CircleID

Comments

DNS Resolution, Browsers & Hope For The Future

• Comment posted Apr 19, 2012 3:43 am PDT — by David A. Ulevitch
  This is awesomely written.  It will take time to replace system calls, but POSIX has introduced new system calls over the years that have gained traction.  It's easy to be backwards compatible and still move the ball forward. Andrew —…

Driving DNSSEC: The Need for Integration of All the Functions Needed

• Comment posted Apr 19, 2012 3:39 am PDT — by David A. Ulevitch
  Creating an echo chamber doesn't create security.  I'm sorry to be the contrarian here, but this is simply furthering false assumptions.  First, Genachowski is simply repeating already inaccurate rhetoric that he has been supplied.  Automation is not security.  Automation for…

BYOD Woes and Worries

• Comment posted Apr 10, 2012 3:21 pm PDT — by David A. Ulevitch
  Phil — Separating devices does not work. Human nature tells us that the workers will find the shortest path to accomplishing their work.  If they have a contact they need to email on their personal device, they will just email…

Why Brands Need Their Own TLD - The Mulberry-Sale Site that Scammed Me

• Comment posted Oct 17, 2011 9:04 pm PDT — by David A. Ulevitch
  whitehouse.com wasn't hijacked — It used to be owned by an adult site.  If people can't figure out that whitehouse.gov is the address for the whitehouse, they won't figure out www.whitehouse is the official site either.  In fact, more people…

Proposal on How SSL Certificate Industry Should Be Replaced Gains Some Momentum

• Comment posted Oct 12, 2011 6:48 pm PDT — by David A. Ulevitch
  This has been in the works for a LONG time, and discussed for a while.  SSL has always been a sham.  Momentum had been quietly building for a while, and it just took a few CAs to bring it into…

ICANN Names Steve Crocker as Chair of the Board

• Comment posted Jun 24, 2011 6:20 pm PDT — by David A. Ulevitch
  This is awesome.  Congratulations Steve!

Top Public DNS Resolvers Compared

• Comment posted Apr 12, 2011 9:20 pm PDT — by David A. Ulevitch
  Rick — Okay, so forget DNS Advantage, I didn't know it was consumer-focused since we've had non-consumer customers tell us that Neustar sales people are pitching it as a business product.  Misunderstanding, I'm sure. So then is this the product…

• Comment posted Apr 12, 2011 4:29 am PDT — by David A. Ulevitch
  Rick — I thought you guys killed DNS Advantage?  I can't even find a link to it on Neustar or Ultra's website.  I've never heard of a single organization using it.

• Comment posted Apr 08, 2011 5:09 am PDT — by David A. Ulevitch
  Okay, I guess I have some more work to do to make us better in SE Asia. :-( Eastern Europe should be fixed by end of next week. Thanks!

• Comment posted Apr 08, 2011 4:18 am PDT — by David A. Ulevitch
  Thanks, and just curious when the results were collected (approximately)?

Inquiring About the "Unthinkable"

• Comment posted Mar 10, 2011 6:34 pm PST — by David A. Ulevitch
  David — Wouldn't users simply ignore responses from that particular root server knowing they have other valid sources to get answers for '.' ?

Taking Back the DNS

• Comment posted Feb 19, 2011 1:16 am PST — by David A. Ulevitch
  The only correlation is if the gov't mandated the use of DNS RPZ with certain blacklists.  I don't anticipate that happening. Frank, see COICA — This is *exactly* what is being proposed by the USG.

The Ultimate Differentiator: Reliability!

• Comment posted Dec 02, 2010 2:33 pm PST — by David A. Ulevitch
  This is great.  I think most people underestimate the importance of reliability and consistency.

