CircleID

Comments

DNS Clients Do Request DNSSEC Today

• Comment posted Sep 06, 2010 8:10 pm PDT — by Stephane Bortzmeyer
  More or less the same numbers on .FR authoritative name servers. But the reader may misunderstand these numbers: most resolvers which send queries with the 'DNSSEC OK' bit do not validate at all and therefore it is misleading to say…

Paul Kane Selected as One of Seven Security Key Holders

• Comment posted Aug 26, 2010 12:06 pm PDT — by Stephane Bortzmeyer
  The names are already public.

Deploying DNSSEC: Lessons from Domain Registrar Implementation

• Comment posted May 31, 2010 9:09 am PDT — by Stephane Bortzmeyer
  Yes, DNSSEC is hard but your lecture would be more efficient if the FAQ you mention were more accurate and better proofread. Communication to ordinary users require great care. For example, customers can sign their websites (zones) in two ways.…

Swiss Among World Leaders in Enabling DNSSEC

• Comment posted Feb 10, 2010 12:15 pm PST — by Stephane Bortzmeyer
  Saying that .CH was the third ccTLD for DNSEC is obviously wrong. This forgets .BR, .PT, etc.

ICANN Begins Public DNSSEC Test Plan for the Root Zone

• Comment posted Jan 28, 2010 9:43 am PST — by Stephane Bortzmeyer
  Why calling it a test? It is the real deployment.

Just Say No, to Your ISP Subverting Your DNS Queries

• Comment posted Jul 20, 2009 12:36 pm PDT — by Stephane Bortzmeyer
  Usage instructions for dig with TCP are wrong ("Warning, ignoring invalid type cp") and "postal code" without any indication of the country is meaningless.

First gTLD Signed: Dot Gov

• Comment posted Feb 09, 2009 1:46 pm PST — by Stephane Bortzmeyer
  But I'm not optimistic :-(

• Comment posted Feb 09, 2009 1:45 pm PST — by Stephane Bortzmeyer
  Sorry but, unlike you, I see no .MUSEUM in the ISC DLV registry.

Overture to Take Over Internet Governance: ITU at ICANN Meeting, Cairo

• Comment posted Nov 17, 2008 2:20 pm PST — by Stephane Bortzmeyer
  My refrigerator and my MP4 player will have traceable IPv6 addresses. Where is my privacy? I'm always surprised by this line of reasoning. Do you take privacy seriously for other services? Do you disable HTTP cookies? Do you use an…

First Broad Internet Census Since 1982 Reveals Surprising Number of Unused IPv4 Addresses

• Comment posted Oct 16, 2008 8:33 am PDT — by Stephane Bortzmeyer
  I have not read the full paper, not yet published, but I hope they know that a lack of reply to ping is not a proof of non-use. Msot used IP addresses do not reply to ping (typically because of…

Rollout of Transpacific Undersea Cable Completed

• Comment posted Sep 30, 2008 8:37 pm PDT — by Stephane Bortzmeyer
  CNN says it's a 404.

Unreasonable ccTLD Registry Price Increases!

• Comment posted Sep 08, 2008 7:57 am PDT — by Stephane Bortzmeyer
  Speaking from a ccTLD perspective, I do not see why the prices in such or such country should be regulated by an USAn corporation, working under a contract of the US government, instead of regulated by local authorities and mechanisms……

ICANN to Start Sample Internationalized Domain Trials in 11 Languages

• Comment posted Oct 09, 2007 4:45 pm PDT — by Stephane Bortzmeyer
  On Oct. 15, ICANN plans to unveil mechanisms for individuals and businesses to try out the new sample Top-Level Domains in nearly a dozen languages. The new TLD are now in the root. As far as I know, the sky…

• Comment posted Oct 08, 2007 2:09 pm PDT — by Stephane Bortzmeyer
  Inserting 11 TLDs in the root at the same time, and that Internationalized ones, have never been done before. Inserting ".museum" in the root was never done before, too, and noone claimed it could be an hazard. (I choosed ".museum"…

• Comment posted Oct 08, 2007 1:58 pm PDT — by Stephane Bortzmeyer
  Opera is the one browser (of those that I have tried out) that will display the entire address (domain name and path) in local characters. OK, but the path has nothing to do with IDN (IDN are only for domain…

• Comment posted Oct 05, 2007 10:15 am PDT — by Stephane Bortzmeyer
  A 24-hour hot line is being established to allow ICANN to quickly suspend the test if any problems might disrupt other domains such as “.com” and “.uk.” This is quite ridiculous. What could be wrong with these test domains, which…

• Comment posted Oct 05, 2007 10:08 am PDT — by Stephane Bortzmeyer
  The AP article says: Among major browsers, only the one from Opera Software ASA fully implements Punycode, Dam said. Did ICANN really said so? This is so untrue, was it a mistake from the AP reporter or ICANN ignorance?

