ICANN/GNSO GNSO Email List Archives

[ga]


<<< Chronological Index >>>    <<< Thread Index >>>

Re: [ga] China confirms alternate root for TLDs

  • To: Karl Auerbach <karl@xxxxxxxxxxxx>, Veni Markovski <veni@xxxxxxxx>
  • Subject: Re: [ga] China confirms alternate root for TLDs
  • From: Hugh Dierker <hdierker2204@xxxxxxxxx>
  • Date: Wed, 8 Mar 2006 06:26:16 -0800 (PST)
  • Cc: Danny Younger <dannyyounger@xxxxxxxxx>, ga@xxxxxxxxxxxxxx
  • Domainkey-signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=Message-ID:Received:Date:From:Subject:To:Cc:In-Reply-To:MIME-Version:Content-Type:Content-Transfer-Encoding; b=jDLWqxVbPd6Iv8XfxfvaVTIUsY1jsl3l74YGIh7+UhTOZPW5V0xwPM3iTWtapJEl9zKMTZONqx/rKp2jfXKOKIryjMx/fW0CbFKwGfM7Dcejo9z6LrzvS97Dr/8i9i7R4KHWCirTshHnmadySrQRKm9F7pzdgcEJPo8kFDXsvkE= ;
  • In-reply-to: <Pine.LNX.4.64.0603070015380.1136@lear.cavebear.com>
  • Sender: owner-ga@xxxxxxxxxxxxxx

Karl,
   
  You did not address whether or not this can "hurt" the "net" as the rest of us use it.
  I am having trouble finding the harm. I rely on experts like yourself to break it down and tell me why it is bad.
   
  e

Karl Auerbach <karl@xxxxxxxxxxxx> wrote:
  
On Mon, 6 Mar 2006, Veni Markovski wrote:

> Danny and all, perhaps you may wish to take a look at 
> http://english.people.com.cn/200603/03/eng20060303_247684.html for the true 
> information?

Not much actual information at that link, merely a denial without concrete 
substantiation of what actually is being done.

> It's always good to double check such "news" before posting them to the 
> mailing list.

Some of actually went and did better than mere "double" checking. We 
cranked up DNS tools, like "dig" and sent queries and looked at responses. 
No plugins were involved and nothing was playing games appending suffixes 
or rewriting names; we went to the bedrock level, DNS and nothing but DNS.

My own check was somewhat cursory and was replicative of the cheks of 
others - some of their output is on the Circle-ID thread - but from my own 
observation I am quite sure that some Chinese servers were, in fact, 
answering for the purported TLDs.

It was late at night when I did it so I didn't make note of the important 
little bits, like the "aa" flag - yes, it was dumb of me and sloppy. But 
the point was that some Chinese name servers did appear to be responding, 
without error, to queries using the new names.

Perhaps I, and others, were seeing responses containing cached data from 
some transient experiment? Maybe. But then again maybe not. Perhaps I 
and the others were simply misinterpreting what we saw - in my case I know 
that my work was not of scientific quality - but then again our eyes are 
somewhat familiar with the arcane art of looking at DNS queries and 
following chains of delegations.

So, my sense is that it does seem like there is rather a solid nugget of 
truth buried deep within the rumors and concerns.

Now, I would hope that ICANN might actually make an inquiry and publish a 
highly detailed statement of what, in fact, happened. And I would hope 
that if China is doing what new.net did that ICANN will publicly apply the 
same words and phrases of condemnation to China that ICANN did to new.net.

But I doubt that ICANN will make such an inquiry. ICANN did not make an 
inquiry into how Taiwan munged its own roots a couple of years ago. (You 
can find the technical details of that buried in the board email archives 
when I described the details to the board. That is assuming that someone 
at ICANN has created an archive of board email - It didn't have one when I 
was on the board.) And yes, Taiwan was very definitely running its own 
root for a while and admitted it privately and described it, apparently 
accurately, as an experiment that somebody forgot to turn off.

--karl--







		
---------------------------------
Yahoo! Mail
Bring photos to life! New PhotoMail  makes sharing a breeze. 


<<< Chronological Index >>>    <<< Thread Index >>>