From nobody Mon Sep 11 03:30:19 2017 Return-Path: X-Original-To: dns-privacy@ietf.org Delivered-To: dns-privacy@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 28E791241F3; Mon, 11 Sep 2017 03:30:12 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: Cc: dns-privacy@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.60.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <150512581210.9840.1210934668428515645@ietfa.amsl.com> Date: Mon, 11 Sep 2017 03:30:12 -0700 Archived-At: Subject: [dns-privacy] I-D Action: draft-ietf-dprive-dtls-and-tls-profiles-11.txt X-BeenThere: dns-privacy@ietf.org X-Mailman-Version: 2.1.22 List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 11 Sep 2017 10:30:12 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the DNS PRIVate Exchange WG of the IETF. Title : Usage and (D)TLS Profiles for DNS-over-(D)TLS Authors : Sara Dickinson Daniel Kahn Gillmor Tirumaleswar Reddy Filename : draft-ietf-dprive-dtls-and-tls-profiles-11.txt Pages : 29 Date : 2017-09-11 Abstract: This document discusses Usage Profiles, based on one or more authentication mechanisms, which can be used for DNS over Transport Layer Security (TLS) or Datagram TLS (DTLS). These profiles can increase the privacy of DNS transactions compared to using only clear text DNS. This document also specifies new authentication mechanisms - it describes several ways a DNS client can use an authentication domain name to authenticate a (D)TLS connection to a DNS server. Additionally, it defines (D)TLS protocol profiles for DNS clients and servers implementing DNS-over-(D)TLS. This document updates RFC 7858. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-dprive-dtls-and-tls-profiles/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-dprive-dtls-and-tls-profiles-11 https://datatracker.ietf.org/doc/html/draft-ietf-dprive-dtls-and-tls-profiles-11 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-dprive-dtls-and-tls-profiles-11 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Mon Sep 11 03:34:47 2017 Return-Path: X-Original-To: dns-privacy@ietfa.amsl.com Delivered-To: dns-privacy@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 04DA7133023 for ; Mon, 11 Sep 2017 03:34:46 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.199 X-Spam-Level: X-Spam-Status: No, score=-4.199 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bZYjpS2EDcK9 for ; Mon, 11 Sep 2017 03:34:44 -0700 (PDT) Received: from haggis.mythic-beasts.com (haggis.mythic-beasts.com [IPv6:2a00:1098:0:86:1000:0:2:1]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3AA601241F3 for ; Mon, 11 Sep 2017 03:34:44 -0700 (PDT) Received: from [2001:b98:204:102:fffa::1b] (port=59810) by haggis.mythic-beasts.com with esmtpsa (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.89) (envelope-from ) id 1drM38-0001bV-B0; Mon, 11 Sep 2017 11:34:42 +0100 Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 10.3 \(3273\)) From: Sara Dickinson In-Reply-To: <150512581210.9840.1210934668428515645@ietfa.amsl.com> Date: Mon, 11 Sep 2017 11:34:36 +0100 Cc: Eric Rescorla Content-Transfer-Encoding: quoted-printable Message-Id: <64C07B32-2860-486A-843B-B30B0ECAD7C2@sinodun.com> References: <150512581210.9840.1210934668428515645@ietfa.amsl.com> To: dns-privacy@ietf.org X-Mailer: Apple Mail (2.3273) X-BlackCat-Spam-Score: 4 Archived-At: Subject: Re: [dns-privacy] I-D Action: draft-ietf-dprive-dtls-and-tls-profiles-11.txt X-BeenThere: dns-privacy@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 11 Sep 2017 10:34:46 -0000 Hi All,=20 After some off-list discussion I have create an new version of the draft = which updates the description and handling of meta queries: * Section 5: Re-ordered and re-worded the text in section on = Opportunistic profile to make the protection offered by Opportunistic = clearer.=20 * Section 5: Provide a more detailed analysis of attacks on the meta = queries=20 * Section 7.2: Re-introduce a requirement to DNSSEC validate the meta- = queries making it as SHOULD for Strict and a MUST for Opportunistic. Ekr - please let me know if this addresses your discuss?=20 Regards Sara.=20 > On 11 Sep 2017, at 11:30, internet-drafts@ietf.org wrote: >=20 >=20 > A New Internet-Draft is available from the on-line Internet-Drafts = directories. > This draft is a work item of the DNS PRIVate Exchange WG of the IETF. >=20 > Title : Usage and (D)TLS Profiles for DNS-over-(D)TLS > Authors : Sara Dickinson > Daniel Kahn Gillmor > Tirumaleswar Reddy > Filename : draft-ietf-dprive-dtls-and-tls-profiles-11.txt > Pages : 29 > Date : 2017-09-11 >=20 > Abstract: > This document discusses Usage Profiles, based on one or more > authentication mechanisms, which can be used for DNS over Transport > Layer Security (TLS) or Datagram TLS (DTLS). These profiles can > increase the privacy of DNS transactions compared to using only = clear > text DNS. This document also specifies new authentication = mechanisms > - it describes several ways a DNS client can use an authentication > domain name to authenticate a (D)TLS connection to a DNS server. > Additionally, it defines (D)TLS protocol profiles for DNS clients = and > servers implementing DNS-over-(D)TLS. This document updates RFC > 