URLs, IPs and interception
Roland Perry
ukcrypto at chiark.greenend.org.uk
Sat, 1 Mar 2008 14:53:59 +0000
In article <47C873A1.6080308@zen.co.uk>, Peter Fairbrother
<zenadsl6186@zen.co.uk> writes
>Can someone please correct me if I'm wrong, but doesn't a browser
>usually work like this: You enter a URL, the browser looks up the IP of
>the domain name in a nameserver, then sends the URL to that IP address.
Some urls don't have domain names in, but if they do then you've
described the process reasonably well. [1]
>So is there any reason for an ISP to look at the URL (including any
>parts after the third slash) at all, in order to perform it's function
>as a CSP?
Very much so if that particular website is hosted at *your* ISP. But
that's one of those edge cases that needs special attention to detail.
>And isn't an ISP looking at URLs illegal interception?
There are numerous exceptions in the Act which describe legal
interceptions. Including the infamous virus checkers [2] (as well as
those urls belonging to suspects described on warrants from the Home
Secretary).
We do need to concentrate on which things are interception or not, and
then which sorts of interception are legal.
[1] If the url starts off with an IP address, the browser doesn't ask
the nameserver and get back an answer "duh - why did you ask if you
already knew", it doesn't ask at all.
[2] Which may or may not revolve around definitions of who the "person"
(not being the intended recipient) is that the contents of those
communications are made available to.
--
Roland Perry