OARC 24 (Buenos Aires)

Session

Public Workshop: Privacy

Mar 31, 2016, 3:30 PM

Montserrat (Intercontinental Buenos Aires)

Conveners

Public Workshop: Privacy

• Ray Bellis (Internet Systems Consortium, Inc.)

25. Testing Most Authoritative Servers for Conformance

Paul Hoffman (ICANN)

3/31/16, 3:30 PM

ICANN has recently begun testing live authoritative servers for conformance to the DNS protocols, particularly for TCP and EDNS(0) compliance. We do this by collecting registered names from the zone files of all gTLDs, as well as a representative sampling of names registered in the ccTLDs. This paper shows the test methodology, the levels of compliance found, and suggests avenues for further testing.

2. State of the "DNS privacy" project: running code

Mr Stéphane Bortzmeyer (AFNIC)

3/31/16, 4:00 PM

Public Workshop

The "DNS privacy" project started at the IETF meeting in Vancouver a few months after the Snowden revelations. What is its current state? A problem statement has been published, RFC 7626. Two directions are followed: QNAME minimisation, to decrease the amount of data sent to the name servers. And encryption, to prevent a sniffer to get the data. This talk will present the state of...

16. QNAME minimisation in Unbound

Ralph Dolmans (NLnet Labs)

3/31/16, 4:30 PM

Public Workshop

Data stored in the DNS is publicly visible. DNS transactions, on the other hand, contain privacy sensitive information. The Snowden revelations about pervasive monitoring are seen as a wake up call for the internet community to increase the focus on privacy protection. One of the privacy threat mitigation methods mentioned in RFC6973, is the principle of data minimisation[0]. The RFC states...