[Sanctions-Research] Beacon resource accumulation complete.

Bill Woodcock woody at pch.net
Mon Apr 18 19:03:05 PDT 2022



> On Apr 19, 2022, at 7:06 AM, John Kristoff <jtk at dataplane.org> wrote:
> The names and addresses can all point to the same web systems.

Responding just to this last bit right now (I don’t have any immediate objections to any of the rest, but want to read and consider more carefully)…

I don’t think we can use the same web systems.

We need to be able to distinguish between something which has been blocked by domain name, something which has been blocked by IP address, something which has been blocked by ASN, and something which has been over-blocked  by each of the above, and something which has been under-blocked by each of the above.  So I think each protocol needs to be independent of the others (i.e. no shared hosting) and the under-and-over-blocking need to be dependent on the normal version, for each protocol

                                -Bill

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: Message signed with OpenPGP
URL: <http://lists.sanctions.net/pipermail/research/attachments/20220419/d39dc187/attachment.sig>


More information about the Research mailing list