Mr. Ulevitch,
Your response is not yet of sufficient detail to be believeable.
Before I get into that, I'll note that when I tried your DNS on by box, I did an ethernet trace and found my local 196.168.*.* IPs where being looked up on your
service. Apparently I need to run my own BIND to avoid that.
https://www.opendns.com/smb/start/device/apple-osx-leopard
# just add our DNS IPs as your resolver
I consider it a security hazard for my intranet addresses to be looked up on an outside DNS. Nowhere do you warn people of this unexpected behaviour. "Just add us." There's no mention of one's opting in to your proxies or DNS intercepts at the point of the directions to "just add us." Why don't you fix that? We have privacy protections in law with our onramp ISP, but not with your service.
" Do you like advertising with your DNS?
OpenDNS result:"
# You tried to visit 208.67.217.132, which is not loading.
#
# OpenDNS Guide [search box]
#
# Refine Your Search
#
# Real Estate
# Apartment for Rent
# Personals
# Cheap Airfare
# Vacation Packages
# Vegas Vacation
# Cancun Hotel
# New Cars
# Hybrid Cars
# Digital Cameras
" Real classy. (not)"
I find it hard to believe your business model makes money via your search page.
Prove it: break down your company's costs and income.
What else?
http://www.opendns.com/privacy/
#
# We are affiliated with a variety of businesses and
# work closely with them in order to provide our services
# to users. We will only share personal information with
# affiliates to the extent that is necessary for such
# affiliates to provide the services. For example, when
# a website visitor searches on OpenDNS, the IP address
# and query are shared with OpenDNS's advertising partners.
Who are your advertising partners, Mr. Ulevitch?
Which domains/IPs/anything else are you intercepting to proxy?
I find the wording "We will only share personal information" is probably designed to mislead the public as to what is really happening. People have probably seen ads on pages that use their name right in the ad, and this happens because the ad was a cgi retrieval from say Yahoo! and so it gets your Yahoo! cookie, which is how it returned a personalized ad.
If you proxy to Google, are you passing the user's Google cookies through your proxy? Is there anything in your TOS limiting you from passing those cookies and the URL (with the search query) to your other "affiliates?" The cookies may not include "personal information", but the cross-pollination available is similar to what happens with "deep-packet inspection" advertising.
Which major search engines and advertisers are you "affiliated" with, meaning you _do_ log and pass data to them (IP/search URL/cookies)?
If Google an affiliate? Is Yahoo!? MSN?
Tell us who your affiliates are and what information they receive and under what circumstances.
Or have you pre-explained not answering by postulating you are just feeding the trolls?