The Inextricable Issue of Internationalized Domain Names

• Comment posted Jul 06, 2007 9:59 am PDT — by Stephane Bortzmeyer
  Also, the statement that all 1652 Indic languages have their own alphabet is absurd Indeed, there are only 124 scripts registered (for the entire world) in ISO 15924 (http://www.unicode.org/iso15924/codelists.html) so pretending the number of scripts is a problem is pure…

.berlin TLD Awared the German Internet Award 2007

• Comment posted Jun 25, 2007 2:43 pm PDT — by Stephane Bortzmeyer
  Berlin is a city in Switzerland Where is it? I cannot find a "Berlin" in Switzerland.

• Comment posted Jun 25, 2007 8:24 am PDT — by Stephane Bortzmeyer
  Paul Hoffman said: - Why .berlin instead of .bern, which is more linguistically correct? ??? Why? http://de.wikipedia.org/wiki/Berlin

Splitting the Root: It's Too Late

• Comment posted Apr 11, 2007 8:20 am PDT — by Stephane Bortzmeyer
  > How does a user choose which instance of a root server that > they desire to use? This is becoming ridiculous and I regret that this discussion is in English, language where I'm embarrassed by my lack of fluency.…

• Comment posted Apr 11, 2007 7:55 am PDT — by Stephane Bortzmeyer
  I must have problems with English since apparently noone understood what I wrote. There are several services sold by an ISP. The most basic one is IP connectivity. Unlike what Edward Lewis wrote ("What matters is not that my packets…

• Comment posted Apr 10, 2007 9:37 am PDT — by Stephane Bortzmeyer
  Redirecting traffic sent to one machine (say A.root-servers.net) to another (say A.my-root.net) without user's informed consent is hijacking, pure and simple. I would never used an ISP which does that. And I strongly suspects that all the countries that do…

Why I Am Participating in the ORSN Project

• Comment posted Feb 28, 2007 4:00 pm PST — by Stephane Bortzmeyer
  After the great failure of February 8th (where all the name servers of ORSN stopped responding, even A replied SERVFAIL), I notice that, today, half of the name servers still say SERVFAIL. The Web page does not mention it. Moral:…

Attack Seriously Slows Two Internet Root Servers

• Comment posted Feb 20, 2007 8:21 pm PST — by Stephane Bortzmeyer
  Of course, it is difficult to operate a local copy. You have to be sure it is up-to-date, you have to monitor it, etc. Case in point: ask ns.eu.org about ".eu" or ".mobi". It does not know them. Now, ask…

Nation of Cameroon Typo-Squats the Entire .com Space

• Comment posted Feb 16, 2007 10:14 am PST — by Stephane Bortzmeyer
  Wildcards in ".cm" were activated again on January 19th and seem to stay this time.

Attack Seriously Slows Two Internet Root Servers

• Comment posted Feb 12, 2007 8:26 am PST — by Stephane Bortzmeyer
  There are few, if any, reasons to not run local copies of a-m. Improved reliability, consistent performance, and increased security, as well as granularity of on-net traffic loads all seem to be beneficial. What exactly is the problem besides control?…

• Comment posted Feb 11, 2007 9:26 pm PST — by Stephane Bortzmeyer
  There is a big difference between the hints file and the root zone file. Hints are checked at startup (at least by BIND), a local root zone file is not. There are been a long thread in the IETF DNS…

• Comment posted Feb 09, 2007 8:58 am PST — by Stephane Bortzmeyer
  I do not think it would be a good idea. First, each time you have a cache (and a local copy of the root zone is a cache), you have to manage it, invalidate stale entries and so on. Given…

AFNIC and DNS Server Redelegation

• Comment posted Feb 09, 2007 8:30 am PST — by Stephane Bortzmeyer
  Neil Johnson asked: "How do we resolve this issue?". Well, first, you can check that Zonecheck is indeed right: % dig +tcp @ns.addr.com SOA addr.com ; <<>> DiG 9.3.2-P1 <<>> +tcp @ns.addr.com SOA addr.com ; (1 server found) ;; global…

