On Thu, Oct 22, 2015 at 10:23:02AM +0100,
 Warren Kumari <[email protected]> wrote 
 a message of 43 lines which said:

> The authors of draft-ietf-dprive-dns-over-tls-01 have indicated that
> they believe that the document is ready, and have asked for Working
> Group Last Call.

I'm one of the several persons who believe that we should delay WG
approval a bit to align DNS-over-TLS and DNS-over-DTLS, specially the
server authentication part (-01 does not even mention which field in
the cert to check).

For draft-ietf-dprive-dns-over-tls-01, I have the following remarks:

Abstract: "eliminates opportunties for eavesdropping". "Eliminates"
seem too strong. For instance, section 9, paragraph 4 explains you can
still get information by eavesdropping.

Section 3.3: the text in the last paragraph is now a bit different
from the one I-D.ietf-dnsop-5966bis. May be copy-and-paste the text
from 5966bis?


_______________________________________________
dns-privacy mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/dns-privacy

Reply via email to