Lawsuits for falsyfying DNS responses ?

Stephane Bortzmeyer bortzmeyer at
Tue Sep 13 08:30:24 UTC 2016

On Tue, Sep 13, 2016 at 07:12:59AM +0200,
 JÁKÓ András <jako.andras at> wrote 
 a message of 18 lines which said:

> Blocking for that purpose usually means redirecting in
> practive. You'll redirect to a page that explains why the original
> site is not available.

It has practical consequences for the user: in France, DNS lies in
ISP's resolvers for "terrorist" sites redirect you to a Web site of
the police, which will get your source IP address and the site you
wanted (thanks to the Host: HTTP field). Clear blocking (DNS lie
returning localhost or NXDOMAIN) is a bit better for privacy. (But
less transparent about the censorship.)

More information about the NANOG mailing list