ICANN/GNSO GNSO Email List Archives

[ga]


<<< Chronological Index >>>    <<< Thread Index >>>

Re: [ga] Most Popular Invalid TLDs Should Be Reserved

  • To: George Kirikos <gkirikos@xxxxxxxxx>
  • Subject: Re: [ga] Most Popular Invalid TLDs Should Be Reserved
  • From: Karl Auerbach <karl@xxxxxxxxxxxx>
  • Date: Fri, 19 Jun 2009 13:02:06 -0700

George Kirikos wrote:

I recommend that the Security and Stability Advisory Committee compile 
statistics on
invalid TLD queries across all root servers, and from popular ISP-run DNS 
servers, in
order to create a Reserve List. The list of at least the top 1000 invalid TLDs 
should
be made public to ensure transparency, and be pruned only with the consensus 
support of
the community.
Which creates a kind of denial of service attack:  If I want to block my competitor or 
enemy from getting a TLD I'd generate a lot of pages and videos containing highly 
attractive links to URL's with names in that TLD, or I'd hire a botnet to generate queries 
for that TLD.
By-the-way, there's a not quite related issue:  IP addresses are often diseased from prior 
use.  For example some people I know get a constant (and very annoying) rain of packets 
from old Microsoft machines looking to contact some MS servers that used to sit at an 
address that has now moved into other hand.  I recently had to change providers for one of 
my outlying sites because some jerk started generating about 500 SIP Invites per second 
looking for an Asterisk server that used to be at that address.  (I had to change 
providers because no provider along the path would install a filter, so I abandoned the 
address to the next sucker^B^B^B^B^B^Bperson.  Last time I checked ARIN couldn't care less 
if they hand out an block that is diseased.
The net is at risk of dead spots in address space and DNS caused by this kind of thing as 
well as by filters and blacklists that once-established are never removed.
        --karl--








<<< Chronological Index >>>    <<< Thread Index >>>