Anti-Phishing Working Group comment on domain tasting

[Laura Mather <laura.mather@xxxxxxxxxxxxxxxx>]

The Domain Name System Policy Working Group of the Anti-Phishing Working Group 
respectfully submits the following comment on the Initial Report on domain 
tasting.  If you have questions about this comment or would like further 
information, please contact me.
 
-Laura Mather
laura.mather@xxxxxxxxxxxxxxxx
Managing Director of Operational Policy
Anti-Phishing Working Group
 
-------------------------------------------
 
The Domain Name System Policy Working Group of the Anti-Phishing Working Group 
(APWG) performed a study on the use of domain 
tasting by phishers.  That study can be found here: 
http://www.antiphishing.org/reports/DNSPWG_ReportDomainTastingandPhishing.pdf

The report shows minimal use of tasting by phishers in the time the study was 
performed -- which is different than a claim by the ISPC in its constituency 
impact statement.  
 
It should be noted, though, that members of the anti-phishing community have 
had to increase their infrastructure to account for the much larger number of 
potential phish sites that are being registered by tasters, and this impedes 
anti-phishing efforts and increases the cost of detecting and mitigating 
fraudulent behavior.