7858. >=20 >=20 > The IETF datatracker status page for this draft is: > = https://datatracker.ietf.org/doc/draft-ietf-dprive-dtls-and-tls-profiles/ >=20 > There are also htmlized versions available at: > https://tools.ietf.org/html/draft-ietf-dprive-dtls-and-tls-profiles-11 > = https://datatracker.ietf.org/doc/html/draft-ietf-dprive-dtls-and-tls-profi= les-11 >=20 > A diff from the previous version is available at: > = https://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-dprive-dtls-and-tls-profile= s-11 >=20 >=20 > Please note that it may take a couple of minutes from the time of = submission > until the htmlized version and diff are available at tools.ietf.org. >=20 > Internet-Drafts are also available by anonymous FTP at: > ftp://ftp.ietf.org/internet-drafts/ >=20 > _______________________________________________ > dns-privacy mailing list > dns-privacy@ietf.org > https://www.ietf.org/mailman/listinfo/dns-privacy From nobody Thu Sep 28 07:13:14 2017 Return-Path: X-Original-To: dns-privacy@ietf.org Delivered-To: dns-privacy@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id CB7D5134732; Thu, 28 Sep 2017 07:13:07 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: Cc: dns-privacy@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.62.1 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <150660798779.13800.6588940327712550533@ietfa.amsl.com> Date: Thu, 28 Sep 2017 07:13:07 -0700 Archived-At: Subject: [dns-privacy] I-D Action: draft-ietf-dprive-padding-policy-02.txt X-BeenThere: dns-privacy@ietf.org X-Mailman-Version: 2.1.22 List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 28 Sep 2017 14:13:08 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the DNS PRIVate Exchange WG of the IETF. Title : Padding Policy for EDNS(0) Author : Alexander Mayrhofer Filename : draft-ietf-dprive-padding-policy-02.txt Pages : 8 Date : 2017-09-28 Abstract: RFC 7830 specifies the EDNS0 'Padding' option, but does not specify the actual padding length for specific applications. This memo lists the possible options ("Padding Policies"), discusses the implications of each of these options, and provides a recommended (experimental) option. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-dprive-padding-policy/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-dprive-padding-policy-02 https://datatracker.ietf.org/doc/html/draft-ietf-dprive-padding-policy-02 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-dprive-padding-policy-02 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Thu Sep 28 07:23:20 2017 Return-Path: X-Original-To: dns-privacy@ietfa.amsl.com Delivered-To: dns-privacy@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D448C1331D9 for ; Thu, 28 Sep 2017 07:23:17 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.898 X-Spam-Level: X-Spam-Status: No, score=-6.898 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Ulh2oJaG9F8I for ; Thu, 28 Sep 2017 07:23:15 -0700 (PDT) Received: from mail.sbg.nic.at (mail.sbg.nic.at [83.136.33.227]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A0BDD133057 for ; Thu, 28 Sep 2017 07:23:14 -0700 (PDT) Received: from nics-exch2.sbg.nic.at ([10.17.175.6]) by mail.sbg.nic.at with XWall v3.53 ; Thu, 28 Sep 2017 16:23:12 +0200 Received: from NICS-EXCH2.sbg.nic.at ([fe80::a5b2:6e42:e54d:9d57]) by NICS-EXCH2.sbg.nic.at ([fe80::a5b2:6e42:e54d:9d57%12]) with mapi id 14.03.0361.001; Thu, 28 Sep 2017 16:23:10 +0200 From: Alexander Mayrhofer To: "dns-privacy@ietf.org" Thread-Topic: Version -02 of draft-ietf-padding-policy Thread-Index: AdM4ZInRJMA8hjhAT7uvHEUEuyq1mA== Date: Thu, 28 Sep 2017 14:23:09 +0000 Message-ID: <19F54F2956911544A32543B8A9BDE0759905AED2@NICS-EXCH2.sbg.nic.at> Accept-Language: en-US, de-DE Content-Language: de-DE X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.10.0.163] Content-Type: multipart/alternative; boundary="_000_19F54F2956911544A32543B8A9BDE0759905AED2NICSEXCH2sbgnic_" MIME-Version: 1.0 X-XWALL-BCKS: auto Archived-At: Subject: [dns-privacy] Version -02 of draft-ietf-padding-policy X-BeenThere: dns-privacy@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 28 Sep 2017 14:23:18 -0000 --_000_19F54F2956911544A32543B8A9BDE0759905AED2NICSEXCH2sbgnic_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hello everyone, I've just posted version -02 of the Padding Policy draft. This version cons= ideres comments from the Prague WG sesson and subsequent mailing list discu= ssions. Specifically, the major changes are: - Changed Document status to "Experimental" - Added "Maximum Length" padding strategy - Reworded "Block Length" strategy - Added text with RFC2119 language to each strategy - Provided justification for the recommended strategy. Please review and comment. I'm happy to talk about it in Singapore, and i t= hink we should be pretty close to WGLC'ing it out of our eyes after that :)= A review by a native speaker of English would also be appreciated, since i= 'm pretty sure i've sprinkled in a bit of Engrish here and there ;) https://tools.ietf.org/html/draft-ietf-dprive-padding-policy-02 best, Alex --_000_19F54F2956911544A32543B8A9BDE0759905AED2NICSEXCH2sbgnic_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Hello everyone,

