Abolish The Public Suffix List

The Public Suffix List has become a critical dependency for web security despite inconsistent implementation, restrictive admission policies and limited maintenance resources. Its replacement would require coordinated standards development and greater domain operator control. more

Unfolding Forensics of a Lawfare Train Wreck: The EU CRA

The EU Cyber Resilience Act faces mounting implementation challenges involving cybersecurity standards, vulnerability reporting, regulatory overlap and fundamental rights. The author argues that its expansive obligations risk undermining the regulation's effectiveness and enforceability. more

The Case for Longitudinal DNSSEC Data

Repeated DNSSEC failures show the limits of snapshot diagnostics. A longitudinal record of signed delegations could reveal persistent misconfigurations, rollover problems and correlated failures, helping operators identify recurring patterns and their likely sources. more

Governance Theater: Why the gTLD Expansion Program Is a Lose-Lose Proposition

ICANN's gTLD expansion program is structured to collect fees regardless of outcomes, leaving brand, portfolio and single-string applicants bearing financial risk while accountability mechanisms offer little meaningful remedy when the process fails. more

The Namespace You Plan - and the One That Takes Shape

Structural analysis of four established gTLD namespaces suggests registration totals alone offer an incomplete picture. Tracking composition alongside operational data could help new registry operators investigate whether their namespaces are developing as intended. more

How CZDS Zone Data Helps Detect Domain Abuse

Daily CZDS zone data can help brand owners and investigators detect suspicious domain registrations earlier, trace related infrastructure, monitor expired names, and shift enforcement from reactive disputes toward faster, evidence-based intervention. more

The Last gTLD Round Taught Us the Wrong Lessons

Fourteen years after ICANN's last gTLD expansion, registration figures offer an incomplete verdict. The next round will test whether applicants can build namespaces with enduring relevance, rather than merely generating impressive launch volumes and revenues. more

Proposed New DNS Resource Record Types for AI Agent Discovery

For more than three decades, domain names have served as a foundational identity layer for internet applications. Initially used to identify early network services such as TELNET, FTP, and email, they later became essential to web browsing and a growing range of online services. more

DNS Abuse and Criminal Infrastructure: Beyond Definitions and Blocklists

Research suggests criminals may control a striking share of newly registered gTLD domains, raising questions about whether ICANN's definitions, contractual safeguards and enforcement mechanisms are keeping pace with the industrial scale of technology-facilitated harm. more

Whose Precedent Gets Remembered? Selective Amplification Has Its Own Amnesia

DotConnectAfrica's landmark .AFRICA IRP victory established an ICANN accountability precedent later expressly invoked by Amazon. Selective amplification has since detached that precedent from its origins, distorting the historical record. more

Safe for Whom? A Pilot’s Take on the AI Incident-Reporting System

Drawing on aviation's trusted incident-reporting model, a former pilot argues AI safety needs confidential reporting paired with public learning, and that legitimacy, international participation and transparency must be built into SAFE from the outset. more

DNSSEC Doesn’t Need a Better Story - It Needs a Better Tuesday

DNSSEC adoption is stronger than headline figures suggest, yet uneven across industries. New data indicate the bigger obstacle is not reputation but operational friction, especially key rollovers, registrar coordination and automation still missing across major domains. more

Why AI Traffic Needs Its IP Classification

As AI agents increasingly act on users' behalf, the internet's human-versus-bot divide is breaking down. A dedicated AI IP classification could replace guesswork with transparent, context-aware traffic policies that improve access, enforcement, and infrastructure efficiency. more

Poland Excluded from Starlink’s European Region: What Musk Dispute Reveals About Digital Sovereignty

Poland's exclusion from Starlink's new European roaming region has triggered a dispute with Warsaw, exposing how private infrastructure providers can shape cross-border connectivity and raising questions about digital sovereignty, accountability, and internet governance in Europe. more

ICANN Should Immediately Clarify if Applicants for the Same String Can Communicate Before Reveal Day

With more than 1,600 applications filed for ICANN's 2026 new gTLD Round, self-revealing applicants face uncertainty over whether pre-Reveal Day communications and agreements about overlapping strings could violate strict rules against privately resolving contention sets. more