[dns-wg] New on RIPE Labs: Making the DNS More Private with QNAME Minimisation

>> dig a.b.qnamemin-test.internet.nl TXT
> 
> I really appreciate it when people don't just do the study, but let
> others know how to confirm that their configuration looks "right" from
> the outside.

very much agree.  but i am confused.  you can't put your foot in the
same river twice.

    foo.you:/usr/home/randy> dig a.b.qnamemin-test.internet.nl TXT

    ; <<>> DiG 9.12.4 <<>> a.b.qnamemin-test.internet.nl TXT
    ;; global options: +cmd
    ;; Got answer:
    ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 65229
    ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1

    ;; OPT PSEUDOSECTION:
    ; EDNS: version: 0, flags:; udp: 4096
    ;; QUESTION SECTION:
    ;a.b.qnamemin-test.internet.nl. IN      TXT

    ;; ANSWER SECTION:
    a.b.qnamemin-test.internet.nl. 10 IN    TXT     "HOORAY - QNAME minimisation is enabled on your resolver :)!"

    ;; Query time: 606 msec
    ;; SERVER: 147.28.0.35#53(147.28.0.35)
    ;; WHEN: Sat Apr 27 16:58:51 UTC 2019
    ;; MSG SIZE  rcvd: 130


    foo.you:/usr/home/randy> dig a.b.qnamemin-test.internet.nl TXT

    ; <<>> DiG 9.12.4 <<>> a.b.qnamemin-test.internet.nl TXT
    ;; global options: +cmd
    ;; Got answer:
    ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 47763
    ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1

    ;; OPT PSEUDOSECTION:
    ; EDNS: version: 0, flags:; udp: 4096
    ; COOKIE: ba1915e9fa768885f59120285cc49437437b645f8ac77b10 (good)
    ;; QUESTION SECTION:
    ;a.b.qnamemin-test.internet.nl. IN      TXT

    ;; ANSWER SECTION:
    a.b.qnamemin-test.internet.nl. 10 IN    TXT     "NO - QNAME minimisation is NOT enabled on your resolver :("

    ;; Query time: 323 msec
    ;; SERVER: 127.0.0.1#53(127.0.0.1)
    ;; WHEN: Sat Apr 27 17:41:11 UTC 2019
    ;; MSG SIZE  rcvd: 157

so, maybe if it is cached it is not working.

local server is a bind 9.12.4 auth.  recurses locally, but not globally.

randy