On Thu, Oct 23, 2014 at 08:45:45AM -0400,
 Phillip Hallam-Baker <[email protected]> wrote 
 a message of 118 lines which said:

> To be clear, any US academic using pDNS data who has not gone
> through human subjects review had better do that right now. Its not
> just their career at risk, if they are working under a US federal
> govt grant they may be breaking the law.

And if they operate in Europe, they have to abide by the European
directive 95/46/EC "on the protection of individuals with regard to
the processing of personal data and on the free movement of such data"
and its national implementations (CENTR members may look at the recent
talks in the Legal and Technical working groups in the last year,
about this subject).

> Which in my view means that the recursive has to be a trusted
> service 

"Trust" is not binary: I trust my bank with my money but not with my
nude selfies (which I entrust to Snapchat instead). So, even if you
trust your resolver, you may be interested in ways to decrease the
amount of data sent to it. Follow the arabic saying: "Trust God But
Tie Your Camel".

_______________________________________________
dns-privacy mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/dns-privacy

Reply via email to