Yesterday we pointed out how Comcast had finished DNSSEC upgrades -- a very good thing in that it adds a layer of protection for users against DNS cache poisoning and phishing scams. We also noted that an added perk of the upgrades was that Comcast could no longer engage in DNS redirection, a practice whereby ISPs generate additional revenue by sending users who mistype URLs to ad-laden search portals -- instead of delivering a page-not-found result. The practice for years has annoyed some of our resident 'net purists, who argue it breaks key Internet functionality and some networking tools.
Mike Masnick at Techdirt raises an interesting point, noting that by acknowledging that DNSSEC and DNS redirection aren't compatible, they're effectively admitting that they cannot effectively use DNS filters to block websites as will be directed should the controversial SOPA (Stop Online Piracy Act) pass:
Just as NBC Universal and other SOPA supporters continue to insist that DNS redirect is completely compatible with DNSSEC... Comcast (and official SOPA/PIPA supporter) has rolled out DNSSEC, urged others to roll out DNSSEC and turned off its own DNS redirect system, stating clearly that DNS redirect is incompatible with DNSSEC, if you want to keep people secure. In the end, this certainly appears to suggest that Comcast is admitting that it cannot comply with SOPA/PIPA, even as the very same company is advocating for those laws.
Granted the debate continues as to whether ISPs could find some other way to filter content deemed unacceptable by our entertainment industry overlords, and some of the discussion on whether ISPs can effectively filter DNS results has even some lifetime DNS experts arguing among themselves. That's in contrast to the folks in Congress writing and editing SOPA at the entertainment industry's behest, who have shown repeatedly they don't have the foggiest idea about the technology they're trying to regulate.Comcast engineers are just doing their jobs and likely wouldn't want to wade into this particular firestorm, though we'd still love to hear their thoughts below (anonymously, if necessary).
read comment(s)