Featured Blogs

Canadian Government Quietly Pursuing New ISP Code of Conduct

If approved, the code would technically be voluntary for Canadian ISPs, but the active involvement of government officials suggests that most large providers would feel pressured to participate. The move toward an ISP code of conduct would likely form part of a two-pronged strategy to combat malicious software that can lead to cybercrime, identity theft, and other harms. First, the long-delayed anti-spam legislation features new disclosure requirements for the installation of software along with tough penalties for non-compliance. more

Keep Politics Out of 5G International Standardization

For the past hundred years or so, the world's vendors of communication networks and services have collaborated -- largely among themselves -- with great success. That paradigm continues today for 5G with the 3rd Generation Partnership Project (3GPP) and an ecosystem cluster of related organizations where industry and affected government agencies worldwide successfully work on a massive scale. more

Help Define ICANN’s Future

Mention ICANN in Internet circles and you will always find a multitude of views of what the organization should do, needs to do, and should have done; how it has to change, and why; and what it needs to focus on. Well, the time has come to make those views known and to try to persuade the rest of the community that they represent the best step forward. more

Some Thoughts on the ICANN EWG Recommended Registration Directory Service (RDS)

It has been my distinct pleasure to serve on ICANN's Expert Working Group on gTLD Directory Services (EWG). We put in many long months and what seemed like countless hours of research, discussion, meetings, and deliberations on how to tackle a clean-slate approach to gTLD directory services, popularly known as "WHOIS". In our Final Report, the Expert Working Group (EWG) recommended a Registration Directory Service (RDS) to replace today's WHOIS, providing a next-generation system to better meet the needs of the evolving global Internet with greater accuracy, privacy, and accountability. more

Do We Need IPv4 at Home/SOHO Any More?

CLAT/NAT64 is utilized across many mobile networks globally, and I am only talking about Ethernet and Wi-Fi in home and small office/home office (SOHO) environments. I experimented by completely disabling IPv4 at home and established a SSID where my MacBook Pro operates without an actual IPv4 address. The MacBook supports CLAT (RFC 6877), and by implementing PREF64 (RFC 8781) and DHCP Option 108 (RFC 8925) in my network, I was able to achieve a 100% IPv6 environment. more

The Emergence of Consensus in the UDRP

The modus operandi of the Internet Corporation for Assigned Names and Numbers (ICANN) is achieving consensus. This also holds true for the principal rights protection mechanism that emerged from a two-year round of debates organized by the World Intellectual Property Organization (WIPO) that ICANN implemented in 1999 as the Uniform Domain Name Dispute Resolution Policy (UDRP). Consensus rules; not precedent, although consensus inevitably becomes that. more

Credibility and Disbelievablity as it Affects Outcomes in UDRP Proceedings

"Credibility" in English comes through Middle French from a Latin word signifying trustworthiness and reliability in business and personal transactions (allegations, contentions, statements, promises, etc.). Where the goal is persuasion, exaggerating, embellishing, withholding, and falsifying evidence or accusing the adverse party of some heinous crime is not a winning strategy for proving claims or defenses. more

Privacy and Security - Five Objectives

It has been a very busy period in the domain of computer security. With "shellshock", "heartbleed" and NTP monlink adding to the background of open DNS resolvers, port 445 viral nasties, SYN attacks and other forms of vulnerability exploits, it's getting very hard to see the forest for the trees. We are spending large amounts of resources in reacting to various vulnerabilities and attempting to mitigate individual network attacks, but are we making overall progress? What activities would constitute "progress" anyway? more

ICANN and the Developing World: Examining The Outreach Program

Shravanti Reddy?s recent piece draws attention to an important issue that has nagged at ICANN ever since the ill-fated at large elections, when participants from the developed world greatly outnumbered those from the developing world. This imbalance was somewhat mitigated by the regional delineation of candidates, but it nonetheless raised two important questions that have yet to be settled:

First, how can ICANN (and, more generally, Internet governance) be more inclusive of developing countries? And second (less often asked, but perhaps even more important): Why should developing countries care about ICANN -- i.e., why does the answer to the first question even matter? This article discusses some recent developments related to the first question; a later article will consider some specific reasons why ICANN matters to the developing world. more

Belgian Country Code Now Supports Internationalized Domain Names

Earlier this week dns.be launched Internationalized Domain Names (IDNs). The Belgian registry opted to support the accented characters for Dutch, French and German. In so doing they've also ended up providing support for other European languages, such as Swedish, Finnish and Danish... The registry reported quite a bit of interest in the launch with over 3000 IDN domains being registered in the first hour. That number had practically doubled by close of business on the first day. more

Domain Related Crime: The 4 Steps of Effective Investigations

There is no rest for the wicked. If you think that 2018 was the climax of cybercrime, wait until you see what happens in the next few years as cybercriminals are constantly learning new ways to strike. Take for instance domain-related attacks now coming in a variety of forms. There's domain hijacking which involves gaining of access to domains and making changes without owners' permission. You have typosquatting where phishing is often utilized to steal valuable information. more

Global Payments Breach Confirmation

This morning, Global Payments held a conference call with investors and analysts covering their earlier breach announcement and projected earnings. Global Payments had also released an update advisory yesterday stating that "the company believes that the affected portion of its processing system is confined to North America and less than 1,500,000 card numbers have been exported" and that only Track 2 card data may have been stolen. more

Eliminating Access to WHOIS - Bad for All Stakeholders

Steeped deep in discussions around the European Union's General Data Protection Regulation (GDPR) for the past several months, it has occurred to me that I've been answering the same question for over a decade: "What happens if WHOIS data is not accessible?" One of the answers has been and remains the same: People will likely sue and serve a lot of subpoenas. This may seem extreme, and some will write this off as mere hyperbole, but the truth is that the need for WHOIS data to address domain name matters will not disappear. more

RIPE NCC is Reaching the Last /8 of IPv4

In an earlier article, IPv4 - Business As Usual, we pointed out that the RIPE NCC will reach the last /8 of IPv4 address space (16,777,216 addresses) sometime later this year. On Friday, 14 September 2012 we reached this important milestone; we allocated the last IPv4 addresses from the unallocated pool. From now on, the RIPE NCC can only distribute IPv6 addresses and a one-time /22 IPv4 allocation from the last /8 to those Local Internet Registries (LIRs) that meet the requirements. more

ICANN’s New gTLDs: The Game Changers Have Landed

The day after 'reveal day' two big questions will emerge; firstly was the advertising branding world so wrong or secondly, the parties behind the proposed names so invincible and can turn their $350 million dollars into many tens of billions. To be fair the jury may be out nevertheless, here are some facts... The Internet was never designed to solve the global business naming problems; it was the extension of DARPA, a failsafe military communication system later adventured into public use. more