Re: [Add] [EXTERNAL] Re: Browser Administrative Authority

[Paul Wouters <[e-mail]>]

On Tue, 28 May 2019, Neil Cook wrote:

> I don’t know the case of your particular ISP, but IMO saying things like "the ISP (carrier of hotspot) only uses their view of my DNS to my detriment” is not very
> helpful.

I meant, either they don't interfere or resell DNS data, in which case
the last mile is safe because no one else has access to it, or they do
interfere or resell DNS data, in which case encryption to the same ISP
does not help defend against the attack.

But perhaps my view was a bit too simplistic with multi-tenant
deployments. I would hope my ISP, that uses Bell for their last mile,
would encrypt all data between my modem and their network, so Bell
couldn't see anything, but that is not likely to be the case.

Note also that I meant that ISP's can be coerced to mangle DNS, such
as for the recent mandated porn filter in the UK. I did not mean to
say mangling at the ISP level is always the ISPs fault. It could be a
government fault.


Paul