Don't miss the full list of organizations with access (pages 210-214): https://www.gov.uk/government/uploads/system/uploads/attachm...

> require communication service providers (CSPs) to retain UK internet users' "Internet connection records" – which websites were visited but not the particular pages and not the full browsing history – for one year

In what world is a serial list of IP connections that a customer made not a "browsing history"?

Presumably, it's not required to record "particular pages" because

- It sounds reassuring

- It's not possible to record, for instance when someone accesses secure sites (the majority of time and pages)

- It's not necessary, since the a server's logs can easily be cross-referenced to the TCP connection logs

- It's not necessary, since plenty of insight results from knowing who, when, how much, for how long and how often everyone communicates with everyone else.

> log every IP connection

wonder how long before people abuse this to setup redirects or malicious code to connect suspicious sites/ip addresses and render the whole thing pointless and get everyone on government shitlist

would be easy to provide "evidence" against someone who has no knowledge of said sites simply by presenting logs

i guess a way to avoid this would be surveillance on all online accounts (read: making logs mandatory on everything ever); including search history, browsing habits etc, (not that im a fan of having my life and every interaction on display to others) but that leaves you vulnerable to anyone trying to impersonate you for whatever reason