Hacker News Reader

Comment by _verandaguy | Hacker News Reader

It's not quite that clear cut. CIRA is strictly speaking a public, not-for-profit company, but the DNS servers were built and maintained by CSE (our NSA) for the malicious domain filtering/reporting aspect, the Centre for Cybersecurity (another public service arm mandated with building out our domestic cybersecurity infrastructure), and Shared Services, the federal government's infrastructure backbone.

I know many people will stop reading at CSE and draw their own conclusions, but like with every issue there's nuance here. CSE arguably draws some of the foremost information security experts in the country, and their mandate does also include protecting the digital security of Canadians. I'm going to be cautiously optimistic and start looking for transparency resources around Canadian Shield.

View on HN

Misleading. "CIRA is providing the threat blocking technology while the CSE's Canadian Centre for Cyber Security is offering its threat intelligence services — basically a who's-who list of every bad actor roaming the web."

CIRA has 3 levels much like opendns, private, protected and family. My router has already been using private for awhile mainly because it was the fastest dns.

The server for where I am located is hosted at a local ISP. If they were truly nefarious vacuuming up every dns request and providing a printout of my activity to the prime minister every morning they'd just host the server on their own network.

If CSE built it themselves as alleged, they did a good job in terms of its performance and I trust the Canadian government more than I trust an ad company.

Good for your. Canadian government did a great job with the recent CRTC decisions, right?

Don't try to muddy the waters by conflating the regulatory board's pricing decision with nefarious spooks searching for Newfoundland independence videos in my history.

CRTC explicitly asked to evaluate CIRA DNS as a potential way to block content for Canadians https://crtc.gc.ca/eng/archive/2021/2021-9.htm

"15. While network-level blocking can be implemented without accessing the content of Internet transmissions, the Commission nevertheless considers that any regulatory framework for blocking or filtering traffic must include safeguards to ensure user interests are protected. Any framework the Commission approves will need to include, at a minimum, provisions that (i) ensure Internet subscriber privacy, (ii) enable subscribers to opt into or out of blocking, (iii) provide a false-positive correction mechanism, (iv) ensure blocking decisions are unbiased and made in the best interest of Canadians, and (v) minimize subscriber information monitoring, collection, and usage."

In case of emergency, break glass and use VPN.

> I trust the Canadian government more than I trust an ad company.

Me too. However, since it's sort of the government running it, I wonder if they could ever implement ad blocking without getting sued by the ad companies.

Good callout, thanks for the correction.

Reply on news.ycombinator.com