On 10/06/2014 08:44 AM, Stephane Bortzmeyer wrote: > [Keep [email protected] in the loop only if it is substantive comments on > the WG creation, please] > > On Fri, Oct 03, 2014 at 10:38:35AM -0700, > The IESG <[email protected]> wrote > a message of 68 lines which said: > >> The primary focus of this Working Group is to develop mechanisms >> that provide confidentiality between DNS Clients and Iterative >> Resolvers, > > I do not see why the group is limited to this point.
But it is not limited. The full text of the paragraph you've quoted is:
>> The primary focus of this Working Group is to develop mechanisms that
>> provide confidentiality between DNS Clients and Iterative Resolvers,
>> but it may also later consider mechanisms that provide confidentiality
>> between Iterative Resolvers and Authoritative Servers, or provide
>> end-to-end confidentiality of DNS transactions. Some of the results of
>> this working group may be experimental.
So the argument appears to be that we should focus on standardizing
private communication between clients and resolvers, but if we happen to
be able to solve private between resolvers and authoritative nameservers
as well, that would also be considered in-scope.
I'm not sure i have strong opinions either way, but focusing on solving
one problem concretely can be useful if it means we don't get bogged
down in wrangling over which problem to solve first. If it turns out to
be easy to settle on something for the client→resolver link, it sounds
like we can move on to solving the resolver→authoritative link without
trouble.
--dkg
signature.asc
Description: OpenPGP digital signature
_______________________________________________ dns-privacy mailing list [email protected] https://www.ietf.org/mailman/listinfo/dns-privacy
