There are impracticable points in ‘sovereign Internet’ requirements
The documents propose to create VPN connections from the national domain name system to each resource in RuNet and prohibit referrals to sites outside the domain names .RU, .РФ, and .SU.
Experts of the Russian Union of Industrialists and Entrepreneurs (RSPP) have found impracticable points in the normative acts proposed by the Ministry of Communications to the law on the sovereign Internet, RBC reports. Thus, market participants should provide protection against unauthorized access to the equipment and software used to determine the network address of the site when entering the domain name in the browser’s address bar. RSPP experts note that technically, the transmitted information “can be viewed at the transit level, copied, then distributed, etc., as existing Internet protocols allow (DNS, DNSSEC).” To ensure protection, the Ministry of Communications proposes that all operators create VPN connections from the national domain name system to each resource in RuNet. It is almost impossible to do this, the Russian Union of Industrialists and Entrepreneurs believes, just like to estimate the cost input of such measures.
In addition, at this stage, lawbreakers can get access to information as to which domain the IP address and mail service corresponds to and then “fake” the resource so that the user leaves, for example, their personal data or downloaded an infected file.
In addition, a number of draft bylaws related to the use of the national domain name system by subscribers and users of communication services were criticized. The RSPP Commission notes that the laws do not provide for the obligation of subscribers to use sites located in .RU, .РФ, and .SU zones that they want to make “national.” “The implementation of the mandatory obligation to use only the national domain name system is technologically impossible,” the review says.
MegaFon and VympelCom representatives supported their expert conclusions. According to Beeline, this is “tantamount to a ban on access to Internet sites located outside Russia,” and “this requirement is a corruption-making factor.” It turned out that when preparing bylaws, the Ministry of Communications did not take into account the opinion of the Russian Union of Industrialists and Entrepreneurs.
By January 1, 2021, a national domain name system should be created, which will duplicate the list of domain names and autonomous system numbers delegated to Russian users. These measures should protect the Russian segment of the Internet from external threats. The cost of implementing the bill can be more than 30 billion rubles ($474,9 million). The law on the sovereign Russian Internet will come into force on November 1, 2019.