Name Collision in the DNS

by SkyDriver Tue 06 Aug 2013, 5:11 pm

A study of the likelihood and potential consequences of collision between new public gTLD labels and existing private uses of the same strings.

Names that belong to privately-defined or “local” name spaces often look like DNS names and are used in their local environments in ways that are either identical to or very similar to the way in which globally delegated DNS names are used. Although the semantics of these names are properly defined only within their local domains, they sometimes appear in query names (QNAMEs) at name resolvers outside their scope, in the global Internet DNS.

The context for this study is the potential collision of labels that are used in private or local name spaces with labels that are candidates to be delegated as new gTLDs. The primary purpose of the study is to help ICANN understand the security, stability, and resiliency consequences of these collisions for end users and their applications in both private and public settings.

The potential for name collision with proposed new gTLDs is substantial.

https://www.icann.org/en/about/staff/security/ssr/name-collision-02aug13-en.pdf

by SkyDriver Tue 06 Aug 2013, 5:13 pm

Addressing the Consequences of Name Collisions

As directed by the ICANN Board of Directors on 18 May 2013, ICANN commissioned and today releases the results of a study that considers the likelihood and impact of name space collisions between applied-for new gTLD strings and non-delegated TLDs. Additionally, the study also reviewed the possibility of collisions arising from the use of X.509 digital certificates.

https://www.icann.org/en/news/announcements/announcement-3-05aug13-en.htm

by SkyDriver Wed 07 Aug 2013, 9:49 am

Following the shock news this morning that ICANN wants to delay hundreds of new gTLD applications due to potential security risks, we pinged a few of the biggest applicants for their initial reactions.

Donuts, Uniregistry and Famous Four Media, which combined are responsible for over a fifth of all applications, have all responded so far, so we’re printing their statements here in full.

http://domainincite.com/14016-donuts-uniregistry-and-famous-four-respond-to-icanns-new-gtld-security-bombshell

by SkyDriver Fri 09 Aug 2013, 12:12 pm

Name collisions derail new top level domain name timeline.

Everyone in the executive suite at Verisign must have been smiling this morning.

https://domainnamewire.com/2013/08/06/after-sweeping-it-under-the-rug-name-collisions-come-back-to-haunt-new-tld-program/

by SkyDriver Thu 15 Aug 2013, 8:56 am

http://www.icann.org/en/about/staff/security/ssr/new-gtlds-proposed-class-08aug13-en.xlsx

by SkyDriver Fri 16 Aug 2013, 6:45 pm

The New gTLD Applicants Group has slated Interisle Consulting’s report into the risk of new gTLDs causing security problems on the internet, saying the problem is “overstated”.

The group, which represents applicants for hundreds of gTLDs and has a non-voting role in ICANN’s GNSO, called on ICANN to reclassify hundreds of “Uncalculated” risk strings as “Low” risk, meaning they would not face as substantial a delay before or uncertainty about their eventual delegation.

http://domainincite.com/14162-ntag-rubbishes-new-gtld-collision-risk-report

by SkyDriver Sat 24 Aug 2013, 1:18 pm

Barring a flurry of activity at ICANN or changes to the name collision mitigation plan, the launch of new TLDs won’t be a 2013 event.

ICANN released updated contracting statistics for its new top level domain name program yesterday, and applicants will be sad to see that there are still just four signed registry agreements.

https://domainnamewire.com/2013/08/24/do-only-4-new-tlds-have-a-chance-of-going-live-this-year/

by SkyDriver Wed 28 Aug 2013, 9:06 am

http://domainincite.com/docs/ICANN_DRP_StringConfusion_Objections_130826.pdf

by SkyDriver Fri 30 Aug 2013, 1:23 pm

One of ICANN’s proposed methods of reducing the risk of name collisions in new gTLDs actually may create its own “significant risk for abuse”, according to RIPE NCC.

Asking registry operators to send a notification to the owner of IP address blocks that have done look-ups of their TLD before it is delegated risks creating a “backlash” against ICANN and registry operators, RIPE said.

http://domainincite.com/14311-icanns-name-collision-plan-creates-risk-of-abuse

by SkyDriver Fri 30 Aug 2013, 1:29 pm

In a comment posted on ICANN website concerning the new gTLD name collision report, the Registries Stakeholder Group (RySG) issued a consensus statement that they support the letter submitted by the New gTLD Applicant Group (NTAG) asking ICANN to allow the 20% of new gTLD applications classified as :Unknown Risk” In the Collision Report To Move Forward.

http://www.thedomains.com/2013/08/27/registries-stakeholder-group-rysg-supports-ntag-letter-on-name-collision-except-for-verisign/

by SkyDriver Fri 30 Aug 2013, 1:40 pm

The first tranche of responses to Interisle Consulting’s study into the security risks of new gTLDs, and ICANN’s proposal to delay a few hundred strings pending more study, is in.

