<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<style type="text/css">body {word-wrap: break-word; background-color:#ffffff;}</style>
</head>
<body>
<div style="font-family: sans-serif; font-size: 16px"></div>
<br>
<br>
-----Original message-----<br>
<blockquote style="; border-left: 2px solid rgb(16, 16, 255); margin-left: 5px; padding-left: 5px;">
<div style="font-family: sans-serif; font-size: 14px"><b>From: </b>Timothe Litt <litt@acm.org><b><br>
To: </b>Milton L Mueller <mueller@syr.edu><b><br>
Sent: </b>Sun, Nov 20, 2011 17:37:39 GMT+00:00<b><br>
Subject: </b>RE: [NCSG-Discuss] beyond take down<br>
<br>
</div>
<div><style>
<!--
p.MsoNormal
{margin:0in 0in 0pt;
font-family:"Times New Roman","serif";
font-size:12pt}
li.MsoNormal
{margin:0in 0in 0pt;
font-family:"Times New Roman","serif";
font-size:12pt}
div.MsoNormal
{margin:0in 0in 0pt;
font-family:"Times New Roman","serif";
font-size:12pt}
-->
</style>
<div lang="EN-US" link="blue" vlink="purple"><font color="#0000ff" size="2" face="Arial"><span class="972251417-20112011">
<p dir="ltr" class="MsoNormal" align="left"><span style="font-family:'Courier New'; color:#1f497d; font-size:11pt">Does anyone on this list know more about the way BIND is being amended to allow the “rewriting” of DNS answers? Jorge? Timothe?</span></p>
<p dir="ltr" class="MsoNormal" align="left"><span style="font-family:'Courier New'; color:#1f497d; font-size:11pt"></span></p>
<div> </div>
<div> </div>
<div dir="ltr" align="left">Yes. Recent versions of BIND (starting I think with 9.8) have a feature called RPZ = Response Policy Zone. It is rather controversial.</span></font></div>
<div dir="ltr" align="left"><font color="#0000ff" size="2" face="Arial"><span class="972251417-20112011"></span></font> </div>
<div dir="ltr" align="left"><font color="#0000ff" size="2" face="Arial"><span class="972251417-20112011">The intent was to make it possible for enterprise customers to block websites (and other protocols relying on DNS) according to some policy - typically
known malware and/or non-work sites. It doesn't work with DNSSEC. It has some potential for abuse by ISPs. As ISC tells the story, this was implemented because of (bind) customer demand, not because ISC thinks it's a good idea.
</span></font></div>
<div dir="ltr" align="left"><font color="#0000ff" size="2" face="Arial"><span class="972251417-20112011"></span></font> </div>
<div dir="ltr" align="left"><font color="#0000ff" size="2" face="Arial"><span class="972251417-20112011">Here are some references:</span></font></div>
<div dir="ltr" align="left"><font color="#0000ff" size="2" face="Arial"><span class="972251417-20112011"></span></font> </div>
<div dir="ltr" align="left"><font color="#0000ff" size="2" face="Arial"><span class="972251417-20112011">
<div dir="ltr" align="left"><font color="#0000ff" size="2" face="Arial"><span class="972251417-20112011"><a href="http://www.isc.org/community/blog/201007/taking-back-dns-0" target="_BLANK">http://www.isc.org/community/blog/201007/taking-back-dns-0</a></span></font></div>
<div dir="ltr" align="left"><font color="#0000ff" size="2" face="Arial"><span class="972251417-20112011"></span></font> </div>
<a href="http://www.isc.org/files/TakingBackTheDNSrpz2.pdf" target="_BLANK">http://www.isc.org/files/TakingBackTheDNSrpz2.pdf</a></span></font></div>
<div dir="ltr" align="left"><font color="#0000ff" size="2" face="Arial"><span class="972251417-20112011"></span></font> </div>
<div dir="ltr" align="left"><font color="#0000ff" size="2" face="Arial"><span class="972251417-20112011"><a href="http://www.isc.org/community/blog/201103/blocking-dns" target="_BLANK">http://www.isc.org/community/blog/201103/blocking-dns</a></span></font></div>
<div dir="ltr" align="left"><font color="#0000ff" size="2" face="Arial"><span class="972251417-20112011"></span></font> </div>
<div dir="ltr" align="left"><font color="#0000ff" size="2" face="Arial"><span class="972251417-20112011"></span></font> </div>
<div><font color="#0000ff" size="2" face="Arial"><span class="972251417-20112011">I will refrain from editorial comment - except to note that DNS is not a particularly good place to implement a blocking policy.
