> may be I was not constructive enough and the good people at DNSOP will >>> want to do their own review and comment on it? [No venue for >>> discussion is mentioned in the draft.] >> >> _______________________________________________ >> DNSOP mailing list >> DNSOP@ietf.org >> https://www.ietf.org/mailman/listinfo/dnsop > > _______________________________________________ > DNSOP mailing list > DNSOP@ietf.org > https://www.ietf.org/mailman/listinfo/dnsop _______________________________________________ DNSOP mailing list DNSOP@ietf.org https://www.ietf.org/mailman/listinfo/dnsop
