On Wed, 11 Mar 2009 12:42:40 -0300 Rubens Kuhl <rube...@gmail.com> wrote:
> Covad telling you they don't keep logs is different from them not > really having the logs... but, if they really don't keep logs, they > are posing a risk that FBI or DHS might not be happy with. The feds > will probably be more persuasive than you, so maybe hinting them about > this situation may change something to better. > There is no US legal requirement for keeping logs. The FBI et al. may want you to, and there is a bill before Congress to mandate retention (and that has been discussed on NANOG -- look for the Subject: 'Legislation and its effects in our world', or you can find the text itself at http://thomas.loc.gov/cgi-bin/query/z?c111:H.R.1076:) but there is no legal obligation to keep DHS happy. --Steve Bellovin, http://www.cs.columbia.edu/~smb