Please do not respond in this repo. The draft has moved to draft-ietf-doh-dns-over-https.
draft-hoffman-dispatch-dns-over-https's Introduction
draft-hoffman-dispatch-dns-over-https's People
draft-hoffman-dispatch-dns-over-https's Issues
Length of dns-udpwireformat string
From mnot:
The media type is "application/dns-udpwireformat"
That's needlessly long; suggest "application/dns-uwf".
POST request invalidates the cache
According to RFC 2616 POST requests to server forces server to invalidate an entity.
Some HTTP methods MUST cause a cache to invalidate an entity. This is either the entity referred to by the Request-URI, or by the Location or Content-Location headers (if present). These methods are:
- PUT
- DELETE
- POST
In case when we use DNS over HTTP for user-resolver connection, POST requests will cause the server to perform a full lookup of the name again regardless TTL, thus making resolver useless.
Don't bifurcate the request style
From mnot:
I think it's a mistake to bifurcate the request style so fundamentally; it's HTTP tunnelling at its worst.
The GET-style request in your example (which I think is pretty representative) uses 44 octets to encode the body; the POST serialisation is 33 octets. However, with HPACK's huffman encoding (remember, you're requiring HTTP/2), that goes down to 34 bytes.
Are we really that sensitive to on-the-wire size? To me, the cache efficiency gains as well as simplicity more than make up for a 3% difference. The statement that "POST-ed requests are smaller" isn't going to be true, in pathological cases.
assorted ramblings about UPDATE and POST
- allowing the UPDATE opcode (or anything else that affects state) in GET requests is wrong, but the draft could get away with just saying that.
- one could argue that allowing UPDATE, by default, is a security problem in (bad) network setups that currently do not ACL updates and get away with this because they trust their users - but they may not trust random sites on the Internet. When I discussed this with Paul his stance appeared to be that these people should be ACLing then.
- We cannot be exhaustive about what opcodes affect things, so when writing words on this, be clear about the incompleteness.
Reference to CORS is outdated
CORS is defined by https://fetch.spec.whatwg.org/. The TR/cors/ copy is misleading and doesn't reflect what's implemented.
No truncation for DNS HTTPs
If HTTPs acts as a transport for DNS even with dns-udpwireformat MIME type, it should not be treated as a datagram encapsulted in a HTTPs header but a new byte stream over HTTPs(similar with DNS TCP). No truncation loop is needed. It is different from DNS wire-format over HTTP.
I'm wondering is it worthwhile differenciating the term "DNS HTTPs" with "DNS over HTTP(s)", in which the former means HTTPs transport usage, the later means DNS in a HTTP(s) tunnel.
Davey
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
๐ Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. ๐๐๐
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google โค๏ธ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.