Subject: [Add] Differences between parallel discovery and talking to a resolver

From: "Martin Thomson" <[email-masked]>
Date: Wed, 09 Sep 2020 12:30:35 +1000

https://github.com/ietf-wg-add/draft-add-requirements/issues/16

The draft should talk about the difference here.  If your discovery method is authenticated (say you have an authenticated configuration protocol, such as the one used by VPNs), then talking to an unsecured resolver might be a pretty big drop in integrity.  And DHCP/RA is protected in many network configurations where UDP port 53 might not.