Re: Level(3) DNS Spoofing All Domains

[Mel Beckman <mel () beckman org>]

Frontier and Verizon have been doing it for years. They have simply thumbed their noses at NXDOMAIN. All in the name of 
capturing data and eyeballs By Any Means Necessary.

 -mel

On Nov 19, 2019, at 8:00 AM, Matthew Pounsett <matt () conundrum com> wrote:




On Tue, 19 Nov 2019 at 10:57, Patrick Schultz <lists-nanog () schultz top> wrote:
Just to weigh in: Here in Germany, the largest internet provider (Deutsche Telekom) did the same thing.
It's basically just a "search guide", it redirects you to a search page and assumes you just had a typo in the URL.

Telekom stopped doing that in April, after a user reported them to the district attorney for supposed data 
manipulation, a misdemeanor.

If your entire Internet is just the web then it's perhaps not a big deal.  But there are a lot of protocols that depend 
on proper functioning of NXDOMAIN.  If you recall, Verisign got in a bunch of trouble for doing that back in the day at 
the authoritative level.