Comments filed with ICANN before the public comment deadline yesterday fall basically into two camps:

http://domainincite.com/14334-name-collisions-comments-call-for-more-gtld-delay

by SkyDriver Sat 14 Sep 2013, 8:47 pm

No string confusion objection decisions have been published since August 28.

Has the International Centre for Dispute Resolution (ICDR) ceased publishing results from string confusion objections in the wake of contradictory decisions?

https://domainnamewire.com/2013/09/12/string-confusion-objections-grind-to-a-halt/

by SkyDriver Fri 20 Sep 2013, 6:02 pm

.Shop applicant Commercial Connect is the big loser in the latest batch of String Confusion Objections.

After a long drought, International Centre for Dispute Resolution (ICDR) has posted an updated list of String Confusion Objection decisions.

https://domainnamewire.com/2013/09/13/9-string-confusion-objections-dismissed-commercial-connect-loses-8/

by SkyDriver Fri 20 Sep 2013, 6:49 pm

ICANN is looking at “consistency issues” in new gTLD String Confusion Objections, program manager Christine Willett said in an ICANN interview published last night.

The nature of the probe is not clear, but ICANN does appear to be working with the dispute resolution provider, the International Centre For Dispute Resolution, on the issue.

http://domainincite.com/14512-icann-looking-into-string-confusion-confusion

by SkyDriver Fri 20 Sep 2013, 6:58 pm

In comments to ICANN, Neustar provides model to calculate risk, eliminating the need for "uncalculated risk" category and unwarranted delay to new TLD program

http://online.wsj.com/article/PR-CO-20130917-909761.html

by SkyDriver Fri 27 Sep 2013, 12:34 pm

In a joint letter Microsoft, Verisign and Yahoo! urged ICANN to study the Collission Mitigation Plan before allowing any

“The undersigned companies and organizations submit this letter to express our significant concern regarding several unresolved stability and security issues associated with the upcoming delegation of new gTLDs.”

http://www.thedomains.com/2013/09/23/microsoft-verisign-and-yahoo-send-joint-letter-to-icann-on-name-collision-mitigation-plan/

by SkyDriver Sun 06 Oct 2013, 6:54 pm

They’re as mad as hell and they’re not going to take it any more.

New gTLD applicants yesterday laid into the Association of National Advertisers and Verisign with gusto, accusing them of seeking to delay the program for commercial reasons using security as a smokescreen.

http://domainincite.com/14592-angry-gtld-applicants-lay-into-ana-and-verisign-apple pie

by SkyDriver Sat 12 Oct 2013, 4:45 pm

ICANN has given blessed relief to many new gTLD applicants by wiping potentially months off their path to delegation.

Its New gTLD Program Committee this week adopted a new “New gTLD Collision Occurrence Management Plan” which aims to tackle the problem of clashes between new gTLDs and names used on private networks.

http://domainincite.com/14659-new-gtld-applicants-get-a-way-to-avoid-name-collision-delay

by SkyDriver Sat 12 Oct 2013, 4:51 pm

Top level domain applicants could start registering domains sooner, but there’s a catch.

ICANN has changed its plan for mitigating the risk of so-called “name collisions” at the second level of new top level domain names, potentially allowing new top level domain applicants to start selling domains sooner than expected.

https://domainnamewire.com/2013/10/09/icann-gives-new-tld-applicants-a-faster-path-to-market/

by SkyDriver Sat 19 Oct 2013, 7:29 pm

New gTLD Collision Occurrence Management Plan by ICANN

by Sponsored content

Name Collision in the DNS

Name Collision in the DNS

Re: Name Collision in the DNS

Donuts, Uniregistry and Famous Four respond to ICANN’s new gTLD security bombshell

After sweeping it under the rug, Name Collisions come back to haunt new TLD program

Strings Risk Category from the Name Collisions in the DNS Report

NTAG rubbishes new gTLD collision risk report

Do only 4 new TLDs have a chance of going live this year?

Visual String Similarity

ICANN’s name collision plan “creates risk of abuse”

Registries Stakeholder Group (RySG) Supports NTAG Letter on Name Collision; Except For Verisign

Name collisions comments call for more gTLD delay

String confusion objections grind to a halt

9 String Confusion Objections dismissed, Commercial Connect loses 8

ICANN looking into string confusion confusion

Neustar Analysis Shows ICANN Mitigation Plan Overstates Risk of Harmful Domain-Name Collision

Microsoft, Verisign & Yahoo! Sends Joint Letter To ICANN: We Want An Update On Name Collision Mitigation Plan

Angry gTLD applicants lay into ANA and Verisign “apple pie”

New gTLD applicants get a way to avoid name collision delay

ICANN gives new TLD applicants a faster path to market

NGPC Resolution for Addressing the Consequences of Name Collisions

Re: Name Collision in the DNS