Hi all, I am evidently not very good at meetecho (or meetecho has it in for me) but since I couldn't manage to raise my hand and join the queue...
If we had invested as much time on DNS transport protocols that are not challenged by large responses as we have in trying to work around response size concerns we would be in a much better place today. Topics like session reuse, pipelining and simply understanding the full performance picture of session-based transports are not well-understood and it seems to me there is a lot to gain by improving the state of the art. Think back to the delays in including AAAA glue in the root zone for related reasons, or the long precautionary DURZ we rolled out in anticipation of falling skies when we signed the root zone. Imagine how much simplier the PQ DNSSEC conversation would be if we didn't have to worry about response size. Imagine how much simpler DOS mitigation would be if UDP transport was rare. Imagine how much DNS traffic could be encrypted and private if we were not fixated on stateless transport. Joe _______________________________________________ DNSOP mailing list -- [email protected] To unsubscribe send an email to [email protected]
