Re: [Resolverless-dns] Paper on Resolver-less DNS

["Ralf Weber" <[e-mail]>]

Moin!

On 19 Aug 2019, at 23:35, Erik Sy wrote:

> On 8/19/19 22:39, John Levine wrote:
>> In article 
>> <[e-mail]> you 
>> write:
>>> Nonetheless, there exists empirical evidence that several popular 
>>> ISPs
>>> and Telcos sold data on their customers' online activities to
>>> advertising companies [1,2,3]. Thus, it is plausible that these ISPs 
>>> and
>>> Telcos use their DNS resolver to aggregate such user profiles.
>> Actually, no, it's not plausible.  The mechanisms described in these
>> papers are nothing like DNS queries.  If they could get enough data
>> from DNS queries, why would they bother rewriting HTTP headers?
> They do not use the HTTP header for data collection. Instead, they use
> the injected HTTP header to  communicate the tracking identifier 
> between
> the ISP and the advertising company as shown in this figure:
> https://jonathanmayer.org/stable/blog_images/verizon_header/verizon_header.png
But again it has nothing to do with DNS or selling DNS data. I’ve 
worked with
lots of ISP/Telcos around the globe and most of them were very aware of 
the
privacy aspect of DNS data and treated it with great care.

So long
-Ralf
---
Ralf Weber