nanog mailing list archives

Re: Lawsuits for falsyfying DNS responses ?


From: Stephane Bortzmeyer <bortzmeyer () nic fr>
Date: Tue, 13 Sep 2016 10:30:24 +0200

On Tue, Sep 13, 2016 at 07:12:59AM +0200,
 JÁKÓ András <jako.andras () eik bme hu> wrote 
 a message of 18 lines which said:

Blocking for that purpose usually means redirecting in
practive. You'll redirect to a page that explains why the original
site is not available.

It has practical consequences for the user: in France, DNS lies in
ISP's resolvers for "terrorist" sites redirect you to a Web site of
the police, which will get your source IP address and the site you
wanted (thanks to the Host: HTTP field). Clear blocking (DNS lie
returning localhost or NXDOMAIN) is a bit better for privacy. (But
less transparent about the censorship.)



Current thread: