Re: [gnso-ff-pdp-may08] short organizat meeting on fast flux Thursday9AM Paris time -- meeting summary

[Marc Perkel <marc@xxxxxxxxxx>]

I hope this message makes the list.

That's for the summary Mike. I had some thoughts on the fast flux issue. 
Let me see if I can outline it.
I'm wondering if ICANN can have the root servers provide some 
statistical information to the public through DNS requests that would 
allow any third party to determine certain non-private information about 
domains through a DNS request. Information like the age of the domain, 
the number of times the name servers have changed in the last 3 days, 
etc. For example, suppoe we took the domain icann.info and had it return 
information as follows:
dig example.com.nameserverchanges.icann.info TXT

This would return a TXT record something like: "3 12 48"

The 3 numbers would indicate something like changes in the last 6 hours. 
Changes in the last day, and changes in the last 4 days. The above 
example would indicate that the domain example.com is switching DNS 
every 2 hours. Most domains would read all zeros with an occasional 1 or 2.
Furthermore a request like this.

dig example.com.domainage.icann.info TXT

Would return a TXT record with the domain age in days. That way new 
domains can easily be detected I believe that this kind of information 
might be a useful tool in providing a solution to fast flux hosting. 
This kind of info, like the name server changes could be read by web 
browsers and the browser could warn or prevent the user from viewing a 
fast flux host site.
Are you all familiar with the idea of providing information through DNS 
other than IP lookup?