new gtlds: WHAT DO THEY MEAN FOR YOUR BUSINESS? Jim Reid

Size: px

Start display at page:

Download "new gtlds: WHAT DO THEY MEAN FOR YOUR BUSINESS? Jim Reid jim@rfc1035.com"

Sharon Shields
8 years ago
Views:

1 new gtlds: WHAT DO THEY MEAN FOR YOUR BUSINESS? Jim Reid

2 the BIG PICTURE ICANN s decided to create lots of new gtlds.nokia,.green,.nyc,.scot,.shell, etc. ~1500 to to be added to the DNS over the next few years Some will be for large companies (private use?) Some selling to the general public Most of these will probably fail commercially Who really cares about domain names any more?

~1500 to to be added to the DNS over the next few years Some will be for large

3 DO YOU WANT To BUY? Why? Really, why? What does.foo offer over.bar or.com or...??? Check the small print: At the present time, it is not possible for <deleted> to provide complete information regarding the following: prices, terms and conditions, availability, activation time, and the continued introduction of ICANN policies. Pre-reserving a domain name with <deleted> does not prevent others from pre-reserving the same domain name with <deleted> or other domain name providers. <deleted> cannot guarantee that you will be able to purchase your prereserved domain name or that all available gtlds will be included in the <deleted> portfolio. <deleted> will do its best to promptly notify you when the domain name you have prereserved is available so that you have an opportunity to purchase it. However, the exact timing of this notice cannot be guaranteed and you will not have priority over anyone else. Additionally, some domain names may be subject to restrictions.

time, and the continued introduction of ICANN policies.

4 UNCERTAINTIES Time-lines When will.whatever go into the root? When will it offer names to the public? What names will be available? What will mydomain.whatever cost? What s the business justification/use case? How can I protect my IPR? eg trademarks

What names will be available? What will mydomain.whatever cost?

5 NAME COLLISIONS Many of the new gtld names are already in use today and not just in domain names. Active Directory, corporate networks, X.509 certificates What s to be done about that? Is this a serious problem or not? Who s going to fix this and how? Existing (ad-hoc) use will be painful/impossible to fix: e.g. renaming an AD Forest so it doesn t clash with.whatever

Is this a serious problem or not? Who s going to fix this and how?

6 ANALYSIS of DNS ROOT SERVER TRAFFIC DITL data held by DNS-OARC Two days traffic (~100B queries) examined in summer 2013 Shock results: almost ALL of the new gtlds are already found in DNS queries to the root.home and.corp get more than most existing TLDs Kicked into the long grass and might never get delegated ICANN preparing a risk mitigation/management framework

found in DNS queries to the root.home and.

7 RESOLVER SEARCH LISTS DNS clients sometimes search a list of domains Lookup A, then try A.B.C, then A.D.E, etc. What if B or C get added to the DNS as new TLDs? Local users might not get to A.D.E any more Local users might speak to the wrong A.B.C This has happened with previous new TLDs Affects almost anything, not just web servers/browsers Mail & SIP servers, SAP & database systems

Local users might not get to A.D.E any more Local users might speak to the wrong A.B.

8 What happens when it does? It s not MY PROBLEM Sure about that? Really? Even if your network is isolated from the Internet, internal DNS traffic, certificate names & so on might be leaking to the outside Stuff inside might be secretly relying on the Internet s DNS saying something.corp (say) does not exist

certificate names & so on might be leaking to the outside Stuff inside might

9 What TO DO? Audit your network Resolver settings, Active Directory systems, certificate usage, firewall/proxy configurations Turn on DNS query logging and look at them closely Do any of the new gtlds appear anywhere in the query names? Can anything in your network relying on the current DNS behaviour? ie Responses saying some.domain.name.whatever does not exist It s not only about DNS queries

configurations Turn on DNS query logging and look at them closely Do any of the new gtlds appear

10 ICANN s APPROACH Here s how you close your stable door after we unlocked it and let the horses out: Each new gtld is going to be given a list of blocked names based on analysis of DITL data These names will only be released for sale when it can be shown it s safe to do so. Outreach and education programme should start soon Risk mitigation/management framework by Q ?

pdf Each new gtld is going to be given a list of blocked names based on analysis of DITL data These names will only

11 QUESTIONS?

Name Collisions Briefing for Clients of Valideus. 4 March 2014

Name Collisions Briefing for Clients of Valideus 4 March 2014 4 March 2014 1. Foreword This report was produced by Valideus Limited to highlight how JAS Global Advisors name collision recommendations will