An HTTP Status Code For Censorship?

New submitter Tryfen writes "UK ISPs are being forced to block The Pirate Bay. One is using 'HTTP 403 Forbidden' to tell users that they cannot access the site. From the article: 'However, chief among my concerns is the technical way this censorship is implemented. At the moment, my ISP serves up an HTTP 403 error.' ... As far as I am concerned, this response is factually incorrect. According to the W3C Specifications: "The 4xx class of status code is intended for cases in which the client seems to have erred."' So, should there be a specific HTTP status code to tell a user they are being censored?"

Comments

So what if there SHOULD be, nobody will use it

[Gothmolly]

Why would you tell people you're censoring them, when you can just as easily NOT tell them and keep them in the dark... you know, to CENSOR them.

Re:So what if there SHOULD be, nobody will use it

[Daetrin]

Because the people who are implementing the censorship are not the ones who mandated the censorship, and the goals of the two bodies may not be aligned.

In theory an ISP might want to return a "this has been censored" code in the case of anything where some outside entity forced them to censor the content so they can pass the blame on to someone else. I don't know if any ISP would actually care enough to bother implementing it, but it's certainly a possibility.

Re:So what if there SHOULD be, nobody will use it

[Anonymous Coward]

In practice, an ISP has complete control over what they return in this situation.

The Used could be redirected to the EFF.org or to the official legislation that forbade access, or one might be redirected to the homepage of a list of proxy services. If it were me in charge and I wanted to provide a public service befitting the mythical status of the benign ISP, I'd set up a simple HTML page including all of the above with a disclaimer stating that my company took a neutral position on the question of support for the newly minted Ministry of Information, and I'd include a link to Terry Gilliam's, Brazil, as well as Marshall McCluhan's official website.

 

It's all in the point of view!

[__aaltlg1547]

In a normal person's point of view, the user has not erred. The government has erred, and HTTP has no provision for that.

From the government's point of view, the user has erred because no right-thinking user would want to access a proscribed IP.

So what it comes down to is, should HTTP represent the user's POV or the Government's?

Re:It's all in the point of view!

[Luke727]

So what it comes down to is, should HTTP represent the user's POV or the Government's?

Neither. HTTP deals with clients and servers, not users and governments. Political issues are rightfully outside of its scope.

As for the error code, 403 (Forbidden) is described as "The server understood the request, but is refusing to fulfill it". Is this not technically accurate?

HTTP 451

[IonOtter]

I nominate HTTP 451 - Site is not permitted in your country.

Re:HTTP 451

[xeno]

Mod parent up. This is brilliant, probably the best thing I've seen on /. in years. Following Bradbury's theme, how about.....

HTTP 451: An error in your society has prevented your client from receiving the specified content.

(And I love the fact that HTTP 450 paves the way for this.)

Stop.

[mikkelm]

None. If a site absolutely must be blocked, then blackhole its IP addresses and fail resolution on the ISP's DNS servers. Middleboxes that inspect layer 4 and above are never OK, and never part of a trustworthy ISP network unless explicitly requested by the end-user.

Re:Stop.

[SuricouRaven]

Not so easy. One IP may host many, many websites. Usually the budget ones, that don't justify dedicating an entire server. So they all get to share one address, just different vhosts. Simple IP blocking would often block additional sites, not just the one targetted.

Re:666

[__aaltlg1547]

Only for religiously proscribes IPs. If it's proscribed for political reason the code is "1984 - Thoughtcrime found on site".

Re:No problem

[Anonymous Coward]

Screw status codes. There should be a rifle pointed at the head of every legislator who votes on one of these sorts of measures.

George Washington didn't get rid of big British government by voting, holding protests (don't forget your permit!), or writing his elected officials. George Washington got rid of big British government by orchestrating the execution of hundreds of British government officials...

Fahrenheit 451

[warewolfsmith]

HTTP 451, This site has been burnt.

Re:666

[FriendlyStatistician]

In keeping with the 3-digit status codes we already have and the use of the 4xx series to indicate that the client has apparently made an error, I think status code 451 might be more appropriate.

RIP, Ray Bradbury.

Redirect to a page...

[John Hasler]

..that explains the situation and encourages the user to click on a clicky that automatically files a complaint with the approporiate government agency and/or sends an email to the relevant minister. Should be maintained by a third party such as the EFF.

Re:How about using HTTP 101?

[FriendlyStatistician]

101 already exists, and means switching protocols. The 1xx series in general is inappropriate.

Microsoft already used 450 as a censorship status code (for censored by Microsoft Parental Controls), so I think 451--with a nod to Ray Bradbury--would be appropriate.

There already is an HTTP code

[Mozai]

The proper one would be in the 5xx range, since the client's request is correct but the server is unable to comply.

503 - Service Unavailable is the obvious choice.

If we want to be cheeky about it, we could respond 305 - Use Proxy to hint that the client making the request can't come through here and must use some other path.

Re:No problem

[bky1701]

Democracy is by definition tyranny of the majority. That's why most countries have constitutions that cannot be violated and why there is no pure democracy.

Re:666

[Xtifr]

So, in other words, a way of encoding the date that only Americans would recognize.