 

 

I’ve just posted version = -02 of the Padding Policy draft. This version consideres comments from the = Prague WG sesson and subsequent mailing list discussions. Specifically, the= major changes are:

 

-  = ;        Changed Document status= to „Experimental“

-  = ;        Added „Maximum Le= ngth“ padding strategy

-  = ;        Reworded „Block L= ength“ strategy

-  = ;        Added text with RFC2119= language to each strategy

-  = ;        Provided justification = for the recommended strategy.

 

Please review and comment. I= 217;m happy to talk about it in Singapore, and i think we should be pretty = close to WGLC‘ing it out of our eyes after that :) A review by a nati= ve speaker of English would also be appreciated, since i’m pretty sure i’ve sprinkled in a bit of Engrish here = and there ;)

 

https://tools.ietf.org/html/dr= aft-ietf-dprive-padding-policy-02

 

best,

Alex

 

--_000_19F54F2956911544A32543B8A9BDE0759905AED2NICSEXCH2sbgnic_-- From nobody Fri Sep 29 00:23:36 2017 Return-Path: X-Original-To: dns-privacy@ietfa.amsl.com Delivered-To: dns-privacy@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 378441326ED for ; Fri, 29 Sep 2017 00:23:35 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.199 X-Spam-Level: X-Spam-Status: No, score=-4.199 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id gBCmZVR1msvR for ; Fri, 29 Sep 2017 00:23:32 -0700 (PDT) Received: from spamfilter4.dtu.dk (spamfilter4.dtu.dk [192.38.80.33]) (using TLSv1.2 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4DCB71321CB for ; Fri, 29 Sep 2017 00:23:31 -0700 (PDT) Received: from ait-pexedg02.win.dtu.dk (ait-pexedg02.win.dtu.dk [192.38.82.192]) by spamfilter4.dtu.dk with ESMTP id v8T7NNNg016154-v8T7NNNi016154 (version=TLSv1.0 cipher=DHE-RSA-AES256-SHA bits=256 verify=CAFAIL); Fri, 29 Sep 2017 09:23:24 +0200 Received: from AIT-PEX03MBX08.win.dtu.dk (192.38.82.186) by ait-pexedg02.win.dtu.dk (192.38.82.192) with Microsoft SMTP Server (TLS) id 14.3.361.1; Fri, 29 Sep 2017 09:23:17 +0200 Received: from ait-pex01mbx01.win.dtu.dk ([169.254.1.185]) by AIT-PEX03MBX08.win.dtu.dk ([169.254.8.21]) with mapi id 14.03.0361.001; Fri, 29 Sep 2017 09:23:23 +0200 From: Hugo Maxwell Connery To: Alexander Mayrhofer CC: "dns-privacy@ietf.org" Thread-Topic: Version -02 of draft-ietf-padding-policy Thread-Index: AdM4ZInRJMA8hjhAT7uvHEUEuyq1mAAjudBQ Date: Fri, 29 Sep 2017 07:23:22 +0000 Message-ID: <6CB05D82CE245B4083BBF3B97E2ED470345C018B@ait-pex01mbx01.win.dtu.dk> References: <19F54F2956911544A32543B8A9BDE0759905AED2@NICS-EXCH2.sbg.nic.at> In-Reply-To: <19F54F2956911544A32543B8A9BDE0759905AED2@NICS-EXCH2.sbg.nic.at> Accept-Language: en-AU, da-DK, en-US Content-Language: en-AU X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [192.38.82.198] Content-Type: multipart/alternative; boundary="_000_6CB05D82CE245B4083BBF3B97E2ED470345C018Baitpex01mbx01wi_" MIME-Version: 1.0 Archived-At: Subject: Re: [dns-privacy] Version -02 of draft-ietf-padding-policy X-BeenThere: dns-privacy@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 29 Sep 2017 07:23:35 -0000 --_000_6CB05D82CE245B4083BBF3B97E2ED470345C018Baitpex01mbx01wi_ Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable Hi Alex, Thanks so much for adding the Maximal Padding strategy. The section is cle= ar, the subtitle is humorous, and the final NOT RECOMMENDED gives the strat= egy its place. Regards, Hugo Connery -- Head of IT, DTU Environment, http://www.env.dtu.dk ________________________________ From: dns-privacy [dns-privacy-bounces@ietf.org] on behalf of Alexander May= rhofer [alexander.mayrhofer@nic.at] Sent: Thursday, 28 September 2017 16:23 To: dns-privacy@ietf.org Subject: [dns-privacy] Version -02 of draft-ietf-padding-policy Hello everyone, I=92ve just posted version -02 of the Padding Policy draft. This version co= nsideres comments from the Prague WG sesson and subsequent mailing list dis= cussions. Specifically, the major changes are: - Changed Document status to =84Experimental=93 - Added =84Maximum Length=93 padding strategy - Reworded =84Block Length=93 strategy - Added text with RFC2119 language to each strategy - Provided justification for the recommended strategy. Please review and comment. I=92m happy to talk about it in Singapore, and i= think we should be pretty close to WGLC=91ing it out of our eyes after tha= t :) A review by a native speaker of English would also be appreciated, sin= ce i=92m pretty sure i=92ve sprinkled in a bit of Engrish here and there ;) https://tools.ietf.org/html/draft-ietf-dprive-padding-policy-02 best, Alex --_000_6CB05D82CE245B4083BBF3B97E2ED470345C018Baitpex01mbx01wi_ Content-Type: text/html; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable
Hi Alex,

Thanks so much for adding the Maximal Padding strategy.  The section i= s clear, the subtitle is humorous, and the final NOT RECOMMENDED gives the = strategy its place.

Regards,
  Hugo Connery
--
Head of IT, DTU Environment, http://www.env.dtu.dk
From: dns-privacy [dns-privacy-bounces@ie= tf.org] on behalf of Alexander Mayrhofer [alexander.mayrhofer@nic.at]
Sent: Thursday, 28 September 2017 16:23
To: dns-privacy@ietf.org
Subject: [dns-privacy] Version -02 of draft-ietf-padding-policy

Hello everyone,

 

 

I=92ve just posted version -02 = of the Padding Policy draft. This version consideres comments from the Prag= ue WG sesson and subsequent mailing list discussions. Specifically, the maj= or changes are:

 

-          Changed Document status to =84Exp= erimental=93

-          Added =84Maximum Length=93 paddin= g strategy

-          Reworded =84Block Length=93 strat= egy

-          Added text with RFC2119 language = to each strategy

-          Provided justification for the re= commended strategy.

 

Please review and comment. I=92= m happy to talk about it in Singapore, and i think we should be pretty clos= e to WGLC=91ing it out of our eyes after that :) A review by a native speak= er of English would also be appreciated, since i=92m pretty sure i=92ve sprinkled in a bit of Engrish here and ther= e ;)

 

https://tool= s.ietf.org/html/draft-ietf-dprive-padding-policy-02

 

best,

Alex

 

--_000_6CB05D82CE245B4083BBF3B97E2ED470345C018Baitpex01mbx01wi_--