2 ms·
One of the interesting technical questions is how these vendors will choose to reflect the forbidden DNS entries in protocols like DoH where they have a choice.
by tialaramex 2y ago
One of the interesting technical questions is how these vendors will choose to reflect the forbidden DNS entries in protocols like DoH where they have a choice. For example a reasonable thing for a DoH server to say when asked a DNS question it has been forbidden to answer truthfully, is HTTP 451 Unavailable for Legal Reasons.
- callalex 2y agoThat would be a layer/protocol violation. The HTTP status codes used in DoH are used to discuss the semantics of the DNS query itself, unrelated to the DNS response. For example an NXDOMAIN response is still a 200, not a 404. Edit: for what it’s worth, Google is doing this the “right” way in the DNS protocol itself, see: https://news.ycombinator.com/item?id=40698650 https://news.ycombinator.com/item?id=40698650
- account42 2y ago> The HTTP status codes used in DoH are used to discuss the semantics of the DNS query itself. And the the response is that the server cannot faithfully answer the DNS query due to legal reasons.