Re: [perpass] DNS confidentiality

[Stephane Bortzmeyer <[e-mail]>]

On Tue, Nov 12, 2013 at 09:48:57PM -0500,
 Ted Lemon <[e-mail]> wrote 
 a message of 9 lines which said:

> That's a terrible argument.   Then every eavesdropping issue becomes
> a chicken-and-egg problem, because nobody is willing to go first.

Indeed. That's an argument that completely denies the point of
engineering: "Finding good-enough solutions to actual problems". We do
not hope to design perfect solutions. Leakages will always happen. But
we try to have *less* leaks, in order, not to make surveillance
impossible but, as Bruce Schneier said during the plenary, to make
mass surveillance *very* expensive for the spy. Surveillance requires
gathering data from several places and making sense of it. The less
data, the harder it becomes.

Of course, we should not spend too much efforts securing the door when
the window is wide open. But each of us should spend efforts on "his"
part of the Internet. As a DNS guy, I plan to make surveillance using
the DNS harder and more expensive. I'm confident the TLS guys will do
the same.