[ih] Fwd: [IP] EFF calls for signatures from Internet Engineers against censorship

[Dave CROCKER]

On 12/19/2011 12:35 PM, Richard Bennett wrote:
> The main question that the lawmakers considering SOPA and PROTECT-IP need an
> answer to pertains to the effect of mandating domain filtering on the deployment
> of DNSSEC.

While that's clearly a major concern, I would have thought basic questions of 
cost/benefit would be primary.

What actual efficacy is likely, what is the actual effort required, and what are 
the other likely problems, besides DNSSec, both technical and social?

And, then, what are the justifications for those claims?  For example, what 
related experiences are there that cause one to believe those benefits and problems?

These would strike me as being the "main" questions.  Concerns about DNSSec 
derive from that exercise.


> The EFF's letter is being waved around in committee as "proof" that
> SOPA will somehow undermine DNSSEC or impede its eventual deployment, as in
> "these 83 security experts say that this bill threatens the security of the
> Internet."

You mean that a paper signed by more than 80 experts who have direct experience 
with the relevant technologies and services, over many years, should be ignored?


> The implications of adopting a law that requires U. S. ISPs to alter their
> response to certain DNS lookups depends to a great extent on the expected user
> response to a lookup failure, which is a very interesting discussion but not
> really technical.

Actually, we have some experience with such modifications to DNS behavior.  The 
results haven't been pretty.


> The intent of SOPA is to have it follow the RPZ implementation, and Congress

Oh?  That's it's "intent"?


d/
-- 

   Dave Crocker
   Brandenburg InternetWorking
   bbiw.net