Featured Blogs

We Have a Paradigm for Surveillance That’s Broken, Fit Only for the Analogue Past

As each day brings new revelations about surveillance online, we are starting to see increasing activity in national legislatures intended either to establish more control over what the security services can do to their nationals (in countries like the US), or to limit access by foreign secret services to the personal information of their citizens (countries like Brazil). Unfortunately, neither of these approaches address the underlying problem: we have a paradigm for surveillance that's fit for the analogue past, not the digital present, let alone the future. more

DITL Data Isn’t Statistically Valid for This Purpose (Part 2 of 4)

For several years, DNS-OARC has been collecting DNS query data "from busy and interesting DNS name servers" as part of an annual "Day-in-the-Life" (DITL) effort (an effort originated by CAIDA in 2002) that I discussed in the first blog post in this series. DNS-OARC currently offers eight such data sets, covering the queries to many but not all of the 13 DNS root servers (and some non-root data) over a two-day period or longer each year from 2006 to present. more

A Hospice Strategy for the ITU-T

After the Dubai World Conference on International Telecommunications (WCIT) debacle last year, the exit of almost everyone out of the ITU-T was accelerated. The ongoing meeting of its former "crown jewel" Study Group 13 that claims to be the global coordinator of all things Internet, Cloud Computing, SDN, IoT, and Future Networks, attracted only 80 people - mostly from three countries plus the host. Only a single person from the Americas attended. more

PRISM, Multistakeholderism Cancer Scare, Montevideo Declaration, Brazil Summit: Where’s ICANN Going?

Many who attended the ICANN Durban meeting this summer will recall the open forum were speakers lined up to call on ICANN to either speed up or slow down the new gTLDs depending on their position or interest. I chose to address a different topic that no one was yet willing to tackle publicly. It was PRISM and the NSA surveillance scandals. In my intervention I was also the first to also publicly warn ICANN and Fadi Chehade directly that "Trust" in ICANN and Multistakeholderism face serious perils from the Snowden revelations... more

Introduction: ICANN’s Alternative Path to Delegation (Part 1 of 4)

As widely discussed recently, observed within the ICANN community several years ago, and anticipated in the broader technical community even earlier, the introduction of a new generic top-level domain (gTLD) at the global DNS root could result in name collisions with previously installed systems. Such systems sometimes send queries to the global DNS with domain name suffixes that, under reasonable assumptions at the time the systems were designed, may not have been expected to be delegated as gTLDs. more

IP Addresses and Traceback

This is an informal description the evolution of a particular area of network forensic activity, namely that of traceback. This activity typically involves using data recorded at one end of a network transaction, and using various logs and registration records to identify the other party to the transaction. Here we'll look at the impact that IPv4 address exhaustion and IPv6 transition has had on this activity, and also note, as we explore this space, the changing role of IP addresses within the IP protocol architecture. more

Watch Live - What Does “Success” For IPv6 Look Like? (Briefing Panel on Nov 5)

Now that IPv6 deployment is happening in major networks around the world, the question becomes -- what does "success" look like for IPv6? How much IPv6 traffic is "enough"? What are major milestones we should be tracking in IPv6 deployment? What is next for IPv6? more

Policy Advisory Boards - A Cornerstone PICS (Public Interest Commitment Specification)

Six months following the April 11th issuance of the Beijing Communique by ICANN's Governmental Advisory Committee (GAC), ICANN continues to wrestle with whether to accept the bulk of the GAC's proposed safeguards for new gTLDs as set forth in Annex 1 of that document. On October 1st ICANN Board Chairman Stephen Crocket sent a letter to GAC Chair Heather Dryden summarizing the results of the September 28th meeting of the New gTLD Program Committee (NGPC) that considered the remaining and still undecided advice received from the GAC. more

How Insider Domain Theft Can Bring Down ICANN

If a hired philosopher graced ICANN, the work would get down to brass tacks. "What is it?", she would ask, that drives ICANN beyond the mysterious dot that apparently represents the root. One can picture subsequent appeals from senior management to its navels, for clues as to what in the end game the root truly represents. I surmise that contemplating bred-in-the-bone values does not resonate easily or often at ICANN. Its like that unreachable itch that evades our scratch; we can't get at the source. more

Yet Another Embarrassing IDN Gaff from ICANN

Hot on the heels of other ICANN Internationalized Domain Name (IDN) Top-Level Domain (TLD) launch errors, we now have another example of ICANN's failure to comprehend the differences between IDN and ASCII names, this time to the detriment of potential IDN registrants and the new IDN generic TLD (gTLD) Registries. This gaff really makes you wonder whether the SSAC and Multilinguism departments at ICANN have ever met. more

First New TLD Quietly Enters Sunrise Period

The first Sunrise Period for trademark owners under ICANN's new gTLD program has begun. The gTLD is the Arabic IDN '????, or "dot-Shabaka". The term roughly means "web" in Arabic and eligibility for registrations is unrestricted. The Dot-Shabaka Registry has made it clear for months that they wanted to be the first TLD to launch this year. more

PRISM and the Administration State Strikes Back

It is a safe assumption that if you are reading this post, you like technology. If that is the case, then you understand the tremendous economic, cultural, and human rights benefits an open, universal, and free Internet provides. That freedom is under attack. And it is our responsibilities, as stakeholders in a successful Internet, to balance governments and have an open dialog on the topic. more

Highlights from SCTE Cable-Tec EXPO

As a product manager and engineer, I really enjoy attending the technology-oriented Cable-Tec Expo each year. It has a stronger technology focus than many other industry trade shows and it's always a good opportunity to talk to the engineering teams from all of the operators and vendors. more

Bruce Schneier to Speak About Internet Surveillance at IETF 88 Technical Plenary Next Week

How do we harden the Internet against the kinds of pervasive monitoring and surveillance that has been in recent news? While full solutions may require political and legal actions, are there technical improvements that can be made to underlying Internet infrastructure? As discussed by IETF Chair Jari Arkko in a recent post on the IETF blog, "Plenary on Internet Hardening", the Technical Plenary at next weeks IETF 88 meeting in Vancouver, BC, Canada, will focus on this incredibly critical issue. more

Technical Viability of Dotless Domain Names

It was never obvious at the outset of this grand Internet experiment that the one aspect of the network's infrastructure that would truly prove to be the most fascinating, intriguing, painful, lucrative and just plain confusing, would be the Internet's Domain Name System. After all, it all seemed so simple to start with: network applications rendezvous with their counterparts using protocol-level addresses, but we users prefer to use "natural" identifiers that act as aliases for these addresses. more