Featured Blogs

Exploiting the Firewall Beachhead: A History of Backdoors Into Critical Infrastructure

There is no network security technology more ubiquitous than the firewall. With nearly three decades of deployment history and a growing myriad of corporate and industrial compliance policies mandating its use, no matter how irrelevant you may think a firewall is in preventing today's spectrum of cyber threats, any breached corporation found without the technology can expect to be hung, drawn, and quartered by both shareholders and industry experts alike. more

New gTLD Comment Period Closes

Internet Corporation for Assigned Names and Numbers (ICANN) has been holding a public comment period on the second draft of the new generic Top-Level Domains (gTLD) handbook. This period was due to close yesterday. Prior to yesterday afternoon there was a healthy number of comments, but in the past 24 hours a significant number of new comments have been submitted... more

Mend, Don’t End, the IETF

Is it time for the IETF to give up? Martin Geddes makes a case that it is, in fact, time for the IETF to "fade out." The case he lays out is compelling -- first, the IETF is not really an engineering organization. There is a lot of running after "success modes," but very little consideration of failure modes and how they can and should be guarded against. Second, the IETF "the IETF takes on problems for which it lacks an ontological and epistemological framework to resolve." In essence, in Martin's view, the IETF is not about engineering, and hasn't ever really been. more

Post JPA: Tempered Happiness

The Affirmation gladdens me. The Affirmation worries me. The Affirmation makes me wonder what is next. I am of course referring to the Affirmation of Commitments between the United States Department of Commerce (DoC) and ICANN. In the respect that the US is loosening its grip on ICANN a little, this is a good thing. Symbolically, of course it is gigantic... more

Working With ICANN’s IRT and Not Against is in Order

ICANN realized during the Mexico City public meeting that its draft proposals for new generic Top-Level Domains (gTLDs) did not take sufficient account of the trademark problems that might arise if the new top level domains become havens for cybersquatters. ICANN sensibly asked the trademark and brand owners to propose rules and procedures that might address these problems... more

IPv6… Unstoppable Road to Hyperconnectivity: Blame It On Opiates!

Some think IPv6 with its myriad addresses will accelerate the evolution of a hyperconnected world. But could a world where everything and everybody is sensed, monitored, located, to augment our quasi real-time interaction with the world outside our little selves, lead to total dependency, if not to gradual stupidity of the human race? Not surprisingly, a favourite topic for (late night) Internet Conference bar discussions... more

What’s the ROI on a $20m TLD Auction?

ICANN have taken a solid stance in regards to contention sets, with those yet to be resolved soon to be forced into auctions of last resort in the coming months. As expected, this has increased the velocity of private settlements between applicants, either via deals or private auctions. It seems like most applicants (wisely) don't want to see their funds going into ICANN coffers unnecessarily. more

Dealing With DMARC

DMARC is an anti-phishing scheme that was repurposed in April to try to deal with the fallout from security breaches at AOL and Yahoo. A side effect of AOL and Yahoo's actions is that a variety of bad things happen to mail that has 'From:' addresses at aol.com or yahoo.com, but wasn't sent from AOL or Yahoo's own mail systems. If the mail is phish or spam, that's good, but when it's mailing lists or a newspaper's mail-an-article, it's no so good. more

2023 Routing Security Summit Starts July 17 - Participate Virtually

Interested in learning more about routing security? How it can affect your connectivity supply chain? What are best practices for enterprises and organizations? What is the role of CSIRTs in securing routing? What are governments doing now, and planning to do in the future around routing security? more

How Many TLD Applications Will ICANN Receive?

This post could be subtitled: "The Wisdom of Elites." I polled some people I know in the domain field (plus Andrew Goodman, who wondered what the hell I was going on about). I asked them a simple question: "For the record, how many new TLD applications do you think there'll be?" Most of these people know the domain name world very well, but from different perspectives. Journalists, registrars, intellectual property attorneys, domainers, registry operators, TLD aspirants, entrepreneurs, domain aftermarket auctioneers, civil society activists... more

Lawful Registrations of Domain Names

Doug Isenberg notes in a recent CircleID essay that two records in domain name disputes were broken in 2017, namely number of cybersquatting claims (3,036 in 2016, 3,073 in 2017) and number of domain names implicated (5354 in 2016, 6370 in 2017). Fairly consistently from year to year, approximately twenty percent of filings are terminated (withdrawn): whether by settlement or nolo contendere we don't know. (All of these statistics come from the World Intellectual Property Organization (WIPO). more

Competition Is Sexy - Separation or Integration of the Domain Name Sales Channel?

Back in the early days of the public Internet, Network Solutions had a monopoly on .com, .org., and .net domain registrations and charged $100 per domain for a 2-year registration. Growing complaints about that predatory pricing was one of the factors that led to ICANN's creation. NetSol established an internal "firewall" in 1998 and its wholesale prices soon dropped to $6 per domain. VeriSign acquired NetSol for $21 billion in 2000, and then sold off the registrar side of the business to private equity in 2003. more

BlackBerry Z10: New Products and Old Domains Don’t Mix

Type www.z10.com into your browser and you'll arrive at an Amazon page on which "Global Mobiles" sells unlocked BlackBerry Z10 phones. What? Did you expect to be directed to a BlackBerry (formerly Research In Motion) site just because the Z10 has been touted as the phone that will help make or break the struggling company? What happened? A savvy domain speculator realized that his or her domain name had become a hot commodity... more

Minding the GAC and the Heckler’s Veto

ICANN meetings sometimes congeal around a single theme. In San Francisco the theme was captured on clever t-shirts bearing the iconic symbol of the London Underground with the words, "Mind the GAC." Here was a succinct and timely plea for the ICANN Board to pay serious attention to the Governmental Advisory Committee (GAC)'s concerns about new generic Top-Level Domains (gTLDs), rather than to risk undermining the long-term viability of the multi-stakeholder model. more

How Accurate is the Routing Registry?

The Internet Routing Registry (IRR) is a globally distributed routing information database that consists of several databases run by various organisations. Network operators use the IRR to publish their routing policies and routing announcements in a way that allows other network operators to make use of the data. In addition to making Internet topology visible, the IRR is used by network operators to look up peering agreements, determine optimal policies and to configure their routers. more