Re: [Add] What to do in this potential working group

[Jari Arkko <[e-mail]>]

Daniel,

I agree of course that there are different situations, and that in some cases DHCP default is the wrong option as well. I know in my mom’s case it would have been the right answer, however. But the architectural point I wanted to raise was that regardless of the differences in any specific selection of a server, there seems to be a clear downside to having everyone select the same server. The data source that this creates is far too valuable to be put in one place.

I do have another point as well. We’re not limited to two options — there’s more choice than “trust your network/evil-local-dns-filter” and “trust the quad-n/large-content-provider/nsa”. If people really are serious about improving security and privacy, how about, for instance, creating a collaborative group of content providers, ISPs, and other organisations that wish to provide clean, unfiltered, and not commercially mined DNS service, and have clients use that in some distributed fashion?

I’m obviously handwaving the solution a bit, but my point is — if we want to make an improvement, then it should be an incumbent on us to do a full solution. Shipping my mom’s queries to a single entity /w possible risk of surveillance and other leaks is a recipe for insufficient design, IMHO. If we want an improvement, sell me a solution that I actually want, one that does improve my privacy and resilience against filtering.

Jari