<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 14 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.il
{mso-style-name:il;}
span.EmailStyle18
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri","sans-serif";
mso-fareast-language:EN-US;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-CA" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">I think this section of the paper says it all:<o:p></o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">DNS filters would be evaded easily, and would likely prove ineffective at reducing online infringement.<span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Unless the filtering is done at the root it is trivial to evade. Filtering at the IANA root level would introduce a lot of complexity that would definitely
have some technical and political hurdles to overcome. It is obviously being done in some countries but it is usually easily worked around. The only effective filtering that is hard to work around is IP address filtering. DNS is so resilient it’s hard to enforce
filters. In any case as DPI becomes easy and cheaper repressive regimes will probably want to allow access so they can monitor users rather than block them. I think DPI and MITM attacks are a much bigger threat than DNS filtering. This doesn’t mean I’m OK
with DNS filtering. I think even “benign” filtering like openDNS is wrong.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Kerry Brown<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<div style="border:none;border-left:solid blue 1.5pt;padding:0cm 0cm 0cm 4.0pt">
<div>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal"><b><span lang="EN-US" style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">From:</span></b><span lang="EN-US" style="font-size:10.0pt;font-family:"Tahoma","sans-serif""> Salanieta T. Tamanikaiwaimaro [mailto:salanieta.tamanikaiwaimaro@gmail.com]
<br>
<b>Sent:</b> September-24-12 5:24 PM<br>
<b>To:</b> governance@lists.igcaucus.org; Kerry Brown<br>
<b>Subject:</b> Re: [governance] 3322.org seized by Microsoft from Chinese DNS service provider<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal" style="margin-bottom:12.0pt"><o:p> </o:p></p>
<div>
<p class="MsoNormal">On Tue, Sep 25, 2012 at 12:19 PM, Kerry Brown <<a href="mailto:kerry@kdbsystems.com" target="_blank">kerry@kdbsystems.com</a>> wrote:<o:p></o:p></p>
<p class="MsoNormal">My understanding is they redirected "took control" of several subdomains of the second level domain
<a href="http://3322.org" target="_blank">3322.org</a>. This would make them third level domains. I agree that theoretically the US courts could try to compel ICANN to do something like this at the root level. I don't think that would happen for reasons both
technical and political. I could very well be wrong.<o:p></o:p></p>
<div>
<p class="MsoNormal" style="margin-bottom:12.0pt"><br>
Kerry Brown<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="background:white">That in itself would threaten the security and stability of the Internet. </span><span style="font-size:10.0pt;font-family:"Arial","sans-serif";color:#222222;background:white">I thought that this would be
a good time to discuss the potential ramifications of <span class="il">DNSfiltering</span> and how this affects the Internet and the ordinary end user. Circle ID on May 26, 2011 had published a paper which was submitted to US Congress by Experts on the danger
of <span class="il">DNS</span> <span class="il">filtering</span>, see: </span><span style="background:white"><a href="http://www.circleid.com/posts/20110525_experts_urge_congress_to_reject_proposed_dns_filtering_protect_ip/" target="_blank"><span style="font-size:10.0pt;font-family:"Arial","sans-serif";color:#1155CC">http://www.circleid.com/posts/20110525_experts_urge_congress_to_reject_proposed_dns_filtering_protect_ip/</span></a></span><span style="font-size:10.0pt;font-family:"Arial","sans-serif";color:#222222;background:white"> </span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"> <o:p></o:p></p>
</div>
<blockquote style="border:none;border-left:solid #CCCCCC 1.0pt;padding:0cm 0cm 0cm 6.0pt;margin-left:4.8pt;margin-right:0cm">
<div>
<p class="MsoNormal">> -----Original Message-----<br>
> From: Norbert Bollow [mailto:<a href="mailto:nb@bollow.ch">nb@bollow.ch</a>]<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">> Sent: September-24-12 10:44 AM<br>
> To: <a href="mailto:governance@lists.igcaucus.org">governance@lists.igcaucus.org</a><br>
> Cc: Kerry Brown<br>
