[governance] [liberationtech] Chinese preparing for a "Autonomous Internet" ?

[David Conrad]

Stephane,

On Jun 18, 2012, at 3:54 AM, Stephane Bortzmeyer wrote:
> The root zone can be modified (even for small technical changes) only
> when there is an express approval by the US governement.

Technically, not quite. As things currently stand, Verisign can make modifications (and DNSSEC-sign those modifications) to the published root zone without USG (or anyone else's) approval. For a little while. Given contractual relations, this of course would not be a 'career enhancing' action for the parties involved.

> Isn't it "central control"?

Yes. As you know, given the architecture of the DNS, centralized control is the simplest/easiest/most efficient mechanism for (any) zone administration.

> Pretending that the physical location of root name
> servers diminishes this control is quite ridiculous.

As Avri points out, the root server operators, being independent and with one exception having no formal obligation to do anything, provide root resolution service out of the goodness of their hearts. In theory, if the USG were to run completely amok, the root servers could be configured to not accept zone updates until the amok-ness was remedied (or an alternative source for root zone data could be devised). While this would clearly be exercising the nuclear option, I do believe this does provide an actual concrete limitation on unilateral action. I believe some of the root server operators have stated something similar publicly.

Regards,
-drc


-------------- next part --------------
____________________________________________________________
You received this message as a subscriber on the list:
     governance at lists.igcaucus.org
To be removed from the list, visit:
     http://www.igcaucus.org/unsubscribing

For all other list information and functions, see:
     http://lists.igcaucus.org/info/governance
To edit your profile and to find the IGC's charter, see:
     http://www.igcaucus.org/

Translate this email: http://translate.google.com/translate_t