Re: [dnsext] Re: Privacy vs EDNS Client IP...

bmanning@vacation.karoshi.com Thu, 04 February 2010 05:50 UTC

Return-Path: <owner-namedroppers@ops.ietf.org>
X-Original-To: ietfarch-dnsext-archive@core3.amsl.com
Delivered-To: ietfarch-dnsext-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id D36D73A69CD; Wed, 3 Feb 2010 21:50:50 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -102.599
X-Spam-Level:
X-Spam-Status: No, score=-102.599 tagged_above=-999 required=5 tests=[AWL=0.000, BAYES_00=-2.599, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lKWI3rwm--Nx; Wed, 3 Feb 2010 21:50:50 -0800 (PST)
Received: from psg.com (psg.com [IPv6:2001:418:1::62]) by core3.amsl.com (Postfix) with ESMTP id 0C1333A69CB; Wed, 3 Feb 2010 21:50:50 -0800 (PST)
Received: from majordom by psg.com with local (Exim 4.71 (FreeBSD)) (envelope-from <owner-namedroppers@ops.ietf.org>) id 1NcuYs-0005CR-7D for namedroppers-data0@psg.com; Thu, 04 Feb 2010 05:47:30 +0000
Received: from [2001:478:6:0:230:48ff:fe11:220a] (helo=vacation.karoshi.com) by psg.com with esmtps (TLSv1:AES256-SHA:256) (Exim 4.71 (FreeBSD)) (envelope-from <bmanning@karoshi.com>) id 1NcuYo-00050p-Mn for namedroppers@ops.ietf.org; Thu, 04 Feb 2010 05:47:26 +0000
Received: from karoshi.com (localhost.localdomain [127.0.0.1]) by vacation.karoshi.com (8.12.8/8.12.8) with ESMTP id o145jwtv015457; Thu, 4 Feb 2010 05:45:58 GMT
Received: (from bmanning@localhost) by karoshi.com (8.12.8/8.12.8/Submit) id o145jwQA015456; Thu, 4 Feb 2010 05:45:58 GMT
Date: Thu, 04 Feb 2010 05:45:58 +0000
From: bmanning@vacation.karoshi.com
To: Matthew Dempsky <matthew@dempsky.org>
Cc: bmanning@vacation.karoshi.com, namedroppers@ops.ietf.org
Subject: Re: [dnsext] Re: Privacy vs EDNS Client IP...
Message-ID: <20100204054558.GC15309@vacation.karoshi.com.>
References: <6e04e83a1002011640t1b637e30gd7d0150eeb0fae8d@mail.gmail.com> <E9A13A5C-73A7-4F66-9617-482551A9BA84@ICSI.Berkeley.EDU> <6e04e83a1002021155kcb908b1v71d362e03e7c4002@mail.gmail.com> <AB78D628-8A01-4742-B32A-90FC6806201E@ICSI.Berkeley.EDU> <20100203031042.GE1374@vacation.karoshi.com.> <7c31c8cc1002030135w183db140vd1c638bbdc999800@mail.gmail.com> <20100204033342.GA13940@vacation.karoshi.com.> <d791b8791002032046l6b834294jdf0f00fa4d5d141f@mail.gmail.com> <20100204053643.GA15309@vacation.karoshi.com.> <d791b8791002032138j7d3e9761vb465c5283151c3d0@mail.gmail.com>
Mime-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
In-Reply-To: <d791b8791002032138j7d3e9761vb465c5283151c3d0@mail.gmail.com>
User-Agent: Mutt/1.4.1i
Sender: owner-namedroppers@ops.ietf.org
Precedence: bulk
List-ID: <namedroppers.ops.ietf.org>
List-Unsubscribe: To unsubscribe send a message to namedroppers-request@ops.ietf.org with
List-Unsubscribe: the word 'unsubscribe' in a single line as the message text body.
List-Archive: <http://ops.ietf.org/lists/namedroppers/>

On Wed, Feb 03, 2010 at 09:38:45PM -0800, Matthew Dempsky wrote:
> On Wed, Feb 3, 2010 at 9:36 PM,  <bmanning@vacation.karoshi.com> wrote:
> >        they don't have to be open...
> >        the trick is, how does the hobo, migrant stub resolver
> >        -know- that the sole-source IMR/cache that is offered
> >        does or does -NOT- have this tracking collar on?
> 
> How does it know whether or not the cache is shipping all of its query
> logs to the FBI/CIA right now?

	well - if one is allowed to choose their first hop IMRs,
	there is a much better chance wiretapping on the first hop
	out.

--bll