Re: [Add] [EXT] Re: New Version Notification for draft-reddy-add-enterprise-split-dns-01.txt

[Vittorio Bertola <[e-mail]>]

>     Il 01/04/2021 22:31 Ben Schwartz <bemasc=[e-mail]> ha scritto:
> 
>     On Thu, Apr 1, 2021 at 3:51 PM Vittorio Bertola <vittorio.bertola=[e-mail] mailto:[e-mail] > wrote:
> 
>         > > 
> >             > > >             Il 01/04/2021 19:44 Ben Schwartz <bemasc=[e-mail] mailto:[e-mail] > ha scritto:
> > > 
> > >             Defining a flag of this kind would amount to the IETF endorsing the practice of network operators demanding access to all of their users' DNS activity, i.e. browsing history.  That's out of scope for our working group.  It also violates RFC 8890, "The Internet is for End Users".
> > > 
> > >         > >         Why should this be against RFC 8890? In several countries, there are millions of users that actively opt into DNS-based parental controls and network security services that require them to share all their DNS activity with the operators providing them (either their ISP or a specialized company).
> > 
> >     > 
>     This flag is not relevant to the case of "user opt-in".  It is quite specifically a signal that the network prohibits the user from opting out.
> 
No, it is a signal that the network prohibits *the client* from opting out (or, more correctly, politely asks the client not to do so, since it cannot be forced). There is no certainty that the user was involved by the client in that opt-out decision, and the network could actually be producing that signal on behalf of the user, if the user has opted into the network operator's DNS-based monitoring and security services. Or, as another example, there are cases in which public authorities representing the collectivity of the users ask or require the national network operators to perform DNS-based filtering to protect the users from various threats - this is also "for the end users". Clients that really care about their users should want to receive that signal so that they can act accordingly.

-- 

Vittorio Bertola | Head of Policy & Innovation, Open-Xchange
[e-mail] mailto:[e-mail] 
Office @ Via Treviso 12, 10144 Torino, Italy