On Fri, 2 Oct 2026, Joe Abley wrote:
I am evidently not very good at meetecho (or meetecho has it in for me) but since I couldn't manage to raise my hand and join the queue...
It wasn't you. Various people needed to reconnect. I too ended up in halfway where I could listen/see, but chat and queue stopped showing updates until I reloaded the entire page.
Imagine how much simplier the PQ DNSSEC conversation would be if we didn't have to worry about response size.
I've said the same in the past. It seems we should fix the transport unreliability/size and then we dont have to special ase any cryptography.
Imagine how much simpler DOS mitigation would be if UDP transport was rare.
Not sure TCP or QUIC is that much easier to DOS mitigate?
Imagine how much DNS traffic could be encrypted and private if we were not fixated on stateless transport.
Just keeping sessions around for multiple queries would be a huge improvement (stub-resolver, but also resolver-auth) Paul _______________________________________________ DNSOP mailing list -- [email protected] To unsubscribe send an email to [email protected]
