APrIGF 2024 Session Proposal Submission Form | |||||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|
Part 1 - Lead Organizer | |||||||||||||
Contact Person | |||||||||||||
Ms. Siti Nurliza Samsudin | |||||||||||||
Organization / Affiliation (Please state "Individual" if appropriate) * | |||||||||||||
Sinar Project | |||||||||||||
Designation | |||||||||||||
Technologist | |||||||||||||
Gender | |||||||||||||
Female | |||||||||||||
Economy of Residence | |||||||||||||
Malaysia | |||||||||||||
Primary Stakeholder Group | |||||||||||||
Civil Society | |||||||||||||
List Your Organizing Partners (if any) | |||||||||||||
NA | |||||||||||||
Part 2 - Session Proposal | |||||||||||||
Session Title | |||||||||||||
Enhancing Internet and Web Standards to address DNS Tampering | |||||||||||||
Session Format | |||||||||||||
Workshop (60 minutes) | |||||||||||||
Where do you plan to organize your session? | |||||||||||||
Onsite at the venue (with online moderator for questions and comments from remote participants) | |||||||||||||
Specific Issues for Discussion | |||||||||||||
The Internet Monitoring Action Project (iMAP) releases annual reports on the state of internet censorship covering 9 countries in Southeast Asia (Burma, Cambodia, Indonesia, Philippines, Malaysia, Thailand, Vietnam), Hong Kong (China) and India using data from OONI (Open Observatory Network Interference). Findings from the report revealed that DNS tampering is the most commonly used method of blocking of websites in the region, whereby ISPs (internet service providers) would redirect the DNS to a blockpage. The findings also revealed that these blockpages are either empty, ‘NXDOMAIN’, or come with a written notice from a government authority about the website being blocked. In most of the cases, the blocking is conducted in a non-transparent manner without notification to either the website owners or users. From a security and internet engineering point of view, DNS tampering without any errors raised for host queries or visible notification in client interfaces such as web browsers may pose a security or engineering issue to clients and services, as they are redirected unexpectedly to an unknown address or page. This session is aimed to discuss the potential solutions via extensions or updates to internet and web standards and implementations for DNS hijacking and tampering such as but not limited to: – [RFC 9364] DNSSEC (Domain Name System Security Extensions): enable authentication process to trusted domain name lookups in the Domain Name System (DNS) – [RFC 7858] DNS over TLS: ensuring that DNS queries are private and hidden from ISPs – [RFC 4924] HTTP response code 451 (“ Unavailable For Legal Reasons”): Proposed standard error code to be displayed in the HTTP response when a resource is denied access as a consequence of a legal demand – Reviewing other relevant Internet and Web Standards to provide users more flexibility and control over their usage of the internet |
|||||||||||||
Describe the Relevance of Your Session to APrIGF | |||||||||||||
As demand increases for governments and service providers in the region to address the need for blocking and controlling access to the Internet, governments in the region are expected to increase their control over the internet despite the possible negative implications on the freedom of the citizens. While it may be debatable on its necessity and the balance between internet regulation and freedom, DNS tampering or hijacking raises technical and engineering issues with the current system of resolving hostnames. Solutions discussed during the session will directly contribute to the overarching theme (“Shaping Responsible Internet Governance”) and the thematic track (“Security & Trust”), where it is expected that various stakeholders such as ISPs, network operators, engineers and software implementers would be able to contribute on identifying the challenges in implementing the solutions, as well as other solutions that may be more feasible. In particular, these are the expected outcomes of the session: – For solutions that have already been proposed, the session will aim to assess the challenges faced in implementing them, as well as policy or governance frameworks that may be necessary to accompany the technical solutions – Increased awareness on the current method of blocking of websites and the potential consequences to internet users in terms of security and access – Discussions on better mechanisms in carrying out legitimate blocking of websites |
|||||||||||||
Methodology / Agenda (Please add rows by clicking "+" on the right) | |||||||||||||
|
|||||||||||||
Moderators & Speakers Info (Please complete where possible) | |||||||||||||
|
|||||||||||||
Please explain the rationale for choosing each of the above contributors to the session. | |||||||||||||
Siti Nurliza is a Technologist at Sinar Project who leads the iMAP project, the internet censorship monitoring project covering 9 countries in the region. She analyzes the data from OONI as part of the reporting to be used in internet freedom advocacy. She also provides technical assistance to country partners in analyzing the data and using the OONI tools. This proposed session is a follow-up to her presentation at IAB Workshop on Barriers to Internet Access of Services (BIAS) where she presented on the findings of iMAP which highlighted the most common method used to block websites in the region i.e. DNS tampering. There is no other facilitator or moderator to be proposed for now; however if there is any interest, they would help with facilitating the group discussions. |
|||||||||||||
If you need assistance to find a suitable speaker to contribute to your session, or an onsite facilitator for your online-only session, please specify your request with details of what you are looking for. | |||||||||||||
- Someone who works on security/ DNSSEC from APNIC - Someone who works on W3C UX for browser security e.g. Mozilla Foundation; and/or - Registrar like MyNIC, DotAsia etc. |
|||||||||||||
Please declare if you have any potential conflict of interest with the Program Committee 2024. | |||||||||||||
No | |||||||||||||
Are you or other session contributors planning to apply for the APrIGF Fellowship Program 2024? | |||||||||||||
Yes | |||||||||||||
APrIGF offers live transcript in English for all sessions. Do you need any other translation support or any disability related requests for your session? APrIGF makes every effort to be a fully inclusive and accessible event, and will do the best to fulfill your needs. | |||||||||||||
No | |||||||||||||
Number of Attendees (Please fill in numbers) | |||||||||||||
Gender Balance in Moderators/Speakers (Please fill in numbers) | |||||||||||||
Consent | |||||||||||||
![]() |