> Subject: Re: [governance] <a href="http://3322.org" target="_blank">3322.org</a> seized by Microsoft from Chinese DNS<br>
> service provider<br>
><o:p></o:p></p>
</div>
<div>
<div>
<p class="MsoNormal" style="margin-bottom:12.0pt">> Hi Kerry,<br>
><br>
> your response sounds like you may have missed one of the main points<br>
> about the <a href="http://3322.org" target="_blank">3322.org</a> takedown: <a href="http://3322.org" target="_blank">
3322.org</a> had a role similar to one of the ways<br>
> in which one of the new gTLDs might conceivably be used. I am not talking<br>
> about a hypothetical demand "to block or redirect one second level domain<br>
> or several third level domains at the root level", but I'm asking about<br>
> whether we have any assurance that ICANN won't be subject to a US court<br>
> order to take down an entire foreign-based gTLD for reasons of non-<br>
> compliance with US views on how "piracy"<br>
> should be combated.<br>
><br>
> Greetings,<br>
> Norbert<br>
><br>
> Kerry Brown <<a href="mailto:kerry@kdbsystems.com">kerry@kdbsystems.com</a>> wrote:<br>
><br>
> > To date this hasn't happened. For many reasons, both technical and<br>
> > political, I think it unlikely to happen. It's easy to change a second<br>
> > level record in a TLD name server or a third level record in a DNS<br>
> > host's name server. It's not so easy to block or redirect one second<br>
> > level domain or several third level domains at the root level.<br>
> > It would introduce more complexity at the root level. It can<br>
> > certainly be done but I think it is unlikely it would be.<br>
> ><br>
> > Kerry Brown<br>
> ><br>
> > > -----Original Message-----<br>
> > > From: Norbert Bollow [mailto:<a href="mailto:nb@bollow.ch">nb@bollow.ch</a>]<br>
> > > Sent: September-24-12 9:29 AM<br>
> > > To: <a href="mailto:governance@lists.igcaucus.org">governance@lists.igcaucus.org</a><br>
> > > Cc: Kerry Brown<br>
> > > Subject: Re: [governance] <a href="http://3322.org" target="_blank">3322.org</a> seized by Microsoft from Chinese<br>
> > > DNS service provider<br>
> > ><br>
> > > Kerry Brown <<a href="mailto:kerry@kdbsystems.com">kerry@kdbsystems.com</a>> wrote:<br>
> > ><br>
> > > > I think some successful gTLDs in jurisdictions other than the US<br>
> > > > may over time solve the problem. Consumers will have a choice of<br>
> > > > which jurisdiction they want their domain to fall under.<br>
> > > > They have that now with ccTLDs but more choice is always better.<br>
> > ><br>
> > > Do we have any assurance that if a gTLD applies policies that are<br>
> > > not in line with US law, the same thing that has happened to<br>
> > > <a href="http://3322.org" target="_blank">3322.org</a> won't happen to that gTLD? Isn't ICANN under US<br>
> > > jurisdiction as much as the .org registry is?<br>
> > ><br>
> > > Greetings,<br>
> > > Norbert<br>
> ><br>
<br>
<o:p></o:p></p>
</div>
</div>
<p class="MsoNormal" style="margin-bottom:12.0pt"><br>
____________________________________________________________<br>
You received this message as a subscriber on the list:<br>
<a href="mailto:governance@lists.igcaucus.org">governance@lists.igcaucus.org</a><br>
To be removed from the list, visit:<br>
<a href="http://www.igcaucus.org/unsubscribing" target="_blank">http://www.igcaucus.org/unsubscribing</a><br>
<br>
For all other list information and functions, see:<br>
<a href="http://lists.igcaucus.org/info/governance" target="_blank">http://lists.igcaucus.org/info/governance</a><br>
To edit your profile and to find the IGC's charter, see:<br>
<a href="http://www.igcaucus.org/" target="_blank">http://www.igcaucus.org/</a><br>
<br>
Translate this email: <a href="http://translate.google.com/translate_t" target="_blank">
http://translate.google.com/translate_t</a><o:p></o:p></p>
</blockquote>
</div>
<p class="MsoNormal"><br>
<br clear="all">
<o:p></o:p></p>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<p class="MsoNormal">-- <o:p></o:p></p>
<div>
<p class="MsoNormal">Salanieta Tamanikaiwaimaro aka Sala<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">P.O. Box 17862<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">Suva<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">Fiji<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Twitter: @SalanietaT<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">Skype:Salanieta.Tamanikaiwaimaro<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">Fiji Cell: +679 998 2851<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal"> <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</div>
</body>
</html>