Re: [dns-privacy] User Perspective

2018-09-25 Thread Christian Huitema
On 9/25/2018 12:15 PM, Tony Finch wrote: > For DNS-over-QUIC I think that could drop to 2RTT, or maybe 1RTT? I don't > know QUIC's handshake. > > The warm start time should soon be 0RTT. The basic QUIC handshake will be 1-RTT before sending the first query, with two exceptions: 1) The server

Re: [dns-privacy] User Perspective

2018-09-25 Thread Tony Finch
Mukund Sivaraman wrote: > > During the "how-to-achieve-it" phase, attention should be given to not > adding extra roundtrips (to keep it as close as possible to the RFC 1035 > UDP scenario). Various new facilities such as TCP's fast open, TLS false > start, etc. should not be taken for granted -

Re: [dns-privacy] User Perspective

2018-09-25 Thread Mukund Sivaraman
Hi Christian On Tue, Sep 25, 2018 at 01:40:59PM -0700, Christian Huitema wrote: > On 9/25/2018 12:15 PM, Tony Finch wrote: > > > For DNS-over-QUIC I think that could drop to 2RTT, or maybe 1RTT? I don't > > know QUIC's handshake. > > > > The warm start time should soon be 0RTT. > > The basic

Re: [dns-privacy] User Perspective

2018-09-25 Thread Martin Hoffmann
Tony Finch wrote: > Amelia Andersdotter wrote: >> >> I have difficulties seeing how a user (within the meaning of individual >> internet consumer) has any practical choice to other than to share PII >> with a DNS provider? > > Yes, me too. There’s always the option to run your own recursive,

Re: [dns-privacy] User Perspective

2018-09-25 Thread Tony Finch
Amelia Andersdotter wrote: > > I have difficulties seeing how a user (within the meaning of individual > internet consumer) has any practical choice to other than to share PII > with a DNS provider? Yes, me too. Since the overall topic is recursive -> authoritative, the questions imply some

Re: [dns-privacy] User Perspective

2018-09-25 Thread Mukund Sivaraman
On Tue, Sep 25, 2018 at 10:43:44PM +0530, Mukund Sivaraman wrote: > DNS is at the head of any user-initiated internet connection and the > turnaround time of a DNS request is definitely influenced by the > resolution time at the head of the sequence of steps. That should say "turnaround time of

Re: [dns-privacy] User Perspective

2018-09-25 Thread Lanlan Pan
clients hide on proxy, but still get the specified network topological close response. Brian Haberman 于2018年7月20日周五 上午2:24写道: > This thread is for discussion of the user perspective of DNS privacy > between the recursive resolver and authoritative servers. > > - Focus on *what* is needed. >

Re: [dns-privacy] User Perspective

2018-09-25 Thread Mukund Sivaraman
On Thu, Jul 19, 2018 at 02:23:53PM -0400, Brian Haberman wrote: > This thread is for discussion of the user perspective of DNS privacy > between the recursive resolver and authoritative servers. > > - Focus on *what* is needed. > - Avoid *how* to achieve it. > - Consider both ends of

Re: [dns-privacy] User Perspective

2018-09-25 Thread Paul Hoffman
On 24 Sep 2018, at 7:08, Brian Haberman wrote: > All, > I would like the focus for this week (9/24-9/30) to be on > clarifying the requirements from the user's perspective. So far, I have > seen: > > * DNS transaction privacy, if possible > * User willingness to send PII if transaction is