Domain Names

Phish or Fair?

It shouldn't be a big surprise to hear that phishing is a big problem for banks. Criminals send email pretending to be a bank, and set up web sites that look a lot like a bank. One reason that phishing is possible is that e-mail has no built in security, so that if a mail message comes in purporting to be from, say, [email protected], there's no easy way to tell whether the message is really from bankofamerica.com, or from a crook. more

Reducing Unreachable ICANN Registrations

Recently ICANN published a report on inaccurate registration data in her own databases. Now the question is presented to the world how can we mitigate this problem? There seems to be a very easy solution. ... The question to this answer seems simple. To know who has registered with an organisation. This makes it possible to contact the registered person or organisation, to send bills and to discuss policy with the members. more

IANA Checkmate - Fool Me Once, Shame on You, Fool Me Twice Shame on Me

In connection with the recent publication of the IANA RFP, there have been some commenters that have proclaimed that removing the requirement of the Contractor to document the consensus of relevant stakeholders in connection with the delegation of new gTLDs from the original draft Statement of Work as a win for ICANN. However, when reading the recently revised IANA RFP language in light of the Government Advisory Committee (GAC) Dakar Communiqué, a rather compelling legal case can be made... more

Top-Level Domains and Search

Search marketers and SEO mavens are starting to pay attention to top-level domains (TLDs) now that ICANN has announced a starting date. Many of them are dubious about the benefits of TLDs to search, but they are missing out on why search will benefit from new TLDs - and vice-versa. A recent article on SEO.com looked at the value of new top-level domains for search. One of the reasons for his skepticism comes from a common but completely erroneous notion that there's some sort of order to how top-level domains work today... more

Using Domain Filtering To Effect IP Address Filtering

In Taking Back The DNS I described new technology in ISC BIND as of Version 9.8.0 that allows a recursive server operator to import DNS filtering rules in what ISC hopes will become the standard interchange format for DNS policy information. Later I had to decry the possible use of this technology for mandated content blocking such as might soon be the law of the land in my country. I'm a guest at MAAWG this week in San Francisco and one of the most useful hallway discussions I've been in so far was about the Spamhaus DROP list. more

Facebook.com/Brand vs. a New TLD: What’s a Brand to Do?

Last week I published an article in Ad Age that the editors titled "Should your company jump on the dot-brand bandwagon?" I received several emails and LinkedIn requests from advertising and PR agencies as well as brand managers. One of the questions I received had to do with my opinion on whether brands that are currently promoting themselves via Facebook, e.g., "Find us on Facebook.com/brand," should consider the new Top-Level Domains (TLDs). more

ICANN Successfully Tiptoes Through Political Minefield With New TLD Applicant Guidebook

ICANN released its sixth version of the draft Applicant Guidebook for the new Top-Level Domain (TLD) program in April following three years of debate surrounding the rules and procedures that will outline how potential applicants will apply to own their own piece of Internet real estate. Overall, the response has been positive. more

Who is Wagging Who? Same Dog, New Tale.

Today, my company AusRegistry International signed an open letter to the United States House Subcommittee on Intellectual Property, Competition, and the Internet as a show of support for ICANN and its new Top-Level Domain program. I'm disappointed by the nature of the oversight hearing the Subcommittee has called and I believe it will only be a distraction. Let's not kid ourselves; the reason for this hearing is to beat up ICANN over the new TLD program. I think this is unfair and unjustified... more

ICANN Board: You Got It Right. Then You Got It Wrong. Now, Get It Right Again.

The ICANN Board has itself in a pretty pickle. The Governmental Advisory Committee (GAC) Consultancy with the Board in Brussels was an apparent non-starter. After hundreds of man-hours' worth of comments provided by the Intellectual Property Constituency (IPC), the Board continues to claim that it lacks sufficient information on trademark issues in order to respond to concerns. more

Making IDN gTLDs Attractive and Safe

The primary focus of this article is to illustrate that the Applicant Guidebook is not supplying sufficient protection mechanisms, and creates too high financial barrier for those who are interested in applying for multiple Top-Level Domains (TLDs) that are translations/transliterations of each other and/or of an existing generic Top-Level Domains (tt-gTLDs). more

Mubarak, Ben Ali, Kaddafi, ICANN: What They Have in Common Is Scary. Will They Share the Same Fate?

Will current failed ICANN direction on the New generic Top-Level Domains (gTLDs) doom its Regime to follow the fate of Mubarak, Ben Ali, and soon Kaddafi's? The whirlwinds of change we all have witnessed that started blowing in Tunisia, moved to Egypt and is now engulfing Libya, Yemen, Jordan and soon many others, have signaled a revolutionary way of thinking not just at local or regional levels but I believe on global levels too. more

Domain Dialing

The emergence of generic Top-Level Domains (gTLDs) and country code Top-Level Domains (ccTLDs) allowed the internet browsing to become much easier and intuitive. After all, from the user's perspective, it is so much easier to remember a domain instead of an IP address... The IP addresses replacement by domain names helps the Internet to become this global phenomenon that we know. Unfortunately, this revolution that had occurred in the domain market was not followed by other markets. more

Policy Failure Enables Mass Malware: Part I (Rx-Partners/VIPMEDS)

This is the first in a series of releases that tie extensive code injection campaigns directly to policy failures within the Internet architecture. In this report we detail a PHP injection found on dozens of university and non-profit websites which redirected visitor's browsers to illicit pharmacies controlled by the VIPMEDS/Rx-Partners affiliate network. This is not a unique problem, however the pharmacy shop sites in question: HEALTHCUBE[DOT]US and GETPILLS[DOT]US should not even exist under the .US Nexus Policy. more

Three Things Registrars Must Do to Enhance Security

If the rise of phishing has taught us anything, it's that on the Internet, if a digital asset has value, there's somebody out there who wants to steal it. Whether it's a bank account password, a credit card number, a PayPal login, or even a magic sword in an online game, there's a fraudster somewhere trying to misappropriate it for his or her own nefarious purposes. Domain names have always been a target for such criminals. more

DNS RPZ, Malicious Domains… Bring Your Own Policy. Dress Casual.

Paul observed that most new domain names are malicious. Are they? Since the "dawn of tasting", some 30 million domain names have been created for the purposes of interposition on existing name to resource mappings. That is a third of the .COM historical growth, and mostly in the last five years. ... It is difficult not to conclude that interposition on persistent, public referents is without malice, and that the malicious parties are advertisers seeking to transform public referents into private property, as promotional devices... more