Re: [DNSOP] DNSOP Call for Adoption draft-vixie-dns-rpz

[Viktor Dukhovni <[e-mail]>]

On Thu, Dec 29, 2016 at 05:45:59AM -0000, John Levine wrote:

> >I'm seeing how it really helps governments cheaply create and enforce
> >the creation of national internets -- especially with the walled garden
> >features.  Are those the good guys to you, or are there other benefits?
> 
> Please see the previous gazillion messages from people who are using
> RPZ in production to keep malware away from their users.
> 
> Also see the previous gazillion messages noting that governments do
> all sorts of DNS censorship now and don't need RPZ.
> 
> Could you explain in more detail why you don't believe operators will
> continue to use RPZ to protect their users, and why you think hostile
> actors will do things with RPZ that they couldn't do now?

If providers have been, are now, and are going to keep using
mechanisms like RPZ, for their own internal reasons, sans any
"standard", why is there a need to make it easier for outside forces
to pressure providers to use such mechanisms to exert control over
their users rather than protect them from harm?

This technology is not ethically neutral, and some care is I think
appropriate to avoid harms.  It is I think prudent to broaden the
analysis beyond "Once the rockets are up, who cares where they come
down? ..."[1]

Though the irony does not escape me; let a hundred flowers bloom...

-- 
	Viktor.

[1] http://www.songtexte.com/songtext/tom-lehrer/wernher-von-braun-3c72d1f.html