On Wed, 11 Mar 2009 12:42:40 -0300 Rubens Kuhl <rubensk@gmail.com> wrote:
Covad telling you they don't keep logs is different from them not really having the logs... but, if they really don't keep logs, they are posing a risk that FBI or DHS might not be happy with. The feds will probably be more persuasive than you, so maybe hinting them about this situation may change something to better.
There is no US legal requirement for keeping logs. The FBI et al. may want you to, and there is a bill before Congress to mandate retention (and that has been discussed on NANOG -- look for the Subject: 'Legislation and its effects in our world', or you can find the text itself at http://thomas.loc.gov/cgi-bin/query/z?c111:H.R.1076:) but there is no legal obligation to keep DHS happy. --Steve Bellovin, http://www.cs.columbia.edu/~smb