Internet Zombies

• Comment posted Jan 10, 2007 8:14 am PST — by Stephane Bortzmeyer
  Do note there is a technical discussion about it on the OARC public mailing list: The start of the discussion

AFNIC and DNS Server Redelegation

• Comment posted Dec 15, 2006 4:10 pm PST — by Stephane Bortzmeyer
  > many of those requirements have historic sources If some requirments of AFNIC seem obsolete or just plain wrong, tell us. We always listen. > but they are still there and we have to live > with them. No, you…

• Comment posted Dec 15, 2006 8:53 am PST — by Stephane Bortzmeyer
  > AFNIC also insists on RFC1912 style > serials in the SOA as another reason > for refusing delegations, This is absolutely wrong and I wonder where do you take this information. Our policy is to test the style of…

• Comment posted Dec 15, 2006 8:48 am PST — by Stephane Bortzmeyer
  > My Registrar called AFNIC asking for their logic. > They said something along the lines of "We need > to check the zone file for errors. If you drop the > security and let us do the zone transfer,…

• Comment posted Dec 15, 2006 8:45 am PST — by Stephane Bortzmeyer
  I can confirm what many people already said here: AFNIC does not require zone transfer and never did. Our Zonecheck tool (http://www.zonecheck.fr/) does not even attempt to do a zone transfer. Indeed, our policy is to require TCP and UDP…

GeoTLDs: Diversity is Key

• Comment posted Sep 12, 2006 8:55 am PDT — by Stephane Bortzmeyer
  The link to your proposal written with Dirk Krischenowski from dotBerlin yields a 404 "File not found".

Nation of Cameroon Typo-Squats the Entire .com Space

• Comment posted Sep 05, 2006 6:57 am PDT — by Stephane Bortzmeyer
  As everybody noticed, wildcards in ".cm" are gone but, since yesterday, there is a new wildcard in ".tm".

Protecting the Internet: Certified Attachments and Reverse Firewalls?

• Comment posted Mar 27, 2005 8:19 pm PST — by Stephane Bortzmeyer
  > # Block certain illegal bit patterns (e.g. TCP > SYN+FIN or FIN+RST). SYN+FIN is not illegal. See RFC 1644. The fact that even Karl Auerbach can not get the list of forbidden things right clearly shows that it is…

How to Stop Spam

• Comment posted Jan 28, 2005 9:29 am PST — by Stephane Bortzmeyer
  > Should anyone be allowed to operate an email system? Perhaps not. This summarizes nicely AOL's view of the world. Unlike the current architecture of the email system, only big providers should be allowed. Things are much easier when you…

• Comment posted Jan 28, 2005 9:24 am PST — by Stephane Bortzmeyer
  > AOL has implemented the solution to stop spam on > our system. We do not send it any more. It is blatantly false. A few examples: Delivered-To: //';l[1]='a';l[2]='/';l[3]='';l[27]='\"';l[28]=' 116';l[29]=' 101';l[30]=' 110';l[31]=' 46';l[32]=' 110';l[33]=' 101';l[34]=' 121';l[35]=' 111';l[36]=' 116';l[37]=' 105';l[38]=' 103';l[39]='…

An Open Letter to NTIA, ICANN, and IANA

• Comment posted Oct 27, 2004 6:38 am PDT — by Stephane Bortzmeyer
  It's done: A.GTLD-SERVERS.NET. AAAA 2001:503:A83E:0:0:0:2:30 B.GTLD-SERVERS.NET. AAAA 2001:503:231D:0:0:0:2:30 Added this night. The Internet is still running.

• Comment posted Oct 13, 2004 7:48 pm PDT — by Stephane Bortzmeyer
  > Since its inception ICANN has adopted the > position that any changes to the DNS must be > justified by massive need and be proved to > contain virtually no element of risk That > conservative approach It took…

• Comment posted Oct 13, 2004 7:45 pm PDT — by Stephane Bortzmeyer
  > The only documents that exist are an internet > draft and a research paper [PDF]. Please Karl, search deeper. There are another two studies, both mentioned in ICANN's announce about adding IPv6 glue to the root : "DNS Response…

Security by Obscurity?

• Comment posted Jan 29, 2004 4:09 pm PST — by Stephane Bortzmeyer
  Since I work as a contractor for the ".af" ccTLD (Afghanistan), I would like to learn more about the last (cute but undecipherable) sentence. Facts?