A Not-So-Brief History of DNS Blocking — And Why It Sucks

I suppose I’m getting old. I cannot believe that the intellectual property lobbyists (or, as I affectionately refer to them, the “IP Mafia”) have once again trotted out their Holy Grail of blocking websites at the domain-name level. More mind boggling, I cannot believe that this idea gets more popular with policymakers over time, despite the fact that DNS blocking would do far more widespread damage to our overall economy and communications infrastructure today than it could have done back when the IP Mafia, the anti-pornography crusaders, and all the other would be censors of the Internet first floated it in the late 1990s. Part of the problem, of course, is that the vast majority of people (lucky for them) never had to sit through the endless iterations of this for the last fifteen years. Hence, the endless repetition by “serious” white-haired guys who just happen to work for the largest content companies who have not updated their talking points since the late 1990s and rant about how this ‘gosh-darned Internet is full of lawlessness and by-gum we gotta do something con-sarnit.’

So please forgive yet another old geezer his wander down memory lane on DNS blocking and why it builds a massive security hole into our underlying broadband infrastructure. For those playing at home, this is why the vast majority of the cybersecurity establishment in the United States is having serious heebie-jeebies about PIPA/SOPA. Sandia National Laboratory is not exactly a hotbed of piracy, and former Bush Admin Cybersecurity Czar Stewart Baker is hardly part of the “information wants to be free” crowd. They are freaked out because the proposal builds a permanent hole in our broadband infrastructure and invites every identity thief and Iranian hacker to come in and do their worst. Which means that even if we totally 100% believed the Hollywood lobbyists about the legal intent of the law, building the capacity to do DNS blocking compromises security for everyone. Because once the capacity is built in to the system, it will get hacked and exploited. So while we are sitting here in the dark because some hacker crashed our electric grid, or trying frantically to chase down every identity thief who redirected our credit card information from Amazon.com, we can console ourselves that Congress never intended for this to have any domestic impacts.

More below . . .

Continue reading