draft-ietf-dnsop-structured-dns-error

Structured Error Data for Filtered DNS

streamIETF groupdnsop stateactive intendedProposed Standard pages25 rev19 expires2026-10-08 canonicalhttps://datatracker.ietf.org/doc/draft-ietf-dnsop-structured-dns-error/
DNS filtering is widely deployed for various reasons, including network security. However, filtered DNS responses lack structured information for end users to understand the reason for the filtering. Existing mechanisms to provide explanatory details to end users cause harm especially if the blocked DNS response is for HTTPS resources. This document updates RFC 8914 by signaling client support for structuring the EXTRA-TEXT field of the Extended DNS Error to provide details on the DNS filtering. Such details can be parsed by the client and displayed, logged, or used for other purposes.