From nobody Tue Mar 17 11:09:07 2020 Return-Path: X-Original-To: doh@ietfa.amsl.com Delivered-To: doh@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E69033A09E1 for ; Tue, 17 Mar 2020 11:09:04 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.112 X-Spam-Level: X-Spam-Status: No, score=-3.112 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FORGED_FROMDOMAIN=0.001, FREEMAIL_FROM=0.001, HEADER_FROM_DIFFERENT_DOMAINS=0.249, RCVD_IN_MSPIKE_H2=-1.463, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id V0V-XjCCjelm for ; Tue, 17 Mar 2020 11:08:59 -0700 (PDT) Received: from mail-io1-f47.google.com (mail-io1-f47.google.com [209.85.166.47]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A533B3A09DF for ; Tue, 17 Mar 2020 11:08:59 -0700 (PDT) Received: by mail-io1-f47.google.com with SMTP id q128so22089358iof.9 for ; Tue, 17 Mar 2020 11:08:59 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=wso9ytmWULBtPfCKtEWtw/UnbgFTkBM1rFfOfed4uvM=; b=MwzLs5qFzJmcJpEfekdWH+IIDUwqWTB7dcIq759aHoZGo2JG456iskV3XuYhadLAkz fuqLid8CQN6ODvbi3qnOVzpVDWuZVGT0FWIDlQJDnHegaALqKx0WF5VVUktFitcxsJjY GFj9dxS7afADqYMhhkVcB27Eig9yHTAQxubE79/tS42D2/lxC+wux5Di80pIIIcuCvlh s7HP73qn6FZp5xQ4ss+Q7Im/qWUMJlD4PFaQXK9PhcB5UzTJ39YJduFENMlEnFp5Olaw qTJ+4E0OPG8+ICdZxUFk9ltBCSLjET9SBmTbCXPfOLccf0J+cu12aAkDlG3k3P+nD2V3 w2Mw== X-Gm-Message-State: ANhLgQ2bhwjJayixSJBUQUgnsXtX6doZ6scyQlwu6BgRnC6AaHtuo2T1 fB6V5PF8Ar58RZLoFMDXNKvhgK/hm4FZW9uA2sHl+A== X-Google-Smtp-Source: ADFU+vvFyMPd9ZxeYsXwGNOjfX3tDzRk/QBpiDKMr6o+GEYJcLRyQQOHvaJOF9hBdGC8eUt5oduXNKtbCHorcaX6tWk= X-Received: by 2002:a6b:378a:: with SMTP id e132mr28648ioa.206.1584468532397; Tue, 17 Mar 2020 11:08:52 -0700 (PDT) MIME-Version: 1.0 From: Barry Leiba Date: Tue, 17 Mar 2020 14:08:39 -0400 Message-ID: To: doh@ietf.org Content-Type: text/plain; charset="UTF-8" Archived-At: Subject: [Doh] New ADD working group replacing DOH X-BeenThere: doh@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: DNS Over HTTPS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 17 Mar 2020 18:09:05 -0000 Hi, all, The DOH working group was chartered to produce the DoH specification, which it did some time ago. We have left it open while we sorted out where other, related work would go, and we now have the ADD working group chartered to handle some of that. It is, therefore, time to close the DOH working group, which I will do after I send this message. I'm going to leave the mailing list open for now, but will close it if that becomes necessary. In any case, the archives will stay around. Authors of documents that had been intended for this working group are encouraged to see if their drafts fit into the ADD charter now, and to bring them there if so. If they don't fit now, they could be appropriate later, after initial work is done. Thanks very much to Dave and Ben for having chaired this working group, and to the participants who helped make it successful. Barry, ART AD From nobody Tue Mar 17 12:18:01 2020 Return-Path: X-Original-To: doh@ietf.org Delivered-To: doh@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 894513A0B3A; Tue, 17 Mar 2020 12:17:58 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: IAB Chair To: "IETF Announcement List" Cc: doh@ietf.org, bemasc@google.com, tale@dd.org X-Test-IDTracker: no X-IETF-IDTracker: 6.121.0 Auto-Submitted: auto-generated Precedence: bulk Reply-To: ietf@ietf.org Message-ID: <158447267852.32130.2597938294762293360@ietfa.amsl.com> Date: Tue, 17 Mar 2020 12:17:58 -0700 Archived-At: Subject: [Doh] WG Action: Conclusion of DNS Over HTTPS (doh) X-BeenThere: doh@ietf.org X-Mailman-Version: 2.1.29 List-Id: DNS Over HTTPS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 17 Mar 2020 19:18:00 -0000 The DNS Over HTTPS (doh) WG in the Applications and Real-Time Area Area has concluded. The IESG contact persons are Barry Leiba, Alexey Melnikov, and Adam Roach. The DOH working group was chartered to produce the DoH specification, which it did some time ago. We have left it open while we sorted out where other, related work would go, and we now have the ADD working group chartered to handle some of that. It is, therefore, time to close the DOH working group. The mailing list will remain open for now, but might be closed later. In any case, the archives will stay around. Thanks very much to Dave Lawrence and Ben Schwartz for having chaired the DOH working group, and to the participants who helped make it successful. From nobody Tue Mar 17 12:25:05 2020 Return-Path: X-Original-To: doh@ietf.org Delivered-To: doh@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id C83243A0C8F; Tue, 17 Mar 2020 12:24:45 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: IESG Secretary To: "IETF Announcement List" Cc: bemasc@google.com, doh@ietf.org, tale@dd.org X-Test-IDTracker: no X-IETF-IDTracker: 6.121.0 Auto-Submitted: auto-generated Precedence: bulk Reply-To: ietf@ietf.org Message-ID: <158447308580.32177.12208658321756350197@ietfa.amsl.com> Date: Tue, 17 Mar 2020 12:24:45 -0700 Archived-At: Subject: [Doh] Correction: WG Action: Conclusion of DNS Over HTTPS (doh) X-BeenThere: doh@ietf.org X-Mailman-Version: 2.1.29 List-Id: DNS Over HTTPS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 17 Mar 2020 19:25:01 -0000 The DNS Over HTTPS (doh) WG in the Applications and Real-Time Area Area has concluded. The IESG contact persons are Barry Leiba, Alexey Melnikov, and Adam Roach. The DOH working group was chartered to produce the DoH specification, which it did some time ago. We have left it open while we sorted out where other, related work would go, and we now have the ADD working group chartered to handle some of that. It is, therefore, time to close the DOH working group. The mailing list will remain open for now, but might be closed later. In any case, the archives will stay around. Thanks very much to Dave Lawrence and Ben Schwartz for having chaired the DOH working group, and to the participants who helped make it successful. From nobody Tue Mar 17 12:41:57 2020 Return-Path: X-Original-To: doh@ietfa.amsl.com Delivered-To: doh@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4E0153A0C95; Tue, 17 Mar 2020 12:41:46 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.897 X-Spam-Level: X-Spam-Status: No, score=-1.897 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id E5ZJx64h6u1y; Tue, 17 Mar 2020 12:41:43 -0700 (PDT) Received: from bsa2.jck.com (bsa2.jck.com [70.88.254.51]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8C67C3A0C7F; Tue, 17 Mar 2020 12:41:43 -0700 (PDT) Received: from [198.252.137.10] (helo=PSB) by bsa2.jck.com with esmtp (Exim 4.82 (FreeBSD)) (envelope-from ) id 1jEI5s-000LNW-Se; Tue, 17 Mar 2020 15:41:40 -0400 Date: Tue, 17 Mar 2020 15:41:34 -0400 From: John C Klensin To: ietf@ietf.org cc: bemasc@google.com, doh@ietf.org, tale@dd.org Message-ID: <4B97DA17E3FD2DE7EF4C81C8@PSB> In-Reply-To: <158447267852.32130.2597938294762293360@ietfa.amsl.com> References: <158447267852.32130.2597938294762293360@ietfa.amsl.com> X-Mailer: Mulberry/4.0.8 (Win32) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Content-Disposition: inline X-SA-Exim-Connect-IP: 198.252.137.10 X-SA-Exim-Mail-From: john-ietf@jck.com X-SA-Exim-Scanned: No (on bsa2.jck.com); SAEximRunCond expanded to false Archived-At: Subject: Re: [Doh] WG Action: Conclusion of DNS Over HTTPS (doh) X-BeenThere: doh@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: DNS Over HTTPS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 17 Mar 2020 19:41:47 -0000 Just out of curiosity, why did this announcement come from the IAB Chair. Opening and concluding WGs has never, to my knowledge, been an IAB responsibility. Presumably if makes almost no differene but, if anyone had carefully-designed filters for the IETF-announce list, this might confuse them. best, john --On Tuesday, March 17, 2020 12:17 -0700 IAB Chair wrote: > The DNS Over HTTPS (doh) WG in the Applications and Real-Time > Area Area has concluded. The IESG contact persons are Barry > Leiba, Alexey Melnikov, and Adam Roach. > > The DOH working group was chartered to produce the DoH > specification, which it did some time ago. We have left it > open while we sorted out where other, related work would go, > and we now have the ADD working group chartered to handle some > of that. It is, therefore, time to close the DOH working group. > > The mailing list will remain open for now, but might be closed > later. In any case, the archives will stay around. > > Thanks very much to Dave Lawrence and Ben Schwartz for having > chaired the DOH working group, and to the participants who > helped make it successful. > > _______________________________________________ > IETF-Announce mailing list > IETF-Announce@ietf.org > https://www.ietf.org/mailman/listinfo/ietf-announce From nobody Tue Mar 17 12:44:08 2020 Return-Path: X-Original-To: doh@ietfa.amsl.com Delivered-To: doh@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 98EB03A0CEF; Tue, 17 Mar 2020 12:43:49 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.897 X-Spam-Level: X-Spam-Status: No, score=-1.897 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WtrzxNE9xnsc; Tue, 17 Mar 2020 12:43:46 -0700 (PDT) Received: from bsa2.jck.com (bsa2.jck.com [70.88.254.51]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9FD433A0CDF; Tue, 17 Mar 2020 12:43:46 -0700 (PDT) Received: from [198.252.137.10] (helo=PSB) by bsa2.jck.com with esmtp (Exim 4.82 (FreeBSD)) (envelope-from ) id 1jEI7s-000LNu-H3; Tue, 17 Mar 2020 15:43:44 -0400 Date: Tue, 17 Mar 2020 15:43:38 -0400 From: John C Klensin To: ietf@ietf.org cc: bemasc@google.com, doh@ietf.org, tale@dd.org Message-ID: <9252EE48100692F1C624F7F4@PSB> In-Reply-To: <4B97DA17E3FD2DE7EF4C81C8@PSB> References: <158447267852.32130.2597938294762293360@ietfa.amsl.com> <4B97DA17E3FD2DE7EF4C81C8@PSB> X-Mailer: Mulberry/4.0.8 (Win32) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Content-Disposition: inline X-SA-Exim-Connect-IP: 198.252.137.10 X-SA-Exim-Mail-From: john-ietf@jck.com X-SA-Exim-Scanned: No (on bsa2.jck.com); SAEximRunCond expanded to false Archived-At: Subject: Re: [Doh] WG Action: Conclusion of DNS Over HTTPS (doh) X-BeenThere: doh@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: DNS Over HTTPS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 17 Mar 2020 19:44:06 -0000 Never mind, just corrected. john --On Tuesday, March 17, 2020 15:41 -0400 John C Klensin wrote: > Just out of curiosity, why did this announcement come from the > IAB Chair. Opening and concluding WGs has never, to my > knowledge, been an IAB responsibility. Presumably if makes > almost no differene but, if anyone had carefully-designed > filters for the IETF-announce list, this might confuse them. > > best, > john > > > --On Tuesday, March 17, 2020 12:17 -0700 IAB Chair > wrote: > >> The DNS Over HTTPS (doh) WG in the Applications and Real-Time >> Area Area has concluded. The IESG contact persons are Barry >> Leiba, Alexey Melnikov, and Adam Roach. >> >> The DOH working group was chartered to produce the DoH >> specification, which it did some time ago. We have left it >> open while we sorted out where other, related work would go, >> and we now have the ADD working group chartered to handle some >> of that. It is, therefore, time to close the DOH working >> group. >> >> The mailing list will remain open for now, but might be closed >> later. In any case, the archives will stay around. >> >> Thanks very much to Dave Lawrence and Ben Schwartz for having >> chaired the DOH working group, and to the participants who >> helped make it successful. >> >> _______________________________________________ >> IETF-Announce mailing list >> IETF-Announce@ietf.org >> https://www.ietf.org/mailman/listinfo/ietf-announce > From nobody Mon Mar 30 08:53:11 2020 Return-Path: X-Original-To: doh@ietfa.amsl.com Delivered-To: doh@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3C6283A17A5 for ; Mon, 30 Mar 2020 08:53:09 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0 X-Spam-Level: X-Spam-Status: No, score=0 tagged_above=-999 required=5 tests=[SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Hjf_gFS5eJOM for ; Mon, 30 Mar 2020 08:53:06 -0700 (PDT) Received: from rfc-editor.org (rfc-editor.org [4.31.198.49]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B94873A17AE