Re: Confidentiality notices on DNS messages

Bert <bert@secret-wg.org> Wed, 13 July 2011 08:21 UTC

Return-Path: <bert@secret-wg.org>
X-Original-To: ietf@ietfa.amsl.com
Delivered-To: ietf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 230B321F8BF6 for <ietf@ietfa.amsl.com>; Wed, 13 Jul 2011 01:21:24 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.599
X-Spam-Level:
X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599]
Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id eD1gTzNT+RPb for <ietf@ietfa.amsl.com>; Wed, 13 Jul 2011 01:21:19 -0700 (PDT)
Received: from bert.secret-wg.org (unknown [IPv6:2001:7b8:206:1:0:44bb:77dd:155]) by ietfa.amsl.com (Postfix) with ESMTP id 2BDDC21F8BED for <ietf@ietf.org>; Wed, 13 Jul 2011 01:21:18 -0700 (PDT)
Received: from bert.secret-wg.org (localhost [127.0.0.1]) by bert.secret-wg.org (Postfix) with ESMTP id 28F694AC052; Wed, 13 Jul 2011 10:21:15 +0200 (CEST)
Received: from [IPv6:2001:7b8:206:1:226:b0ff:fee2:a770] (unknown [IPv6:2001:7b8:206:1:226:b0ff:fee2:a770]) (using TLSv1 with cipher ECDHE-RSA-AES128-SHA (128/128 bits)) (Client did not present a certificate) by bert.secret-wg.org (Postfix) with ESMTPSA id 0325F4AC00C; Wed, 13 Jul 2011 10:21:15 +0200 (CEST)
Subject: Re: Confidentiality notices on DNS messages
Mime-Version: 1.0 (Apple Message framework v1084)
Content-Type: text/plain; charset="us-ascii"
From: Bert <bert@secret-wg.org>
In-Reply-To: <CAC4RtVBGgk74VMEty9u5Yq+DFy=oR5tOnbZ3R5x83Gyee6mRNw@mail.gmail.com>
Date: Wed, 13 Jul 2011 10:21:13 +0200
Content-Transfer-Encoding: quoted-printable
Message-Id: <00E4900C-9947-4506-A072-F34B0DDD8DA7@secret-wg.org>
References: <CAC4RtVBGgk74VMEty9u5Yq+DFy=oR5tOnbZ3R5x83Gyee6mRNw@mail.gmail.com>
To: Barry Leiba <barryleiba@computer.org>
X-Mailer: Apple Mail (2.1084)
X-Virus-Scanned: Bert scanned this mail with ClamAV using ClamSMTP
X-Mailman-Approved-At: Wed, 13 Jul 2011 10:22:51 -0700
Cc: IETF discussion list <ietf@ietf.org>
X-BeenThere: ietf@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: IETF-Discussion <ietf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ietf>, <mailto:ietf-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/ietf>
List-Post: <mailto:ietf@ietf.org>
List-Help: <mailto:ietf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ietf>, <mailto:ietf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 13 Jul 2011 17:11:22 -0000

On Jul 12, 2011, at 11:28 PM, Barry Leiba wrote:

> I am increasingly seeing IETF participants posting messages to IETF
> mailing lists, sending messages to chairs and ADs, and so on, where
> their messages include confidentiality/security/legal notices at the
> bottom.  



The first ones have shown up in the DNS !!!!

e.g the BSRPDNSC implementation[*] returns a disclaimer:


dig 10.sin.5.+.rp.secret-wg.org TXT
;; Truncated, retrying in TCP mode.

; <<>> DiG 9.6.0-APPLE-P2 <<>> 10.sin.5.+.rp.secret-wg.org TXT
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 14586
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;10.sin.5.+.rp.secret-wg.org. IN	TXT

;; ANSWER SECTION:
10.sin.5.+.rp.secret-wg.org. 10	IN TXT "4.45597888911063"
10.sin.5.+.rp.secret-wg.org. 10	IN TXT "This DNS message (including the RR(s) in the additional section) is confidential, proprietary, may be subject to copyright and legal privilege and no related rights are waived." "If you are not the intended recipient or its agent, any review, dissemination, distribution or copying of this DNS message or any of its content is strictly prohibited and may be unlawful." "All messages may be monitored as permitted by applicable law and regulations and our policies to protect our business." "DNS messages are not secure and you are deemed to have accepted any risk if you communicate with us using DNS." "If received in error, please notify us immediately and delete the DNS message (and any of its sections) from any computer or any storage medium without printing a copy."

;; Query time: 34 msec
;; SERVER: 213.154.224.155#53(213.154.224.155)
;; WHEN: Wed Jul 13 10:17:21 2011
;; MSG SIZE  rcvd: 851





-- Bert's secretary


[*] BSRPDNSC:  Bert's Secure Reverse Polish DNS Calculator 
http://bert.secret-wg.org/Tools/index.html#Tool_3