> On 26 Nov 2019, at 17:35, Phillip Hallam-Baker <[email protected]> wrote:
> 
> So what I see is a requirement for DNS resolver configuration. We already 
> have rfc6763 to tell us how to get from a DNS label to an Internet service. 
> Albeit one that presupposes the existence of a resolution mechanism. I don't 
> see it being problematic to use the local DNS to do this resolution provided 
> that 1) we have the means to authenticate the connection and 2) we only use 
> this mechanism once, to perform initial configuration.
> 

How will the connection to the local resolver be authenticated? Also, 
presumably this mandates the use of DNSSEC by the client?

Neil
_______________________________________________
dns-privacy mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/dns-privacy

Reply via email to