Application Delivery Controllers as Safety Net for Ad Servers

• Comment posted Sep 15, 2010 3:19 pm PDT — by David A. Ulevitch
  With tools like boomerang and others available to developers, all of this belongs in the application logic so it can respond in real-time to dial-up or dial-down the feature flags.  Having a hardware device in the line-of-fire of requests is…

DNS Clients Do Request DNSSEC Today

• Comment posted Sep 07, 2010 8:21 pm PDT — by David A. Ulevitch
  People, businesses and ISPs will validate for a limited period until a major site is inaccessible and then they'll turn it off.  Look how users interact with SSL certs for an example.  Nobody cares if it doesn't validate, they just…

An Attack on DNS is an Attack on the Internet

• Comment posted Aug 17, 2010 12:00 am PDT — by David A. Ulevitch
  David — You are right, I could not deal with a 40gbps attack today.  I'm more interested in knowing if you really did have a 50gbps attack (or 40) because I don't really believe I've heard of attacks that big…

• Comment posted Aug 16, 2010 4:15 pm PDT — by David A. Ulevitch
  @peter — I just think it's odd that there was no talk amongst major network operators about this attack and various peering exchanges don't show any traffic increases across their links at the time of the attack.  It's certainly possible…

• Comment posted Aug 15, 2010 4:49 pm PDT — by David A. Ulevitch
  Link to data?

Taking Back the DNS

• Comment posted Jul 30, 2010 5:28 pm PDT — by David A. Ulevitch
  I'm glad to see you've come to the same conclusion I have — that people should have control over their DNS experience.  I've built OpenDNS on this core belief and the fact that 1% of the world's Internet traffic is…

Measuring Typosquatting Perpetrators and Funders

• Comment posted Feb 17, 2010 7:22 pm PST — by David A. Ulevitch
  Nice report Ben and Tyler.  This is a fairly damning article, and it'll be interesting to see how Google responds.  I never had any solid estimates of how big the business was, but I had my guesses — and your…

NXDOMAIN Substitution: Good or Evil?

• Comment posted Dec 30, 2009 5:46 pm PST — by David A. Ulevitch
  It's not about Good or Evil, it's just a preference. And as a preference, it should be easy to turn on and off and for users to control it at the edge.

An Authenticated Internet

• Comment posted Sep 30, 2009 2:04 pm PDT — by David A. Ulevitch
  Will there be growing pains?  Sure. Dan — But in the absence of DNSSEC-aware stub resolvers (which would make them full-blown resolvers, a side-effect I support wholeheartedly), how do you expect DNSSEC to ever make an impact for end-users? Nefarious…

Just Say No, to Your ISP Subverting Your DNS Queries

• Comment posted Jun 29, 2009 7:47 pm PDT — by David A. Ulevitch
  Sprint Wireless blocks outbound 53.  I've never been able to get someone on the other end of the line that even knows that that means.  Some of our savvier Sprint wireless users talk to us on 5353. :-)

• Comment posted Jun 27, 2009 12:22 am PDT — by David A. Ulevitch
  Paul, I think it's a great idea to expose this stuff but there's a better way to do it than through a form on your personal website. ICSI at Berkeley has been collecting large swaths of data about this for…

Why Not an Interim Step Until DNSSEC is Ready?

• Comment posted Jun 20, 2009 11:48 pm PDT — by David A. Ulevitch
  One word: Akamai. DNSSEC will never work because it believes that answers should be globally consistent, a perspective that has no place on the Internet we use today.  DNSSEC also is designed with the implementation being done in offline signing,…

• Comment posted Jun 18, 2009 9:53 pm PDT — by David A. Ulevitch
  Chris — (1) I don't compete with UltraDNS, it would be apparent if I did because I'd be siphoning off their customers.  It's tempting, though.  (2) People who read Circle ID by and large know who I am and likely…

• Comment posted Jun 18, 2009 8:01 pm PDT — by David A. Ulevitch
  Chris, Full Disclosure — I think UltraDNS is deceptive and has sleazy annoying sales people, but that's just my opinion. (I put my disclosure at the top!) First, how Ali allowed this to get posted on Circle ID I have…

".Pol", a ".Com" for Political Candidates

• Comment posted May 02, 2009 5:14 pm PDT — by David A. Ulevitch
  It's too late to fix the stupidity of having .mil and .gov only apply to US organizations.  Let's not continue the stupidity by creating a .pol for politicians. If you really want it, lobby for it to exist under .us,…

No Way Out of Australian ISP Filters

• Comment posted Oct 14, 2008 1:55 am PDT — by David A. Ulevitch
  I don't think it's right to not include the source or link to the "Read full story" in the RSS slug.  Can you fix this?

Unreasonable ccTLD Registry Price Increases!

