CircleID

Keywords are a fairly non standard way to go about the entire thing.  And your entire argument seems to be that IDN has some issues - which are being worked on by the way - and that people who are selling keyword based domains are going to sue, if they find IDN becoming a standard?

I look forward to a more detailed and reasoned experience on why you feel keywords are much more effective than IDN

Pls do not put words in my mouth. If you want to use my quotes, please quote what I said exactly. And I never say anything to the effect there is no alternatives.

Netpia would certainly not benefit if & when Microsoft implement IDN i am sure. But your arguments here are no more then 'it is insecure' and 'i will sue'. 

Protecting your own turf, fair enough, in the commercial world. But in the world of public interest, a little competitions benefit everyone else.

Ah, I got asked who you work for by a few people - I realized you didn't say it outright in your profile.

Why hide? You work for Netpia, the largest keyword provider for Korea. Your boss is Kangsik Cheon, the WGIG member who is responsible for extremely badly written IDN paper.

not the first time people try to use a public forum like circleid for amateurish PR efforts

won't be the last either

unfortunately

This is a poorly researched article that invokes traditional FUD (Fear, Uncertainty, Doubt) rather than offer anything concrete.

Yes, keywords are cool.  They are not a substitute for a domain name.  The DNS providers have to implement special software, and/or clients have to download special stuff onto their computers.  None of the "multilingual Internet address keyword" works from my computer here in Philadelphia.  The Chinese .CN domain name I go to works without any problem on my computer.

This article is bereft of sufficient technical merit to be responded to in a technical manner.  At most, it's a statement of commercial and political opinion - which I respect your ability and right to say.

Circleid is not a place for articles without technical merit that are posted only to spread FUD or score political brownie points.

"Jason S"'s commentary is totally out of place, and as he works for a large keyword provider but doesnt seem to be open enough about this in his member profile, I'd say it just doesnt belong on circleid.

Ram Mohan wrote:
> This article is bereft of sufficient
> technical merit to be responded
> to in a technical manner. At most,
> it's a statement of commercial and
> political opinion - which I respect
> your ability and right to say.

Whoever they might be and what their intentions might be, your replies are very disappointing. I strongly believe that this is not a place for praising IDN in which any opinion against IDN is considered PR. To fullfill "pulic interest" about IDN could be done by productive discussion not by attacking other's privacy breaking codes of conduct.

> this is not a place for praising IDN in
> which any opinion against IDN is considered
> PR.

Oh, there are lots of ways you can express opinions against IDN, by presenting reasoned technical arguments. The arguments in this circleid article were neither reasoned nor technical. 

Further, in the spirit of full disclosure, articles that criticize something, when written by someone who provides a competing technology, must be accurately signed.  "Jason S" doesn't give his surname, and beyond saying that he is assistant to a WGIG member, does not inform us that he works for Netpia.or that his boss is the COO there.

CircleID published the homographs attacks on IDN and altho it is a big blow to those who wanted IDN, it was well-recieved and the technical community responded with technical solution. The point is the article is no more the FUD ("I will sue Microsoft!").

And in a discussion of policy making for public interest (in this case on IDN), anonymity (he has his picture up there btw) is a not well-received, especially if the 'informant' has a vested commercial interest in the outcome.

This is not a case where the he has a reason to be anonymous to say what he wants for public interest. - in fact he has a reason to be anonymous to say what he wants for his private interest. That to me is a big difference.

>To fullfill "pulic interest" about IDN could be done by productive discussion not by attacking other's privacy breaking codes of conduct.

This is not an issue of "breaking privacy" or "codes of conduct".  Jason S was deceptive in his article and about his interests.  This is not a serious article, just a political opinion.

There's no "public interest" in praising keywords and damning IDNs, especially after you don't disclose that you or your employer makes $$$ from keywords.

In regard to Mr. Suresh Ramasubramanian's reply:

Full disclosure is a philosophy of security management. Full Disclosure means "Full details of the vulnerability are disclosed to the public", often through Bugtraq, Secunia, Full-Disclosure or other sites.

The theory behind full disclosure is that releasing vulnerability information immediately results in quicker fixes and better security. Fixes are produced faster because vendors and authors are forced to respond in order to save face.

Full disclosure came to life after it became clear that the method employed by CERT did not work out as intended and it was rumored that CERT had a policy of providing advance information on vulnerabilities to some organizations and government agencies, which pay for this privilege. In the meantime, the vulnerabilities were actively exploited by hackers.

Researchers were angered and insisted that the vulnerabilities must include full-disclosure of "the details of the vulnerability" and this is the spirit of Full Disclosure -nothing to do with "Privacy Disclosure" things.

Just wanted to comment "technically" as a network security consultant. ;)

Ebina - yes, thanks. I'm aware of the full disclosure list and its history. And I do find it useful to lurk on that list .. however that's completely besides the point here.

Would "transparency" and "declaration of vested interests in a debate" be terms that are more acceptable to you in this context?