nanog mailing list archives
Re: DNSSEC and ISPs faking DNS responses
From: "John Levine" <johnl () iecc com>
Date: 13 Nov 2015 20:01:23 -0000
Would the masses setup a VPN to a service provider in a jurisdiction not subject to such foolishness so their resolver, whether stub or full, would have a chance at unfaked answers? Again, I'm thinking most would be entirely ignorant of the issue, and in any case would be hard pressed to set anything up unless it was trivial, e.g., not just part of their OS but also Wizard-like with most answers pre-supplied.
I was at a most interesting session in New Zealand a few months ago, about video streaming in NZ. People want to watch Netflix and Hulu, and are willing to pay for it, but NZ is such a small market that the big providers can't be bothered to license the content for NZ, and by the time local providers make arrangements it's a month later. So everyone buys a Netflix subsription and uses VPNs to pretend to be in the US. Take a look at Vyprvpn, which is pretty much point and install, or even Tunnelblick which is about four clicks to set up with VPN info from any provider. Civilians definitely use these. R's, John
Current thread:
- Re: DNSSEC and ISPs faking DNS responses, (continued)
- Re: DNSSEC and ISPs faking DNS responses John Levine (Nov 12)
- Re: DNSSEC and ISPs faking DNS responses Alejandro Acosta (Nov 12)
- Re: DNSSEC and ISPs faking DNS responses Owen DeLong (Nov 12)
- Re: DNSSEC and ISPs faking DNS responses John Levine (Nov 12)
- Re: DNSSEC and ISPs faking DNS responses Owen DeLong (Nov 13)
- Re: DNSSEC and ISPs faking DNS responses John R. Levine (Nov 13)
- RE: DNSSEC and ISPs faking DNS responses eric-list (Nov 13)
- RE: DNSSEC and ISPs faking DNS responses Tony Finch (Nov 16)
- Re: DNSSEC and ISPs faking DNS responses Tony Finch (Nov 16)
- Re: DNSSEC and ISPs faking DNS responses John Levine (Nov 12)
- Re: DNSSEC and ISPs faking DNS responses Mark Milhollan (Nov 13)
- Re: DNSSEC and ISPs faking DNS responses John Levine (Nov 13)
- Re: DNSSEC and ISPs faking DNS responses Roland Dobbins (Nov 13)
- Re: DNSSEC and ISPs faking DNS responses John Levine (Nov 13)
- Re: DNSSEC and ISPs faking DNS responses Roland Dobbins (Nov 13)
- Re: DNSSEC and ISPs faking DNS responses Owen DeLong (Nov 13)
- Re: DNSSEC and ISPs faking DNS responses Roland Dobbins (Nov 13)
- Re: DNSSEC and ISPs faking DNS responses Owen DeLong (Nov 13)
- Re: DNSSEC and ISPs faking DNS responses Roland Dobbins (Nov 13)
- Re: DNSSEC and ISPs faking DNS responses Royce Williams (Nov 13)
- Re: DNSSEC and ISPs faking DNS responses Roland Dobbins (Nov 14)
- Re: DNSSEC and ISPs faking DNS responses Owen DeLong (Nov 14)