for ; Mon, 30 Mar 2020 08:53:06 -0700 (PDT) Received: by rfc-editor.org (Postfix, from userid 30) id 45AD8F4074B; Mon, 30 Mar 2020 08:53:04 -0700 (PDT) To: paul.hoffman@icann.org, mcmanus@ducksong.com, superuser@gmail.com, barryleiba@computer.org, bemasc@google.com, tale@dd.org X-PHP-Originating-Script: 30:errata_mail_lib.php From: RFC Errata System Cc: mohamed.boucaadir@orange.com, doh@ietf.org, rfc-editor@rfc-editor.org Content-Type: text/plain; charset=UTF-8 Message-Id: <20200330155304.45AD8F4074B@rfc-editor.org> Date: Mon, 30 Mar 2020 08:53:04 -0700 (PDT) Archived-At: Subject: [Doh] [Technical Errata Reported] RFC8484 (6033) X-BeenThere: doh@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: DNS Over HTTPS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 30 Mar 2020 15:53:09 -0000 The following errata report has been submitted for RFC8484, "DNS Queries over HTTPS (DoH)". -------------------------------------- You may review the report below and at: https://www.rfc-editor.org/errata/eid6033 -------------------------------------- Type: Technical Reported by: Mohamed Boucadair Section: 3 Original Text ------------- A DoH client MUST NOT use a different URI simply because it was discovered outside of the client's configuration (such as through HTTP/2 server push) or because a server offers an unsolicited response that appears to be a valid answer to a DNS query. Corrected Text -------------- A DoH client MUST NOT use a different URI that was discovered outside of the client's configuration (except via HTTP redirection discussed in Section 6.4 of [RFC7231]). Also, the DoH client MUST ignore an unsolicited response (such as through HTTP/2 server push) that appears to be a valid answer to a DNS query unless that response comes from a configured URI (as described in Section 5.3). Notes ----- (1) The intent of this text is confusing. (2) I checked the mailing list and found that the text was updated late in the publication process to address this comment: https://mailarchive.ietf.org/arch/msg/doh/f_V-tBgB-KRsLZhttx9tGt75cps/. (3) The example provided in the thread (server push) is related to the second part of the OLD text. It is mistakenly attached to the first part. (4) The push example may be interpreted as if server push is disallowed. This is conflicting with Section 5.3. Hence, this change: Also, the DoH client MUST ignore an unsolicited response (such as through HTTP/2 server push) that appears to be a valid answer to a DNS query ** unless that response comes from a configured URI (as described in Section 5.3) **. (5) An intuitive way to discover the URI outside the configuration is redirection. RFC8484 indicates clearly the following: The described approach is more than a tunnel over HTTP. It establishes default media formatting types for requests and responses but uses normal HTTP content negotiation mechanisms for selecting alternatives that endpoints may prefer in anticipation of serving new use cases. In addition to this media type negotiation, it ** aligns itself with HTTP features ** such as caching, **redirection**, proxying, authentication, and compression. Forbidding discovery of URI outside the configuration contradicts the above excerpt. The text is as such incorrect. (6) Also, I suggest to remove "simply" from the text. Not sure what message is supposed to convey. Instructions: ------------- This erratum is currently posted as "Reported". If necessary, please use "Reply All" to discuss whether it should be verified or rejected. When a decision is reached, the verifying party can log in to change the status and edit the report, if necessary. -------------------------------------- RFC8484 (draft-ietf-doh-dns-over-https-14) -------------------------------------- Title : DNS Queries over HTTPS (DoH) Publication Date : October 2018 Author(s) : P. Hoffman, P. McManus Category : PROPOSED STANDARD Source : DNS Over HTTPS Area : Applications and Real-Time Stream : IETF Verifying Party : IESG From nobody Mon Mar 30 09:33:03 2020 Return-Path: X-Original-To: doh@ietfa.amsl.com Delivered-To: doh@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A09513A1859 for ; Mon, 30 Mar 2020 09:33:00 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.252 X-Spam-Level: X-Spam-Status: No, score=0.252 tagged_above=-999 required=5 tests=[FREEMAIL_FORGED_FROMDOMAIN=0.001, FREEMAIL_FROM=0.001, HEADER_FROM_DIFFERENT_DOMAINS=0.25, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3xWYvJ429jtE for ; Mon, 30 Mar 2020 09:32:59 -0700 (PDT) Received: from mail-io1-f46.google.com (mail-io1-f46.google.com [209.85.166.46]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 295693A184F for ; Mon, 30 Mar 2020 09:32:59 -0700 (PDT) Received: by mail-io1-f46.google.com with SMTP id y14so1313641iol.12 for ; Mon, 30 Mar 2020 09:32:59 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=yagB2BiF1O2ztjdOB2L2RPE4vj4FKlCiKAlU5dNtlx0=; b=YDKUffCjQy6qr3G01ZIeZkQ1AhUcFcUDD1+GECzpdkEDu6HT80IIms0Aaah1M+8U8J g2L5bl+HlLdXLgsead19yaE4ovs1y7w+QE2gTxQytnPvxej26lt99N5eW0F3RK+2m7Yk utFrLNGIXp+oP+A2bUJcabO1x9MjdmJ2N73KbrLXXylh+6ZNtyZV60EDGr5+WDd9xY1h 9ufrPHnOwX/Wq3pkwxqXlFXxgQd2Fg/bDQWgiy9sFBIVEzeBEnHaTQuquAanwescBP+w D0pNiD5pfycr2yiifT/nb0Ue/eWE3zCw30tgQ9EEGbSmnNVUJ0rHapbgV8Gnj6kryxhi UVYw== X-Gm-Message-State: ANhLgQ0EZfyddlbZWBNQVm/ye6ZrnEhCJ4RLLsKyKC9bj+3JUGf9mZEF 4yN4s/q6p8pr9ljcV3pjYCQ0oscQzBoUFZiFkVYG7x7/oFA= X-Google-Smtp-Source: ADFU+vswf0DKMaNYB0AhLwHgA3jIwH1or/g1a6TbIjTAi9qAPmmvqKTwr4enI0V9XjNlT6omNF5+jY8K0sMueoTtZ1M= X-Received: by 2002:a5d:80d6:: with SMTP id h22mr11247503ior.177.1585585978174; Mon, 30 Mar 2020 09:32:58 -0700 (PDT) MIME-Version: 1.0 References: <20200330155304.45AD8F4074B@rfc-editor.org> In-Reply-To: <20200330155304.45AD8F4074B@rfc-editor.org> From: Barry Leiba Date: Mon, 30 Mar 2020 12:32:47 -0400 Message-ID: To: RFC Errata System Cc: Paul Hoffman , Patrick McManus , Murray Kucherawy , Ben Schwartz , Dave Lawrence , mohamed.boucaadir@orange.com, doh@ietf.org Content-Type: text/plain; charset="UTF-8" Archived-At: Subject: Re: [Doh] [Technical Errata Reported] RFC8484 (6033) X-BeenThere: doh@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: DNS Over HTTPS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 30 Mar 2020 16:33:01 -0000 The proposed change substantively changes the text and cannot be approved through an errata report. My inclination is "Rejected", as I do believe the text says what it's intended to say (so it's not an erratum), but I could be convinced that "held for document update" is better if the document editors weigh in. In particular: > Forbidding discovery of URI outside the configuration contradicts the above excerpt. The text is as such incorrect. > > (6) Also, I suggest to remove "simply" from the text. Not sure what message is supposed to convey. "Simply" is critical, and addresses your line above. Consider: A DoH client MUST NOT use a different URI that was discovered outside of the client's configuration That's your substitution, and *that* forbids discovery outside the configuration. But with "simply", as written, it says that there must be another reason for using a different URI. It can discover the URI from outside the configuration, but that can't be the only reason for using it. That discovery has to be augmented by some other knowledge. Barry On Mon, Mar 30, 2020 at 11:53 AM RFC Errata System wrote: > > The following errata report has been submitted for RFC8484, > "DNS Queries over HTTPS (DoH)". > > -------------------------------------- > You may review the report below and at: > https://www.rfc-editor.org/errata/eid6033 > > -------------------------------------- > Type: Technical > Reported by: Mohamed Boucadair > > Section: 3 > > Original Text > ------------- > A DoH client MUST NOT use a different URI simply because it was > discovered outside of the client's configuration (such as through > HTTP/2 server push) or because a server offers an unsolicited > response that appears to be a valid answer to a DNS query. > > Corrected Text > -------------- > A DoH client MUST NOT use a different URI that was discovered outside > of the client's configuration (except via HTTP redirection discussed > in Section 6.4 of [RFC7231]). Also, the DoH client MUST ignore an > unsolicited response (such as through HTTP/2 server push) that > appears to be a valid answer to a DNS query unless that response > comes from a configured URI (as described in Section 5.3). > > Notes > ----- > (1) The intent of this text is confusing. > > (2) I checked the mailing list and found that the text was updated late in the publication process to address this comment: https://mailarchive.ietf.org/arch/msg/doh/f_V-tBgB-KRsLZhttx9tGt75cps/. > > (3) The example provided in the thread (server push) is related to the second part of the OLD text. It is mistakenly attached to the first part. > > (4) The push example may be interpreted as if server push is disallowed. This is conflicting with Section 5.3. > > Hence, this change: > > Also, the DoH client MUST ignore an > unsolicited response (such as through HTTP/2 server push) that > appears to be a valid answer to a DNS query ** unless that response > comes from a configured URI (as described in Section 5.3) **. > > (5) An intuitive way to discover the URI outside the configuration is redirection. RFC8484 indicates clearly the following: > > The described approach is more than a tunnel over HTTP. It > establishes default media formatting types for requests and responses > but uses normal HTTP content negotiation mechanisms for selecting > alternatives that endpoints may prefer in anticipation of serving new > use cases. In addition to this media type negotiation, it ** aligns > itself with HTTP features ** such as caching, **redirection**, proxying, > authentication, and compression. > > Forbidding discovery of URI outside the configuration contradicts the above excerpt. The text is as such incorrect. > > (6) Also, I suggest to remove "simply" from the text. Not sure what message is supposed to convey. > > Instructions: > ------------- > This erratum is currently posted as "Reported". If necessary, please > use "Reply All" to discuss whether it should be verified or > rejected. When a decision is reached, the verifying party > can log in to change the status and edit the report, if necessary. > > -------------------------------------- > RFC8484 (draft-ietf-doh-dns-over-https-14) > -------------------------------------- > Title : DNS Queries over HTTPS (DoH) > Publication Date : October 2018 > Author(s) : P. Hoffman, P. McManus > Category : PROPOSED STANDARD > Source : DNS Over HTTPS > Area : Applications and Real-Time > Stream : IETF > Verifying Party : IESG From nobody Mon Mar 30 09:38:10 2020 Return-Path: X-Original-To: doh@ietfa.amsl.com Delivered-To: doh@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 135BF3A18A2 for ; Mon, 30 Mar 2020 09:37:59 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.252 X-Spam-Level: X-Spam-Status: No, score=0.252 tagged_above=-999 required=5 tests=[FREEMAIL_FORGED_FROMDOMAIN=0.001, FREEMAIL_FROM=0.001, HEADER_FROM_DIFFERENT_DOMAINS=0.25, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id pcyoT_mSXlsN for ; Mon, 30 Mar 2020 09:37:57 -0700 (PDT) Received: from mail-io1-f68.google.com (mail-io1-f68.google.com [209.85.166.68]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4C2363A1913 for ; Mon, 30 Mar 2020 09:37:53 -0700 (PDT) Received: by mail-io1-f68.google.com with SMTP id b12so2244433ion.8 for ; Mon, 30 Mar 2020 09:37:53 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=R/ADHEFQbI0IYPZMJGToxsAKsHvVm9YEufax/NnwCzc=; b=E2g/znYq1h0pzDLWX7/T0ICwgKIpqrhdX/pba1XPgsK2rHjMrKx6NIyebz15b8LwL6 h+lgeWJEgybkyFn77q8BQalJ6SPALi8Grsi2B1nSHOsJYseDvOQ+M9LcL4Cp9EG7w086 KcbZnT7O9EfieDnKbvf/i0HnysNLeVqre1q83kg4E2pyLS6PdgHEj1cGSduErpZ5Uzoj gM2rqzKEnPct1V9BPSqctEpsRGivCC7ja7VLYujGHWGo7yDuUSM9THy/JQa7T8wvbHqi PRG38fE9PlJaypJNswwxEDeZjCMdHZq5I9kgE+6bPhEjXDZX4z8L2MGKTdH4l2A0vM1c PfMw== X-Gm-Message-State: ANhLgQ3Zu9h3zrxlWsrJyLVVCDrVp936GloertiLpJDj1OgGfhNBziNs JXWx4H/+KIxGbvZTQRPKKioZNMu4D+mahLunA2Q= X-Google-Smtp-Source: ADFU+vv0OpeJkuY3kbb2j5IkoUms1wF883CY2Y0ooaGfrTBtE4egNCK48zgQ4CzbC8p8JUlTORQgJAa7Usu1F97JBSs= X-Received: by 2002:a02:484:: with SMTP id 126mr11509901jab.118.1585586272333; Mon, 30 Mar 2020 09:37:52 -0700 (PDT) MIME-Version: 1.0 References: <20200330155304.45AD8F4074B@rfc-editor.org> In-Reply-To: From: Barry Leiba Date: Mon, 30 Mar 2020 12:37:41 -0400 Message-ID: To: mohamed.boucadir@orange.com Cc: Paul Hoffman , Patrick McManus , Murray Kucherawy , Ben Schwartz , Dave Lawrence , doh@ietf.org, RFC Editor Content-Type: text/plain; charset="UTF-8" Archived-At: Subject: Re: [Doh] [Technical Errata Reported] RFC8484 (6033) X-BeenThere: doh@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: DNS Over HTTPS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 30 Mar 2020 16:38:09 -0000 Re-sending after fixing Mohamed's email address, which seems to be mis-typed in the errata report. Barry On Mon, Mar 30, 2020 at 12:32 PM Barry Leiba wrote: > > The proposed change substantively changes the text and cannot be > approved through an errata report. My inclination is "Rejected", as I > do believe the text says what it's intended to say (so it's not an > erratum), but I could be convinced that "held for document update" is > better if the document editors weigh in. > > In particular: > > Forbidding discovery of URI outside the configuration contradicts the above excerpt. The text is as such incorrect. > > > > (6) Also, I suggest to remove "simply" from the text. Not sure what message is supposed to convey. > > "Simply" is critical, and addresses your line above. Consider: > > A DoH client MUST NOT use a different URI that was discovered outside > of the client's configuration > > That's your substitution, and *that* forbids discovery outside the > configuration. But with "simply", as written, it says that there must > be another reason for using a different URI. It can discover the URI > from outside the configuration, but that can't be the only reason for > using it. That discovery has to be augmented by some other knowledge. > > Barry > > On Mon, Mar 30, 2020 at 11:53 AM RFC Errata System > wrote: > > > > The following errata report has been submitted for RFC8484, > > "DNS Queries over HTTPS (DoH)". > > > > -------------------------------------- > > You may review the report below and at: > > https://www.rfc-editor.org/errata/eid6033 > > > > -------------------------------------- > > Type: Technical > > Reported by: Mohamed Boucadair > > > > Section: 3 > > > > Original Text > > ------------- > > A DoH client MUST NOT use a different URI simply because it was > > discovered outside of the client's configuration (such as through > > HTTP/2 server push) or because a server offers an unsolicited > > response that appears to be a valid answer to a DNS query. > > > > Corrected Text > > -------------- > > A DoH client MUST NOT use a different URI that was discovered outside > > of the client's configuration (except via HTTP redirection discussed > > in Section 6.4 of [RFC7231]). Also, the DoH client MUST ignore an > > unsolicited response (such as through HTTP/2 server push) that > > appears to be a valid answer to a DNS query unless that response > > comes from a configured URI (as described in Section 5.3). > > > > Notes > > ----- > > (1) The intent of this text is confusing. > > > > (2) I checked the mailing list and found that the text was updated late in the publication process to address this comment: https://mailarchive.ietf.org/arch/msg/doh/f_V-tBgB-KRsLZhttx9tGt75cps/. > > > > (3) The example provided in the thread (server push) is related to the second part of the OLD text. It is mistakenly attached to the first part. > > > > (4) The push example may be interpreted as if server push is disallowed. This is conflicting with Section 5.3. > > > > Hence, this change: > > > > Also, the DoH client MUST ignore an > > unsolicited response (such as through HTTP/2 server push) that > > appears to be a valid answer to a DNS query ** unless that response > > comes from a configured URI (as described in Section 5.3) **. > > > > (5) An intuitive way to discover the URI outside the configuration is redirection. RFC8484 indicates clearly the following: > > > > The described approach is more than a tunnel over HTTP. It > > establishes default media formatting types for requests and responses > > but uses normal HTTP content negotiation mechanisms for selecting > > alternatives that endpoints may prefer in anticipation of serving new > > use cases. In addition to this media type negotiation, it ** aligns > > itself with HTTP features ** such as caching, **redirection**, proxying, > > authentication, and compression. > > > > Forbidding discovery of URI outside the configuration contradicts the above excerpt. The text is as such incorrect. > > > > (6) Also, I suggest to remove "simply" from the text. Not sure what message is supposed to convey. > > > > Instructions: > > ------------- > > This erratum is currently posted as "Reported". If necessary, please > > use "Reply All" to discuss whether it should be verified or > > rejected. When a decision is reached, the verifying party > > can log in to change the status and edit the report, if necessary. > > > > -------------------------------------- > > RFC8484 (draft-ietf-doh-dns-over-https-14) > > -------------------------------------- > > Title : DNS Queries over HTTPS (DoH) > > Publication Date : October 2018 > > Author(s) : P. Hoffman, P. McManus > > Category : PROPOSED STANDARD > > Source : DNS Over HTTPS > > Area : Applications and Real-Time > > Stream : IETF > > Verifying Party : IESG From nobody Mon Mar 30 09:40:24 2020 Return-Path: X-Original-To: doh@ietfa.amsl.com Delivered-To: doh@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EF2023A186B for ; Mon, 30 Mar 2020 09:40:10 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.252 X-Spam-Level: X-Spam-Status: No, score=0.252 tagged_above=-999 required=5 tests=[FREEMAIL_FORGED_FROMDOMAIN=0.001, FREEMAIL_FROM=0.001, HEADER_FROM_DIFFERENT_DOMAINS=0.25, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4w9XKy5qdVD5 for ; Mon, 30 Mar 2020 09:40:09 -0700 (PDT) Received: from mail-io1-f68.google.com (mail-io1-f68.google.com [209.85.166.68]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 730B63A1900 for ; Mon, 30 Mar 2020 09:40:09 -0700 (PDT) Received: by mail-io1-f68.google.com with SMTP id q9so18490519iod.4 for ; Mon, 30 Mar 2020 09:40:09 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=DeBH//KLG40ULowTNg81wukONwdbM9p4uRds/YAiMUU=; b=IH2dMVwF6rp3EtfDfHR4c1TJiodnqax6AxTLrjOhCI+J/uFN8ufOmOnn/0zpe5dtyM Q92doF2Gm/yCWHe3WENRYYlzYobrdJWCar6YStb9Vuevj2B0FSFT3vly5gfXtVm7Idaa hUV8tK18CwH1U4f4dD6t8zFCZMjLkIq5O/OE9AbAlwdTPv5w5zh6rDJlEgUGVMjSZYAu CX1HERcZZ3TLtHo82OkQoKJKQcFwX0nI+a5N+leFzfEf/utdn5S5KiaBIdkhshbQ+UH0 7fuvkYxCFnS+nNx6iq9rK1syry/E9ssYdpu+lQlDQLEaqniGPT+yHHwVeKU6G5JEdo/b JAqQ== X-Gm-Message-State: ANhLgQ3sw5Y+NFHNwskOV7o9E5dH28PjqKHVtRGJb1/VZO7nZGlvz+fI h0yC8X3ens6Ze7m9vIHK1QPsFO9mZ1jHl7rI9+A= X-Google-Smtp-Source: ADFU+vubGHZpfnmY38jPHImbgcyI1cIUE9EQDd7TBcArQSv1afvREAAgOa+/DS5bnsRRadWWUCCgmzC7ei9cBSRMuLU= X-Received: by 2002:a6b:2c52:: with SMTP id s79mr11113107ios.160.1585586408400; Mon, 30 Mar 2020 09:40:08 -0700 (PDT) MIME-Version: 1.0 References: <20200330155304.45AD8F4074B@rfc-editor.org> In-Reply-To: From: Barry Leiba Date: Mon, 30 Mar 2020 12:39:57 -0400 Message-ID: To: mohamed.boucadair@orange.com Cc: Paul Hoffman , Patrick McManus , Murray Kucherawy , Ben Schwartz , Dave Lawrence , doh@ietf.org, RFC Editor Content-Type: text/plain; charset="UTF-8" Archived-At: Subject: Re: [Doh] [Technical Errata Reported] RFC8484 (6033) X-BeenThere: doh@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: DNS Over HTTPS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 30 Mar 2020 16:40:22 -0000 Re-sending to correct the correction to Mohamed's email address, which was mistyped in the errata report and then by me. Sigh. Barry On Mon, Mar 30, 2020 at 12:32 PM Barry Leiba wrote: > > The proposed change substantively changes the text and cannot be > approved through an errata report. My inclination is "Rejected", as I > do believe the text says what it's intended to say (so it's not an > erratum), but I could be convinced that "held for document update" is > better if the document editors weigh in. > > In particular: > > Forbidding discovery of URI outside the configuration contradicts the above excerpt. The text is as such incorrect. > > > > (6) Also, I suggest to remove "simply" from the text. Not sure what message is supposed to convey. > > "Simply" is critical, and addresses your line above. Consider: > > A DoH client MUST NOT use a different URI that was discovered outside > of the client's configuration > > That's your substitution, and *that* forbids discovery outside the > configuration. But with "simply", as written, it says that there must > be another reason for using a different URI. It can discover the URI > from outside the configuration, but that can't be the only reason for > using it. That discovery has to be augmented by some other knowledge. > > Barry > > On Mon, Mar 30, 2020 at 11:53 AM RFC Errata System > wrote: > > > > The following errata report has been submitted for RFC8484, > > "DNS Queries over HTTPS (DoH)". > > > > -------------------------------------- > > You may review the report below and at: > > https://www.rfc-editor.org/errata/eid6033 > > > > -------------------------------------- > > Type: Technical > > Reported by: Mohamed Boucadair > > > > Section: 3 > > > > Original Text > > ------------- > > A DoH client MUST NOT use a different URI simply because it was > > discovered outside of the client's configuration (such as through > > HTTP/2 server push) or because a server offers an unsolicited > > response that appears to be a valid answer to a DNS query. > > > > Corrected Text > > -------------- > > A DoH client MUST NOT use a different URI that was discovered outside > > of the client's configuration (except via HTTP redirection discussed > > in Section 6.4 of [RFC7231]). Also, the DoH client MUST ignore an > > unsolicited response (such as through HTTP/2 server push) that > > appears to be a valid answer to a DNS query unless that response > > comes from a configured URI (as described in Section 5.3). > > > > Notes > > ----- > > (1) The intent of this text is confusing. > > > > (2) I checked the mailing list and found that the text was updated late in the publication process to address this comment: https://mailarchive.ietf.org/arch/msg/doh/f_V-tBgB-KRsLZhttx9tGt75cps/. > > > > (3) The example provided in the thread (server push) is related to the second part of the OLD text. It is mistakenly attached to the first part. > > > > (4) The push example may be interpreted as if server push is disallowed. This is conflicting with Section 5.3. > > > > Hence, this change: > > > > Also, the DoH client MUST ignore an > > unsolicited response (such as through HTTP/2 server push) that > > appears to be a valid answer to a DNS query ** unless that response > > comes from a configured URI (as described in Section 5.3) **. > > > > (5) An intuitive way to discover the URI outside the configuration is redirection. RFC8484 indicates clearly the following: > > > > The described approach is more than a tunnel over HTTP. It > > establishes default media formatting types for requests and responses > > but uses normal HTTP content negotiation mechanisms for selecting > > alternatives that endpoints may prefer in anticipation of serving new > > use cases. In addition to this media type negotiation, it ** aligns > > itself with HTTP features ** such as caching, **redirection**, proxying, > > authentication, and compression. > > > > Forbidding discovery of URI outside the configuration contradicts the above excerpt. The text is as such incorrect. > > > > (6) Also, I suggest to remove "simply" from the text. Not sure what message is supposed to convey. > > > > Instructions: > > ------------- > > This erratum is currently posted as "Reported". If necessary, please > > use "Reply All" to discuss whether it should be verified or > > rejected. When a decision is reached, the verifying party > > can log in to change the status and edit the report, if necessary. > > > > -------------------------------------- > > RFC8484 (draft-ietf-doh-dns-over-https-14) > > -------------------------------------- > > Title : DNS Queries over HTTPS (DoH) > > Publication Date : October 2018 > > Author(s) : P. Hoffman, P. McManus > > Category : PROPOSED STANDARD > > Source : DNS Over HTTPS > > Area : Applications and Real-Time > > Stream : IETF > > Verifying Party : IESG From nobody Mon Mar 30 10:24:27 2020 Return-Path: X-Original-To: doh@ietfa.amsl.com Delivered-To: doh@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B8C5C3A0831 for ; Mon, 30 Mar 2020 10:24:25 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.001 X-Spam-Level: X-Spam-Status: No, score=0.001 tagged_above=-999 required=5 tests=[SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lVoqDr-oFMlj for ; Mon, 30 Mar 2020 10:24:24 -0700 (PDT) Received: from ppa4.dc.icann.org (ppa4.dc.icann.org [192.0.46.77]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 484743A082F for ; Mon, 30 Mar 2020 10:24:24 -0700 (PDT) Received: from PFE112-CA-2.pexch112.icann.org (out.west.pexch112.icann.org [64.78.40.10]) by ppa4.dc.icann.org (8.16.0.42/8.16.0.42) with ESMTPS id 02UHOJ6e026051 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-SHA384 bits=256 verify=NOT); Mon, 30 Mar 2020 17:24:20 GMT Received: from PMBX112-W1-CA-1.pexch112.icann.org (64.78.40.21) by PMBX112-W1-CA-1.pexch112.icann.org (64.78.40.21) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Mon, 30 Mar 2020 10:24:17 -0700 Received: from PMBX112-W1-CA-1.pexch112.icann.org ([64.78.40.21]) by PMBX112-W1-CA-1.PEXCH112.ICANN.ORG ([64.78.40.21]) with mapi id 15.00.1497.006; Mon, 30 Mar 2020 10:24:17 -0700 From: Paul Hoffman To: "doh@ietf.org" CC: Barry Leiba , "mohamed.boucadair@orange.com" , Patrick McManus , "Murray S. Kucherawy" , Ben Schwartz , David Lawrence , RFC Editor Thread-Topic: [Ext] [Technical Errata Reported] RFC8484 (6033) Thread-Index: AQHWBrgKGPGAIfmDfkOREEY9eRpX5A== Date: Mon, 30 Mar 2020 17:24:17 +0000 Message-ID: <8FCCBEAC-F86C-4454-BC8A-3E637539BBEB@icann.org> References: <20200330155304.45AD8F4074B@rfc-editor.org> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [192.0.32.234] x-source-routing-agent: Processed Content-Type: multipart/signed; boundary="Apple-Mail=_BD44B450-A31D-4F45-BE89-E3748ED80033"; protocol="application/pkcs7-signature"; micalg=sha-256 MIME-Version: 1.0 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:6.0.138, 18.0.676 definitions=2020-03-30_07:2020-03-30, 2020-03-30 signatures=0 Archived-At: Subject: Re: [Doh] [Ext] [Technical Errata Reported] RFC8484 (6033) X-BeenThere: doh@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: DNS Over HTTPS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 30 Mar 2020 17:24:26 -0000 --Apple-Mail=_BD44B450-A31D-4F45-BE89-E3748ED80033 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=us-ascii On Mon, Mar 30, 2020 at 12:32 PM Barry Leiba = wrote: >=20 > The proposed change substantively changes the text and cannot be > approved through an errata report. =20 I agree with Barry, even though I believe that what Mohamed is asking = for could have been what the WG or the IETF wanted, had they seen this = proposed change while the document was being developed. For example, = when I read the proposed change, I thought "of course he's right about = HTTP redirection"; however, I don't know if other people who are more = literate about HTTP would agree. > My inclination is "Rejected", as I > do believe the text says what it's intended to say (so it's not an > erratum), but I could be convinced that "held for document update" is > better if the document editors weigh in. "held for document update" normally indicates that the erratum is = believed to be valid. We don't know that without going through WG Last = Call and IETF Last Call again. Given how heavily this document was = discussed before publication, I do not think it is appropriate to change = it with an erratum. I have not heard of any developer misunderstanding the current words in = a way that would be fixed by this rewording. Further, the bit about HTTP = redirection is a technical change (possibly an oversight, or possibly it = was left out on purpose by those who understand it better).=20 --Paul Hoffman= --Apple-Mail=_BD44B450-A31D-4F45-BE89-E3748ED80033 Content-Disposition: attachment; filename="smime.p7s" Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 MIAGCSqGSIb3DQEHAqCAMIACAQExDzANBglghkgBZQMEAgEFADCABgkqhkiG9w0BBwEAAKCCC/Qw ggWeMIIEhqADAgECAhAG83jiXlqePPrfwUUEH4ZnMA0GCSqGSIb3DQEBCwUAMGUxCzAJBgNVBAYT AlVTMRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5jb20xJDAi BgNVBAMTG0RpZ2lDZXJ0IFNIQTIgQXNzdXJlZCBJRCBDQTAeFw0xODA2MTMwMDAwMDBaFw0yMTA2 MTMxMjAwMDBaMIG9MQswCQYDVQQGEwJVUzETMBEGA1UECBMKQ2FsaWZvcm5pYTEUMBIGA1UEBxML TG9zIEFuZ2VsZXMxPDA6BgNVBAoTM0ludGVybmV0IENvcnBvcmF0aW9uIGZvciBBc3NpZ25lZCBO YW1lcyBhbmQgTnVtYmVyczEeMBwGA1UEAxMVUGF1bCBIb2ZmbWFuIDIwMTgwNjEzMSUwIwYJKoZI hvcNAQkBFhZwYXVsLmhvZmZtYW5AaWNhbm4ub3JnMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEArTbxBbfxbk1VxDQsOmEm14Yta2AE5cBcJ/ktMkC+aQrTCMSXrQJfjiMUUndnfAT1DWcf jg706vvITa1lkFaLoF9b6cNICMKsibFruFy8ZA2bsIPRXPPzSsY6zibdStNCpruNTQoiL9bIxlQp qRUx/BfvHAhS7g5dAOcRgkpW9Q4Si5bl6A2qS0ImIMzktNcVxrWAn0HsG9u8cKcSCBJxavRAnMt/ XhE7tCICjyoeoprYZ2ztmdZUL6UgMNrDz/KoeNHAWzTAH45hn1Jz1IguGLM/M2Vb8mF8eP3wAh4p MVIi2jCwNqC497R8x0lsNryoG+uy/26nK6fhCTqVfF6hgQIDAQABo4IB7zCCAeswHwYDVR0jBBgw FoAU5wIjgABP2Ne8lAvZP3Q5STI8inkwHQYDVR0OBBYEFD+ST5hEHbTuHJZT9husDN7VLQdgMAwG A1UdEwEB/wQCMAAwIQYDVR0RBBowGIEWcGF1bC5ob2ZmbWFuQGljYW5uLm9yZzAOBgNVHQ8BAf8E BAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwIGCCsGAQUFBwMEMEMGA1UdIAQ8MDowOAYKYIZIAYb9 bAQBAjAqMCgGCCsGAQUFBwIBFhxodHRwczovL3d3dy5kaWdpY2VydC5jb20vQ1BTMIGIBgNVHR8E gYAwfjA9oDugOYY3aHR0cDovL2NybDMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0U0hBMkFzc3VyZWRJ RENBLWcyLmNybDA9oDugOYY3aHR0cDovL2NybDQuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0U0hBMkFz c3VyZWRJRENBLWcyLmNybDB5BggrBgEFBQcBAQRtMGswJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3Nw LmRpZ2ljZXJ0LmNvbTBDBggrBgEFBQcwAoY3aHR0cDovL2NhY2VydHMuZGlnaWNlcnQuY29tL0Rp Z2lDZXJ0U0hBMkFzc3VyZWRJRENBLmNydDANBgkqhkiG9w0BAQsFAAOCAQEAA7vGiITVJvEIgFN3 UVszD4nyt8ks8d/Ik5Uj1jPuD8+NX4lBpDOIvfYkCn8KYSrx+sMQrpoS2enbOMwekef3tObl2hVK 2Q+tv1GksPq9tQ98Ab1Odv1IM9aYaU1alR5/EEhc0uqs1Ulz2WUc8x/anf3/IpbHyEPdOCLiL9mi b4GDM8z9mqvAE+MtisqRs2+wlMzC/63sNKpA6KdfBNKMLHnyqCAKF7luGWp612yPmGoh63bBLrpR JQorI/fsv5SE2pK3Xf53W/ELf6sxWMsXm9iEgMeoAOtDeJHrv+i+vlldwHHJK6zlXIdVrjxRklyg ISXmlsdHs/sDp1MEqZTOXDCCBk4wggU2oAMCAQICEASueWBmZpAaucV/pmxb3M0wDQYJKoZIhvcN AQELBQAwZTELMAkGA1UEBhMCVVMxFTATBgNVBAoTDERpZ2lDZXJ0IEluYzEZMBcGA1UECxMQd3d3 LmRpZ2ljZXJ0LmNvbTEkMCIGA1UEAxMbRGlnaUNlcnQgQXNzdXJlZCBJRCBSb290IENBMB4XDTEz MTEwNTEyMDAwMFoXDTI4MTEwNTEyMDAwMFowZTELMAkGA1UEBhMCVVMxFTATBgNVBAoTDERpZ2lD ZXJ0IEluYzEZMBcGA1UECxMQd3d3LmRpZ2ljZXJ0LmNvbTEkMCIGA1UEAxMbRGlnaUNlcnQgU0hB MiBBc3N1cmVkIElEIENBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3PgRIz9qte/A J3kbLQWHohBDMd8O1BUbT3ekIs4+jHDwvgeO3ScqvAEdtiwKyt1pWB9B7WoFH9pjeFkeIiwr+Lp+ yTU7VvEffEJ+JbAjGcZFONc9RPkgfGCuHLBaGAS+jzv3qfCUmqYMY0m2QRdTQDK9T+ZQelAfJUXo 8Ymvzf9e/1Dz8BcR/73FifW9YrnY+45FBIVtmc3FSE39JqsCNkXqNtdfauIagkEK3OnZ9ZEXjsYh rTg8E+Yef2ac1U3ZRtr2z1KnfTskw7TBUTXGm+vU737kewPhRL16CzfgT8uCig1xGOSm4IksG/Oy czzBsJKeGH29q33FfQihLMKfcwIDAQABo4IC+DCCAvQwEgYDVR0TAQH/BAgwBgEB/wIBADAOBgNV HQ8BAf8EBAMCAYYwNAYIKwYBBQUHAQEEKDAmMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdp Y2VydC5jb20wgYEGA1UdHwR6MHgwOqA4oDaGNGh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdp Q2VydEFzc3VyZWRJRFJvb3RDQS5jcmwwOqA4oDaGNGh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9E aWdpQ2VydEFzc3VyZWRJRFJvb3RDQS5jcmwwHQYDVR0lBBYwFAYIKwYBBQUHAwIGCCsGAQUFBwME MIIBswYDVR0gBIIBqjCCAaYwggGiBgpghkgBhv1sAAIEMIIBkjAoBggrBgEFBQcCARYcaHR0cHM6 Ly93d3cuZGlnaWNlcnQuY29tL0NQUzCCAWQGCCsGAQUFBwICMIIBVh6CAVIAQQBuAHkAIAB1AHMA ZQAgAG8AZgAgAHQAaABpAHMAIABDAGUAcgB0AGkAZgBpAGMAYQB0AGUAIABjAG8AbgBzAHQAaQB0 AHUAdABlAHMAIABhAGMAYwBlAHAAdABhAG4AYwBlACAAbwBmACAAdABoAGUAIABEAGkAZwBpAEMA ZQByAHQAIABDAFAALwBDAFAAUwAgAGEAbgBkACAAdABoAGUAIABSAGUAbAB5AGkAbgBnACAAUABh AHIAdAB5ACAAQQBnAHIAZQBlAG0AZQBuAHQAIAB3AGgAaQBjAGgAIABsAGkAbQBpAHQAIABsAGkA YQBiAGkAbABpAHQAeQAgAGEAbgBkACAAYQByAGUAIABpAG4AYwBvAHIAcABvAHIAYQB0AGUAZAAg AGgAZQByAGUAaQBuACAAYgB5ACAAcgBlAGYAZQByAGUAbgBjAGUALjAdBgNVHQ4EFgQU5wIjgABP 2Ne8lAvZP3Q5STI8inkwHwYDVR0jBBgwFoAUReuir/SSy4IxLVGLp6chnfNtyA8wDQYJKoZIhvcN AQELBQADggEBAE7UiSe5/R2Hd34PKAWQ8QovyTs+vZOckMav+pFRhzJUa+jKwXFRXJmOtfrgYhmZ pgeafBMn2+UCooQS2RX2CkRXxDSPbXMfOtagAT3e44LkRWuy6yX9gF4dOZC+W0L2zpFg4/mgVgxI EM4zaHvNk6vwastPWA+5e10bBIGepyLiV0kn7pKTCL5pCFMCOi5dyBn0UIBOAtmwXZG0k4f5lpaB VUCOZu2C2LsoX+1MYe0GWCgZUxFEvEcgKbIEbNiJVJk7ddtneCweknjGVT1YEhEybr1DDE0023vG QtvsvqubYUwGkuOO3yEqUFcEwGCiNdUknmY3CUnP1fhls+DibsIxggMpMIIDJQIBATB5MGUxCzAJ BgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5j b20xJDAiBgNVBAMTG0RpZ2lDZXJ0IFNIQTIgQXNzdXJlZCBJRCBDQQIQBvN44l5anjz638FFBB+G ZzANBglghkgBZQMEAgEFAKCCAYEwGAYJKoZIhvcNAQkDMQsGCSqGSIb3DQEHATAcBgkqhkiG9w0B CQUxDxcNMjAwMzMwMTcyNDE3WjAvBgkqhkiG9w0BCQQxIgQgmnz1d/v8Uhem4SqTqal+GoQhj4bW 223A079Ga/iV4QcwgYgGCSsGAQQBgjcQBDF7MHkwZTELMAkGA1UEBhMCVVMxFTATBgNVBAoTDERp Z2lDZXJ0IEluYzEZMBcGA1UECxMQd3d3LmRpZ2ljZXJ0LmNvbTEkMCIGA1UEAxMbRGlnaUNlcnQg U0hBMiBBc3N1cmVkIElEIENBAhAG83jiXlqePPrfwUUEH4ZnMIGKBgsqhkiG9w0BCRACCzF7oHkw ZTELMAkGA1UEBhMCVVMxFTATBgNVBAoTDERpZ2lDZXJ0IEluYzEZMBcGA1UECxMQd3d3LmRpZ2lj ZXJ0LmNvbTEkMCIGA1UEAxMbRGlnaUNlcnQgU0hBMiBBc3N1cmVkIElEIENBAhAG83jiXlqePPrf wUUEH4ZnMA0GCSqGSIb3DQEBAQUABIIBADkPDto2LQhYOZ7xez5+gKp5CmD/ONROPxzqCbZ5emZh q0LPIU/XhO3sgODswIgtWiRm8abE1uZE3QwjLudlmq9RfY2eNE4zUsCso82al/X/ZemQPviBKmKG aYhoW2PNPPlPoJK7eAOK5UBCPnOD+x0yxvvdRzG1ZHj7zQFOxgbItGxX+UeT4yoqXJLBwBtGL1R0 46jJbtEyWV2uZW9aHs5MMaZzd7QiGq/gYlEIJg9cA5WQ+2Q6fy16MKBaS0PcVvybqr27w9f5J3is 1IG5qvGE650fM/ogoa8Dxz/5hgyil3bjnBy4qd+Z7zvyNz/dt7tEsdeqeP6xpTZoQHQsptoAAAAA AAA= --Apple-Mail=_BD44B450-A31D-4F45-BE89-E3748ED80033-- From nobody Tue Mar 31 00:23:34 2020 Return-Path: X-Original-To: doh@ietfa.amsl.com Delivered-To: doh@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9490D3A0EBE for ; Tue, 31 Mar 2020 00:23:30 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.198 X-Spam-Level: X-Spam-Status: No, score=-0.198 tagged_above=-999 required=5 tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=orange.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id dk-kXeC2DbLk for ; Tue, 31 Mar 2020 00:23:28 -0700 (PDT) Received: from relais-inet.orange.com (relais-inet.orange.com [80.12.70.34]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9210D3A0EC2 for ; Tue, 31 Mar 2020 00:23:27 -0700 (PDT) Received: from opfednr02.francetelecom.fr (unknown [xx.xx.xx.66]) by opfednr27.francetelecom.fr (ESMTP service) with ESMTP id 48s15T3S0lz4xLs; Tue, 31 Mar 2020 09:23:25 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=orange.com; s=ORANGE001; t=1585639405; bh=9knMY6YqOCT6hiIMlKfzcqcmBn3moGBmA0xlzBzkgLY=; h=From:To:Subject:Date:Message-ID:Content-Type: Content-Transfer-Encoding:MIME-Version; b=IPMtBtgGOQqFxZjzdfy3Se8KXx12B7Y8rboYNjQKdkpBDToseN3Ml/ErabXGYAugG 9lYNuMujbd9yugdRgmWrQ361b5uVBVGRTj6Ydsf74ziEbQZ3uL6Ghc5yvMoDr/ok+9 tXOgoRURsWTzuoHB7gGcsrg5415wLer4KWCYR8+xtua9i3Y6FtwdwloJmU9Ufw1gOL zddMEpAIZqgKCxS8ipGrnPVYzqwMclyOn8HJ7uU3v/jxXBIZVNRlvI/9xFhezQk77r sNygmhp59P9uKmqnl4bPcvN2aAfkZpC19VHnS+/n9f5f/kb3sLPNaRrKXoyzuVH3Fc uz2ugAwI53gJg== Received: from Exchangemail-eme6.itn.ftgroup (unknown [xx.xx.13.76]) by opfednr02.francetelecom.fr (ESMTP service) with ESMTP id 48s15T10Jxz8sY1; Tue, 31 Mar 2020 09:23:25 +0200 (CEST) From: To: Barry Leiba CC: Paul Hoffman , Patrick McManus , Murray Kucherawy , Ben Schwartz , Dave Lawrence , "doh@ietf.org" , RFC Editor Thread-Topic: [Technical Errata Reported] RFC8484 (6033) Thread-Index: AQHWBrHijv0n0q7vHE2JDapm+5eGMahiN48g Date: Tue, 31 Mar 2020 07:23:23 +0000 Message-ID: <787AE7BB302AE849A7480A190F8B933031489480@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> References: <20200330155304.45AD8F4074B@rfc-editor.org> In-Reply-To: Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.114.13.245] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Subject: Re: [Doh] [Technical Errata Reported] RFC8484 (6033) X-BeenThere: doh@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: DNS Over HTTPS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 31 Mar 2020 07:23:31 -0000 SGkgQmFycnksDQoNClBsZWFzZSBzZWUgaW5saW5lLiANCg0KQ2hlZXJzLA0KTWVkDQoNCj4gLS0t LS1NZXNzYWdlIGQnb3JpZ2luZS0tLS0tDQo+IERlwqA6IEJhcnJ5IExlaWJhIFttYWlsdG86YmFy cnlsZWliYUBjb21wdXRlci5vcmddDQo+IEVudm95w6nCoDogbHVuZGkgMzAgbWFycyAyMDIwIDE4 