In article <[email protected]> you write: >(I meant UKNOF, not UKNOT) > >https://www.youtube.com/watch?v=3tMGD6J04Jk > >Sara took a *lot* of off-mic discussion after that session, too.
I gather mandatory DNS blocks like this are common throughout Europe, with targets mostly being child abuse material and terrorism with a smattering of other stuff like Pirate Bay. We may or may not like it, but systematically circumventing the blocks presents issues. (Everyone knows that individuals can switch DNS providers. It's the systematic part that's a problem.) > I'm don't beleive that we are hearing many complaints about the spec as > such. The vast majority of what I'm hearing are complaints about the > deployment model. When I first heard about DoH I understood it to be a way for javascript apps to do DNS queries for SRV and the like, with the queries being sent back to wherever the js code came from. I don't think that's controversial. Using it to systematically circumvent a system's standard DNS resolution (for whatever standard means) is a very different issue. It has both technical problems, e.g., split horizon DNS within organizations, and the political ones. R's, John _______________________________________________ dns-privacy mailing list [email protected] https://www.ietf.org/mailman/listinfo/dns-privacy
