Home / Blogs

It's "Verisign vs. Users"

Thomas Roessler

From an anonymous comment in response to the ALAC's statement on SiteFinder:

In a recent Cnet article, Verisign is quoted as saying, "We're fully compliant with every RFC". ... If that's true, it just kills the argument against Verisign as it then becomes "geeks v. users" with Verisign on the side of the users.

That's a dangerous misconception, in several ways.

The technical part is being discussed in the IAB's commentary on the matter. The IAB explains in detail that, while wildcards have been part of the DNS specification for twenty years, their use is dangerous and can break technology. From the technology side, the problems with SiteFinder don't come from breaking some specific RFC. They come from using RFC-specified features in a way that breaks design assumptions made throughout the net.

But even if the collateral damage is left out of the picture, the very idea behind SiteFinder is user-unfriendly, and that's the second half of the ALAC's note: SiteFinder is, ultimately, about short-cutting other error handling methods, and redirecting any users that enter non-existing domain names into a web browser to Verisign's own service, for commercial purposes. SiteFinder is designed so it becomes difficult to deploy superior error handling services that would compete with it—because errors aren't flagged.

From the point of view of software developers, SiteFinder is designed to replace a market that's open for competition by a monopoly.

From the point of view of users, it is not a superior offer that empowers them, and that they can accept (or decline) as they want: Instead, it's a service that is designed to deprive them of a choice they used to have.

It's a "service" that's being forced down users' throats.

Just like spam.

Written by Thomas Roessler, Mathematician. Visit the blog maintained by Thomas Roessler here.

Related topics: DNS, Domain Names, Domain Registries, Spam

Get a weekly summary of postings to CircleID:

 Master Feed (more feeds)      Twitter      Mobile
Bookmark / Email This Post

Comments

Re: It's "Verisign vs. Users" Jim  –  Sep 23, 2003 1:15 PM PDT

What IP adresses can be entered into a software firewall such as ZoneAlarm to prevent access to Verisign and it's minions? How do you id the spy cookie to delete?

Re: It's "Verisign vs. Users" BackupBob  –  Sep 30, 2003 6:51 PM PDT

When you reach the SiteFinder site you will find a set of terms and conditions (T&C;) and a privacy statement.

Verisign assumes that since you have reached this site that you will abide by their T&C;. 

I do not wish to abide by their T&C;.  I would like to make VeriSign aware of this but their Web page offers no means of contacting them to tell them so.

I wrote to several VeriSign departments using links I found on theiw Website but they have not bothered to reply. 

To post comments, please login or create an account.

Related Blogs

Related News

Industry Updates – Sponsored Posts

Latest Brandjacking Index Examines How Fraudsters Abuse Financial Brands

NeuStar Addresses DNS Vulnerability with Cache Defender, a Secure DNS Authentication System

NeuStar Celebrates 10 Years of UltraDNS Managed DNS Service

A Seemingly Overwhelming Number of Important Documents Released by ICANN

.ORG First Open Top-Level Domain to be Signed with DNSSEC

DNSSEC Industry Coalition Symposium is Announced

dotMobi Names AutoTrader.mobi as Millionth Site Tested by Acclaimed mobiReady Tool

NeuStar's UltraDNS to Power Growth of NDTV Convergence

SPIL GAMES Chooses MarkMonitor for Global Domain Management

Mobile Banking Benchmarks Now Available

Facebook Selects MarkMonitor Antifraud Solutions to Combat Malware

Perspectives from a Nonprofit Domain Name Registry on Navigating the Social Media Frontier

Flawed Economic Analysis of New gTLDs

Benchmarks that Measure Five Critical Dimensions of Success for Mobile Websites

IP Rights in Digital Environment Key Element of Proposed Treaty

MarkMonitor AntiFraud Solutions, Combining Proven Antiphishing and Expert Antimalware Capabilities

Go Daddy Launches Instant Mobilizer from dotMobi

New Study of Mobile Web Trends Demonstrates Strong Growth of Mobile Content Availability

Identify Infringing Domains to Optimize Online Search Marketing Spend

dotMobi Announces Launch of First Two-Letter Mobile Domain by Nevada Commission on Tourism