OjQwDQo+IMOAwqA6IEJPVUNBREFJUiBNb2hhbWVkIFRHSS9PTE4NCj4gQ2PCoDogUGF1bCBIb2Zm bWFuOyBQYXRyaWNrIE1jTWFudXM7IE11cnJheSBLdWNoZXJhd3k7IEJlbiBTY2h3YXJ0ejsNCj4g RGF2ZSBMYXdyZW5jZTsgZG9oQGlldGYub3JnOyBSRkMgRWRpdG9yDQo+IE9iamV0wqA6IFJlOiBb VGVjaG5pY2FsIEVycmF0YSBSZXBvcnRlZF0gUkZDODQ4NCAoNjAzMykNCj4gDQo+IFJlLXNlbmRp bmcgdG8gY29ycmVjdCB0aGUgY29ycmVjdGlvbiB0byBNb2hhbWVkJ3MgZW1haWwgYWRkcmVzcywg d2hpY2gNCj4gd2FzIG1pc3R5cGVkIGluIHRoZSBlcnJhdGEgcmVwb3J0IGFuZCB0aGVuIGJ5IG1l LiAgU2lnaC4NCj4gDQo+IEJhcnJ5DQo+IA0KPiBPbiBNb24sIE1hciAzMCwgMjAyMCBhdCAxMjoz MiBQTSBCYXJyeSBMZWliYSA8YmFycnlsZWliYUBjb21wdXRlci5vcmc+DQo+IHdyb3RlOg0KPiA+ DQo+ID4gVGhlIHByb3Bvc2VkIGNoYW5nZSBzdWJzdGFudGl2ZWx5IGNoYW5nZXMgdGhlIHRleHQg YW5kIGNhbm5vdCBiZQ0KPiA+IGFwcHJvdmVkIHRocm91Z2ggYW4gZXJyYXRhIHJlcG9ydC4gIE15 IGluY2xpbmF0aW9uIGlzICJSZWplY3RlZCIsIGFzDQo+IEkNCj4gPiBkbyBiZWxpZXZlIHRoZSB0 ZXh0IHNheXMgd2hhdCBpdCdzIGludGVuZGVkIHRvIHNheSAoc28gaXQncyBub3QgYW4NCj4gPiBl cnJhdHVtKSwgYnV0IEkgY291bGQgYmUgY29udmluY2VkIHRoYXQgImhlbGQgZm9yIGRvY3VtZW50 IHVwZGF0ZSINCj4gaXMNCj4gPiBiZXR0ZXIgaWYgdGhlIGRvY3VtZW50IGVkaXRvcnMgd2VpZ2gg aW4uDQo+ID4NCj4gPiBJbiBwYXJ0aWN1bGFyOg0KPiA+ID4gRm9yYmlkZGluZyBkaXNjb3Zlcnkg b2YgVVJJIG91dHNpZGUgdGhlIGNvbmZpZ3VyYXRpb24gY29udHJhZGljdHMNCj4gdGhlIGFib3Zl IGV4Y2VycHQuIFRoZSB0ZXh0IGlzIGFzIHN1Y2ggaW5jb3JyZWN0Lg0KPiA+ID4NCj4gPiA+ICg2 KSBBbHNvLCBJIHN1Z2dlc3QgdG8gcmVtb3ZlICJzaW1wbHkiIGZyb20gdGhlIHRleHQuIE5vdCBz dXJlDQo+IHdoYXQgbWVzc2FnZSBpcyBzdXBwb3NlZCB0byBjb252ZXkuDQo+ID4NCj4gPiAiU2lt cGx5IiBpcyBjcml0aWNhbCwgYW5kIGFkZHJlc3NlcyB5b3VyIGxpbmUgYWJvdmUuICBDb25zaWRl cjoNCj4gPg0KPiA+ICAgIEEgRG9IIGNsaWVudCBNVVNUIE5PVCB1c2UgYSBkaWZmZXJlbnQgVVJJ IHRoYXQgd2FzIGRpc2NvdmVyZWQNCj4gb3V0c2lkZQ0KPiA+ICAgIG9mIHRoZSBjbGllbnQncyBj b25maWd1cmF0aW9uDQo+ID4NCj4gPiBUaGF0J3MgeW91ciBzdWJzdGl0dXRpb24sIGFuZCAqdGhh dCogZm9yYmlkcyBkaXNjb3Zlcnkgb3V0c2lkZSB0aGUNCj4gPiBjb25maWd1cmF0aW9uLg0KDQpb TWVkXSBXaGF0IGl0IGZvcmJpZHMgaXMgKiphIGRpZmZlcmVudCBVUkkqKiBub3QgZGlzY292ZXJ5 IGluIGdlbmVyYWwuICANCg0KVGhlIGNvbmZpZ3VyYXRpb24gKGluY2x1ZGluZyBkaXNjb3Zlcnkp IG9mIHRoZSAoYmFzZSkgVVJJIGlzIGNvdmVyZWQgYnkgdGhpcyB0ZXh0Og0KDQo9PQ0KICAgTm90 ZSB0aGF0DQogICBjb25maWd1cmF0aW9uIG1pZ2h0IGJlIG1hbnVhbCAoc3VjaCBhcyBhIHVzZXIg dHlwaW5nIFVSSSBUZW1wbGF0ZXMgaW4NCiAgIGEgdXNlciBpbnRlcmZhY2UgZm9yICJvcHRpb25z Iikgb3IgYXV0b21hdGljIChzdWNoIGFzIFVSSSBUZW1wbGF0ZXMNCiAgIGJlaW5nIHN1cHBsaWVk IGluIHJlc3BvbnNlcyBmcm9tIERIQ1Agb3Igc2ltaWxhciBwcm90b2NvbHMpLiAgRG9IDQogICBT ZXJ2ZXJzIE1BWSBzdXBwb3J0IG1vcmUgdGhhbiBvbmUgVVJJIFRlbXBsYXRlDQo9PQ0KIA0KICBC dXQgd2l0aCAic2ltcGx5IiwgYXMgd3JpdHRlbiwgaXQgc2F5cyB0aGF0IHRoZXJlDQo+IG11c3QN Cj4gPiBiZSBhbm90aGVyIHJlYXNvbiBmb3IgdXNpbmcgYSBkaWZmZXJlbnQgVVJJLiAgSXQgY2Fu IGRpc2NvdmVyIHRoZQ0KPiBVUkkNCj4gPiBmcm9tIG91dHNpZGUgdGhlIGNvbmZpZ3VyYXRpb24s IGJ1dCB0aGF0IGNhbid0IGJlIHRoZSBvbmx5IHJlYXNvbg0KPiBmb3INCj4gPiB1c2luZyBpdC4g DQoNCltNZWRdIFdvdWxkbuKAmXQgdGhhdCByZWFzb25pbmcgYWxzbyBpbXBseSB0aGF0IHRoZXJl IG1pZ2h0IGJlIGNvbmRpdGlvbnMgdW5kZXIgd2hpY2ggdGhlIGNsaWVudCBtYXkgYWNjZXB0IHJl c3BvbnNlcyBmcm9tIGEgc2VydmVyIHRoYXQgYXBwZWFyIHRvIGJlIGEgdmFsaWQgRE5TIHF1ZXJ5 PyBJJ20gcmVmZXJyaW5nIHRvIHRoZSBzZWNvbmQgcGFydCBvZiB0aGUgc2VudGVuY2U6IA0KDQog ICAiQSBEb0ggY2xpZW50IE1VU1QgTk9UIHVzZSBhIGRpZmZlcmVudCBVUkkgKipzaW1wbHkqKiBi ZWNhdXNlIFsuLi5dDQogICBvciBiZWNhdXNlIGEgc2VydmVyIG9mZmVycyBhbiB1bnNvbGljaXRl ZA0KICAgcmVzcG9uc2UgdGhhdCBhcHBlYXJzIHRvIGJlIGEgdmFsaWQgYW5zd2VyIHRvIGEgRE5T IHF1ZXJ5LiIgDQoNCk15IHVuZGVyc3RhbmRpbmcgaXMgdGhhdCB0aGlzIGlzIG5vdCB0aGUgaW50 ZW50IG9mIHRoZSB0ZXh0IGdpdmVuIHRoaXMgZXhwbGFuYXRpb24gSSBmb3VuZCBpbiB0aGUgYXJj aGl2ZXM6DQoNCj09PT0NCkkgc2VuZCBhbiBxdWVyeSB0byBodHRwczovL3d3dy5la3JleGFtcGxl LmNvbS8gb3ZlciBIVFRQLzIuIER1cmluZyB0aGF0IA0KSFRUUC8yIHNlc3Npb24sIEkgZ2V0IGEg RG9IIHJlcXVlc3QvcmVzcG9uc2UgcGFpciBmcm9tIHRoYXQgb3JpZ2luLiANCmh0dHBzOi8vd3d3 LmVrcmV4YW1wbGUuY29tLyBpcyBub3QgaW4gdGhlIGxpc3Qgb2YgY29uZmlndXJlZCBVUklzIA0K YWxsb3dlZCBmb3IgRG9IIGZvciB0aGlzIGNsaWVudC4gSSBNVVNUIE5PVCBkbyBhbnl0aGluZyB3 aXRoIHRoYXQgRG9IIA0KcmVxdWVzdC9yZXNwb25zZS4NCj09PT0NCg0KVGhpcyBpcyBCVFcgd2h5 IEkgdGhpbmsgdGhlIHNlcnZlciBwdXNoIGV4YW1wbGUgaXMgcmVsYXRlZCB0byB0aGUgc2Vjb25k IHBhcnQgb2YgdGhlIHNlbnRlbmNlLCBub3QgdGhlIGZpcnN0IG9uZS4NCg0KDQogVGhhdCBkaXNj b3ZlcnkgaGFzIHRvIGJlIGF1Z21lbnRlZCBieSBzb21lIG90aGVyDQo+IGtub3dsZWRnZS4NCg0K W01lZF0gQXMgSSBtZW50aW9uZWQsIHRoaXMgcGFydCBpcyBhYm91dCBhICJkaWZmZXJlbnQgVVJJ Ii4gVGhpcyBpcyBldmVuIGNsZWFyIHdpdGggdGhpcyBzZW50ZW5jZTogDQoNCiAgIFRoaXMgc3Bl Y2lmaWNhdGlvbiBkb2VzIG5vdCBleHRlbmQgRE5TIHJlc29sdXRpb24NCiAgIHByaXZpbGVnZXMg dG8gVVJJcyB0aGF0IGFyZSBub3QgcmVjb2duaXplZCBieSB0aGUgRG9IIGNsaWVudCBhcw0KICAg Y29uZmlndXJlZCBVUklzLiANCg0KSSBmYWlsIHRvIHNlZSB3aGVyZSB0aGF0IHNvbWUgb3RoZXIg a25vd2xlZGdlIGlzIGRlZmluZWQgaW4gdGhlIGRvY3VtZW50LiAgIA0KDQo+ID4NCj4gPiBCYXJy eQ0KPiA+DQo+ID4gT24gTW9uLCBNYXIgMzAsIDIwMjAgYXQgMTE6NTMgQU0gUkZDIEVycmF0YSBT eXN0ZW0NCj4gPiA8cmZjLWVkaXRvckByZmMtZWRpdG9yLm9yZz4gd3JvdGU6DQo+ID4gPg0KPiA+ ID4gVGhlIGZvbGxvd2luZyBlcnJhdGEgcmVwb3J0IGhhcyBiZWVuIHN1Ym1pdHRlZCBmb3IgUkZD ODQ4NCwNCj4gPiA+ICJETlMgUXVlcmllcyBvdmVyIEhUVFBTIChEb0gpIi4NCj4gPiA+DQo+ID4g PiAtLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0KPiA+ID4gWW91IG1heSBy ZXZpZXcgdGhlIHJlcG9ydCBiZWxvdyBhbmQgYXQ6DQo+ID4gPiBodHRwczovL3d3dy5yZmMtZWRp dG9yLm9yZy9lcnJhdGEvZWlkNjAzMw0KPiA+ID4NCj4gPiA+IC0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tDQo+ID4gPiBUeXBlOiBUZWNobmljYWwNCj4gPiA+IFJlcG9ydGVk IGJ5OiBNb2hhbWVkIEJvdWNhZGFpciA8bW9oYW1lZC5ib3VjYWFkaXJAb3JhbmdlLmNvbT4NCj4g PiA+DQo+ID4gPiBTZWN0aW9uOiAzDQo+ID4gPg0KPiA+ID4gT3JpZ2luYWwgVGV4dA0KPiA+ID4g LS0tLS0tLS0tLS0tLQ0KPiA+ID4gICAgQSBEb0ggY2xpZW50IE1VU1QgTk9UIHVzZSBhIGRpZmZl cmVudCBVUkkgc2ltcGx5IGJlY2F1c2UgaXQgd2FzDQo+ID4gPiAgICBkaXNjb3ZlcmVkIG91dHNp ZGUgb2YgdGhlIGNsaWVudCdzIGNvbmZpZ3VyYXRpb24gKHN1Y2ggYXMNCj4gdGhyb3VnaA0KPiA+ ID4gICAgSFRUUC8yIHNlcnZlciBwdXNoKSBvciBiZWNhdXNlIGEgc2VydmVyIG9mZmVycyBhbiB1 bnNvbGljaXRlZA0KPiA+ID4gICAgcmVzcG9uc2UgdGhhdCBhcHBlYXJzIHRvIGJlIGEgdmFsaWQg YW5zd2VyIHRvIGEgRE5TIHF1ZXJ5Lg0KPiA+ID4NCj4gPiA+IENvcnJlY3RlZCBUZXh0DQo+ID4g PiAtLS0tLS0tLS0tLS0tLQ0KPiA+ID4gICAgQSBEb0ggY2xpZW50IE1VU1QgTk9UIHVzZSBhIGRp ZmZlcmVudCBVUkkgdGhhdCB3YXMgZGlzY292ZXJlZA0KPiBvdXRzaWRlDQo+ID4gPiAgICBvZiB0 aGUgY2xpZW50J3MgY29uZmlndXJhdGlvbiAoZXhjZXB0IHZpYSBIVFRQIHJlZGlyZWN0aW9uDQo+ IGRpc2N1c3NlZA0KPiA+ID4gICAgaW4gU2VjdGlvbiA2LjQgb2YgW1JGQzcyMzFdKS4gIEFsc28s IHRoZSBEb0ggY2xpZW50IE1VU1QgaWdub3JlDQo+IGFuDQo+ID4gPiAgICB1bnNvbGljaXRlZCBy ZXNwb25zZSAoc3VjaCBhcyB0aHJvdWdoIEhUVFAvMiBzZXJ2ZXIgcHVzaCkgdGhhdA0KPiA+ID4g ICAgYXBwZWFycyB0byBiZSBhIHZhbGlkIGFuc3dlciB0byBhIEROUyBxdWVyeSB1bmxlc3MgdGhh dA0KPiByZXNwb25zZQ0KPiA+ID4gICAgY29tZXMgZnJvbSBhIGNvbmZpZ3VyZWQgVVJJIChhcyBk ZXNjcmliZWQgaW4gU2VjdGlvbiA1LjMpLg0KPiA+ID4NCj4gPiA+IE5vdGVzDQo+ID4gPiAtLS0t LQ0KPiA+ID4gKDEpIFRoZSBpbnRlbnQgb2YgdGhpcyB0ZXh0IGlzIGNvbmZ1c2luZy4NCj4gPiA+ DQo+ID4gPiAoMikgSSBjaGVja2VkIHRoZSBtYWlsaW5nIGxpc3QgYW5kIGZvdW5kIHRoYXQgdGhl IHRleHQgd2FzIHVwZGF0ZWQNCj4gbGF0ZSBpbiB0aGUgcHVibGljYXRpb24gcHJvY2VzcyB0byBh ZGRyZXNzIHRoaXMgY29tbWVudDoNCj4gaHR0cHM6Ly9tYWlsYXJjaGl2ZS5pZXRmLm9yZy9hcmNo L21zZy9kb2gvZl9WLXRCZ0ItDQo+IEtSc0xaaHR0eDl0R3Q3NWNwcy8uDQo+ID4gPg0KPiA+ID4g KDMpIFRoZSBleGFtcGxlIHByb3ZpZGVkIGluIHRoZSB0aHJlYWQgKHNlcnZlciBwdXNoKSBpcyBy ZWxhdGVkIHRvDQo+IHRoZSBzZWNvbmQgcGFydCBvZiB0aGUgT0xEIHRleHQuIEl0IGlzIG1pc3Rh a2VubHkgYXR0YWNoZWQgdG8gdGhlDQo+IGZpcnN0IHBhcnQuDQo+ID4gPg0KPiA+ID4gKDQpIFRo ZSBwdXNoIGV4YW1wbGUgbWF5IGJlIGludGVycHJldGVkIGFzIGlmIHNlcnZlciBwdXNoIGlzDQo+ IGRpc2FsbG93ZWQuIFRoaXMgaXMgY29uZmxpY3Rpbmcgd2l0aCBTZWN0aW9uIDUuMy4NCj4gPiA+ DQo+ID4gPiBIZW5jZSwgdGhpcyBjaGFuZ2U6DQo+ID4gPg0KPiA+ID4gQWxzbywgdGhlIERvSCBj bGllbnQgTVVTVCBpZ25vcmUgYW4NCj4gPiA+ICAgIHVuc29saWNpdGVkIHJlc3BvbnNlIChzdWNo IGFzIHRocm91Z2ggSFRUUC8yIHNlcnZlciBwdXNoKSB0aGF0DQo+ID4gPiAgICBhcHBlYXJzIHRv IGJlIGEgdmFsaWQgYW5zd2VyIHRvIGEgRE5TIHF1ZXJ5ICoqIHVubGVzcyB0aGF0DQo+IHJlc3Bv bnNlDQo+ID4gPiAgICBjb21lcyBmcm9tIGEgY29uZmlndXJlZCBVUkkgKGFzIGRlc2NyaWJlZCBp biBTZWN0aW9uIDUuMykgKiouDQo+ID4gPg0KPiA+ID4gKDUpIEFuIGludHVpdGl2ZSB3YXkgdG8g ZGlzY292ZXIgdGhlIFVSSSBvdXRzaWRlIHRoZSBjb25maWd1cmF0aW9uDQo+IGlzIHJlZGlyZWN0 aW9uLiAgUkZDODQ4NCBpbmRpY2F0ZXMgY2xlYXJseSB0aGUgZm9sbG93aW5nOg0KPiA+ID4NCj4g PiA+ICAgIFRoZSBkZXNjcmliZWQgYXBwcm9hY2ggaXMgbW9yZSB0aGFuIGEgdHVubmVsIG92ZXIg SFRUUC4gIEl0DQo+ID4gPiAgICBlc3RhYmxpc2hlcyBkZWZhdWx0IG1lZGlhIGZvcm1hdHRpbmcg dHlwZXMgZm9yIHJlcXVlc3RzIGFuZA0KPiByZXNwb25zZXMNCj4gPiA+ICAgIGJ1dCB1c2VzIG5v cm1hbCBIVFRQIGNvbnRlbnQgbmVnb3RpYXRpb24gbWVjaGFuaXNtcyBmb3INCj4gc2VsZWN0aW5n DQo+ID4gPiAgICBhbHRlcm5hdGl2ZXMgdGhhdCBlbmRwb2ludHMgbWF5IHByZWZlciBpbiBhbnRp Y2lwYXRpb24gb2YNCj4gc2VydmluZyBuZXcNCj4gPiA+ICAgIHVzZSBjYXNlcy4gIEluIGFkZGl0 aW9uIHRvIHRoaXMgbWVkaWEgdHlwZSBuZWdvdGlhdGlvbiwgaXQgKioNCj4gYWxpZ25zDQo+ID4g PiAgICBpdHNlbGYgd2l0aCBIVFRQIGZlYXR1cmVzICoqIHN1Y2ggYXMgY2FjaGluZywgKipyZWRp cmVjdGlvbioqLA0KPiBwcm94eWluZywNCj4gPiA+ICAgIGF1dGhlbnRpY2F0aW9uLCBhbmQgY29t cHJlc3Npb24uDQo+ID4gPg0KPiA+ID4gRm9yYmlkZGluZyBkaXNjb3Zlcnkgb2YgVVJJIG91dHNp ZGUgdGhlIGNvbmZpZ3VyYXRpb24gY29udHJhZGljdHMNCj4gdGhlIGFib3ZlIGV4Y2VycHQuIFRo ZSB0ZXh0IGlzIGFzIHN1Y2ggaW5jb3JyZWN0Lg0KPiA+ID4NCj4gPiA+ICg2KSBBbHNvLCBJIHN1 Z2dlc3QgdG8gcmVtb3ZlICJzaW1wbHkiIGZyb20gdGhlIHRleHQuIE5vdCBzdXJlDQo+IHdoYXQg bWVzc2FnZSBpcyBzdXBwb3NlZCB0byBjb252ZXkuDQo+ID4gPg0KPiA+ID4gSW5zdHJ1Y3Rpb25z Og0KPiA+ID4gLS0tLS0tLS0tLS0tLQ0KPiA+ID4gVGhpcyBlcnJhdHVtIGlzIGN1cnJlbnRseSBw b3N0ZWQgYXMgIlJlcG9ydGVkIi4gSWYgbmVjZXNzYXJ5LA0KPiBwbGVhc2UNCj4gPiA+IHVzZSAi UmVwbHkgQWxsIiB0byBkaXNjdXNzIHdoZXRoZXIgaXQgc2hvdWxkIGJlIHZlcmlmaWVkIG9yDQo+ ID4gPiByZWplY3RlZC4gV2hlbiBhIGRlY2lzaW9uIGlzIHJlYWNoZWQsIHRoZSB2ZXJpZnlpbmcg cGFydHkNCj4gPiA+IGNhbiBsb2cgaW4gdG8gY2hhbmdlIHRoZSBzdGF0dXMgYW5kIGVkaXQgdGhl IHJlcG9ydCwgaWYgbmVjZXNzYXJ5Lg0KPiA+ID4NCj4gPiA+IC0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tDQo+ID4gPiBSRkM4NDg0IChkcmFmdC1pZXRmLWRvaC1kbnMtb3Zl ci1odHRwcy0xNCkNCj4gPiA+IC0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t DQo+ID4gPiBUaXRsZSAgICAgICAgICAgICAgIDogRE5TIFF1ZXJpZXMgb3ZlciBIVFRQUyAoRG9I KQ0KPiA+ID4gUHVibGljYXRpb24gRGF0ZSAgICA6IE9jdG9iZXIgMjAxOA0KPiA+ID4gQXV0aG9y KHMpICAgICAgICAgICA6IFAuIEhvZmZtYW4sIFAuIE1jTWFudXMNCj4gPiA+IENhdGVnb3J5ICAg ICAgICAgICAgOiBQUk9QT1NFRCBTVEFOREFSRA0KPiA+ID4gU291cmNlICAgICAgICAgICAgICA6 IEROUyBPdmVyIEhUVFBTDQo+ID4gPiBBcmVhICAgICAgICAgICAgICAgIDogQXBwbGljYXRpb25z IGFuZCBSZWFsLVRpbWUNCj4gPiA+IFN0cmVhbSAgICAgICAgICAgICAgOiBJRVRGDQo+ID4gPiBW ZXJpZnlpbmcgUGFydHkgICAgIDogSUVTRw0K From nobody Tue Mar 31 02:03:27 2020 Return-Path: X-Original-To: doh@ietfa.amsl.com Delivered-To: doh@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 806E53A1E4D for ; Tue, 31 Mar 2020 02:03:25 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.198 X-Spam-Level: X-Spam-Status: No, score=-0.198 tagged_above=-999 required=5 tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=orange.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id EbfnfvKnGw7M for ; Tue, 31 Mar 2020 02:03:24 -0700 (PDT) Received: from relais-inet.orange.com (relais-inet.orange.com [80.12.66.40]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0180C3A1099 for ; Tue, 31 Mar 2020 02:03:23 -0700 (PDT) Received: from opfedar05.francetelecom.fr (unknown [xx.xx.xx.7]) by opfedar27.francetelecom.fr (ESMTP service) with ESMTP id 48s3Jp23NSz2yfj; Tue, 31 Mar 2020 11:03:22 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=orange.com; s=ORANGE001; t=1585645402; bh=7ulSg+V16pGGRMMrrjUlQraujsco+WT/22noTb0Ze2I=; h=From:To:Subject:Date:Message-ID:Content-Type: Content-Transfer-Encoding:MIME-Version; b=gyR4jHep/8l5kas8/pcu/Qyi69qMB9FUia+wro9M3qkLsNKjJhwxYwNxm+plJlJJC BbrqJVOmLQf+4y6uPzZjGPUBfjD37oL4JaR1B0rA2gCIvNnZtmX4roLcOcuAzbFfdM YI4v3hY7s34oyQSGMYGeK9gTAsRG97xd7+4kW3TGPkvO01qgJPHmWIMgRhy2nB49w/ Ey7Y524quVmhoe01h7sahr6tbgsFv+cTSAmFK9nhQ3REmLIkYAvhEUHend+SKHIdGI JyML/TzR0bexjhEr93NSFOUBvlRNhRHHws2t/fsKjCJ2XXTTdQitURM7K3SU7NKgKO dm5XN+fE8RQZA== Received: from Exchangemail-eme6.itn.ftgroup (unknown [xx.xx.13.73]) by opfedar05.francetelecom.fr (ESMTP service) with ESMTP id 48s3Jp0BDVz2xCp; Tue, 31 Mar 2020 11:03:22 +0200 (CEST) From: To: Paul Hoffman , "doh@ietf.org" CC: Barry Leiba , Patrick McManus , "Murray S. Kucherawy" , "Ben Schwartz" , David Lawrence , RFC Editor Thread-Topic: [Ext] [Technical Errata Reported] RFC8484 (6033) Thread-Index: AQHWBrHijv0n0q7vHE2JDapm+5eGMahhQSmAgAEiAiA= Date: Tue, 31 Mar 2020 09:03:21 +0000 Message-ID: <787AE7BB302AE849A7480A190F8B933031489622@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> References: <20200330155304.45AD8F4074B@rfc-editor.org> <8FCCBEAC-F86C-4454-BC8A-3E637539BBEB@icann.org> In-Reply-To: <8FCCBEAC-F86C-4454-BC8A-3E637539BBEB@icann.org> Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.114.13.245] Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Subject: Re: [Doh] [Ext] [Technical Errata Reported] RFC8484 (6033) X-BeenThere: doh@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: DNS Over HTTPS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 31 Mar 2020 09:03:26 -0000 Hi Paul, Thank you for sharing your thoughts.