Re: [dnsext] Re: need new flag bit in EDNS, "do me no favours" (DMNF)

["Jeffrey A. Williams" <[e-mail]>]

Andreas and all,


-----Original Message-----
>From: Andreas Gustafsson <[e-mail]>
>Sent: Oct 26, 2010 2:34 PM
>To: IETF DNSEXT WG <[e-mail]>
>Subject: Re: [dnsext] Re: need new flag bit in EDNS, "do me no favours" (DMNF) 
>
>Paul Vixie wrote:
>> > From: Colm MacCárthaigh <[e-mail]>
>> > Why doesn't that belong better in HTTP? The HTTP WG is probably better
>> > placed to define whatever a "web error" is.
>> 
>> if you get an nxdomain you won't be connecting to any web server anywhere.
>
>Maybe this can't be solved by the HTTP WG, but it could be solved by
>the web browser vendors.
>
>First of all, any improvement in "user experience" that the proponents
>of web error redirection are claiming as a justification for doing DNS
>rewriting can just as easily be implemented in the browser.  One
>difference, of course, is that any ad revenue resulting from the
>"improved experience" would then go to the browser vendor rather than
>the ISP.

  Well this would be goodness for the browser vendor/developer as you state
it.  Also though it would be an opertunity for the ISP and the browser
vendor/developer to cooperate and have cross revinue sharing agreements
so that both can benifit, or conversly if the user option is to turn
doing DNS rewriting, than neither would benifit and the user would have
the option not the browser vendor or the IxP.
>
>Second, browser vendors are in a position to defend against unwanted
>DNS rewrites, by making the browsers bypass the system resolver and
>directly query a recursive DNS server operated by the vendor or a
>third party.  If enough browsers did this, NXDOMAIN rewriting in the
>DNS would not longer be profitable.

  This would be a good outcome IMO for some users.
>
>Third, browser vendors could help raise awareness and exert pressure.
>Imagine browsers detecting rewrites and displaying alerts along these
>lines:
>
>    [Insert browser name here] has detected that your computer is
>    using a DNS server that tampers with the results of DNS lookups.
>    Most likely, this is an attempt by your Internet Service Provider
>    to replace the error message that would normally be displayed
>    when you enter an incorrect URL with a pages containing paid
>    advertisements.

  I love this alert message.  >:)
>
>    [Browser vendor] considers this practice harmful, not only because
>    it alters your web browsing experience, but also because it can
>    interfere with the operation of other Internet applications on
>    your computer and other Internet-enabled devices on your network.

  This one might be ok in some instances, not in others...
>
>    [Browser] has automatically switched to a third-party DNS service
>    operated by [company], but your other applications and devices are
>    still affected.  If your Internet Service Provider allows you to
>    opt out of DNS rewriting, we recommend that you do so.  Alternatively,
>    you can change your DNS settings to use a third-party DNS provider
>    by following the instructions at [this link].

  This alert message would be acceptable as well in some instances, but
should be set by the user, not the IxP or third party DNS provider.
>
>-- 
>Andreas Gustafsson, [e-mail]
>
Regards,
Jeffrey A. Williams
"Obedience of the law is the greatest freedom" -
   Abraham Lincoln

"Credit should go with the performance of duty and not with what is very
often the accident of glory" - Theodore Roosevelt

"If the probability be called P; the injury, L; and the burden, B; liability
depends upon whether B is less than L multiplied by
P: i.e., whether B is less than PL."
United States v. Carroll Towing  (159 F.2d 169 [2d Cir. 1947]
===============================================================
Updated 1/26/04
CSO/DIR. Internet Network Eng. SR. Eng. Network data security IDNS. div. of
Information Network Eng.  INEG. INC.
ABA member in good standing member ID 01257402 E-Mail [e-mail]
Phone: [phone]