<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; color: rgb(0, 0, 0); font-size: 16px; font-family: Calibri, sans-serif;">
<div>
<div>Noticed this on another list. It made me wonder if it was worth resurrecting & trying to publish this old individual I-D, which contained recommendations for opt-in and opt-out, among other things that would have been useful in this case. </div>
<div><br>
</div>
<div>Old drafts: </div>
<div><a href="http://tools.ietf.org/html/draft-livingood-dns-malwareprotect-02">http://tools.ietf.org/html/draft-livingood-dns-malwareprotect-02</a></div>
<div><a href="http://tools.ietf.org/html/draft-livingood-dns-redirect-03">http://tools.ietf.org/html/draft-livingood-dns-redirect-03</a></div>
<div><br>
</div>
</div>
<div>- Jason Livingood</div>
<div><br>
</div>
<div><br>
</div>
<span id="OLK_SRC_BODY_SECTION">
<div>
<div>On 10/10/14, 2:33 PM, "Dave Farber via ip" <<a href="mailto:ip@listbox.com">ip@listbox.com</a>> wrote:</div>
</div>
<div><br>
</div>
<blockquote id="MAC_OUTLOOK_ATTRIBUTION_BLOCKQUOTE" style="BORDER-LEFT: #b5c4df 5 solid; PADDING:0 0 0 5; MARGIN:0 0 0 5;">
<div>
<div>
<div class="gmail_quote">---------- Forwarded message ----------<br>
From: "Lauren Weinstein" <<a href="mailto:lauren@vortex.com">lauren@vortex.com</a>><br>
Date: Oct 10, 2014 2:04 PM<br>
Subject: [ NNSquad ] "Sonic.net implements DNSSEC, performs MITM against customers. Are they legally liable?"<br>
To: <<a href="mailto:nnsquad@nnsquad.org">nnsquad@nnsquad.org</a>><br>
Cc: <br>
<br type="attribution">
<br>
"Sonic.net implements DNSSEC, performs MITM against customers. Are they<br>
legally liable?"<br>
<br>
(Gname): <a href="http://permalink.gmane.org/gmane.comp.encryption.general/21150" target="_blank">
http://permalink.gmane.org/gmane.comp.encryption.general/21150</a><br>
<br>
> Sonic implemented and deployed DNSSEC - and put it on their shiny<br>
> new servers along with an 'RBZ service' that censors supposed malware<br>
> and phishing sites. And while they told their customers about<br>
> DNSSEC, they didn't mention the 'RBZ service.'<br>
><br>
> They didn't get prior informed consent from their customers. In fact<br>
> they didn't inform their customers, beyond quietly putting up a few<br>
> mentions on webpages their customers normally have no reason to look<br>
> at.<br>
><br>
> They didn't provide a click-through link enabling customers to get the<br>
> content anyway.<br>
><br>
> And they diverted traffic to a page that does not mention who is doing<br>
> the diversion, how, or why, or how to opt out.<br>
...<br>
> Black hats immediately found a way to get sites they dislike onto<br>
> the list of supposed malware and phishing sites.<br>
><br>
> Among the blocked sites:<br>
> Local democratic party campaigners (first post).<br>
><br>
> Financial services and markets - at a crucial time. (page 4).<br>
><br>
> Software development sites (apparently some devs use the same<br>
> utility network libraries used by malware devs, so the<br>
> unknown-because-todays-compilation executables have code<br>
> in common with known malware and aren't on the whitelist...)<br>
<br>
- - -<br>
<br>
--Lauren--<br>
Lauren Weinstein (<a href="mailto:lauren@vortex.com">lauren@vortex.com</a>): <a href="http://www.vortex.com/lauren" target="_blank">
http://www.vortex.com/lauren</a><br>
Founder:<br>
- Network Neutrality Squad: <a href="http://www.nnsquad.org" target="_blank">http://www.nnsquad.org</a><br>
- PRIVACY Forum: <a href="http://www.vortex.com/privacy-info" target="_blank">http://www.vortex.com/privacy-info</a><br>
Co-Founder: People For Internet Responsibility: <a href="http://www.pfir.org/pfir-info" target="_blank">
http://www.pfir.org/pfir-info</a><br>
Member: ACM Committee on Computers and Public Policy<br>
I am a consultant to Google -- I speak only for myself, not for them.<br>
Lauren's Blog: <a href="http://lauren.vortex.com" target="_blank">http://lauren.vortex.com</a><br>
Google+: <a href="http://google.com/+LaurenWeinstein" target="_blank">http://google.com/+LaurenWeinstein</a><br>
Twitter: <a href="http://twitter.com/laurenweinstein" target="_blank">http://twitter.com/laurenweinstein</a><br>
Tel: <a href="tel:%2B1%20%28818%29%20225-2800" value="+18182252800">+1 (818) 225-2800</a> / Skype:
<a href="http://vortex.com" target="_blank">vortex.com</a><br>
_______________________________________________<br>
nnsquad mailing list<br>
<a href="http://lists.nnsquad.org/mailman/listinfo/nnsquad" target="_blank">http://lists.nnsquad.org/mailman/listinfo/nnsquad</a><br>
</div>
<div style="width:auto;margin:0;padding:5px;background-color:#fff;clear:both;border-top: 1px solid #ccc;" bgcolor="#ffffff">
<table border="0" cellspacing="0" cellpadding="0" width="100%" style="background-color:#fff" bgcolor="#ffffff">
<tbody>
<tr>
<td padding="4px"><font color="#333333" size="1" style="font-family:helvetica, sans-serif;"><a style="text-decoration:none;color:#669933;border-bottom: 1px solid #444444" href="https://www.listbox.com/member/archive/247/=now" title="Go to archives for ip">Archives</a><a border="0" style="text-decoration:none;color:#669933" href="https://www.listbox.com/member/archive/rss/247/11628208-43aa1cd2" title="RSS feed for ip"><img border="0" src="https://www.listbox.com/images/feed-icon-10x10.jpg"></a>
| <a style="text-decoration:none;color:#669933;border-bottom: 1px solid #444444" href="https://www.listbox.com/member/?member_id=11628208&id_secret=11628208-20874b84" title="">
Modify</a> Your Subscription | <a style="text-decoration:none;color:#669933;border-bottom: 1px solid #444444" href="https://www.listbox.com/unsubscribe/?member_id=11628208&id_secret=11628208-33eb44fc&post_id=20141010143359:FDB071EE-50AB-11E4-9334-B5E9EBE6CC05" title="">
Unsubscribe Now</a> </font></td>
<td valign="top" align="right"><a style="border-bottom:none;" href="http://www.listbox.com"><img src="https://www.listbox.com/images/listbox-logo-small.png" title="Powered by Listbox" border="0"></a></td>
</tr>
</tbody>
</table>
</div>
</div>
</div>
</blockquote>
</span>
</body>
</html>