DNS

Mitigating Spoofed Attacks Using IPv6 Address Space

Timothy D. Morgan's recent paper titled, "IPv6 Address Cookies", seeks to apply the fundamental shift in resource availability brought about by the vastly increased Internet address space in IPv6 to develop a novel, lower cost solution to mitigating spoofed attacks. "Spoofed denial of service attacks have plagued the Internet for a number of years, and show no signs of abating. Research into mitigation techniques has apparently not led to a financially viable solution, and new attacks have been discovered in the wild without being widely anticipated". The following provides an introduction to this paper. more

DNSSEC Deployment at the Root

The DNSSEC is a security protocol for providing cryptographic assurance (i.e. using the public key cryptography digital signature technology) to the data retrieved from the DNS distributed database (RFC4033). DNSSEC deployment at the root is said to be subject to politics, but there is seldom detailed discussion about this "DNS root signing" politics. Actually, DNSSEC deployment requires more than signing the DNS root zone data; it also involves secure delegations from the root to the TLDs, and DNSSEC deployment by TLD administrations (I omit other participants involvement as my focus is policy around the DNS root). There is a dose of naivety in the idea of detailing the political aspects of the DNS root, but I volunteer! My perspective is an interested observer. more

Why Don’t GAC Representatives Follow Their Own National Law?

A few weeks ago ICANN's domain name policy making organ (the GNSO) decided that the purpose of Whois was domain name coordination and not compulsory surveillance of domain name registrants. The US and Australian governments expressed their opposition. The US government's lack of concern for privacy is well known. But what about Australia? The Australian ICANN Governmental Advisory Committee (GAC) representative, Ashley Cross, tried to use his authority as "a government" to intimidate the GNSO, sending it a message announcing that "Australia" supports a broader definition of Whois purpose that gives ICANN a blank check... What does "Australia" really support, however? more

Help! This is Not an Emergency

I like the drift of the Pulver/Evslin proposal on emergency communications, and wish there was as vigorous a debate going on over here. I just hope we in the UK aren't jerked out of complacency by some major disaster -- although widespread use of pre-paid cellular means the problem of sunken landlines isn't as acute. Yet I can't help but wonder why the poor public has to wait for a disaster before they're given partial control over how their number maps to different destinations and services. Why can't I get a voicemail service from someone other than my connectivity provider? Why is ENUM hostage to the telcos, whose interest lies in ensuring that new services can only come from them? more

Examining Two Well-Known Attacks on VoIP

VoIP is here to stay. In fact many incumbent telecommunication carriers have started offering VoIP service for sometime and several new VoIP service providers have emerged. Aside from issues such as quality of service, the aspect of security, or lack thereof, is misunderstood by some of the VoIP service providers. This purpose of this article is to discuss two of the most well known attacks that can be carried out in current VoIP deployments. more

Interesting Facts About Domain Names

During a database testing, Dennis Forbes makes use of the .com zone file as data sample but he also stumbles upon some unexpected domain name discoveries which he has reported on his site. Dennis Forbes explains: "I recently had a need for a mid-sized amount of real-world data, which I required for testing purposes on low-end hardware (testing and demonstrating some of the new functionality of SQL Server 2005). I wanted something that wasn't confidential, which excluded the easy choice of using business data, and I refrain from using artificial data..." more

ENUM: Mapping the E.164 Number Space into the DNS

Many communications networks are constructed for a single form of communication, and are ill suited to being used for any other form. Although the Internet is also a specialized network in terms of supporting digital communications, its relatively unique flexibility lies in its ability to digitally encode a very diverse set of communications formats, and then support their interaction over the Internet. In this way many communications networks can be mapped into an Internet application and in so doing become just another distributed application overlayed on the Internet. From this admittedly Internet-centric perspective, voice is just another Internet application. And for the growing population of Voice over IP (VoIP) users, this is indeed the case... more

Put Free Expression on the Internet Governance Forum Agenda

The Internet Governance Project has joined free-expression advocacy organizations Reporters Without Borders and Article 19 to push for including Internet censorship and filtering problems on the agenda of the first meeting of the new Internet Governance Forum (IGF), a multistakeholder deliberation body created by the World Summit on the Information Society... more

CIRA Suspends Participation in ICANN

The Canadian Internet Registration Authority (CIRA) has issued a public letter to ICANN calling on the organization to follow accountable, transparent, and fair processes. Until the concerns are addressed, CIRA says it is suspending its voluntary contributions to ICANN... more

Examining the Reality of Convergence

If there is one word in the telecommunications that has suffered from over-abuse for many years now, it's convergence. The term has been liberally applied to each successive generation of communications technology for their supposed ability to solve a myriad of service delivery problems within a single unifying converged carriage and service delivery solution. Unfortunately, the underlying reality has always been markedly different from these wondrous promises, and we continue to see an industry that deploys a plethora of service delivery platforms and an equally diverse collection of associated switching and service delivery technologies. One can't help but wonder at the collective gullibility of an industry that continues to herald the convergent attributes of each new generation of communications technology, while at the same time being forced to admit that previous convergent promises have never been realized. more

How Domain Name Typo-Squatters are Gaming Google

In a recent article, eWeek reports on researchers at Microsoft revealing large-scale, typo-squatting schemes that use "multi-layer URL redirection to game Google's AdSense for domains program". According to this report, the Microsoft Research Systems Management Research Group succeeded in tracking a ring of typo-squatters registering misspelled domain names that generated traffic for serving advertising from Google. more

Notes from Tunis: The New Internet Governance Forum

I'm in Tunis at the World Summit on the Information Society (WSIS), where the biggest debate is over the future of "Internet Governance." The final text for this was agreed upon about 30 minutes ago. The two quick sounds bites are that (1) the US and the US based Internet Corporation for Domain Names and Numbers (ICANN) retain, for now, control over the most important aspects of the global Internet Domain Name System (DNS), and (2) the conversation over this issue and a surprisingly broader governance agenda is continuing, under the United Nations. more

Development Matters More than Domains

The advance teams are already gathered in Tunisia ahead of next week's second phase of the World Summit on the Information Society, and those of us on the press list are being deluged with announcements, releases, notices and invitations to meetings. The meeting, which runs from 15-18 November, is an opportunity to look at the progress that has been made since December 2003, when representatives and heads of state gathered in Geneva. more

Request to Extend the 24-Day Comment Period on the Proposed VeriSign Agreement

Bruce Tonkin (MIT) wrote in the Registrars mailing list yesterday with this: "We the undersigned registrars, request that the public comment period on the proposed agreement with Verisign be extended until Sunday 4 Dec 2005 so as to allow opportunities for in-person public discussions during the upcoming ICANN meeting in Vancouver..." In terms of process, the Registrar Constituency (RC) by-laws prevent the RC from balloting on anything in less than 24 days, and ICANN could require the interest groups it recognizes to have decision making processes that are capable of responding to the Board of Director's decision making process, in a better administrative law world. more

Public Policy Questions for Internet

There is little doubt that the Internet has formed part of the impetus for a revolutionary change in the nature of the global communications industry. "Revolutionary" in the sense that the past decade has seen fundamental and highly disruptive changes in the nature of the underlying technologies used by the industry, changes in the composition, ownership and role of industry players, changes in the nature of services offered to the end consumer, changes in the associated financial models used by the industry, and changes in the regulatory environments in which this industry operates. Considering that this industry was, in the latter half of the twentieth century, one of the largest and most influential industry sectors on a global basis, these revolutionary changes will doubtless have consequences that will echo onward for some time yet. more