Verisign’s Preliminary Comments on ICANN’s Name Collisions Phase One Report

Verisign posted preliminary public comments on the "Mitigating the Risk of DNS Namespace Collisions" Phase One Report released by ICANN earlier this month. JAS Global Advisors, authors of the report contracted by ICANN, have done solid work putting together a set of recommendations to address the name collisions problem, which is not an easy one, given the uncertainty for how installed systems actually interact with the global DNS. However, there is still much work to be done. I have outlined the four main observations... more

Verizon Throws 18 States Under the Progress Train

I am a happy Verizon FIOS fiber-to-the-home customer in Connecticut, I admire the long view Verizon took to build its FIOS infrastructure, and I appreciate the substantial punishment that Verizon took from Wall Street until it became obvious that FIOS would be a huge success. But Verizon is not building FIOS in all of its territories! Verizon is unloading land lines in eighteen states because they don't want to keep building FIOS there... more

Court OKs Private Seizure of Domain Names That Allegedly Sold Counterfeit Goods

Luxury brand Chanel has engaged in a fierce campaign against counterfeit websites in federal court in Nevada. It has seized approximately six hundred domain names in the last few months, reports Venkat Balasubramani. "I'm sympathetic to the "whack-a-mole" problem rights owners face, but this relief is just extraordinarily broad and is on shaky procedural grounds." more

Islamic TLDs and the Challenge of Good Governance

As governments ask themselves whether they should not be the only ones in charge, and everyone else is more determined than ever to stay involved, Internet governance is now a front-page topic. But away from the theoretical debates about which model is best, one real-life situation may end up looking strangely like a vindication of the multi-stakeholder model by governmental organisations. The situation in question is that of Islam and Halal. Two applications that look like they are caught in a kind of new gTLD program groundhog day. more

ICM Announces General Availability of .XXX Domain Names

ICM Registry, the official registry of the new adult top-level domain (TLD) launched today for General Availability of .XXX domain names on a first come, first served basis. While the debate over the new domain has been fierce, the company reports today: "The introduction of .XXX has quickly become the most successful launch of any new sponsored top level domain. The positive public response has fueled global media interest normally not afforded to a new domain launch. In addition, the global advertising campaign, a first for any adult-related company, includes hundreds of nationally broadcast TV commercials, radio, newspapers and online ads. The www.buy.xxx website is already receiving nearly one million visitors per day." more

DNS Industry Insider Summit: Fostering Collaboration Among DNS Leaders

This week, 17 individuals from about a dozen organizations in the DNS space met up in Manchester, NH at the Dyn Inc. headquarters for a first of its kind Summit for DNS industry insiders. Called "Inside Baseball," we wanted to bring people together from every spectrum of the DNS industry to inspire collaboration and innovation. more

Might CubeSats Provide Broadband Internet Connectivity One Day?

In November, 2016, SpaceX filed a request for approval to launch 4,425 Internet-service satellites using the Ku and Ka frequency bands. The satellites were expected to measure 4 x 1.8 x 1.2 meters. In February, 2018 SpaceX launched two Internet-service test satellites - TinTin A and B - that measured only 1.1 x .7 x .7 meters. Why the size difference? more

Towards More Efficient Registry-Registrar Relations

On the morning of Wednesday 15th October, the The Domain Name Association (the DNA) held an important working group meeting during ICANN 51 Los Angeles. The topic was to discuss several operational issues between registries and registrars. The meeting's unofficial ongoing name is the Registry-Registrar Operations Working Group. The meeting was a continuation of an inaugural meeting that was held back in June of this year, and covered in a Industry Association: An Implementation Model circulated by the DNA from September 17, by Executive Director Kurt Pritz. more

ICANN and the Hyper-Aggressive Trademark Owners: The “Monster Test”

We read and hear a lot of complaints from trademark interests about allegedly rampant cybersquatting and other forms of trademark infringement, but it's rare to see a story about reverse domain name hijacking and other abuses committed by them. That's what made it so refreshing to see an article in the Saturday, April 4th Wall Street Journal titled "The Scariest Monster of All Sues for Trademark Infringement – Fancy Audio-Cable Outfit Defends Its Brands; A Mini Golf Course Fights Back". more

Vint Cerf Comments on Government’s Role in Internet Broadband Access

Some offhand comments by Google's Vint Cerf at a recent event seem to have a triggered a panicky "Vint Cerf proposes nationalizing the Internet" buzz that's been ramping up fairly rapidly. Holy BitTorrent, Batman! Army paratroopers seen dropping into parking lots at AT&T and Comcast, while the Transportation Security Agency orders us all to remove our shoes before surfing the Web! Settle down, everyone. As usual with these kinds of stories, the truth is significantly different from the breathless buzzing. Here's how Vint described his thinking on this issue to me... more

9 Thoughts on Stepping Up Spam and Malware Enforcement

In a tweet, EU commissioner for the Information Society Neelie Kroes congratulates OPTA on the spam fine for the golf ball printing company Backsound. Since 2004 the Dutch OPTA is the number one spam and malware fighter of the EU with a total of €1.9 million in fines. It made me ask two question to myself: How come that we seldom hear of other spam fines in the EU? And can the EU change this in any way? more

Google as DNS, Wikileaks as PoC

Wikileaks is still accessible -- via Google. Does that change anything? For many Internet users IP addresses as well as domain names are completely transparent. Further, Google (and other search engines) and often the first stop when these users wants to find a service, or a web site. Thus, many of us discussed over the years the eventual viability of Google (... and other search engines) as "DNS" (note the "'s). Now, don't jump at my throat quite yet... more

Help Us Build a Sustainable European Cloud

Last month, I announced our Open Data Hub to the CircleID community, inviting anyone interested in making the digital sector more transparent to join our efforts. Today, I am excited to share summaries of our three-part series describing our vision for a sustainable European cloud. It’s a key part of our Roadmap to Sustainable Digital Infrastructure by 2030, and one that is meant to not merely challenge the dominance of the big, non-European cloud providers, but offer an entirely different paradigm that is open-source, fair, sustainable, and creates economic opportunities for all. more

DNS, Domain Names, and Certificates: The Missing Links in Most Cybersecurity Risk Postures

In 2019, we've seen a surge in domain name system (DNS) hijacking attempts and have relayed warnings from the U.S. Cybersecurity and Infrastructure Agency, U.K.'s Cybersecurity Centre, ICANN, and other notable security experts. Although the topic has gained popularity amongst CIOs and CISOs, most companies are still overlooking important security blind spots when it comes to securing their digital assets outside the enterprise firewalls -- domains, DNS, digital certificates. more

The Purple Team Pentest

It's not particularly clear whether a marketing intern thought he was being clever or a fatigued pentester thought she was being cynical when the term "Purple Team Pentest" was first thrown around like spaghetti at the fridge door, but it appears we're now stuck with the term for better or worse. Just as the definition of penetration testing has broadened to the point that we commonly label a full-scope penetration of a target's systems with the prospect of lateral compromise and social engineering as a Red Team Pentest -- delivered by a "Red Team" entity operating from a sophisticated hacker's playbook. more