Re: Dynamic IP log retention = 0?

["Steven M. Bellovin" <smb () cs columbia edu>]

On Wed, 11 Mar 2009 12:42:40 -0300
Rubens Kuhl <rubensk () gmail com> wrote:

> Covad telling you they don't keep logs is different from them not
> really having the logs... but, if they really don't keep logs, they
> are posing a risk that FBI or DHS might not be happy with. The feds
> will probably be more persuasive than you, so maybe hinting them about
> this situation may change something to better.
There is no US legal requirement for keeping logs.  The FBI et al. may
want you to, and there is a bill before Congress to mandate retention
(and that has been discussed on NANOG -- look for the Subject:
'Legislation and its effects in our world', or you can find the text
itself at http://thomas.loc.gov/cgi-bin/query/z?c111:H.R.1076:) but
there is no legal obligation to keep DHS happy.


                --Steve Bellovin, http://www.cs.columbia.edu/~smb