Logjam, Openssl and Email Deliverability

RHEL6/Centos6 (and presumably RHEL7/Centos7) machines with the latest openssl packages now refuse SSL connections with DH keys shorter than 768 bits. Consider RHEL6 sendmail operating as a client, sending mail out to a target server. If the target server advertises STARTTLS, sendmail will try to negotiate a secure connection. This negotiation uses openssl, which will now refuse to connect to mail servers that have 512 bit DH keys. The maillog will contain entries with "reject=403 4.7.0 TLS handshake failed". more

China’s FttX Boom

China's broadband subscriber base continues to rise. Massive FttX deployments are underway, spurred on by competition between the three full-service operators all aiming to increase 'stickiness' for subscribers. While fixed line subscribers are expected to decline into 2011, broadband subscribers are still rising, driven by cheaper rates and the higher bandwidth on offer compared to mobile Internet. more

A Telegraph-Era TLD?

While doing research for a paper on telegraph codebooks, I was reminded of something I had long known: one could have short addresses for telegrams. A short article in The New Yorker described how it worked in New York City. Briefly, one could pick more or less any name that wasn't in use, and list it with the Central Bureau for Registered Addresses... more

ICANN’s WDPRS Report and Plan to Clean Up Whois Records

ICANN's recently released report, ICANN's Whois Data Accuracy and Availability Program: Description of Prior Efforts and New Compliance Initiatives [PDF], is a summary of the Whois Data Problem Report System's (WDPRS) reports spanning a one-year period that concluded at the end of Fenruary 2007. In case you're not familiar with the WDPRS, it's system that tracks complaints about inaccurate or incomplete whois entries. Notable facts from the report include: There were 50,189 reports for which ICANN received follow-up responses during the year... more

IPv6 Shows a Pulse

On World IPv6 Day IPv6 showed a pulse! However faint that global pulse may have been, our network showed at least some form of IPv6-life occurred on that day. Long supporters of IPv6, with a significant global DNS footprint handling extremely large volumes of global traffic we, at CommunityDNS, were curious on what may result through an organized focus on the use of IPv6. more

France to Stop Using Google as Part of Its Plan to Establish Digital Sovereignty

The 2013 NSA revelations by the American whistleblower Edward Snowden was a stern wake call for French politicians. more

It’s Time to Put a Bow on the URS: Our Work is Almost Done

For years our community has struggled with the rules of the URS - the Uniform Rapid Suspension - aimed at taking down the "worst of the worst" domain name registrations in a manner faster and cheaper than its predecessor, the Uniform Domain Name Dispute Resolution Policy - the UDRP. On June 27, in Prague, a diverse group met to discuss the fate of the URS. To my surprise, it was a rare "kumbaya" moment, and that makes it worthy of comment. more

U.S. Cable Industry Says to FCC That Consumers Don’t Need 25 Mbps Speed

Apparently, we consumers in the USA don't need to have broadband speeds of 25 Mbps or higher. And we certainly don't need upload speeds greater than 3 Mbps! At least, that's according to comments filed to the US Federal Communications Committee (FCC) by the National Cable & Telecommunications Assocation (NCTA) in response to the FCC's proposal to raise the definition of "broadband" from 4 Mbps downstream and 1 Mbps upstream to 25 Mbps down and 3 Mbps up. more

A Financial Back-Up to Win .WINE?

Still want to protect wine Geographical Indications (GIs)? A hot potato! Where the bucket ends is still to be found and the launching of both .WINE and .VIN new gTLDs is still an issue. At least some of the three applicants are following the ICANN new gTLD applicant guidebook, working with parties interested in bringing better protection mechanism to protect wine GIs. There seems to have been an attempt which has not worked... more

WIPO Snafu Over britishmuseum.org Case?

WIPO just published a decision regarding the domain dispute over the britishmuseum.org domain name. At first glance, everything seems alright. The world famous British Museum won in a default judgment as the current registrant (the respondent) never replied). However, drill a little deeper and something is amiss. The "parties" section of the case lists the respondent as "British Museum Resources, Limited, West Bay, George Town, Kentucky, United States of America." more

New Agreement Declares ICANN Independent

The Internet Corporation for Assigned Names and Numbers (ICANN) has reached a major milestone today with a new agreement in place with the U.S. Department of Commerce allowing the organization greater independence and giving more countries oversight of the organization. more

ARIN Seeks Caribbean candidate for Board of Trustees

Persons from the Caribbean seeking to contribute to the governance ecosystem of the global Internet can now volunteer for an appointment to the board of trustees of the American Registry for Internet Numbers (ARIN). The call for volunteers will close on April 30 at 5 pm EDT. ARIN is one of five registries worldwide that coordinate Internet number resources. Its region spans the United States, Canada and many countries in the Caribbean. more

Forty Percent of New Generic TLDs Shrinking, According to Domain Incite Analysis

Forty percent of non-brand new gTLDs are shrinking, reports Kevin Murphy in Domain Incite: "According to numbers culled from registry reports, 172 of the 436 commercial gTLDs we looked at had fewer domains under management at the start of June than they did a year earlier. more

Jugaad Innovation and Applications of DNSSEC

It would be one of the ironies of global technology development that the West has effectively so far followed a Jugaad principle of "good enough" innovation for DNS security, whereas India could well embrace all the latest advances in DNS security as its Internet economy grows. Like most other protocols from the early Internet, the DNS protocol was not designed with security built in. For those protocols, security services were typically either implemented at a different layer of the protocol stack, or were added on later. more

Belize to Host Caribbean Peering and Interconnection Forum

Belize will host the fourth Caribbean Peering and Interconnection Forum, known as CarPIF, on June 13 and 14. Since its inception in 2015, CarPIF has brought together regional and international technology experts and telecommunications industry execs to discuss a range of topics related to Internet peering and interconnection trends, and their relevance to the Caribbean region. more