A New Internet-Draft is available from the on-line Internet-Drafts directories.
This draft is a work item of the DNS PRIVate Exchange WG of the IETF.
Title : Unilateral Opportunistic Deployment of Encrypted
Recursive-to-Authoritative DNS
Authors : Daniel Kahn Gillmor
Joey Salazar
Filename : draft-ietf-dprive-unilateral-probing-00.txt
Pages : 23
Date : 2022-03-07
Abstract:
This draft sets out steps that DNS servers (recursive resolvers and
authoritative servers) can take unilaterally (without any
coordination with other peers) to defend DNS query privacy against a
passive network monitor. The steps in this draft can be defeated by
an active attacker, but should be simpler and less risky to deploy
than more powerful defenses. The draft also introduces (but does not
try to specify) the semantics of signalling that would permit defense
against an active attacker.
The goal of this draft is to simplify and speed deployment of
opportunistic encrypted transport in the recursive-to-authoritative
hop of the DNS ecosystem. With wider easy deployment of the
underlying transport on an opportunistic basis, we hope to facilitate
the future specification of stronger cryptographic protections
against more powerful attacks.
The IETF datatracker status page for this draft is:
https://datatracker.ietf.org/doc/draft-ietf-dprive-unilateral-probing/
There is also an HTML version available at:
https://www.ietf.org/archive/id/draft-ietf-dprive-unilateral-probing-00.html
Internet-Drafts are also available by rsync at rsync.ietf.org::internet-drafts
_______________________________________________
dns-privacy mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/dns-privacy