=20 I'm now more puzzled about the intent of the document with regards to redir= ection: (a) The document says explicitly the following:=20 The described approach is more than a tunnel over HTTP. It establishes default media formatting types for requests and responses but uses normal HTTP content negotiation mechanisms for selecting alternatives that endpoints may prefer in anticipation of serving new use cases. In addition to this media type negotiation, it aligns ^^^^^^^^^^ itself with HTTP features such as caching, redirection, proxying, ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ authentication, and compression. Which I interpret as redirection is part of the design goals. (b) But what I'm hearing from you is that redirection may be implicitly dis= allowed for some "reason". This seems like an internal inconsistency of the= document that is worth to be fixed.=20 Can you please clarify the following: * Is redirection allowed or not? =20 * How a different URI can be discovered using server push?=20 A DoH client MUST NOT use a different URI simply because it was ^^^^^^^^^^^^^^^^ discovered outside of the client's configuration (such as through ^^^^^^^^^^^^^^^^ HTTP/2 server push) ^^^^^^^^^^^^^^^^^^ Thank you.=20 Cheers, Med > -----Message d'origine----- > De=A0: Paul Hoffman [mailto:paul.hoffman@icann.org] > Envoy=E9=A0: lundi 30 mars 2020 19:24 > =C0=A0: doh@ietf.org > Cc=A0: Barry Leiba; BOUCADAIR Mohamed TGI/OLN; Patrick McManus; Murray > S. Kucherawy; Ben Schwartz; David Lawrence; RFC Editor > Objet=A0: Re: [Ext] [Technical Errata Reported] RFC8484 (6033) >=20 > On Mon, Mar 30, 2020 at 12:32 PM Barry Leiba > wrote: > > > > The proposed change substantively changes the text and cannot be > > approved through an errata report. >=20 > I agree with Barry, even though I believe that what Mohamed is asking > for could have been what the WG or the IETF wanted, had they seen this > proposed change while the document was being developed. For example, > when I read the proposed change, I thought "of course he's right about > HTTP redirection"; however, I don't know if other people who are more > literate about HTTP would agree. >=20 > > My inclination is "Rejected", as I > > do believe the text says what it's intended to say (so it's not an > > erratum), but I could be convinced that "held for document update" > is > > better if the document editors weigh in. >=20 > "held for document update" normally indicates that the erratum is > believed to be valid. We don't know that without going through WG Last > Call and IETF Last Call again. Given how heavily this document was > discussed before publication, I do not think it is appropriate to > change it with an erratum. >=20 > I have not heard of any developer misunderstanding the current words > in a way that would be fixed by this rewording. Further, the bit about > HTTP redirection is a technical change (possibly an oversight, or > possibly it was left out on purpose by those who understand it > better). >=20 > --Paul Hoffman From nobody Tue Mar 31 06:00:32 2020 Return-Path: X-Original-To: doh@ietfa.amsl.com Delivered-To: doh@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1E7BB3A20AF for ; Tue, 31 Mar 2020 06:00:31 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.251 X-Spam-Level: X-Spam-Status: No, score=0.251 tagged_above=-999 required=5 tests=[FREEMAIL_FORGED_FROMDOMAIN=0.001, FREEMAIL_FROM=0.001, HEADER_FROM_DIFFERENT_DOMAINS=0.25, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=no autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id r4Xwa1_NMd6E for ; Tue, 31 Mar 2020 06:00:30 -0700 (PDT) Received: from mail-io1-f46.google.com (mail-io1-f46.google.com [209.85.166.46]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2D3E53A20AE for ; Tue, 31 Mar 2020 06:00:30 -0700 (PDT) Received: by mail-io1-f46.google.com with SMTP id b12so5355020ion.8 for ; Tue, 31 Mar 2020 06:00:30 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=9WH1cwhZ+ElLjGKZuLvcdRi8mZIryf+j12TThDB6RMQ=; b=V5Sb3Ku4ydjY9yy61Vb5AvIDxYSDvVZWqqk7Te347XOUfRrML0OhIlRolz0aPU7mtQ aIrFuiawrli5D0hgR1zKgPKUk9jwHZhNZQbXs8utQT7idf7iiYmDZOd6EQbhP4HSs8xc 08AN3GCo6B5YfUpJPKZ+C1nkwgE7LFVyw4xX0KOthW3ssNHQzHJnJGanDjd4H4E2hhvK VwuEykhqM7ost+63OeiAXxxDTwHWf0nCGLed49deHNifNGy/tV/E7lTo74XbuYK9/iuE KgIoBJN0ghzFT5ZuFxXp8n+5siJ5/+QNEPGHyjJeY1Ap/nTgWWaoYsF4XUjWB4W7h2YF PSuA== X-Gm-Message-State: ANhLgQ0/piYt20XXVJEB4/nj8DdsinQVagfbtWDcCDaGTGDA4QVHRZmz 8d3GdG9UyyimWh0PQGtLTyfeLmvu8MYEqIEJJUA= X-Google-Smtp-Source: ADFU+vte5+RzcPPX4rZzmsl8ifzOiNNnGp7Z3s1CVUD3mSBGlgm1a9O8xI7a1Po4ia+0IFHymfa97gcCLcXLW9jPUPc= X-Received: by 2002:a6b:b78d:: with SMTP id h135mr14777859iof.84.1585659629214; Tue, 31 Mar 2020 06:00:29 -0700 (PDT) MIME-Version: 1.0 References: <20200330155304.45AD8F4074B@rfc-editor.org> <8FCCBEAC-F86C-4454-BC8A-3E637539BBEB@icann.org> In-Reply-To: <8FCCBEAC-F86C-4454-BC8A-3E637539BBEB@icann.org> From: Barry Leiba Date: Tue, 31 Mar 2020 09:00:18 -0400 Message-ID: To: Paul Hoffman Cc: "doh@ietf.org" , "mohamed.boucadair@orange.com" , Patrick McManus , "Murray S. Kucherawy" , Ben Schwartz , David Lawrence , RFC Editor Content-Type: text/plain; charset="UTF-8" Archived-At: Subject: Re: [Doh] [Ext] [Technical Errata Reported] RFC8484 (6033) X-BeenThere: doh@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: DNS Over HTTPS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 31 Mar 2020 13:00:31 -0000 Just a process point: > "held for document update" normally indicates that the erratum is believed to be valid. Not really. It is sometimes used when we know the errata report is valid, such as when it's reporting a typo. But it's also used when the errata report does not meet the requirements for "Verified" but merits discussion if and when the document is updated. In that sense it's used to "put a pin in it" for discussion later. If we should decide to go this way I would add a note that explains a bit of the discussion and says that further discussion is needed, along with rough consensus for any change. Barry From nobody Tue Mar 31 07:48:02 2020 Return-Path: X-Original-To: doh@ietfa.amsl.com Delivered-To: doh@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 863C73A224F for ; Tue, 31 Mar 2020 07:48:00 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.001 X-Spam-Level: X-Spam-Status: No, score=0.001 tagged_above=-999 required=5 tests=[SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zrwA1kFLRMMu for ; Tue, 31 Mar 2020 07:47:58 -0700 (PDT) Received: from ppa5.dc.icann.org (ppa5.dc.icann.org [192.0.46.78]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 463A03A224E for ; Tue, 31 Mar 2020 07:47:58 -0700 (PDT) Received: from PFE112-CA-1.pexch112.icann.org (out.west.pexch112.icann.org [64.78.40.7]) by ppa5.dc.icann.org (8.16.0.42/8.16.0.42) with ESMTPS id 02VElq5W000678 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-SHA384 bits=256 verify=NOT); Tue, 31 Mar 2020 14:47:53 GMT Received: from PMBX112-W1-CA-1.pexch112.icann.org (64.78.40.21) by PMBX112-W1-CA-1.pexch112.icann.org (64.78.40.21) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Tue, 31 Mar 2020 07:47:51 -0700 Received: from PMBX112-W1-CA-1.pexch112.icann.org ([64.78.40.21]) by PMBX112-W1-CA-1.PEXCH112.ICANN.ORG ([64.78.40.21]) with mapi id 15.00.1497.006; Tue, 31 Mar 2020 07:47:51 -0700 From: Paul Hoffman To: "mohamed.boucadair@orange.com" CC: "doh@ietf.org" , David Lawrence , Ben Schwartz , Patrick McManus , "Murray S. Kucherawy" , Barry Leiba , "RFC Editor" Thread-Topic: [Doh] [Ext] [Technical Errata Reported] RFC8484 (6033) Thread-Index: AQHWBrgKy0P/LLB+1UCQ4d22YzaIgqhi3lyAgABgPwA= Date: Tue, 31 Mar 2020 14:47:50 +0000 Message-ID: <3BC73714-9E1C-43E1-A76D-F0919C3EA22F@icann.org> References: <20200330155304.45AD8F4074B@rfc-editor.org> <8FCCBEAC-F86C-4454-BC8A-3E637539BBEB@icann.org> <787AE7BB302AE849A7480A190F8B933031489622@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> In-Reply-To: <787AE7BB302AE849A7480A190F8B933031489622@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [192.0.32.234] x-source-routing-agent: Processed Content-Type: multipart/signed; boundary="Apple-Mail=_340A68E7-12AC-4D20-9ABC-398DC75AF884"; protocol="application/pkcs7-signature"; micalg=sha-256 MIME-Version: 1.0 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:6.0.138, 18.0.676 definitions=2020-03-31_04:2020-03-31, 2020-03-31 signatures=0 Archived-At: Subject: Re: [Doh] [Ext] [Technical Errata Reported] RFC8484 (6033) X-BeenThere: doh@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: DNS Over HTTPS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 31 Mar 2020 14:48:01 -0000 --Apple-Mail=_340A68E7-12AC-4D20-9ABC-398DC75AF884 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=us-ascii On Mar 31, 2020, at 2:03 AM, mohamed.boucadair@orange.com wrote: > I'm now more puzzled about the intent of the document with regards to = redirection: That's fine, and you are not alone. But the proper resolution of that = puzzlement is not an erratum, it is a document update. --Paul Hoffman= --Apple-Mail=_340A68E7-12AC-4D20-9ABC-398DC75AF884 Content-Disposition: attachment; filename="smime.p7s" Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 MIAGCSqGSIb3DQEHAqCAMIACAQExDzANBglghkgBZQMEAgEFADCABgkqhkiG9w0BBwEAAKCCC/Qw ggWeMIIEhqADAgECAhAG83jiXlqePPrfwUUEH4ZnMA0GCSqGSIb3DQEBCwUAMGUxCzAJBgNVBAYT AlVTMRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5jb20xJDAi BgNVBAMTG0RpZ2lDZXJ0IFNIQTIgQXNzdXJlZCBJRCBDQTAeFw0xODA2MTMwMDAwMDBaFw0yMTA2 MTMxMjAwMDBaMIG9MQswCQYDVQQGEwJVUzETMBEGA1UECBMKQ2FsaWZvcm5pYTEUMBIGA1UEBxML TG9zIEFuZ2VsZXMxPDA6BgNVBAoTM0ludGVybmV0IENvcnBvcmF0aW9uIGZvciBBc3NpZ25lZCBO YW1lcyBhbmQgTnVtYmVyczEeMBwGA1UEAxMVUGF1bCBIb2ZmbWFuIDIwMTgwNjEzMSUwIwYJKoZI hvcNAQkBFhZwYXVsLmhvZmZtYW5AaWNhbm4ub3JnMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEArTbxBbfxbk1VxDQsOmEm14Yta2AE5cBcJ/ktMkC+aQrTCMSXrQJfjiMUUndnfAT1DWcf jg706vvITa1lkFaLoF9b6cNICMKsibFruFy8ZA2bsIPRXPPzSsY6zibdStNCpruNTQoiL9bIxlQp qRUx/BfvHAhS7g5dAOcRgkpW9Q4Si5bl6A2qS0ImIMzktNcVxrWAn0HsG9u8cKcSCBJxavRAnMt/ XhE7tCICjyoeoprYZ2ztmdZUL6UgMNrDz/KoeNHAWzTAH45hn1Jz1IguGLM/M2Vb8mF8eP3wAh4p MVIi2jCwNqC497R8x0lsNryoG+uy/26nK6fhCTqVfF6hgQIDAQABo4IB7zCCAeswHwYDVR0jBBgw FoAU5wIjgABP2Ne8lAvZP3Q5STI8inkwHQYDVR0OBBYEFD+ST5hEHbTuHJZT9husDN7VLQdgMAwG A1UdEwEB/wQCMAAwIQYDVR0RBBowGIEWcGF1bC5ob2ZmbWFuQGljYW5uLm9yZzAOBgNVHQ8BAf8E BAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwIGCCsGAQUFBwMEMEMGA1UdIAQ8MDowOAYKYIZIAYb9 bAQBAjAqMCgGCCsGAQUFBwIBFhxodHRwczovL3d3dy5kaWdpY2VydC5jb20vQ1BTMIGIBgNVHR8E gYAwfjA9oDugOYY3aHR0cDovL2NybDMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0U0hBMkFzc3VyZWRJ RENBLWcyLmNybDA9oDugOYY3aHR0cDovL2NybDQuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0U0hBMkFz c3VyZWRJRENBLWcyLmNybDB5BggrBgEFBQcBAQRtMGswJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3Nw LmRpZ2ljZXJ0LmNvbTBDBggrBgEFBQcwAoY3aHR0cDovL2NhY2VydHMuZGlnaWNlcnQuY29tL0Rp Z2lDZXJ0U0hBMkFzc3VyZWRJRENBLmNydDANBgkqhkiG9w0BAQsFAAOCAQEAA7vGiITVJvEIgFN3 UVszD4nyt8ks8d/Ik5Uj1jPuD8+NX4lBpDOIvfYkCn8KYSrx+sMQrpoS2enbOMwekef3tObl2hVK 2Q+tv1GksPq9tQ98Ab1Odv1IM9aYaU1alR5/EEhc0uqs1Ulz2WUc8x/anf3/IpbHyEPdOCLiL9mi b4GDM8z9mqvAE+MtisqRs2+wlMzC/63sNKpA6KdfBNKMLHnyqCAKF7luGWp612yPmGoh63bBLrpR JQorI/fsv5SE2pK3Xf53W/ELf6sxWMsXm9iEgMeoAOtDeJHrv+i+vlldwHHJK6zlXIdVrjxRklyg ISXmlsdHs/sDp1MEqZTOXDCCBk4wggU2oAMCAQICEASueWBmZpAaucV/pmxb3M0wDQYJKoZIhvcN AQELBQAwZTELMAkGA1UEBhMCVVMxFTATBgNVBAoTDERpZ2lDZXJ0IEluYzEZMBcGA1UECxMQd3d3 LmRpZ2ljZXJ0LmNvbTEkMCIGA1UEAxMbRGlnaUNlcnQgQXNzdXJlZCBJRCBSb290IENBMB4XDTEz MTEwNTEyMDAwMFoXDTI4MTEwNTEyMDAwMFowZTELMAkGA1UEBhMCVVMxFTATBgNVBAoTDERpZ2lD ZXJ0IEluYzEZMBcGA1UECxMQd3d3LmRpZ2ljZXJ0LmNvbTEkMCIGA1UEAxMbRGlnaUNlcnQgU0hB MiBBc3N1cmVkIElEIENBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3PgRIz9qte/A J3kbLQWHohBDMd8O1BUbT3ekIs4+jHDwvgeO3ScqvAEdtiwKyt1pWB9B7WoFH9pjeFkeIiwr+Lp+ yTU7VvEffEJ+JbAjGcZFONc9RPkgfGCuHLBaGAS+jzv3qfCUmqYMY0m2QRdTQDK9T+ZQelAfJUXo 