[governance] 3322.org seized by Microsoft from Chinese DNS service provider

[Kerry Brown]

I think this section of the paper says it all:

DNS filters would be evaded easily, and would likely prove ineffective at reducing online infringement.

Unless the filtering is done at the root it is trivial to evade. Filtering at the IANA root level would introduce a lot of complexity that would definitely have some technical and political hurdles to overcome. It is obviously being done in some countries but it is usually easily worked around. The only effective filtering that is hard to work around is IP address filtering. DNS is so resilient it's hard to enforce filters. In any case as DPI becomes easy and cheaper repressive regimes will probably want to allow access so they can monitor users rather than block them. I think DPI and MITM attacks are a much bigger threat than DNS filtering. This doesn't mean I'm OK with DNS filtering. I think even "benign" filtering like openDNS is wrong.

Kerry Brown

From: Salanieta T. Tamanikaiwaimaro [mailto:salanieta.tamanikaiwaimaro at gmail.com]
Sent: September-24-12 5:24 PM
To: governance at lists.igcaucus.org; Kerry Brown
Subject: Re: [governance] 3322.org seized by Microsoft from Chinese DNS service provider


On Tue, Sep 25, 2012 at 12:19 PM, Kerry Brown <kerry at kdbsystems.com<mailto:kerry at kdbsystems.com>> wrote:
My understanding is they redirected "took control" of several subdomains of the second level domain 3322.org<http://3322.org>. This would make them third level domains. I agree that theoretically the US courts could try to compel ICANN to do something like this at the root level. I don't think that would happen for reasons both technical and political. I could very well be wrong.

Kerry Brown
That in itself would threaten the security and stability of the Internet. I thought that this would be a good time to discuss the potential ramifications of DNSfiltering and how this affects the Internet and the ordinary end user. Circle ID on May 26, 2011 had published a paper which was submitted to US Congress by Experts on the danger of DNS filtering, see:  http://www.circleid.com/posts/20110525_experts_urge_congress_to_reject_proposed_dns_filtering_protect_ip/

> -----Original Message-----
> From: Norbert Bollow [mailto:nb at bollow.ch<mailto:nb at bollow.ch>]
> Sent: September-24-12 10:44 AM
> To: governance at lists.igcaucus.org<mailto:governance at lists.igcaucus.org>
> Cc: Kerry Brown
> Subject: Re: [governance] 3322.org<http://3322.org> seized by Microsoft from Chinese DNS
> service provider
>
> Hi Kerry,
>
> your response sounds like you may have missed one of the main points
> about the 3322.org<http://3322.org> takedown: 3322.org<http://3322.org> had a role similar to one of the ways
> in which one of the new gTLDs might conceivably be used. I am not talking
> about a hypothetical demand "to block or redirect one second level domain
> or several third level domains at the root level", but I'm asking about
> whether we have any assurance that ICANN won't be subject to a US court
> order to take down an entire foreign-based gTLD for reasons of non-
> compliance with US views on how "piracy"
> should be combated.
>
> Greetings,
> Norbert
>
> Kerry Brown <kerry at kdbsystems.com<mailto:kerry at kdbsystems.com>> wrote:
>
> > To date this hasn't happened. For many reasons, both technical and
> > political, I think it unlikely to happen. It's easy to change a second
> > level record in a TLD name server or a third level record in a DNS
> > host's name server. It's not so easy to block or redirect one second
> > level domain or several third level domains at the root level.
> > It would introduce more complexity at the root level.  It can
> > certainly be done but I think it is unlikely it would be.
> >
> > Kerry Brown
> >
> > > -----Original Message-----
> > > From: Norbert Bollow [mailto:nb at bollow.ch<mailto:nb at bollow.ch>]
> > > Sent: September-24-12 9:29 AM
> > > To: governance at lists.igcaucus.org<mailto:governance at lists.igcaucus.org>
> > > Cc: Kerry Brown
> > > Subject: Re: [governance] 3322.org<http://3322.org> seized by Microsoft from Chinese
> > > DNS service provider
> > >
> > > Kerry Brown <kerry at kdbsystems.com<mailto:kerry at kdbsystems.com>> wrote:
> > >
> > > > I think some successful gTLDs in jurisdictions other than the US
> > > > may over time solve the problem. Consumers will have a choice of
> > > > which jurisdiction they want their domain to fall under.
> > > > They have that now with ccTLDs but more choice is always better.
> > >
> > > Do we have any assurance that if a gTLD applies policies that are
> > > not in line with US law, the same thing that has happened to
> > > 3322.org<http://3322.org> won't happen to that gTLD? Isn't ICANN under US
> > > jurisdiction as much as the .org registry is?
> > >
> > > Greetings,
> > > Norbert
> >


____________________________________________________________
You received this message as a subscriber on the list:
     governance at lists.igcaucus.org<mailto:governance at lists.igcaucus.org>
To be removed from the list, visit:
     http://www.igcaucus.org/unsubscribing

For all other list information and functions, see:
     http://lists.igcaucus.org/info/governance
To edit your profile and to find the IGC's charter, see:
     http://www.igcaucus.org/

Translate this email: http://translate.google.com/translate_t



--
Salanieta Tamanikaiwaimaro aka Sala
P.O. Box 17862
Suva
Fiji

Twitter: @SalanietaT
Skype:Salanieta.Tamanikaiwaimaro
Fiji Cell: +679 998 2851




-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.igcaucus.org/pipermail/governance/attachments/20120925/d8f9f9fd/attachment.htm>
-------------- next part --------------
____________________________________________________________
You received this message as a subscriber on the list:
     governance at lists.igcaucus.org
To be removed from the list, visit:
     http://www.igcaucus.org/unsubscribing

For all other list information and functions, see:
     http://lists.igcaucus.org/info/governance
To edit your profile and to find the IGC's charter, see:
     http://www.igcaucus.org/

Translate this email: http://translate.google.com/translate_t