On Wednesday, September 23, 2015 7:32 AM, Warren Kumari wrote: > Please review our documents: > https://datatracker.ietf.org/doc/draft-ietf-dprive-dns-over-tls/ > https://datatracker.ietf.org/doc/draft-ietf-dprive-dnsodtls/ > > We would like to see a significant amount of review and discussion > before > our meeting in Yokohama - if not it is hard to justify the > meeting time.
Not really a review, more a data point. Our team did a test implementation of "draft-ietf-dprive-dns-over-tls." We measured the response times, and found that where the median response time was slightly higher than UDP transactions, mostly due to the encryption overhead. We were also able to perform an interop test with the Sinodum server, thanks to Sara Dickinson's help. It worked, in the sense that our client could successfully send queries and receive responses. We needed some help to get the encapsulation right. The draft defines the encapsulation format by a reference to DNS over TCP, which is probably fine but confused us. Once the actual encapsulation was explained, everything sailed smoothly. -- Christian Huitema _______________________________________________ dns-privacy mailing list [email protected] https://www.ietf.org/mailman/listinfo/dns-privacy
