On Tuesday, December 13, 2016 11:16 AM, Paul Hoffman wrote: > > If what we invent has better characteristics than DTLS or TLS, that > means that the TLS WG failed to find something that we could. That seems > *incredibly* unlikely, given the people active in the two WGs.
Actually, QUIC might provide an answer, if you are willing to wait a couple years. Runs over UDP, uses TLS 1.3 key negotiation, encrypts pretty much everything, enables 0-RTT, and manages multiple flows. A one-query per QUIC-flow model would provide better service than TCP because it does not suffer from head of queue blocking, and better service than DTCP because it does not limit the amount of data sent in queries and response. But of course, the QUIC WG is just getting started, so it will probably take two years before we can start deployment of something like DNS over QUIC. -- Christian Huitema _______________________________________________ dns-privacy mailing list [email protected] https://www.ietf.org/mailman/listinfo/dns-privacy
