Featured Blogs

DDOS Attackers - Who and Why?

Bruce Schneier's recent blog post, "Someone is Learning How to Take Down the Internet", reported that the incidence of DDOS attacks is on the rise. And by this he means that these attacks are on the rise both in the number of attacks and the intensity of each attack. A similar observation was made in the Versign DDOS Trends report for the second quarter of 2015, reporting that DDOS attacks are becoming more sophisticated and persistent in the second quarter of 2016. more

Proposal for Signing the DNSSEC Root

The U.S. National Telecommunications and Information Administration (NTIA) is soliciting comments on signing the DNSSEC root. Ignore the caption on the page: this is not about DNSSEC deployment, which is already happening just fine. It's about who gets to sign the root zone. more

5G Security Transparency

There is considerable rhetoric propagated today about 5G security. Some of the more blatant assertions border on xenophobia with vague assertions that the 5G vendors from some countries cannot be trusted and wholesale government banning is required. Existing treaty obligations are being summarily abrogated in favour of bilateral trade bullying. These are practices that the late President George H.W. Bush sought to eliminate a quarter century ago through intergovernmental organization initiatives... more

Why Aren’t We Fixing Route Leaks?

In case you missed it (you probably didn't), the Internet was hit with the Monday blues this week. As operator-focused lists and blogs identified, "at 17:47:05 UTC yesterday (6 November 2017), Level 3 (AS3356) began globally announcing thousands of BGP routes that had been learned from customers and peers and that were intended to stay internal to Level 3. By doing so, internet traffic to large eyeball networks like Comcast and Bell Canada, as well as major content providers like Netflix, was mistakenly sent through Level 3's misconfigured routers." more

Not Quite Two Factor, or Is Your Phone Number Really Something You Have?

A recent article in the New York Times Dealbook column reported on phone number hijacking, in which a bad guy fraudulently takes over someone's mobile phone number and used it to reset credentials and drain the victim's account. It happens a lot, even to the chief technologist of the FTC. This reminds us that security is hard, and understanding two-factor authentication is harder than it seems. more

The Christmas Goat and IPv6 (Year 3)

As Christmas were getting closer, the third time of load balancing the streaming pictures of the famous Christmas goat in the city of Gävle, Sweden, was on the agenda. My goal with this activity is the same as before, to track the use of IPv6 and DNSSEC validation. The results from the last two years are published on CircleID. more

TLD Rights Protection Mechanisms

Potential trademark Rights Protection Mechanisms (RPM) at the 2nd level can be divided into three main areas -- each defined by their time relative to Top-Level Domain (TLD) launch... Of these, we believe the third, "After Launch," is the most fruitful path to explore. We believe it offers the most potential to protect the rights of trademark holders, the best balance between TM rights and the legitimate rights of others who may want to register names , and the most benefit to the trademark community at the lowest cost to them... more

ICANN Hubris Knows No Ends

Despite all signs pointing to a launch of the new generic Top-Level Domains (gTLDs) program in Singapore, it seems like ICANN could not help poking the Government Advisory Committee (GAC) in the eye one last time. In the latest installment of how a California not for profit technical coordinating body knows best, we have the ICANN Evidence of "Use" Requirement for Trademark Protection document. more

5 Common Misconceptions New Registries Have About Domain Revenue

It is wonderful to see the floodgates open and see so many new gTLDs launch -- 417 delegated as of October 4th. As registry senior management's focus switches to operational matters post launch, it is now time to consider how the new registries will deal with revenue recognition and its impact on financial reporting. This is primarily the CFO's responsibility, but senior management must be mindful that improper domain revenue accounting will lead to corporate reputational damage. more

ICANN Hugs China’s Multilateral Internet Governance Initiative

The original title of this article was "ICANN CEO Hugs China's Multilateral Internet Governance Initiative". CEO has been dropped from the final version. That deletion helps make one of its two essential points. Which is that since ICANN CEO Fadi Chehade accepted a formal advisory role with China's World Internet Conference (WIC, which is a proprietary project of the Chinese Communist Party) while still engaged in leading the U.S.-based technical coordinator of the DNS, and as that ICANN role almost surely played a decisive role in his being offered the position... more

Sorry, Ajit Pai: Smaller Telcos Did Not Reduce Investment After Net Neutrality Ruling

Primary suppliers see sales go up. ADTRAN's sales in the most recent nine months were $445M, up from $399M the year before. Calix sold $372M, up from $327M. At analyst meeting this year, both said demand had picked up. Clearfield, a supplier of fiber optic gear, was up 8%. Pai claimed, "the impact has been particularly serious for smaller Internet service providers." It was a primary justification for his Net Neutrality decision. more

Sharing ICANN Can Be Win-Win for the United States

With the Internet's global reach and importance showing exponential growth, pressure on the United States to share control of ICANN is mounting. A number of experts believe that the question is simply how much the United States should give up and how soon. This essay argues that "giving up" can be a win-win solution; i.e., control sharing is not a zero-sum game. more

Do You Care About Your Privacy?

ICANN is currently going through a complicated process in order to introduce more Top-Level Domains (TLDs). While the launch of new TLDs is something that a lot of people will welcome it is not without its issues. One of the areas that has been receiving quite a bit of attention is in relation to intellectual property rights. So what has this got to do with privacy? more

When Having a Voice Isn’t Enough

In Brussels on Friday, an esteemed panel of experts got together to discuss the challenge of improving ICANN's accountability. It's just too bad nobody from ICANN came by to hear it. ... While their prescriptions varied widely, the panelists were remarkably similar in their diagnoses - namely, that ICANN has yet to meet the fundamental challenge of making its board and staff accountable and answerable to the community that it is intended to serve. more

“Can IP Be Protected in the Internet Age?” Panel Recap from Russian Economic Development Conference

In June, I attended the St. Petersburg International Economic Forum ("SPIEF"), organized by the Russian government's Ministry of Economic Development. This was a major event drawing thousands of participants to St. Petersburg... I participated on a panel entitled "Can IP Be Protected in the Internet Age?" Right away, I trust many of you find the titling odd... more