Re: [DNSOP] Fw: New Version Notification for draft-yao-dnsop-accompanying-questions-00.txt

2016-05-02 Thread Jiankang Yao
From: Ray Bellis Date: 2016-04-29 17:38 To: draft-yao-dnsop-accompanying-questions CC: dnsop Subject: Re: [DNSOP] Fw: New Version Notification for draft-yao-dnsop-accompanying-questions-00.txt > I am unconvinced that the ability to specify multiple QNAMEs offers any > benefits and can't think o

Re: [DNSOP] Fwd: New Version Notification for draft-song-dns-wireformat-http-03.txt

2016-05-02 Thread Adrien de Croy
One other thing... there are plenty of http proxies that will rightly or wrongly strip or reject unknown header fields. Since you're proposing the use of POST to send the query, why not also include the Proxy-DNS-Transport value as POST data also. either inside the application/dns-wireforma

Re: [DNSOP] Fwd: New Version Notification for draft-song-dns-wireformat-http-03.txt

2016-05-02 Thread Adrien de Croy
Hi Davey Some general comments: I don't think you can claim that https provides data integrity or privacy any more, since MitM proxies are abundant. I think some thought should be given to how a DNS stub might deal with a captive portal or http proxy authentication. I think also that any

Re: [DNSOP] draft-song-dns-wireformat-http

2016-05-02 Thread Davey Song
Hi guys, Thanks for the comments and discussion. I catch up them after holidays :) I reply in line and cc Paul's comments to DNSOP WG mailing list, so that we can continue to comment follow the same context in this mailing list. Best regards, Davey. On 30 April 2016 at 06:23, Paul Vixie wrote

Re: [DNSOP] Working Group Last Call draft-ietf-dnsop-isp-ip6rdns

2016-05-02 Thread Howard, Lee
>So, ISPs not doing reverse DNS for IPv6, like my current ISP, are making it >impossible to use your own mail server to deliver mail over IPv6. I think >they are doing a serious disservice to the open internet. That's a separate conversation. If your ISP allows you to run a mail server on the se

Re: [DNSOP] Working Group Last Call draft-ietf-dnsop-isp-ip6rdns

2016-05-02 Thread Howard, Lee
Sorry for not replying last week; I somehow got unsubscribed from the list a few days before WGLC was started. So let me reply to a few points made so far: Privacy Considerations (Christian Huitema) Thanks to you and other for pointing out this gap. How about: Change Title of "4. Security Consi

Re: [DNSOP] Call for Adoption for draft-fujiwara-dnsop-nsec-aggressiveuse

2016-05-02 Thread 神明達哉
At Sun, 1 May 2016 19:20:33 +0200, Matthijs Mekking wrote: > - I don't see why setting the CD bit is an indication that NSEC(3) > aggressive usage should not be used. Could you elaborate on that? > >> > >> I am still hoping that someone could response to this :) > > > > Specifically whe