[[--Translated text (es -> en)--]] Subject: Re: =? Iso-8859-1? Q? Protection = F3n_de_datos_DNS_Problem? == Iso-8859-1? Q? A_-_IETF_Informativo? = From: apisan@unam.mx Carlton, the surprise is in the eye of the beholder. Everything depends on the threat model in use. The IETF estincorporando a new one, DNSSEC was designed primarily against a "middle man attack" ("man in the mddle" or MITM, in cryptologist). Now the persistent passive monitoring imposes new conditions. The vision of Stephane has been disputed or qualified in ways that should share to do with the original. surprise is in the eyes of the beholder. It all depends on the threat model. A new one is being incorporated. DNSSEC was designed against "man in the middle" (MITM) passive pervasive monitoring is now being incorporated as a threat by the IETF. Stephane's views have some disagreement Also found worth sharing or Qualifications When you share the original. Yours, Alejandro Pisanty --------------------------- Dr. Alejandro Pisanty Faculty of Chemistry UNAM 3000 University Avenue, 04510 Mexico DF Mexico +52-1-5541444475 FROM ABROAD SMS +525541444475 +525541444475 FROM MEXICO Blog: http://pisanty.blogspot.com LinkedIn: http://www.linkedin.com/in/pisanty Join the LinkedIn group UNAM, http://www.linkedin.com/e/gis/22285/4A106C0C8614 Twitter: http://twitter.com/apisanty ---- >> Join ISOC Mexico, http://www.isoc.org . . . . . . . . . . . . . . . . ________________________________________ From: lac-discuss-es-bounces@atlarge-lists.icann.org [lac-discuss-es-bounces@atlarge-lists.icann.org] on behalf of carlton.samuels @ gmail.com [carlton.samuels @ gmail . com] Posted on: Tuesday, November 12, 2013 15:09 To: lac-discuss-es@atlarge-lists.icann.org Subject: Data Protection DNS Problem - IETF Informational [[- Translated text (in -> s) -]] Subject: Data Protection DNS Problem - IETF Informational From: carlton.samuels @ gmail.com It seems we have a problem much enlarged domain we're talking about with RDS. Aquhay some things I llamla attention on privacy DNS Problem Declaration of S. Bortzmeyer (AFNIC maeven] for IETF Network Working Group: 1. By the way, DNSSEC and DNS message confidentiality: * "(DNSSEC, specified in RFC4033] explicitly excludes confidential their goals.) Aspues, if an initiator begins a HTTPS communication with receptor, whereas the HTTP traffic is encrypted, before the exchange DNS to be no. "* Two.By the way, monitoring: * "Best of all, from the viewpoint of the spasm is clearly between the resolution of talny reducers, because the DNS estlimitada the caching. "* Rate # 1, I just did not realize that was the case! Rate # 2, I always pensque if I were in the business of guard, parking the road linking the applicant and the name server with my ears open is the optimal point for all Metadata could ever hope for. As the writer notes, are "not * in the way of communication, but are facilitators *". Individual access directly focalizacin ie - can be arranged for one or other means of the information provided by the metadata. Thanks to Michele for sharing. See all here: http://tools.ietf.org/pdf/draft-bortzmeyer-perpass-dns-privacy-00.pdf - Carlton =============== Carlton A Samuels Mobile: 876-818-1799 * Strategy, planning, Government, Evaluation and Turnaround * ============================= _______________________________________________ [[--Original text (es) http://mm.icann.org/transbot_archive/caf5619120.html --]]