Re:A cartoon intro to DNS over HTTPS (2018)
by tialaramex on Sunday October 20, 2019 @05:43AM
(#21303153)
> Does Mozilla and Cloudflare seriously think they will just go "oh ok, I guess everything is unblocked again now". No, they will either force Cloudflare to do the same or force local ISPs to implement even stronger filtering controls.
We have an actual worked example to look at:
The British government decided that all pornography in the whole world should require proof of age so that British kids couldn't see it. They got all the legislation done, they got civil servants to write them a "White Paper" explaining how this would work, they selected a censor to manage the inevitable rulings saying that this or that pornographer didn't obey the rules and enforce DNS censorship.
And then, just weeks ago after much "delay" and "reconsideration", they U-turned. Because the part where you enforce the rules by "just" censoring DNS isn't practical under DPRIVE. You say they'll just "force" local ISPs to implement "even stronger filtering controls" but the only "stronger" option is to proxy all of HTTPS.
How were the IPSs going to pay for this? Mandatory price increases? Or are the government going to do the work and just raise taxes to pay for it? "Vote Conservative: Higher prices, worse service, more taxes, more censorship. Corruption and incompetence are our watchwords" ?
This works fine in China. The government wants to spend your money on a "Great Firewall"? Nothing you can do about it. Not so much in a country with anything resembling democracy left.
We have an actual worked example to look at:
The British government decided that all pornography in the whole world should require proof of age so that British kids couldn't see it. They got all the legislation done, they got civil servants to write them a "White Paper" explaining how this would work, they selected a censor to manage the inevitable rulings saying that this or that pornographer didn't obey the rules and enforce DNS censorship.
And then, just weeks ago after much "delay" and "reconsideration", they U-turned. Because the part where you enforce the rules by "just" censoring DNS isn't practical under DPRIVE. You say they'll just "force" local ISPs to implement "even stronger filtering controls" but the only "stronger" option is to proxy all of HTTPS.
How were the IPSs going to pay for this? Mandatory price increases? Or are the government going to do the work and just raise taxes to pay for it? "Vote Conservative: Higher prices, worse service, more taxes, more censorship. Corruption and incompetence are our watchwords" ?
This works fine in China. The government wants to spend your money on a "Great Firewall"? Nothing you can do about it. Not so much in a country with anything resembling democracy left.