On 2016/01/20 11:35, Hal Ponton wrote: > I believe what the government is looking for is the "first slash" > record. So a visit to www.bbc.co.uk/news would have to be recorded as > www.bbc.co.uk/ > > I maybe mistaken but thats my view from the evidence sessions.
"What is an Internet Connection Record?" http://data.parliament.uk/writtenevidence/committeeevidence.svc/evidencedocument/draft-investigatory-powers-bill-committee/draft-investigatory-powers-bill/written/26435.html It reads like something that might be put together by someone whose only experience of internet logging data has come from a web proxy. At one record per UDP packet of attack traffic, logging systems are going to be rather busy at times. What is supposed to happen when they can't cope?