Getting On Board With DNSSEC - A Personal Recount

I first became familiar with DNSSEC around 2002 when it was a feature of the Bind9 server, which I was using to setup a new authoritative DNS platform for customers of the ISP I was working for. I looked at it briefly, decided it was too complex and not worth investigating. A couple of years later a domain of a customer got poisoned in another ISPs network. And while the DNS service we provided was working properly, the customers impression was we hadn't protected them. more

BYOD Woes and Worries

Like the scene of a movie in which a biblical character holds back the mighty sea and is about to release the tide against his foes, BYOD has become a force of nature poised to flood those charged with keeping corporate systems secure. Despite years of practice hardening systems and enforcing policies that restrict what can and can't be done within the corporate network, businesses are under increasing (if not insurmountable) pressure to allow a diversifying number of personal devices to connect to their networks and be used for business operations. more

NASA Teething Troubles Teach a DNSSEC Lesson

On January 18, 2012, Comcast customers found they could not access the NASA.gov website. Some users assumed that Comcast was deliberately blocking the website or that NASA, like Wikipedia and Reddit, was participating in the "blackout" protests against the Stop Online Piracy Act (SOPA) going on that day. As it turned out, the truth was much less exciting, but it offers important lessons about DNSSEC. more

We Are All Internet Exceptionalists Now

The Stop Online Piracy Act (SOPA) and its defeat call attention to a delicious irony in public discourse on Internet governance. Even those who don't want the Internet to be an exception from traditional forms of regulation and law are forced to admit that something new and exceptional must be done to bring it under control, such as massive departures from traditional concepts of territorially bounded sovereignty through the use of in rem jurisdiction. more

Refusing REFUSED

The U.S. Congress' road to Stopping Online Piracy (SOPA) and PROTECT IP (PIPA) has had some twists and turns due to technical constraints imposed by the basic design of the Internet's Domain Name System (DNS). PIPA's (and SOPA's) provisions regarding advertising and payment networks appear to be well grounded in the law enforcement tradition called following the money, but other provisions having to do with regulating American Internet Service Providers (ISPs) so as to block DNS resolution for pirate or infringing web sites have been shown to be ineffectual, impractical, and sometimes unintelligible. more

Carriers Skirting Rules on Network Neutrality vs. Free’s Innovative Network

From will they ever learn department, we are once again seeing attempts by incumbent carriers to skirt rules around network neutrality. They tried and failed with UBB. Now they are at it again with "speed boost" technologies. The two technologies at question are Verizon's "Turbo" service and Roger's "SpeedBoost". more

The 5 Stages of gTLD Shock

PCWorld lists new gTLDs among the 5 major changes facing the Internet in 2012. No doubt the sudden introduction of hundreds of new gTLDs will have a significant impact on the Internet. I postulate that users will react to new gTLDs by going through the following stages... more

New gTLDs and Endangered Languages

While exploring the UNESCO's interactive atlas of the world's languages in danger, I am happy to see that new generic Top-Level Domains could help save some of these languages. .CAT for Catalan language already exist; .BZH will probably have the "Breton" language to help survive; "Basque" is vulnerable but there is a .EUS initiative; .CORSICA will certainly help the "Corsican" language to develop... more

ICANN Senate Hearing: The Battle Between Intellectual Property and Multistakeholderism

The US Senate Committee on Commerce, Science and Transportation Hearing on ICANN's Expansion of Top Level Domain Names on December 8, 2001 was all about strategy. The strategy was simple: while the world has its attention turned to the debate on the copyright legislative proposals of the Stop Online Piracy Act (SOPA) and the PROTECT IP Act, let's have another ICANN hearing and try to re-open trademark protection for new gTLDs. more

IPv6 Deployment from a Different Perspective

Often when looking at IPv6 deployment statistics, the size of the organisation or the network is not taken into account. In this article, we look at IPv6 deployment of Local Internet Registries (LIRs) per country in correlation to the size of the LIR. When looking at IPv6 deployment at the LIR level, we can look at the following two metrics... more

Will Google Search Replace Domain Names?

The growing notion among big advertising agencies and brand marketers is that as search engines find answers instantly, there's no real need to enter a domain name in the browser and therefore domain names are far less important. They're absolutely right. Why would you type www.rolex.com when you can simply enter 'Rolex' and be there before you blink? But where they are seriously wrong is when you enter anything like 'Interlink', 'Pronet', 'National Trust', 'Premier Traders' or 'United Manufacturing', uncontrollable citations will gush out from every corners of the world. more

Evaluating the Growth of Internet Traffic

At the opening of NANOG 53, Kevin McElearney of Comcast commented that within Comcast Regional Area Networks (CRANs), the company is regularly pushing 40+ Gbps of traffic out to the global Internet. This is a massive amount of traffic and in many cases, it's more traffic than entire countries around the world push out to the Internet. It got me thinking about just how much traffic there is on the Internet and the rate at which that traffic will grow over the coming years. more

IPv4 Historical Imbalances and the Threat to IPv6

It is an open secret that the current state of IPv4 allocation contains many accidental historical imbalances and in particular developing countries who wish to use IPv4 are disadvantaged by the lack of addresses available through ordinary allocation and are forced into purchasing addresses on the open market. As most of the addresses for sale are held by organisations based in the developed world, this amounts to a transfer of wealth from the developing world to the developed world, on terms set by the developed world. more

Businesses Angry with ICANN’s New gTLD Structure, Says CADNA

In a conference hosted by the Coalition Against Domain Name Abuse (CADNA) on Tuesday, discussions were held concerning ICANN's upcoming new gTLD Program. CADNA President Josh Bourne said: "ICANN has an image problem. Businesses are outright angry with ICANN because of the way that this program has been structured. We are not trying to derail the rollout of new gTLDs altogether, but rather, we are proposing an opportunity for ICANN to make this Program much less detrimental to brands and businesses..." more

The Mainsleaze Blog

Mainsleaze is nerdy slang for spam sent by large, well-known, otherwise reputable organizations. Although the volume of mainsleaze is dwarfed by the volume of spam for fake drugs, account phishes, and Nigerian 419 fraud, it causes work for mail managers far out of proportion to its volume... The problem with mainsleaze is that it is generally mixed in with mail that the recipients asked for, and there's no way to tell the difference mechanically. more