diff --git a/draft-ietf-core-dns-over-coap.md b/draft-ietf-core-dns-over-coap.md index 50595bd..ce2bc71 100644 --- a/draft-ietf-core-dns-over-coap.md +++ b/draft-ietf-core-dns-over-coap.md @@ -67,6 +67,7 @@ informative: RFC7942: impl-status-section I-D.ietf-add-dnr: dnr I-D.ietf-core-href: cri + I-D.amsuess-core-cachable-oscore: cachable-oscore DoC-paper: DOI.10.1145/3609423 @@ -345,8 +346,13 @@ resource record as well. OSCORE ------ -It is RECOMMENDED to carry DNS messages encrypted using OSCORE {{-oscore}} between the DoC client and the DoC server. -The exchange of the security context is out of scope of this document. +It is RECOMMENDED to carry DNS messages encrypted using OSCORE {{-oscore}} between the DoC client +and the DoC server. The establishment and maintenance of the OSCORE Security Context is out of the +scope of this document. + +If cache retrieval of OSCORE responses is desired, it can be achieved, for instance, by using the +method defined in {{-cachable-oscore}}. This has, however, implications on message sizes and +security properties, which are compiled in that document. Mapping DoC to DoH ------------------