Neustar Urges Caution to ICANN Before Batching

Neustar has sent the following letter to ICANN. Neustar sent the letter to urge caution to ICANN before launching the batching process to promote competition and choice for consumers in a fair and balanced manner... "Neustar has long been an advocate for the introduction of new generic top level domains. Given the long and sometimes arduous road the ICANN community has traveled to get to this point in the process, we are understandably anxious to avoid unnecessary delay in the launch of new gTLDS." more

Supercookie Debate Offers a Transparent Opportunity

Recent articles in the press have outlined how sites including MSN and Hulu are now using an advanced version of the old cookie file to track user behavior. These "supercookies" are very hard to detect and delete, and can track user behavior across multiple sites, not just one. These tricky little trackers have lawmakers pressing the FTC to investigate, and the IAB scrambling to defend industry practices. more

Five Security Blind Spots from Prolonged Implementation of a Business Continuity Plan Amid COVID-19

The novel coronavirus outbreak (COVID-19) has prompted many organizations in Mainland China and Hong Kong to execute their business continuity plan (BCP). During the last epidemic in 2003, the SARS outbreak lasted for nine months – and with an infection rate that is increasing rapidly, this new coronavirus has the potential to cause prolonged periods of commercial disruption, and heavy reliance on BCPs. more

The Facts about Vertical Integration?

In a far less dramatic event, the ICANN Board will soon decide the question of vertical integration between domain name registries and registrars in the new Top-Level Domain (newTLD) round. But Adams' statement continues to ring true today and the question the ICANN Board must ask itself is: "what facts do we have before us to justify a change in policy." After 2+ years of intense community discussion on this topic, the answer is clearly -- very few. more

Apple’s Naked Self Interest

Any vendor in the platform business knows that their primary product is programming interfaces -- the so-called APIs that developers depend upon in order to deliver applications. The API exposes features of the platform, and differentiate applications running on that platform from all others. Lose control of the API, and you will lose control of the developer. Developers are the leading indicator for platform success. Ergo, lose the developer, lose the platform. more

Time for Self Reflection

In case you don't read any of what I have to say below, read this: I have dual citizenship. Along with my homeland citizenship, I am of the Internet, and see it as my personal duty to try and make the Internet safe. Atrivo (also known as Intercage), is a network known to host criminal activity for many years, is no more. Not being sarcastic for once, this is the time for some self reflection. more

A to Z on Internet Policy and Regulation – Brazil 2022

Time has come again, another year of general elections in Brazil. Some 30,000 candidates are running for Executive and Legislative seats: 1 President, 27 State Governors, 27 Federal Senators, 513 Federal Deputies, 1059 State Deputies, 24 District Deputies to govern 212+ million people and one of the largest economies in the world. For a few lucky industries, success and failure do not correlate with who is in power; for others, policy and regulation are everyday business. more

Navigating the “Pentest” World

The demand for penetration testing and security assessment services worldwide has been growing year-on-year. Driven largely by Governance, Risk, and Compliance (GRC) concerns, plus an evolving pressure to be observed taking information security and customer privacy seriously, most CIO/CSO/CISO's can expect to conduct regular "pentests" as a means of validating their organizations or product's security. more

Logjam, Openssl and Email Deliverability

RHEL6/Centos6 (and presumably RHEL7/Centos7) machines with the latest openssl packages now refuse SSL connections with DH keys shorter than 768 bits. Consider RHEL6 sendmail operating as a client, sending mail out to a target server. If the target server advertises STARTTLS, sendmail will try to negotiate a secure connection. This negotiation uses openssl, which will now refuse to connect to mail servers that have 512 bit DH keys. The maillog will contain entries with "reject=403 4.7.0 TLS handshake failed". more

It’s Time to Put a Bow on the URS: Our Work is Almost Done

For years our community has struggled with the rules of the URS - the Uniform Rapid Suspension - aimed at taking down the "worst of the worst" domain name registrations in a manner faster and cheaper than its predecessor, the Uniform Domain Name Dispute Resolution Policy - the UDRP. On June 27, in Prague, a diverse group met to discuss the fate of the URS. To my surprise, it was a rare "kumbaya" moment, and that makes it worthy of comment. more

IANA 2.0: Ensuring ICANN Accountability and Transparency for the Future

The National Telecommunications and Information Administration's (NTIA) March 14, 2014, announcement proposing the transition of its legacy Internet Assigned Numbers Authority (IANA) stewardship role has presented the Internet Corporation for Assigned Names and Numbers (ICANN) multi-stakeholder community equal amounts of opportunity and responsibility. We have been handed a singular opportunity to define the terms of any stewardship transition and the fundamental responsibility to get it right. more

What May Happen to GAC Advice? 3 Fearless Predictions

Many TLD applicants are likely to respond to the GAC Advice in a manner that is like story telling: Based on a mixture of fiction garnished with some facts from their applications, applicants will write savvy responses with only one aim -- to calm down the GAC's concerns and survive the GAC Advice storm. The "duck and cover" strategy... According to the Applicant Guidebook, material changes to applications need to go through a Change Request process. more

Given Comprehensive TLD Applicant Guidebook, How Ready Are Applicants? Notes from the Field - Part 1

One of the benefits of being a third party (i.e., no financial interest in new Top-Level Domains (TLDs) or applying for any) and independent (i.e., self financed and non-exclusive) is that we at Architelos have the natural incentive, not to mention a survival imperative, to try to gain a broad and deep perspective on the market. While no one can accurately predict the future, I'd like to suggest where I think this market is headed and why. These thoughts are based on our observations over the last six months in hopes that both prospective TLD applicants and service providers will benefit. more

How Does the Internet Industry Compare?

In an earlier CircleID post (The ISP Industry: Concentrated or Diverse?) we discussed if the ISP industry is concentrated and concluded the industry is amazingly open and varied. This time we try to identify criteria that make other economic sectors comparable to our own industry, using the global automotive manufacturing sector as an example to test our assumptions. Comparing the Internet industry with other industries is interesting, because it is quite special in a number of ways: it is transparent, keeps detailed records and values a high level of industry self-regulation. It also enables organisations to serve a global market. more

Is Bulgarian Cyrillic .?? (.bg) Really Similar to Other Latin ccTLDs?

Bulgaria has proposed for an Internationalized Domain Name (IDN) ccTLD string .?? (Cyrillic for .bg, or U+0431 U+0433), but the proposal was turned down by the ICANN DNS Stability panel in May 2010 without any arguments or an option for appeal. The proposed string is composed of two characters... more