[lac-discuss-en] =? Iso-8859-1? Q? Protection = F3n_de_datos_DNS_Problem? == Iso-8859-1? Q? A_-_IETF_Informativo? =

[apisan at unam.mx]

[[--Translated text (es -> en)--]]

 Subject: Re: =? Iso-8859-1? Q? Protection = F3n_de_datos_DNS_Problem? == Iso-8859-1? Q? A_-_IETF_Informativo? = 
 From: apisan at unam.mx

 Carlton, 


 the surprise is in the eye of the beholder. Everything depends on the threat model in use. The IETF estincorporando a new one, DNSSEC was designed primarily against a "middle man attack" ("man in the mddle" or MITM, in cryptologist). Now the persistent passive monitoring imposes new conditions. The vision of Stephane has been disputed or qualified in ways that should share to do with the original. 


 surprise is in the eyes of the beholder. It all depends on the threat model. A new one is being incorporated. DNSSEC was designed against "man in the middle" (MITM) passive pervasive monitoring is now being incorporated as a threat by the IETF. Stephane's views have some disagreement Also found worth sharing or Qualifications When you share the original. 


 Yours, 


 Alejandro Pisanty 




 --------------------------- 
     Dr. Alejandro Pisanty 
 Faculty of Chemistry UNAM 
 3000 University Avenue, 04510 Mexico DF Mexico 






 +52-1-5541444475 FROM ABROAD 


 SMS +525541444475 +525541444475 FROM MEXICO 
 Blog: http://pisanty.blogspot.com 
 LinkedIn: http://www.linkedin.com/in/pisanty 
 Join the LinkedIn group UNAM, http://www.linkedin.com/e/gis/22285/4A106C0C8614 
 Twitter: http://twitter.com/apisanty 
 ---- >> Join ISOC Mexico, http://www.isoc.org 
 . . . . . . . . . . . . . . . . 


 ________________________________________ 
 From: lac-discuss-es-bounces at atlarge-lists.icann.org [lac-discuss-es-bounces at atlarge-lists.icann.org] on behalf of carlton.samuels @ gmail.com [carlton.samuels @ gmail . com] 
 Posted on: Tuesday, November 12, 2013 15:09 
 To: lac-discuss-es at atlarge-lists.icann.org 
 Subject: Data Protection DNS Problem - IETF Informational 


 [[- Translated text (in -> s) -]]


 Subject: Data Protection DNS Problem - IETF Informational 
 From: carlton.samuels @ gmail.com 


 It seems we have a problem much enlarged domain we're talking about 
 with RDS. 




 Aquhay some things I llamla attention on privacy DNS Problem 
 Declaration of S. Bortzmeyer (AFNIC maeven] for IETF Network Working Group: 




 1. By the way, DNSSEC and DNS message confidentiality: 




 * "(DNSSEC, specified in RFC4033] explicitly excludes confidential 
 their goals.) Aspues, if an initiator begins a HTTPS communication with 
 receptor, whereas the HTTP traffic is encrypted, before the exchange DNS 
 to be no. "* 




 Two.By the way, monitoring: 
 * "Best of all, from the viewpoint of the spasm is clearly between 
 the resolution of talny reducers, because the DNS estlimitada 
 the caching. "* 




 Rate # 1, I just did not realize that was the case! 




 Rate # 2, I always pensque if I were in the business of guard, parking 
 the road linking the applicant and the name server with my ears open is the 
 optimal point for all Metadata could ever hope for. As the writer 
 notes, are "not * in the way of communication, but are facilitators *". 
 Individual access directly focalizacin ie - can be arranged for one or 
 other means of the information provided by the metadata. 




 Thanks to Michele for sharing. See all here: 
 http://tools.ietf.org/pdf/draft-bortzmeyer-perpass-dns-privacy-00.pdf 




 - Carlton 




 =============== 
 Carlton A Samuels 
 Mobile: 876-818-1799 
 * Strategy, planning, Government, Evaluation and Turnaround * 
 ============================= 
 _______________________________________________ 









[[--Original text (es)
http://mm.icann.org/transbot_archive/caf5619120.html
--]]