Re: [dns-privacy] [Australia] Data retention and DNS

Terry Manderson <terry.manderson@icann.org> Wed, 02 September 2015 13:58 UTC

From: Terry Manderson <terry.manderson@icann.org>
To: Stephane Bortzmeyer <bortzmeyer@nic.fr>, "dns-privacy@ietf.org" <dns-privacy@ietf.org>
Thread-Topic: [dns-privacy] [Australia] Data retention and DNS
Thread-Index: AQHQ5ItksywtZ/Snk0Swjf1GqSxaaZ4p0m6A
Date: Wed, 02 Sep 2015 13:58:02 +0000
Message-ID: <D20CB9FC.69AF0%terry.manderson@icann.org>
References: <20150901075314.GA26350@nic.fr>
In-Reply-To: <20150901075314.GA26350@nic.fr>
Accept-Language: en-US
Content-Language: en-US
user-agent: Microsoft-MacOutlook/14.5.4.150722
Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg="sha1"; boundary="B_3524052109_237609"
MIME-Version: 1.0
Archived-At: <http://mailarchive.ietf.org/arch/msg/dns-privacy/1dvd2MVQeixjja6OYQijmESEI0c>
Subject: Re: [dns-privacy] [Australia] Data retention and DNS
Precedence: list

Chiming in here, as an operator of a DNS server or two and an Australian
resident. (no other hats)

I have been watching the Data Retention shenanigans for some time, and I
doubt I would be far wrong to say that there really aren't many Australian
networking companies nor professionals who like the idea.

Speaking with more self interest, I am happier with the DNS clarifications
in the FAQ. It at least allows me to continue to operate a DNS server or
two in Australia without having to heavily engage with a legal team and
stacking boxes of paperwork to a ceiling.

Also, it might be worth clarifying that (after having heard from the
Attorney General's Panel at AusNOG last week) that "data retention
obligations for the hosting of the server" essentially means "where is the
server, and when did it start/stop"

One then certainly has to ask oneself, since DNS query history is akin to
browsing history and thus a function of subject data vis-a-vis content
which is said to equal invasion of privacy. What is the point? The
observation has been made that it seems like a lot of work for very little
benefit to the Attorney General's department or anyone else.

Does this ease the concerns of one government's oversight of internet
infrastructure within the DPRIVE remit, probably - but doesn't remove the
underlying premise.

Cheers
Terry

On 1/09/2015 5:53 pm, "dns-privacy on behalf of Stephane Bortzmeyer"
<dns-privacy-bounces@ietf.org on behalf of bortzmeyer@nic.fr> wrote:

>Interesting:
>
>Australian government's "DATA RETENTION Frequently Asked Questions for
>Industry"
><https://www.ag.gov.au/NationalSecurity/DataRetention/Documents/DataRetent
>ionIndustryFAQS.pdf>
>
>Note a new section on the DNS:
>
>8.3. Where I operate a Domain Name System (DNS) server, what data
>retention
>obligations do I have for this service? (NEW)
>*   The operation of the DNS is not a "relevant service", as it does not
>carry communications or
>    enable communications to be carried. While a DNS server is convenient
>to the carriage of
>    communications, it is not so central to the carriage of
>communications that it enables them.
>*   Therefore, the operation of a DNS server does not have data retention
>obligations.
>*   However, where the provider hosts the DNS server, it will have data
>retention obligations for the
>    hosting of the server.
>8.4. Where I offer an internet access service, do I have to retain DNS
>requests from my
>customers? (NEW)
>*   Where a provider offers an internet access service, the internet
>access service provider does not
>    have to keep any DNS information.
>*   The DNS server is a "destination on the internet" and retaining that
>information would reveal
>    browsing history.
>
>_______________________________________________
>dns-privacy mailing list
>dns-privacy@ietf.org
>https://www.ietf.org/mailman/listinfo/dns-privacy

Attachment: smime.p7s

[dns-privacy] [Australia] Data retention and DNS Stephane Bortzmeyer
Re: [dns-privacy] [Australia] Data retention and … Bob Harold
Re: [dns-privacy] [Australia] Data retention and … Terry Manderson

Re: [dns-privacy] [Australia] Data retention and DNS

Attachment: smime.p7s