Level(3) DNS Spoofing All Domains

Tue Nov 19 16:04:36 UTC 2019

Frontier and Verizon have been doing it for years. They have simply thumbed their noses at NXDOMAIN. All in the name of capturing data and eyeballs By Any Means Necessary.

 -mel

On Nov 19, 2019, at 8:00 AM, Matthew Pounsett <matt at conundrum.com> wrote:

On Tue, 19 Nov 2019 at 10:57, Patrick Schultz <lists-nanog at schultz.top> wrote:
Just to weigh in: Here in Germany, the largest internet provider (Deutsche Telekom) did the same thing.
It's basically just a "search guide", it redirects you to a search page and assumes you just had a typo in the URL.

Telekom stopped doing that in April, after a user reported them to the district attorney for supposed data manipulation, a misdemeanor.

If your entire Internet is just the web then it's perhaps not a big deal.  But there are a lot of protocols that depend on proper functioning of NXDOMAIN.  If you recall, Verisign got in a bunch of trouble for doing that back in the day at the authoritative level.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.nanog.org/pipermail/nanog/attachments/20191119/eb57d3f9/attachment.html>