• Comment posted Sep 05, 2008 6:24 pm PDT — by David A. Ulevitch
  This is how markets work.  If you are unsatisfied with their price increase you should have locked in your pricing with the registrar for an extended period of time. If your registrar wouldn't do that, perhaps you shouldn't have given…

Day 30: Kaminsky DNS Bug Disclosure

• Comment posted Aug 07, 2008 5:26 am PDT — by David A. Ulevitch
  The timeline actually begins back in march when we all met up at MSFT.  I suppose it began when kaminsky found this issue, but resolution started back in march.

Shouting 'Bug' on a Crowded Internet...

• Comment posted Jul 22, 2008 6:30 pm PDT — by David A. Ulevitch
  You have a vast misunderstanding of the facts. 1) DNS impacts the entire Internet population.  2) The attack is trivial. Those two things set this apart from your comparison by ORDERS of magnitude.  Also, Dan included a wide circle of…

Not a Guessing Game

• Comment posted Jul 16, 2008 7:30 am PDT — by David A. Ulevitch
  I can say with absolute certainty that Mr. Williams does not know about the vulnerability that will be disclosed. I can say with /near/ certainty that Paul didn't know about this issue before Dan raised it. But your entire post…

• Comment posted Jul 15, 2008 11:29 pm PDT — by David A. Ulevitch
  a multitude of reasons though I do think we can do something to encourage adoption…

• Comment posted Jul 15, 2008 7:10 pm PDT — by David A. Ulevitch
  It appears anycasted, but the one I tested against failed.

• Comment posted Jul 15, 2008 5:36 pm PDT — by David A. Ulevitch
  That's great George.  I'm glad we were able to help!

Largest Synchronized Internet Security Effort Underway to Patch Newly Found DNS Bug

• Comment posted Jul 08, 2008 11:26 pm PDT — by David A. Ulevitch
  Larry — Yes it was. http://blog.opendns.com/ has some of our perspective. :-)

68,000 Open Recursive DNS Servers Behaving Maliciously; "This is a crime with few witnesses"

• Comment posted Dec 12, 2007 3:38 pm PST — by David A. Ulevitch
  Yes, this is a poorly written report.  I think the data is probably good, but it's obscured by inaccuracies in the write-up which I told the authors about before it published.  None of the significant errors I pointed out were…

In Praise of OpenDNS and a Wii Factoid

• Comment posted Oct 24, 2007 2:07 am PDT — by David A. Ulevitch
  Jeroen, You should be lobbying for us to setup a POP near you and to support the features you need. Will you be at ICANN in LA next week? -david

Anycast Technology Effectiveness in Recent DNS Attack

• Comment posted Mar 10, 2007 3:29 am PST — by David A. Ulevitch
  There's another article over at that has a bit more commentary that might actually start a discussion. The CNET News.com article is just a rehash of the original release.

OpenDNS: It's Not SiteFinder for Obvious Reasons

• Comment posted Jan 03, 2007 12:29 am PST — by David A. Ulevitch
  Matthew, I just noticed you are in San Francisco.  Why don't we just grab lunch or something?  My cell and email are on my personal website http://david.ulevitch.com/ Thanks David Ulevitch

• Comment posted Jan 03, 2007 12:27 am PST — by David A. Ulevitch
  Matthew, Points well taken.  I know we can't announce features a month before we launch them because we move really fast and that's just not strategically wise. One really important perspective to keep in mind, if we do something to…

Domain Registrations Hit 112 Million

• Comment posted Nov 30, 2006 9:51 pm PST — by David A. Ulevitch
  What percentage are parked? What percentage are constantly churned with domain-tasting? Actually, what percentage of the 9.4million were as a result of domain tasting?

OpenDNS: It's Not SiteFinder for Obvious Reasons

• Comment posted Nov 06, 2006 6:47 pm PST — by David A. Ulevitch
  Martin, I can't say I fully disagree that this is interesting waters we are walking down.  I feel strongly that users are the ultimate arbiter of what is the right thing to do.  That is why we made a specific…

If You Adopt Vista, Your DNS Traffic is Going to Double

• Comment posted Sep 08, 2006 11:03 pm PDT — by David A. Ulevitch
  I also pointed out much of the same; To argue it doubles traffic is misleading at best.

