ICANN ICANN Email List Archives

[gnso-ff-pdp-may08]


<<< Chronological Index >>>    <<< Thread Index >>>

Re: [gnso-ff-pdp-may08] Proposed solutions - solicit support from gtld operators

  • To: RLVaughn <RL_Vaughn@xxxxxxxxxx>
  • Subject: Re: [gnso-ff-pdp-may08] Proposed solutions - solicit support from gtld operators
  • From: "Mike O'Connor" <mike@xxxxxxxxxx>
  • Date: Fri, 01 Aug 2008 07:43:43 -0500


Great post Randy. I broke it into chunks and put all 4 suggestions on the wiki.

At 07:25 PM 7/31/2008, RLVaughn wrote:

With Mike R's "We should not worry greatly at this point about solutions that may or may not be 'in scope of ICANN's mission." in hand I will add the following solution proposal:

Ask gtld operators to consider:
   a) instrumenting their services for fastflux discovery
   b) participating in a background notification process to registrars
      about domains of concern.
   c) Honoring their advertised TTLs for all name servers in their scope.
   d) adding a fee structure for domains needing long-term NS
      short TTL.

Basis assumptions:
a) gtld operators have in-depth visibility of domains in their scope
   of control.  Abusive domains using name servers with highly
   volatile IP addresses evidence through visible churn in gtld
   responses.  Correlating high churn on gtld servers with other
   indicators of fastflux offers the prospect of early detection of
   fast flux behaviors.

b) gtld operators offer highly credible sources of data.  Background
   notifications allow investigations into domains which present
   symptoms of fastflux in a manner that can help prevent needless trauma
   to registrants of false positive discoveries.  Further benefit of
   the background notification process may be gained by developing a
   reputation score for registrars.

c) Honoring the advertised TTL for name servers is a preventative
   to high IP address volatility of name servers with the side benefit
   of reducing churn

d) Price controls based on number of name server IP changes at the
   gtld level could reduce incentives to utilize highly volatile
   name server IPs.  Introducing a threshold value before charges
   apply or allowing a grace period prior to levying charges
   could allow for NS IP changes needed for essential domain maintenance.

Caveats:
Those gtld operators who have solutions in work or in place for
problematic domains of discourse are better placed to suggest
actions which their peers will consider reasonable - or not.

No virus found in this incoming message.
Checked by AVG - http://www.avg.com Version: 8.0.138 / Virus Database: 270.5.10/1584 - Release Date: 7/31/2008 12:00 PM





<<< Chronological Index >>>    <<< Thread Index >>>

Privacy Policy | Terms of Service | Cookies Policy