FYI -----Original Message----- From: Input-to-ssr2rt <input-to-ssr2rt-bounces@icann.org> on behalf of Paul Hoffman <paul.hoffman@icann.org> Date: Wednesday, November 6, 2019 at 5:39 PM To: "input-to-ssr2rt@icann.org" <input-to-ssr2rt@icann.org> Subject: [Input-to-SSR2RT] ICANN activity on DoH and other encrypted DNS transports Greetings. At Russ' suggestion, I looked at the slides from your public engagement session earlier in the week, particularly with respect to DoH. Last week, ICANN's Office of the CTO published an overview of encrypted DNS to help the policy community understand the issues that are being widely discussed in the technical community. If you haven't seen "Local and Internet Policy Implications of Encrypted DNS" already, it is at: https://www.icann.org/en/system/files/files/octo-003-en.pdf The document outlines (but purposely does not go into detail) the concerns from many parties, particularly about security. It also covers the adoption of DoH by two major browsers, including an analysis of their stated plans for deployment to their customers. One point I would make about the slide given: it appears that the review team is only concerned about DoH, not DoT. Some proposed uses of DoT causes most of the same ecosystem and security concerns as DoH does, so you might consider expanding that to "encrypted DNS". The same concern will come up again in a few years if DoH over Quic or DNS over QUIC is adopted. Please let me know if I can assist more on this. --Paul Hoffman _______________________________________________ Input-to-ssr2rt mailing list Input-to-ssr2rt@icann.org https://mm.icann.org/mailman/listinfo/input-to-ssr2rt _______________________________________________ By submitting your personal data, you consent to the processing of your personal data for purposes of subscribing to this mailing list accordance with the ICANN Privacy Policy (https://www.icann.org/privacy/policy) and the website Terms of Service (https://www.icann.org/privacy/tos). You can visit the Mailman link above to change your membership status or configuration, including unsubscribing, setting digest-style delivery or disabling delivery altogether (e.g., for a vacation), and so on.