For the last couple of years, the most common attack vector against the DNS system is the attack against the registrar. Either the attack is on the software itself using weaknesses in the code that could inject DNS changes into the TLD registry, or social engineering the registrar support systems and the attacker receives credentials that in turn allows the attacker to perform malicious changes in DNS. DNSSEC is the common security mechanism that protects the DNS protocol, but by using the registrar attack, any changes will result in a proper working DNS delegation. more
As the leading consulting firm to the Domain Name industry, we work with many of the existing gTLDs, ccTLDs and new gTLDs. During our engagements we do a lot of listening (as well as work) and this gives us a unique perspective on the key challenges the industry is facing. Recently, we are hearing feedback from many leading registries and registrars about their need for more dynamic pricing and promotions and their concern that there may not be enough flexibility in their billing systems to speedily handle their promotion plans. more
For those of us in the domain name industry, it's clear that security threats and the way we track, report, and mitigate them has been a topic of increased discussion and focus in recent months. As we prepare to come together as a community again at the next ICANN public meeting in Marrakech, many of us will look to continue these conversations, as there is no doubt it is a topic of importance, relevance and urgency for our community at this time. more
Readers of my posts will have noticed that we've been working over the last two months to launch the TLD Operator Webinar which was held recently. Its purpose was to unite all new TLD applicants and collectively share our experiences in order to build momentum in the industry and support each other in our pursuits. With more than 300 registrations and 40 percent of all new TLDs attending, we were humbled and overjoyed with the success -- validating our 'educated guess' that there was a global appetite for information to assist new TLD applicants. more
Loic Damilaville writes to report: Today AFNIC is publishing its new issue paper on the secondary market in domain names. The paper -- written to inform individuals as well as businesses -- gives a detailed account of the concept of "secondary market", the valuation mechanisms used, and the main players involved. The secondary market covers over-the-counter sales of already registered domain names, as well as the market in "second-hand domain names" and the ecosystem made up of the various players involved in these matters. more
In the matter relating to O.COM, I've focused on the fact that VeriSign has -- in correspondence to the organization that is counter-party to its .COM and transliterated .COM IDN Registry Agreements, in earnings calls with its investors and financial analysts, and in policy published on its website for every innocent and unsuspecting Tom, Dick, and Harry in the world to be duped by -- stated an unequivocal and unwavering commitment . more
Previously, this series tackled the terribly awful Amendment 35 to the NTIA-Verisign cooperative agreement and also made the case that the tainted presumptive renewal currently included in registry agreements is inherently anti-competitive. But renewing legitimacy and integrity of Internet governance requires accurately understanding the unique and significant role retained by the U.S. government following the IANA transition. more
Symantec today announced that it has signed a definitive agreement to acquire VeriSign's identity and authentication business, which includes the Secure Sockets Layer (SSL) Certificate Services, the Public Key Infrastructure (PKI) Services, the VeriSign Trust Services and the VeriSign Identity Protection (VIP) Authentication Service. more
The former US vice president, Al Gore, is backing the creation of a new green .eco domain name. Dot Eco LLC, the applicant for the new .eco Top-Level Domain (TLD), announced during the ICANN meetings in Mexico City that it has entered into an integrated partnership with former Vice President Al Gore and his philanthropy, the Alliance for Climate Protection, to secure and promote the .eco TLD. "We fully support Dot Eco LLC in its efforts to secure the .eco top level domain through the ICANN application process and look forward to working with Dot Eco LLC to promote .eco. This is a truly exciting opportunity for the environmental movement and for the internet as a whole," said Al Gore. more
Under a draft legislation approved by the Internal Market and Consumer Protection Committee on Tuesday, national enforcement authorities would be required to have a set of powers to detect and halt online breaches of consumers' rights across the European Union. more
According to the latest Domain Name Industry Brief from VeriSign, Inc., the fourth quarter of 2011 closed with a base of more than 225 million domain name registrations across all Top-Level Domains (TLDs) -- an increase of 5.9 million domain names, or 2.7 percent over the third quarter. Registrations have grown by more than 20.4 million, or 10 percent, since the fourth quarter of 2010, according to the report. more
Wikipedia defines a Mexican standoff as "a confrontation in which no strategy exists that allows any party to achieve victory. As a result, all participants need to maintain the strategic tension, which remains unresolved until some outside event makes it possible to resolve it." This would be an apt way to describe what may be possibly occurring presently between the Internet Corporation for Assigned Names and Numbers (ICANN) and its largest ratepayer, VeriSign. more
There are some surefire ways to get channel engagement and drive registrations, but doing what everyone else is doing is not going to cut it in the world of new TLDs. Successful Registrar engagement requires an investment of time far in advance of what some Registry Operators appear to be expecting, both in terms of ongoing relationship management as well as continually providing tools which make it easier for Registrars to sell your extension over other TLDs. more
eco, which is the largest internet industry association in Europe, is holding a virtual meeting later this month to discuss Brexit. The meeting, which is scheduled for July 27th at 1200 UTC, will be the first of several dialogues among industry to discuss the potential impact of the UK's exit from the EU on the domain name industry. As I mentioned in a recent post, the exit of the UK from the EU has an "unknown" impact on how domain name registries and registrars will interact with UK based registrants. more
The domain name system is not the place to police speech. ICANN is legally bound not to act as the Internet's speech police, but its legal commitments are riddled with exceptions, and aspiring censors have already used those exceptions in harmful ways. This was one factor that made the failed takeover of the .ORG registry such a dangerous situation. But now, ICANN has an opportunity to curb this abuse and recommit to its narrow mission of keeping the DNS running... more