Re: [dns-privacy] [Doh] New: draft-bertola-bcp-doh-clients

2019-03-12 Thread Stephane Bortzmeyer
On Tue, Mar 12, 2019 at 04:55:11PM +0100, Neil Cook wrote a message of 22 lines which said: > Actually many enterprises (particularly banks etc.) do not allow DNS > resolution directly from employee endpoints. They block UDP/53, which is not the same thing. Malware or non-cooperating

Re: [dns-privacy] [Doh] New: draft-bertola-bcp-doh-clients

2019-03-12 Thread Yishai Beeri (yishaib)
On 12/03/2019, 20:37, "Doh on behalf of Stephane Bortzmeyer" wrote: On Tue, Mar 12, 2019 at 04:55:11PM +0100, Neil Cook wrote a message of 22 lines which said: > Actually many enterprises (particularly banks etc.) do not allow DNS resolution directly from employee

Re: [dns-privacy] [Doh] New: draft-bertola-bcp-doh-clients

2019-03-12 Thread Neil Cook
> On 12 Mar 2019, at 17:01, Stephane Bortzmeyer wrote: > > On Tue, Mar 12, 2019 at 04:55:11PM +0100, > Neil Cook wrote > a message of 22 lines which said: > >> Actually many enterprises (particularly banks etc.) do not allow DNS >> resolution directly from employee endpoints. > > They

Re: [dns-privacy] [Doh] New: draft-bertola-bcp-doh-clients

2019-03-12 Thread Stephane Bortzmeyer
On Mon, Mar 11, 2019 at 08:55:18AM +0530, nalini elkins wrote a message of 202 lines which said: > The questions that the Fortune 50 company architect asked were something > like this: > > 1. You mean that DNS could be resolved outside my enterprise? I suggest to explain to this person that