Nation of Cameroon Typo-Squats the Entire .com Space

• Comment posted Aug 18, 2006 5:33 am PDT — by David A. Ulevitch
  I have to agree with John Levine.  Furthermore, if this is being done by the Government of Cameroon, why all the secrecy?  It only benefits from more transparency. I still view the entire operation as suspect.  Even if the Government…

• Comment posted Aug 18, 2006 2:30 am PDT — by David A. Ulevitch
  The wildcard is back on. And in response to your original post John, We give users the tools they need to decide how they want it to work for them: nxdomain, have it redirect .cm to .com as a typo…

OpenDNS: It's Not SiteFinder for Obvious Reasons

• Comment posted Jul 12, 2006 3:35 pm PDT — by David A. Ulevitch
  Dan, Sit tight today and check out some announcements we're about to make that should make things even more clear (literally) about how our service operates. As for DNSSEC, I'd love to see what we can do.  From what I…

• Comment posted Jul 11, 2006 5:06 pm PDT — by David A. Ulevitch
  John, We just noticed the wired article linked to a domain that wasn't registered and rather than have someone else register it and make it a porn site we did the right thing.  And now it still shows a host…

• Comment posted Jul 10, 2006 7:57 pm PDT — by David A. Ulevitch
  So very well written Mark. The issues you bring up are critically important and nothing I take lightly.  I think we'll find the answers become more clear as we navigate forward and begin to discern what users want and what…

Domain Tasting Target of US Federal Cybersquatting Lawsuit

• Comment posted Jun 05, 2006 4:55 am PDT — by David A. Ulevitch
  John, Well the complaint states: 31. Plaintiff's are informed and believe and on that basis allege that Dotster was both the registrant and the registrar for the Dotster Domain Names They continue to state that Dotster uses this position to…

• Comment posted Jun 05, 2006 3:25 am PDT — by David A. Ulevitch
  The simple fact remains that each and every one of these domain names was monetized by Verisign Sitefinder quite some time ago without objection.  Not a single trademark claimant on the planet objected. From September 15th until October 4th no…

• Comment posted Jun 05, 2006 3:13 am PDT — by David A. Ulevitch
  Suresh, http://www.scottfish.blogspot.com/ ??? ;-) -david

• Comment posted Jun 05, 2006 2:46 am PDT — by David A. Ulevitch
  John wrote:In fact, NM’s attorney in this suit stated a belief during Domain Roundtable that if Verisign turned Sitefinder back on, then it would be perfectly acceptable for Verisign to resolve these very same names with retail advertising." I'm skeptical…

New York Passing New Domain Name Law

• Comment posted Jun 05, 2006 2:35 am PDT — by David A. Ulevitch
  While I like the idea of registrars being held accountable this isn't that way it should (or even can) be done. Let's see ICANN do something to punish or incentivize registrars instead. -david

Forbes Discusses Domaining with Marc Ostrofsky

• Comment posted May 25, 2006 7:39 pm PDT — by David A. Ulevitch
  Ostrofsky says: MO: There are three ways people get to Google and Google makes money. You go to Google directly, you go to a link that connects you to Google, or you go to a domain name that connects you…

New York Passing New Domain Name Law

• Comment posted May 25, 2006 6:16 pm PDT — by David A. Ulevitch
  One of the guys here just observed that maybe the reason Ms. Little is sponsoring this is because of the fact that: bettylittle.com [whois.opensrs.net] Registrant: James Wensley 2324 Divot Drive Saint Louis, Missouri 63131 US You think?  Wouldn't surprise me……

AOL and Goodmail: Two Steps Back for Email

• Comment posted Feb 03, 2006 5:09 pm PST — by David A. Ulevitch
  Matt emailed me privately along with the Editor in Chief of CircleID to let me know it was actually just an unintended oversight to not indicate Matt's relationship to the article. It's been corrected.  Cool. -david

• Comment posted Feb 03, 2006 3:38 am PST — by David A. Ulevitch
  The Famous Brett Watson, Thanks — It's in truly poor taste for the author not to disclose his relationship with/against Goodmail in the article. Matt — Would you post a correction or footnote at the bottom disclosing your positions considering…