[132386] in North American Network Operators' Group
Re: Blocking International DNS
daemon@ATHENA.MIT.EDU (Owen DeLong)
Mon Nov 22 10:59:51 2010
From: Owen DeLong <owen@delong.com>
In-Reply-To: <78E40B97-2F78-4A02-8535-32CE6229F15E@hopcount.ca>
Date: Mon, 22 Nov 2010 07:59:07 -0800
To: Joe Abley <jabley@hopcount.ca>
Cc: Jeffrey Lyon <jeffrey.lyon@blacklotus.net>,
"nanog@nanog.org" <nanog@nanog.org>, "Jeffrey S. Young" <young@jsyoung.net>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
On Nov 22, 2010, at 7:25 AM, Joe Abley wrote:
>=20
> On 2010-11-22, at 00:00, Jeffrey Lyon wrote:
>=20
>> Indeed, offshore resolvers, offshore DNS infrastructure and the
>> progressive's futile attempts at interference with free markets is
>> once again thwarted. We all know that U.S. law helps keep the =
internet
>> safe </sarcasm>
>=20
> You don't think
>=20
> "(i) a service provider, as that term is defined in section 512(k)(1) =
of title 17, United States Code, or other operator of a domain name =
system server shall take reasonable steps that will prevent a domain =
name from resolving to that domain name=92s Internet protocol address;"
>=20
> could be taken as a requirement for providers to intercept attempts to =
use off-network DNS resolvers and manage such requests to meet the end =
goal above?
>=20
> Given that many providers already do this (for whatever reason), it's =
not much of a stretch to see someone declaring that such behaviour falls =
under the umbrella of "reasonable steps".
>=20
> I'm not suggesting that I think any of this is reasonable or sensible, =
but it does seem to imply an operational burden on service providers.
>=20
>=20
If it does, then, you'll find open tunnel servers providing tunnels to =
off-shore DNS services.
Sigh.
I really wish congress had better things to do than getting into a =
technology arms race with the people of the united states.
Oh, wait, they do have better things to do, they just aren't doing them.
Owen