</span></font></div>
<br>
<p><font size="2"></p>
<p><font size="2">Timothe Litt<br>
ACM Distinguished Engineer<br>
---------------------------------------------------------<br>
This communication may not represent the ACM or my employer's views,<br>
if any, on the matters discussed.</font></font><br>
</p>
<div dir="ltr" lang="en-us" class="OutlookMessageHeader" align="left">
<hr tabindex="-1">
<font size="2" face="Tahoma"><b>From:</b> NCSG-Discuss [mailto:NCSG-DISCUSS@LISTSERV.SYR.EDU]
<b>On Behalf Of </b>Milton L Mueller<br>
<b>Sent:</b> Sunday, November 20, 2011 12:10<br>
<b>To:</b> NCSG-DISCUSS@LISTSERV.SYR.EDU<br>
<b>Subject:</b> Re: [NCSG-Discuss] beyond take down<br>
</font><br>
</div>
<div></div>
<div class="WordSection1">
<p class="MsoNormal"><span style="font-family:'Courier New'; color:#1f497d; font-size:11pt">Does anyone on this list know more about the way BIND is being amended to allow the “rewriting” of DNS answers? Jorge? Timothe?</span></p>
<p class="MsoNormal"><span style="font-family:'Courier New'; color:#1f497d; font-size:11pt"></span></p>
<div style="border-bottom:medium none; border-left:blue 1.5pt solid; padding-bottom:0in; padding-left:4pt; padding-right:0in; border-top:medium none; border-right:medium none; padding-top:0in">
<div>
<div style="border-bottom:medium none; border-left:medium none; padding-bottom:0in; padding-left:0in; padding-right:0in; border-top:#b5c4df 1pt solid; border-right:medium none; padding-top:3pt">
<p class="MsoNormal"><b><span style="font-family:'Tahoma','sans-serif'; font-size:10pt">From:</span></b><span style="font-family:'Tahoma','sans-serif'; font-size:10pt"> NCSG-Discuss [mailto:NCSG-DISCUSS@LISTSERV.SYR.EDU]
<b>On Behalf Of </b>William Drake<br>
<b>Sent:</b> Sunday, November 20, 2011 10:22 AM<br>
<b>To:</b> NCSG-DISCUSS@LISTSERV.SYR.EDU<br>
<b>Subject:</b> [NCSG-Discuss] beyond take down</span></p>
</div>
</div>
<p class="MsoNormal"></p>
<h2><span class="apple-style-span"><span style="font-size:12pt; font-weight:normal">Hi</span></span></h2>
<h2><span class="apple-style-span"><span style="font-size:12pt; font-weight:normal">As discussed on our call the other night, some of the key developments from a global public interest standpoint go beyond GNSO & ICANN policies but we might still consider whether
there's grounds for useful NC engagement…</span></span></h2>
<div>
<p class="MsoNormal">& BTW Monika quotes Wendy in the below...</p>
</div>
<h2><span style="font-size:12pt"><br>
<a href="http://www.ip-watch.org/weblog/2011/11/20/filtering-and-blocking-closer-to-the-core-of-the-internet/print/" target="_BLANK"><span style="font-weight:normal">http://www.ip-watch.org/weblog/2011/11/20/filtering-and-blocking-closer-to-the-core-of-the-internet/print/</span></a><br>
<br>
Filtering and Blocking Closer To The Core Of The Internet?<br>
</span><span class="apple-style-span"><span style="font-size:12pt; font-weight:normal">By Monika Ermert for Intellectual Property Watch on 20/11/2011 @ 1:00 pm</span></span></h2>
<h2 style="margin-bottom:0.25in"><span style="font-size:12pt"><br>
</span><span class="apple-style-span"><span style="font-size:12pt; font-weight:normal">With protests against draft US legislation like the Stop Online Piracy Act (SOPA) and the Protect IP Act ongoing and the European Parliament voting o
</div>
</div>
</div>
</div>
</blockquote>
</span></span></h2>
</body>
</html>