8Ymvzf9e/1Dz8BcR/73FifW9YrnY+45FBIVtmc3FSE39JqsCNkXqNtdfauIagkEK3OnZ9ZEXjsYh rTg8E+Yef2ac1U3ZRtr2z1KnfTskw7TBUTXGm+vU737kewPhRL16CzfgT8uCig1xGOSm4IksG/Oy czzBsJKeGH29q33FfQihLMKfcwIDAQABo4IC+DCCAvQwEgYDVR0TAQH/BAgwBgEB/wIBADAOBgNV HQ8BAf8EBAMCAYYwNAYIKwYBBQUHAQEEKDAmMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdp Y2VydC5jb20wgYEGA1UdHwR6MHgwOqA4oDaGNGh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdp Q2VydEFzc3VyZWRJRFJvb3RDQS5jcmwwOqA4oDaGNGh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9E aWdpQ2VydEFzc3VyZWRJRFJvb3RDQS5jcmwwHQYDVR0lBBYwFAYIKwYBBQUHAwIGCCsGAQUFBwME MIIBswYDVR0gBIIBqjCCAaYwggGiBgpghkgBhv1sAAIEMIIBkjAoBggrBgEFBQcCARYcaHR0cHM6 Ly93d3cuZGlnaWNlcnQuY29tL0NQUzCCAWQGCCsGAQUFBwICMIIBVh6CAVIAQQBuAHkAIAB1AHMA ZQAgAG8AZgAgAHQAaABpAHMAIABDAGUAcgB0AGkAZgBpAGMAYQB0AGUAIABjAG8AbgBzAHQAaQB0 AHUAdABlAHMAIABhAGMAYwBlAHAAdABhAG4AYwBlACAAbwBmACAAdABoAGUAIABEAGkAZwBpAEMA ZQByAHQAIABDAFAALwBDAFAAUwAgAGEAbgBkACAAdABoAGUAIABSAGUAbAB5AGkAbgBnACAAUABh AHIAdAB5ACAAQQBnAHIAZQBlAG0AZQBuAHQAIAB3AGgAaQBjAGgAIABsAGkAbQBpAHQAIABsAGkA YQBiAGkAbABpAHQAeQAgAGEAbgBkACAAYQByAGUAIABpAG4AYwBvAHIAcABvAHIAYQB0AGUAZAAg AGgAZQByAGUAaQBuACAAYgB5ACAAcgBlAGYAZQByAGUAbgBjAGUALjAdBgNVHQ4EFgQU5wIjgABP 2Ne8lAvZP3Q5STI8inkwHwYDVR0jBBgwFoAUReuir/SSy4IxLVGLp6chnfNtyA8wDQYJKoZIhvcN AQELBQADggEBAE7UiSe5/R2Hd34PKAWQ8QovyTs+vZOckMav+pFRhzJUa+jKwXFRXJmOtfrgYhmZ pgeafBMn2+UCooQS2RX2CkRXxDSPbXMfOtagAT3e44LkRWuy6yX9gF4dOZC+W0L2zpFg4/mgVgxI EM4zaHvNk6vwastPWA+5e10bBIGepyLiV0kn7pKTCL5pCFMCOi5dyBn0UIBOAtmwXZG0k4f5lpaB VUCOZu2C2LsoX+1MYe0GWCgZUxFEvEcgKbIEbNiJVJk7ddtneCweknjGVT1YEhEybr1DDE0023vG QtvsvqubYUwGkuOO3yEqUFcEwGCiNdUknmY3CUnP1fhls+DibsIxggMpMIIDJQIBATB5MGUxCzAJ BgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5j b20xJDAiBgNVBAMTG0RpZ2lDZXJ0IFNIQTIgQXNzdXJlZCBJRCBDQQIQBvN44l5anjz638FFBB+G ZzANBglghkgBZQMEAgEFAKCCAYEwGAYJKoZIhvcNAQkDMQsGCSqGSIb3DQEHATAcBgkqhkiG9w0B CQUxDxcNMjAwMzMxMTQ0NzUwWjAvBgkqhkiG9w0BCQQxIgQgr3fWqW8QcSF5ZN/7WjqQ9teA9adb 3VHKazVmmaOHoOkwgYgGCSsGAQQBgjcQBDF7MHkwZTELMAkGA1UEBhMCVVMxFTATBgNVBAoTDERp Z2lDZXJ0IEluYzEZMBcGA1UECxMQd3d3LmRpZ2ljZXJ0LmNvbTEkMCIGA1UEAxMbRGlnaUNlcnQg U0hBMiBBc3N1cmVkIElEIENBAhAG83jiXlqePPrfwUUEH4ZnMIGKBgsqhkiG9w0BCRACCzF7oHkw ZTELMAkGA1UEBhMCVVMxFTATBgNVBAoTDERpZ2lDZXJ0IEluYzEZMBcGA1UECxMQd3d3LmRpZ2lj ZXJ0LmNvbTEkMCIGA1UEAxMbRGlnaUNlcnQgU0hBMiBBc3N1cmVkIElEIENBAhAG83jiXlqePPrf wUUEH4ZnMA0GCSqGSIb3DQEBAQUABIIBAJeMom4ErRxTakKf/PxzNeASVZmn6v+Lc2Bk7kORzePT OFBo7B8zakHJoBB6hxhPzhJfFMmTW/xED3D0eWYVHvkDbb0mt6W0MfSvT9zel39dYP3L032Evf4Z rwBdPI4Tk5TXAW3OhjXsdGtKDA8ASZSq+ECf6+uUkClZcaF0NxsrL+sVkNjinOfzx9QAPX/56b/L VFWmxObt/+u9qwv1Tawr63wnf7l4YpJrULFGaA5aqKekNZsTRjhUqjd+Hfn5JWe7cgM0SuOd/iY+ BnNyN7Pmdry8PIew8au+KhdRHpHljL70h3E/Xny8h7AThwHRR4j4LOdwkLjosJo3EgBTg+MAAAAA AAA= --Apple-Mail=_340A68E7-12AC-4D20-9ABC-398DC75AF884-- From nobody Tue Mar 31 08:11:04 2020 Return-Path: X-Original-To: doh@ietfa.amsl.com Delivered-To: doh@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 87D683A22B2 for ; Tue, 31 Mar 2020 08:11:02 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.198 X-Spam-Level: X-Spam-Status: No, score=-0.198 tagged_above=-999 required=5 tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=orange.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2Ctg3ZIbluam for ; Tue, 31 Mar 2020 08:11:00 -0700 (PDT) Received: from relais-inet.orange.com (relais-inet.orange.com [80.12.66.39]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B1E5F3A22B0 for ; Tue, 31 Mar 2020 08:11:00 -0700 (PDT) Received: from opfedar05.francetelecom.fr (unknown [xx.xx.xx.7]) by opfedar24.francetelecom.fr (ESMTP service) with ESMTP id 48sCSz1kTWz5w4X; Tue, 31 Mar 2020 17:10:59 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=orange.com; s=ORANGE001; t=1585667459; bh=I9+8KGAbMdUUXyqmQCiv7f5boeSl2M3WwqNMOdkgRR0=; h=From:To:Subject:Date:Message-ID:Content-Type: Content-Transfer-Encoding:MIME-Version; b=KzE0mxwwqTvf9rlNE+hrMGZGmFRVc8IaXdgCvbnJBhBvH5BfFuAMt6O/Fhy4BpsLC Ws5S0kHdennOQWbSNkqupQ6c9kGvIGeyan0NXE9qefOsInCS8Fb3xY0sspduZeP8Jw aJAj6cAMSE+5pVMOiqhQgSzhu4xqUf/aLOV8m7q0rXwD5BPb3fWKtvMr74eA5jBQFD oK6QJnVbuQgr9qSmpZTwQ+GwofPjFp+aZkV71gLLIZfcTMk7oEjd10Rw07dAp4PhdJ 6G9+wjh5jjEyhKA/lGDeQYSiLR2gqEo3vGt4q/dCcCEJ92DCo+FmI3CrCIW1SOfma8 9iT7zbq1YbC7w== Received: from Exchangemail-eme6.itn.ftgroup (unknown [xx.xx.13.57]) by opfedar05.francetelecom.fr (ESMTP service) with ESMTP id 48sCSy706sz2xCc; Tue, 31 Mar 2020 17:10:58 +0200 (CEST) From: To: Paul Hoffman CC: "doh@ietf.org" , David Lawrence , Ben Schwartz , Patrick McManus , "Murray S. Kucherawy" , Barry Leiba , "RFC Editor" Thread-Topic: [Doh] [Ext] [Technical Errata Reported] RFC8484 (6033) Thread-Index: AQHWBrgKy0P/LLB+1UCQ4d22YzaIgqhi3lyAgABgPwD//4t60A== Date: Tue, 31 Mar 2020 15:10:57 +0000 Message-ID: <787AE7BB302AE849A7480A190F8B933031489B69@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> References: <20200330155304.45AD8F4074B@rfc-editor.org> <8FCCBEAC-F86C-4454-BC8A-3E637539BBEB@icann.org> <787AE7BB302AE849A7480A190F8B933031489622@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <3BC73714-9E1C-43E1-A76D-F0919C3EA22F@icann.org> In-Reply-To: <3BC73714-9E1C-43E1-A76D-F0919C3EA22F@icann.org> Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.114.13.245] Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Subject: Re: [Doh] [Ext] [Technical Errata Reported] RFC8484 (6033) X-BeenThere: doh@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: DNS Over HTTPS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 31 Mar 2020 15:11:03 -0000 Paul,=20 (1) I went with an errata because I thought the document does not contain any i= nternal inconsistency, but this discussion reveals there is one. While wait= ing for a document, I do think that at minimum we need a record for this. T= agging this errata as "held for document update" would be appropriate.=20 (2) What about this part of the errata: * How a different URI can be discovered using server push? Can you please p= rovide a flow example? A DoH client MUST NOT use a different URI simply because it was ^^^^^^^^^^^^^^^^ discovered outside of the client's configuration (such as through ^^^^^^^^^^^^^^^^ HTTP/2 server push) ^^^^^^^^^^^^^^^^^^ Thank you. Cheers, Med > -----Message d'origine----- > De=A0: Paul Hoffman [mailto:paul.hoffman@icann.org] > Envoy=E9=A0: mardi 31 mars 2020 16:48 > =C0=A0: BOUCADAIR Mohamed TGI/OLN > Cc=A0: doh@ietf.org; David Lawrence; Ben Schwartz; Patrick McManus; > Murray S. Kucherawy; Barry Leiba; RFC Editor > Objet=A0: Re: [Doh] [Ext] [Technical Errata Reported] RFC8484 (6033) >=20 > On Mar 31, 2020, at 2:03 AM, mohamed.boucadair@orange.com wrote: > > I'm now more puzzled about the intent of the document with regards > to redirection: >=20 > That's fine, and you are not alone. But the proper resolution of that > puzzlement is not an erratum, it is a document update. >=20 > --Paul Hoffman From nobody Tue Mar 31 08:15:25 2020 Return-Path: X-Original-To: doh@ietfa.amsl.com Delivered-To: doh@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 529FB3A22BD for ; Tue, 31 Mar 2020 08:15:24 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -15.699 X-Spam-Level: X-Spam-Status: No, score=-15.699 tagged_above=-999 required=5 tests=[DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, ENV_AND_HDR_SPF_MATCH=-0.5, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5, USER_IN_DEF_SPF_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=google.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id tZsED0KRXgmR for ; Tue, 31 Mar 2020 08:15:22 -0700 (PDT) Received: from mail-wm1-x32e.google.com (mail-wm1-x32e.google.com [IPv6:2a00:1450:4864:20::32e]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CA7A63A22C1 for ; Tue, 31 Mar 2020 08:15:21 -0700 (PDT) Received: by mail-wm1-x32e.google.com with SMTP id r16so2902111wmg.5 for ; Tue, 31 Mar 2020 08:15:21 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=YX3lH4r0hezOHY+DjAVrKvCzrMtbMqHMq4+nSl653E8=; b=s1GHWSJayNb3nzRyNXx3PLXDA9rM90cpkiUCvqjuVJxM8M3SV6+M/0FHKY+TroFiUu nmrvNles+AkilT2vmqFaiotal7Hbs2FAHrQgPsQPx/ykc3GpRVKfbGJMpnvLG0jPQbtG UrPGL0LjXUswSl/LPg4J53wOxQOyJhUWaosFuNOWWkDsYshpVMuflpywvn4O7ZTpnJ1h KRL1qDBf7UqV8BVeKz+ukvUwzc1VS1ydMXBMlgEWwvOg7yo/Gxvjdr2mfYoG987X7QGX b7BHBY+xj5O0gg+fN7Uli6+wlZHgi26eVhGkZSix05CbYz2CJJO+ZYs4QT+Gt9Ew3JlS T8BQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=YX3lH4r0hezOHY+DjAVrKvCzrMtbMqHMq4+nSl653E8=; b=kcQ5caiesKzEmRLrxxuSCIq718CSeY1uYzZEOxku7CtwcIQxBVS3Jo+LjY3Y6P5pZ9 HIWT17Hy8I9ss1xcD/jWJ2A/YA6t56N0zi7UaUibqI4lZSBGipNChE4xLcdnoo4gF7vD aglhmFFVR7BVVRRm7sBrBH7PglbvOumd6NDYRdvkqiK6oLeNXpC7QGDcdbApxSdpGoFn mj/Iy1X/DsStJ+aZ8jrDv42sCgIFbg1h7orsFioJewb0I0IJ7DY+MRzoT9zTdd82MFUw y47YxbH8kbes5574ZMqThaCAr/3Hj+YQeaU2gF+7ABZlvE7Sp9Vhn9exxFq8oKznFkGw 66dg== X-Gm-Message-State: ANhLgQ3idGWkO7rDsVTw61LSjfeR/NA9x1YXPdtKobHbKmXxjdmzcOjV ytBO7UBwyQ7WtetC/LZPbcCRwa6PFmzhBoMbENvpGQ== X-Google-Smtp-Source: ADFU+vv/k5APar+zqVb/AR3p6jnKZ1+GA7sx8GD2lIMeHAZ9HzIT3Ns2FvjiYczuj+ORdLeIORIp26sbTAL6YsptXWY= X-Received: by 2002:a1c:b4c6:: with SMTP id d189mr3798265wmf.132.1585667719898; Tue, 31 Mar 2020 08:15:19 -0700 (PDT) MIME-Version: 1.0 References: <20200330155304.45AD8F4074B@rfc-editor.org> <8FCCBEAC-F86C-4454-BC8A-3E637539BBEB@icann.org> <787AE7BB302AE849A7480A190F8B933031489622@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <3BC73714-9E1C-43E1-A76D-F0919C3EA22F@icann.org> <787AE7BB302AE849A7480A190F8B933031489B69@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> In-Reply-To: <787AE7BB302AE849A7480A190F8B933031489B69@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> From: Ben Schwartz Date: Tue, 31 Mar 2020 11:15:07 -0400 Message-ID: To: mohamed.boucadair@orange.com Cc: Paul Hoffman , "doh@ietf.org" , David Lawrence , Patrick McManus , "Murray S. Kucherawy" , Barry Leiba , RFC Editor Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg=sha-256; boundary="000000000000356db205a228093a" Archived-At: Subject: Re: [Doh] [Ext] [Technical Errata Reported] RFC8484 (6033) X-BeenThere: doh@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: DNS Over HTTPS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 31 Mar 2020 15:15:24 -0000 --000000000000356db205a228093a Content-Type: multipart/alternative; boundary="0000000000002d82af05a2280902" --0000000000002d82af05a2280902 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable The purpose of this text is to reiterate that DNS records pushed from untrusted and unrecognized sources must be discarded. As Barry noted, the word "simply" is important here. It is being used as a synonym for "merely", i.e. there must be some other good reason to use the record. Following a redirect seems like a good reason! On Tue, Mar 31, 2020 at 11:10 AM wrote: > Paul, > > (1) > > I went with an errata because I thought the document does not contain any > internal inconsistency, but this discussion reveals there is one. While > waiting for a document, I do think that at minimum we need a record for > this. Tagging this errata as "held for document update" would be > appropriate. > > (2) > > What about this part of the errata: > > * How a different URI can be discovered using server push? Can you please > provide a flow example? > > A DoH client MUST NOT use a different URI simply because it was > ^^^^^^^^^^^^^^^^ > discovered outside of the client's configuration (such as through > ^^^^^^^^^^^^^^^^ > HTTP/2 server push) > ^^^^^^^^^^^^^^^^^^ > > Thank you. > > Cheers, > Med > > > -----Message d'origine----- > > De : Paul Hoffman [mailto:paul.hoffman@icann.org] > > Envoy=C3=A9 : mardi 31 mars 2020 16:48 > > =C3=80 : BOUCADAIR Mohamed TGI/OLN > > Cc : doh@ietf.org; David Lawrence; Ben Schwartz; Patrick McManus; > > Murray S. Kucherawy; Barry Leiba; RFC Editor > > Objet : Re: [Doh] [Ext] [Technical Errata Reported] RFC8484 (6033) > > > > On Mar 31, 2020, at 2:03 AM, mohamed.boucadair@orange.com wrote: > > > I'm now more puzzled about the intent of the document with regards > > to redirection: > > > > That's fine, and you are not alone. But the proper resolution of that > > puzzlement is not an erratum, it is a document update. > > > > --Paul Hoffman > --0000000000002d82af05a2280902 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
The purpose of this text is to reiterate that DNS records = pushed from untrusted and unrecognized sources must be discarded.

<= /div>
As Barry noted, the word "simply" is important here.=C2= =A0 It is being used as a synonym for "merely", i.e. there must b= e some other good reason to use the record.=C2=A0 Following a redirect seem= s like a good reason!

On Tue, Mar 31, 2020 at 11:10 AM <mohamed.boucadair@orange.com> w= rote:
Paul,

(1)

I went with an errata because I thought the document does not contain any i= nternal inconsistency, but this discussion reveals there is one. While wait= ing for a document, I do think that at minimum we need a record for this. T= agging this errata as "held for document update" would be appropr= iate.

(2)

What about this part of the errata:

* How a different URI can be discovered using server push? Can you please p= rovide a flow example?

=C2=A0 =C2=A0A DoH client MUST NOT use a different URI simply because it wa= s
=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0^^^^^^^^^^^^^^^^
=C2=A0 =C2=A0discovered outside of the client's configuration (such as = through
=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 ^^^^^^^^^^^^^^^^
=C2=A0 =C2=A0HTTP/2 server push)
=C2=A0 =C2=A0^^^^^^^^^^^^^^^^^^

Thank you.

Cheers,
Med

> -----Message d'origine-----
> De=C2=A0: Paul Hoffman [mailto:paul.hoffman@icann.org]
> Envoy=C3=A9=C2=A0: mardi 31 mars 2020 16:48
> =C3=80=C2=A0: BOUCADAIR Mohamed TGI/OLN
> Cc=C2=A0: doh@ietf.o= rg; David Lawrence; Ben Schwartz; Patrick McManus;
> Murray S. Kucherawy; Barry Leiba; RFC Editor
> Objet=C2=A0: Re: [Doh] [Ext] [Technical Errata Reported] RFC8484 (6033= )
>
> On Mar 31, 2020, at 2:03 AM, mohamed.boucadair@orange.com wrote:
> > I'm now more puzzled about the intent of the document with re= gards
> to redirection:
>
> That's fine, and you are not alone. But the proper resolution of t= hat
> puzzlement is not an erratum, it is a document update.
>
> --Paul Hoffman
--0000000000002d82af05a2280902-- --000000000000356db205a228093a Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature MIIPBgYJKoZIhvcNAQcCoIIO9zCCDvMCAQExDzANBglghkgBZQMEAgEFADALBgkqhkiG9w0BBwGg ggxpMIIEkjCCA3qgAwIBAgINAewckktV4F6Q7sAtGDANBgkqhkiG9w0BAQsFADBMMSAwHgYDVQQL ExdHbG9iYWxTaWduIFJvb3QgQ0EgLSBSMzETMBEGA1UEChMKR2xvYmFsU2lnbjETMBEGA1UEAxMK R2xvYmFsU2lnbjAeFw0xODA2MjAwMDAwMDBaFw0yODA2MjAwMDAwMDBaMEsxCzAJBgNVBAYTAkJF MRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMSEwHwYDVQQDExhHbG9iYWxTaWduIFNNSU1FIENB IDIwMTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUeobu8FdB5oJg6Fz6SFf8YsPI dNcq4rBSiSDAwqMNYbeTpRrINMBdWuPqVWaBX7WHYMsKQwCOvAF1b7rkD+ROo+CCTJo76EAY25Pp jt7TYP/PxoLesLQ+Ld088+BeyZg9pQaf0VK4tn23fOCWbFWoM8hdnF86Mqn6xB6nLsxJcz4CUGJG qAhC3iedFiCfZfsIp2RNyiUhzPAqalkrtD0bZQvCgi5aSNJseNyCysS1yA58OuxEyn2e9itZJE+O sUeD8VFgz+nAYI5r/dmFEXu5d9npLvTTrSJjrEmw2/ynKn6r6ONueZnCfo6uLmP1SSglhI/SN7dy L1rKUCU7R1MjAgMBAAGjggFyMIIBbjAOBgNVHQ8BAf8EBAMCAYYwJwYDVR0lBCAwHgYIKwYBBQUH AwIGCCsGAQUFBwMEBggrBgEFBQcDCTASBgNVHRMBAf8ECDAGAQH/AgEAMB0GA1UdDgQWBBRMtwWJ 1lPNI0Ci6A94GuRtXEzs0jAfBgNVHSMEGDAWgBSP8Et/qC5FJK5NUPpjmove4t0bvDA+BggrBgEF BQcBAQQyMDAwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwMi5nbG9iYWxzaWduLmNvbS9yb290cjMw NgYDVR0fBC8wLTAroCmgJ4YlaHR0cDovL2NybC5nbG9iYWxzaWduLmNvbS9yb290LXIzLmNybDBn BgNVHSAEYDBeMAsGCSsGAQQBoDIBKDAMBgorBgEEAaAyASgKMEEGCSsGAQQBoDIBXzA0MDIGCCsG AQUFBwIBFiZodHRwczovL3d3dy5nbG9iYWxzaWduLmNvbS9yZXBvc2l0b3J5LzANBgkqhkiG9w0B AQsFAAOCAQEAwREs1zjtnFIIWorsx5XejqZtqaq5pomEvpjM98ebexngUmd7hju2FpYvDvzcnoGu tjm0N3Sqj5vvwEgvDGB5CxDOBkDlmUT+ObRpKbP7eTafq0+BAhEd3z2tHFm3sKE15o9+KjY6O5bb M30BLgvKlLbLrDDyh8xigCPZDwVI7JVuWMeemVmNca/fidKqOVg7a16ptQUyT5hszqpj18MwD9U0 KHRcR1CfVa+3yjK0ELDS+UvTufoB9wp2BoozsqD0yc2VOcZ7SzcwOzomSFfqv7Vdj88EznDbdy4s fq6QvuNiUs8yW0Vb0foCVRNnSlb9T8//uJqQLHxrxy2j03cvtTCCA18wggJHoAMCAQICCwQAAAAA ASFYUwiiMA0GCSqGSIb3DQEBCwUAMEwxIDAeBgNVBAsTF0dsb2JhbFNpZ24gUm9vdCBDQSAtIFIz MRMwEQYDVQQKEwpHbG9iYWxTaWduMRMwEQYDVQQDEwpHbG9iYWxTaWduMB4XDTA5MDMxODEwMDAw MFoXDTI5MDMxODEwMDAwMFowTDEgMB4GA1UECxMXR2xvYmFsU2lnbiBSb290IENBIC0gUjMxEzAR BgNVBAoTCkdsb2JhbFNpZ24xEzARBgNVBAMTCkdsb2JhbFNpZ24wggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDMJXaQeQZ4Ihb1wIO2hMoonv0FdhHFrYhy/EYCQ8eyip0EXyTLLkvhYIJG 4VKrDIFHcGzdZNHr9SyjD4I9DCuul9e2FIYQebs7E4B3jAjhSdJqYi8fXvqWaN+JJ5U4nwbXPsnL JlkNc96wyOkmDoMVxu9bi9IEYMpJpij2aTv2y8gokeWdimFXN6x0FNx04Druci8unPvQu7/1PQDh BjPogiuuU6Y6FnOM3UEOIDrAtKeh6bJPkC4yYOlXy7kEkmho5TgmYHWyn3f/kRTvriBJ/K1AFUjR AjFhGV64l++td7dkmnq/X8ET75ti+w1s4FRpFqkD2m7pg5NxdsZphYIXAgMBAAGjQjBAMA4GA1Ud DwEB/wQEAwIBBjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSP8Et/qC5FJK5NUPpjmove4t0b vDANBgkqhkiG9w0BAQsFAAOCAQEAS0DbwFCq/sgM7/eWVEVJu5YACUGssxOGhigHM8pr5nS5ugAt rqQK0/Xx8Q+Kv3NnSoPHRHt44K9ubG8DKY4zOUXDjuS5V2yq/BKW7FPGLeQkbLmUY/vcU2hnVj6D uM81IcPJaP7O2sJTqsyQiunwXUaMld16WCgaLx3ezQA3QY/tRG3XUyiXfvNnBB4V14qWtNPeTCek TBtzc3b0F5nCH3oO4y0IrQocLP88q1UOD5F+NuvDV0m+4S4tfGCLw0FREyOdzvcya5QBqJnnLDMf Ojsl0oZAzjsshnjJYS8Uuu7bVW/fhO4FCU29KNhyztNiUGUe65KXgzHZs7XKR1g/XzCCBGwwggNU oAMCAQICEAGuEkclHdvQz4ddwMbsMFgwDQYJKoZIhvcNAQELBQAwSzELMAkGA1UEBhMCQkUxGTAX BgNVBAoTEEdsb2JhbFNpZ24gbnYtc2ExITAfBgNVBAMTGEdsb2JhbFNpZ24gU01JTUUgQ0EgMjAx ODAeFw0yMDAxMDcwODIyMjJaFw0yMDA3MDUwODIyMjJaMCIxIDAeBgkqhkiG9w0BCQEWEWJlbWFz Y0Bnb29nbGUuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrwIVY3rOZp1Papu Yl53bMQ2H713K9788lbE9itKEL7tJAJO7GqZGRbfxPUVRRDYPntAf+j0JZZOvf9Ye6uN12SNW+v1 V0o5YeXtXMpNOkprr0v0v7qc80yhbq8RIIiX4usDJwuDGbcL/VKnlCTDPRp+VWUB8rkaqObapi/F BGiPWXBqiT36W5opr6eJjUHuGiqzmK/1lCXMZSn6n3wkkbnonFsF5G4kfie+n/DDNd1hlqd06bzB rCnToS+BV/Y9BroXiOjVWJnMe/8Rce7zA8Dzr0kU+gacBArnMiDyCvUGjngbASU7VaIPJBc/zBzI L5QoeUAfgEJcGvFIEJUUIwIDAQABo4IBczCCAW8wHAYDVR0RBBUwE4ERYmVtYXNjQGdvb2dsZS5j b20wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMEBggrBgEFBQcDAjAdBgNVHQ4E FgQU+WKCBtTdknJDbiAjMsikOsbLHoAwTAYDVR0gBEUwQzBBBgkrBgEEAaAyASgwNDAyBggrBgEF BQcCARYmaHR0cHM6Ly93d3cuZ2xvYmFsc2lnbi5jb20vcmVwb3NpdG9yeS8wUQYIKwYBBQUHAQEE RTBDMEEGCCsGAQUFBzAChjVodHRwOi8vc2VjdXJlLmdsb2JhbHNpZ24uY29tL2NhY2VydC9nc3Nt aW1lY2EyMDE4LmNydDAfBgNVHSMEGDAWgBRMtwWJ1lPNI0Ci6A94GuRtXEzs0jA/BgNVHR8EODA2 MDSgMqAwhi5odHRwOi8vY3JsLmdsb2JhbHNpZ24uY29tL2NhL2dzc21pbWVjYTIwMTguY3JsMA0G CSqGSIb3DQEBCwUAA4IBAQA2eHjHcJ8kaiqDQGv7TdNEBFiDI8omlzpnnuQFciHkWhkfi3mQwuuZ IQIHd+JNpV0TQ8TqMNAr4YSPWOjwTd3UNxm+qghV3KC9j/Ygq39OzUlqxWv2lFH8mGFpbview2GI xZWXTCRbeod3ZevhC0lOUVVx4NCHe5yWSwjEpZHUilSnjyqN7ssC0eYQBylFOf2xVxu1JB8Xewgw Vk/DeOzsapxxjiuw2UZsDZbtVJvEx/C34GkACLR4Lm0k6O5ujAiDBkyy2nklxLhmKb9fyiH51B3j oRE8y99FJOCHoye9E/P2tK12x9w9ZeF07eWAdX3OkhTne1DitwLidojuyFm9MYICYTCCAl0CAQEw XzBLMQswCQYDVQQGEwJCRTEZMBcGA1UEChMQR2xvYmFsU2lnbiBudi1zYTEhMB8GA1UEAxMYR2xv YmFsU2lnbiBTTUlNRSBDQSAyMDE4AhABrhJHJR3b0M+HXcDG7DBYMA0GCWCGSAFlAwQCAQUAoIHU MC8GCSqGSIb3DQEJBDEiBCAx80NALR1BGF/g+F11P93oAVrn7XoVWhh508zbFBr92TAYBgkqhkiG 9w0BCQMxCwYJKoZIhvcNAQcBMBwGCSqGSIb3DQEJBTEPFw0yMDAzMzExNTE1MjBaMGkGCSqGSIb3 DQEJDzFcMFowCwYJYIZIAWUDBAEqMAsGCWCGSAFlAwQBFjALBglghkgBZQMEAQIwCgYIKoZIhvcN AwcwCwYJKoZIhvcNAQEKMAsGCSqGSIb3DQEBBzALBglghkgBZQMEAgEwDQYJKoZIhvcNAQEBBQAE ggEApGi6GicxsbMFQPFhK0n17yn+xaHP+32lnEUwQW8MMkSAKtnf6Hz4XCU6uFS3nhYsV4VR9Pg7 lZYmysb4BUMQ0yw5ROI5Hp3alzFHY0mC2rrgt6/+WKqk19+bUkVVbvdWWLYzrRxYRgQdlweieoTZ bpKwPL4fXPNRHhKl8hsW/VYftmAKEh9Ba3HcUqAyD7OA25kGm7VKflbQKk+2D9sk0/YBT610kM5g LIomsaz9m4nKlGzS0WWxaOAuliSZSyuBXDYM/i4v/MuuMzZBRQyXyDyqqwX4v39xIQThyVxnm6We DSI+RXxtmaC81S00RbJaOicK2DlcyxW+6QXRhNElAA== --000000000000356db205a228093a--