Planned update to the "Mozilla Policy Requirements for DNS over HTTPs Partners"

[Lars Eggert]

Hi,

Greetings from your friends at Mozilla, and thank you for being a valued partner in our Trusted Resolver Program!

We're emailing you today for a few reasons:

1. We created a new public mozilla-trr-p...@mozilla.com mailing list, for general announcements and discussions around the TRR program. (You're receiving this message via that new list.) The idea is to be more transparent about what we're doing with the program, and to also provide you as well as the wider community a shared forum for public discussion.

2. We're planning an update to the "Mozilla Policy Requirements for DNS over HTTPs Partners", the current version of which lives at https://wiki.mozilla.org/Security/DOH-resolver-policy. This policy was created at the start of the TRR program, and running the program for a number of years have exposed some areas where we could have been more clear, where we didn't explicitly state some assumptions that were made - and also obviously DoH as a technology is moving forward, and we want to reflect that. Finally, we were repeatedly asked to explain how someone operating a resolver would apply to join the TRR program, so we added a section on that.

We'd like to share the final draft of the updated policy with you for early feedback, via the document at https://docs.google.com/document/d/1afAGnZ1R84HULoFcnTmzHwNbow5YMXKRalOfbNMp1Rk/edit?tab=t.0. Please feel free to leave comments in the doc or send email to this list. We're especially interested in hearing if we're missing things that we should have added, or if there are things in the document that you consider problematic. If there is anything you consider sensitive, please do reply to us off-list; but in the interest of transparency we'd like to encourage you to publicly comment whenever possible. Please send your comments by September 15, 2025.

Thanks,

Lars Eggert and Greg Hess

(for the Mozilla TRR program)

[Lars Eggert]

Hi,

a quick reminder to please send us feedback by September 15, 2025.

Thanks,
Lars

[Lars Eggert]

Hi,

to close the loop here, we just published the update at https://wiki.mozilla.org/Security/DOH-resolver-policy with very minor changes.

Thank you all for your review and feedback!

We chose not to integrate two raised issues at this time, because it wasn't quite clear if they were actionable. It is of course possible to further refine the policy requirements at any time in the future.

Thanks,
Lars