RE: Inquiry re: DNS over HTTPS

2019-11-04 Thread Tony Finch
John W. Blue  wrote:

> Additionally, Tony Finch back on July 11th of this year suggested:

It's so nice when people do the dirty work for me :-)

Tony.
-- 
f.anthony.n.finchhttp://dotat.at/
Cromarty, Forth: Northeast 6 to gale 8, occasionally severe gale 9 at first in
Forth, backing north 4 to 6. Rough or very rough becoming moderate or rough.
Showers. Good, occasionally poor at first.
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


RE: Inquiry re: DNS over HTTPS

2019-11-04 Thread John W. Blue
Additionally, Tony Finch back on July 11th of this year suggested:

To give DoH access to clients you need a proxy such as dnsdist or doh101.

https://dotat.at/cgi/git/doh101.git
https://dnsprivacy.org/wiki/display/DP/Using+dnsdist+for+DoT+and+DoH

John

From: bind-users [mailto:bind-users-boun...@lists.isc.org] On Behalf Of 
Victoria Risk
Sent: Monday, November 04, 2019 12:45 PM
To: LeBlanc, Daniel James; ML BIND Users (bind-users@lists.isc.org)
Subject: Re: Inquiry re: DNS over HTTPS


On Nov 4, 2019, at 10:38 AM, LeBlanc, Daniel James 
mailto:daniel.lebl...@bellaliant.ca>> wrote:

Hello All.

I am interested in whether ISC BIND intends to directly support DNS over HTTPS 
in the near future, or whether it is expected that users will create an 
environment to accept the HTTPS request and convert it into a DNS query.

Daniel,

We do plan to develop support for both DoH and DoT (DNS over TLS) natively in 
BIND. Both will appear in development releases in 2020. We have a kb article 
that explains one way to do DoT today with stunnel 
https://kb.isc.org/docs/aa-01386.

Vicky Risk
Product Manager

___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: Inquiry re: DNS over HTTPS

2019-11-04 Thread Victoria Risk

> On Nov 4, 2019, at 10:38 AM, LeBlanc, Daniel James 
>  wrote:
> 
> Hello All.
>  
> I am interested in whether ISC BIND intends to directly support DNS over 
> HTTPS in the near future, or whether it is expected that users will create an 
> environment to accept the HTTPS request and convert it into a DNS query.

Daniel,

We do plan to develop support for both DoH and DoT (DNS over TLS) natively in 
BIND. Both will appear in development releases in 2020. We have a kb article 
that explains one way to do DoT today with stunnel 
https://kb.isc.org/docs/aa-01386.  

Vicky Risk
Product Manager

___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Inquiry re: DNS over HTTPS

2019-11-04 Thread LeBlanc, Daniel James
Hello All.

I am interested in whether ISC BIND intends to directly support DNS over HTTPS 
in the near future, or whether it is expected that users will create an 
environment to accept the HTTPS request and convert it into a DNS query.

Thanks!

Daniel J. LeBlanc, P.Eng., MBA, DTME | Senior Network Architect | Bell Canada

___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users