[95717] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: On-going Internet Emergency and Domain Names

daemon@ATHENA.MIT.EDU (Douglas Otis)
Mon Apr 2 19:57:25 2007

In-Reply-To: <414C11C7-CEA9-4C55-87E3-3151A8C596BA@cisco.com>
Cc: nanog <nanog@merit.edu>
From: Douglas Otis <dotis@mail-abuse.org>
Date: Mon, 2 Apr 2007 16:56:28 -0700
To: Roland Dobbins <rdobbins@cisco.com>
Errors-To: owner-nanog@merit.edu



On Apr 2, 2007, at 11:07 AM, Roland Dobbins wrote:
> On Apr 1, 2007, at 6:16 PM, Douglas Otis wrote:
>
>> Until Internet commerce requires some physical proof of identity, =20
>> fraud will continue.
>
> As has already been stated, this is hardly a guarantee.
>
> It seems to me that we're in danger of straying into d=E9formation =20
> professionnelle.

Agreed and my apologies for not being clear.  Registrars are unable =20
to curtail current levels of fraud without significant changes in how =20=

domains are acquired.  Consider registrar related fraud as a separate =20=

and perhaps even fruitless topic.

The recommendation was for registries to provide a preview of the =20
next day's zone.  A preview can reduce the amount of protective data =20
required, and increase the timeframe alloted to push correlated =20
threat information to the edge.  This correlated threat information =20
can act in a preemptive fashion to provide a significant improvement =20
in security.  This added level of protection can help defeat expected =20=

and even unexpected threats that are becoming far too common as well.

-Doug


home help back first fref pref prev next nref lref last post