[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-dev] Tor and DNS

To: tor-dev@xxxxxxxxxxxxxxxxxxxx
Subject: Re: [tor-dev] Tor and DNS
From: Ondrej Mikle <ondrej.mikle@xxxxxxxxx>
Date: Sun, 05 Feb 2012 04:38:51 +0100
Delivered-to: archiver@xxxxxxxx
Delivery-date: Sat, 04 Feb 2012 22:39:09 -0500
Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=message-id:date:from:user-agent:mime-version:to:subject:references :in-reply-to:x-enigmail-version:content-type :content-transfer-encoding; bh=+6A2+PKgNlpOfG4IUBpf4pduf5M7y2HNT57DZfna3UQ=; b=HAGODnlGOIy7lwwRDaQABPzkvFxfBp95J1YKCJEz4D2SDHM0HfoMfIsaqqUXhp1i7U sryq6gSS8scPiV7lLmEiqVUXE4jnnf7yMicPiD62OxzFlW3XF9yQx6Z69UKI206wXVd8 3Rf90a7z28KlGgUYhQGaudYvlV5pGkrHpcthw=
In-reply-to: <4F28FF4C.8090504@xxxxxxxxxxxxx>
List-archive: <http://lists.torproject.org/pipermail/tor-dev>
List-help: <mailto:tor-dev-request@lists.torproject.org?subject=help>
List-id: "This mailing list is for discussion by the developers of Tor." <tor-dev.lists.torproject.org>
List-post: <mailto:tor-dev@lists.torproject.org>
List-subscribe: <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-dev>, <mailto:tor-dev-request@lists.torproject.org?subject=subscribe>
List-unsubscribe: <https://lists.torproject.org/cgi-bin/mailman/options/tor-dev>, <mailto:tor-dev-request@lists.torproject.org?subject=unsubscribe>
References: <yszobtzn9xf.fsf@xxxxxxxxxxx> <CAKDKvuwXuTp8Ejb7F-HTx9uYv61xHTR1S2xvD95WS2dVJyuifA@xxxxxxxxxxxxxx> <20120130065939.GC2550@xxxxxxxxxxxxxx> <4F265E40.3070406@xxxxxxxxxxxx> <4F266E77.2040205@xxxxxxxxxxxxx> <4F274CD8.80305@xxxxxxxxx> <4F278570.7040806@xxxxxxxxxxxxx> <CAKDKvuwJvbB6n8qNR=0H8jfAxue3r5V3o9AcNkiTBEZ8SB9eAg@xxxxxxxxxxxxxx> <4F28774C.1050902@xxxxxxxxxxxxx> <CAKDKvuxHtHSqT_gKGRTHLs4vSCUdZXa09Ad=FWsSOepyYQ9h-w@xxxxxxxxxxxxxx> <4F28FF4C.8090504@xxxxxxxxxxxxx>
Reply-to: tor-dev@xxxxxxxxxxxxxxxxxxxx
Sender: tor-dev-bounces@xxxxxxxxxxxxxxxxxxxx
User-agent: Mozilla/5.0 (X11; Linux x86_64; rv:10.0) Gecko/20120129 Thunderbird/10.0

On 02/01/2012 10:01 AM, Jacob Appelbaum wrote:
> 
> That sounds good. I'll wait for the first draft and send feedback.

First draft is ready here:

https://github.com/hiviah/torspec/blob/master/proposals/ideas/xxx-dns-dnssec.txt

Hopefully I reflected all the main points made in the DNS threads. There are a
few TODOs I couldn't decide what the best course of action would be (usually
options are listed).

I tried to keep Tor as much "DNS/DNSSEC-agnostic" as possible. There exists a
combination of answers to the TODOs that Tor won't have to touch the DNSSEC
part, except for calling ub_resolve ;-) And DNS packet itself would be touched
only in the DNSPort/SOCKS part (but still no fiddling with DNSSEC part).

Ondrej
_______________________________________________
tor-dev mailing list
tor-dev@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-dev

Follow-Ups:
- Re: [tor-dev] Tor and DNS
  - From: Jakob Schlyter
- Re: [tor-dev] Tor and DNS
  - From: Nick Mathewson

References:
- Re: [tor-dev] Tor and DNS
  - From: Jacob Appelbaum

Prev by Author: Re: [tor-dev] First test "report"
Next by Author: Re: [tor-dev] Tor and DNS
Previous by thread: Re: [tor-dev] Tor and DNS
Next by thread: Re: [tor-dev] Tor and DNS
Index(es):
- Author
- Thread