Re: [Add] meeting hum: should the IETF take up this work?

[Adam Roach <[e-mail]>]

On 7/25/19 10:51, Vittorio Bertola wrote:
>
>> Il 25 luglio 2019 16:11 Adam Roach <[e-mail]> ha scritto:
>>
>> I'm going to pre-reply to a frequent response that the lack of direct
>> contractual relationship between users and Cloudflare is problematic.
>> Even if you don't trust Mozilla's contractual agreement with Cloudflare
>> to provide protection here, I would think that FTC v. Facebook (2019)
>> [1] should serve as a pretty vivid illustration of what happens when a
>> US company operates outside its published privacy policy.
> However, privacy policies by private companies can be overridden by laws and other juridical instruments within the applicable jurisdiction, forcing the operator to give access to data to national law enforcement and security agencies (in the US, that is especially easy for non-US citizens). Same for other parts of your TRR clauses - you may commit not to block anything, but if President Trump shows up with an order that requires blocking DNS resolution for the domain name of a specific foreign company (a case that, honestly, does not seem so unlikely), you will be forced to implement it no matter what you think.
>
> This is not meant to challenge your commitment to privacy, but it's just how it is, and it is the reason why people in other parts of the world - even the privacy activists that dislike their local network and would love to get an alternative - are not too happy with your declared approach of redirecting queries by default to a different jurisdiction that, in their view, offers less privacy protection than their own.
>
Sure. That's a different objection than the surveillance capitalism 
concern that I was responding to, and I'm not sure there's *any* 
jurisdiction on the planet that is immune from such concerns [1] [2] [3] 
[4].

In terms of worries about queries from citizens of EU countries being 
sent to servers that are subject to US jurisdiction: we don't have 
immediate plans to implement DNS-over-HTTPS (DoH) in Firefox outside of 
North America. We are currently exploring potential DoH partners in 
Europe that would be employed for the benefit of European users.

/a ____ [1] 
https://edri.org/italy-anti-terrorism-decree-strengthen-government-surveillance/

[2] 
https://www.thetrumpet.com/17338-germany-can-legally-spy-on-its-own-citizens

[3] https://qz.com/92648/think-us-snooping-is-bad-try-italy-india-or-canada/

[4] 
https://www.justsecurity.org/36098/era-mass-surveillance-emerging-europe/