Dear Sara,
At 05:15 AM 23-01-2020, Sara Dickinson wrote:
> Section 3.2 discusses what a user does and use a DNS query related to email as an example. Is the MUA expected to validated the MX RR or is it the role of the MSA?

I think questions of validation are out of scope for this draft.

Apologies for not explaining this correctly. The draft is described as a document about the use of DNS. Section 3.2 has the following: "It gives information about what the user does ("What are the MX records of example.net?" means he probably wants to send email to someone at example.net ..." My question was about that DNS query. Could you or the WG Chairs please explain why the question which I asked is out of scope for this draft?

Looking back, this text was introduced into the original I-D before RFC7624 was published and wasn't updated. Suggest:

OLD: The IAB privacy and security program also have a work in progress [RFC7624] that considers such inference-based attacks in a more general framework.

OLD: The IAB privacy and security program has also produced [RFC7624] that considers such inference-based attacks in a more general framework."

I gather that you meant "NEW" for the second part.  I am okay with that text.

The text says "to our knowledge"; no DPRIVE or IETF review comment to date (or errata to RFC7626) has contradicted this statement so I think it is a fair representation of the community knowledge on this matter. If you are aware of such a law please suggest text.

I asked whether there was a study. According to the above, it is what the DPRIVE Working Group believes even though there wasn't any study. I would like to thank you for the response as it addresses my question.

Regards,
S. Moonesamy
_______________________________________________
dns-privacy mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/dns-privacy

Reply via email to