Registration Operations Association Workshop Update
In a series of recent blog posts I’ve described the technical challenges in registration operations, a proposal for an industry association, and announced an interactive workshop to explore association formation. This is an update on where things stand with the workshop.
The first Registration Operations Association Workshop is scheduled for Thursday, October 16, 2014 in the Pacific Palisades room at the Los Angeles Hyatt Regency Century Plaza hotel, the same venue being used for ICANN 51. The event is not affiliated with ICANN, but with ICANN’s support we’ve been able to secure a room that’s large enough to seat more than 100 people. Still, space is limited and seats are going fast. Please register quickly if you haven’t already done so. Registered attendees will receive updates via email as we get closer to the event date.
Exploring Future Internet Architectures
UCLA and Washington University in St. Louis recently announced the launch of the Named Data Networking (NDN) Consortium, a new forum for collaboration among university and industry researchers, including Verisign, on one candidate next-generation information-centric architecture for the internet.
Verisign Labs has been collaborating with UCLA Professor Lixia Zhang, one of the consortium’s co-leaders, on this future-directed design as part our university research program for some time. The consortium launch is a natural next step in facilitating this research and its eventual application.
Van Jacobson, an Internet Hall of Fame member and the other co-leader of the NDN Consortium, surveyed developments in this area in his October 2012 talk in the Verisign Labs Distinguished Speaker Series titled, “The Future of the Internet? Content-Centric Networking.”
As I stated in my summary of the talk, content-centric networking and related research areas under the heading of information-centric networking and NDN bring internet protocols up to date to match the way many of us already are using the internet. As Van noted, when people want to access content over the internet– for instance the recording of his talk – they typically reference a URL, for instance http://www.youtube.com/watch?v=3zOLrQJ5kbU.
New from Verisign Labs: Measuring the Leakage of Onion at the Root
If you are trying to communicate anonymously on the internet using Tor, this paper may be an important read for you. Anonymity and privacy are at the core of what the Tor project promises its users. Short for The Onion Router, Tor provides individuals with a mechanism to communicate anonymously on the internet. As part of its offerings, Tor provides hidden services, specifically anonymous networking between servers that are configured to receive inbound connections only through Tor. In order to route requests to these hidden services, a namespace is used to identify the resolution requests to such services. Tor uses the .onion namespace under a non-delegated (pseudo) top-level-domain. Although the Tor system was designed to prevent .onion requests from leaking into the global DNS resolution process, numerous requests are still observed in the global DNS, causing concern about the severity of the leakage and the exposure of sensitive private data.
Is it Time for a Registration Operations Industry Association? Part III
In Parts I and II of this series of blog posts I described the need for a registration operations industry association. At the end of Part II, I wrote that Part III will describe “an opportunity for everyone that’s interested in discussing this topic in a live environment.” The large number of people attending ICANN 51 in Los Angeles presents the best chance of discussion with many potential participants being in the same place at the same time. Let’s take advantage of that proximity.
Verisign will host a workshop for all interested people during the week of ICANN 51. The event will be held at the Hyatt Regency Century Plaza hotel (the same venue for ICANN 51, though this event is not affiliated with ICANN) on the morning of Thursday, October 16, 2014, to discuss the challenges of registration technical operations and to explore ways to address those challenges. We’ve set up a website at www.regiops.net to provide information, describe the event, and allow people to register. We’re asking people to register in advance so we can make sure that we have a large enough room reserved and that we provide enough food for breakfast and lunch.
Is it Time for a Registration Operations Industry Association? Part II
In Part I of this series of blog posts I described the need for an industry association of operators to discuss the technical tasks, such as the development, deployment, and ongoing systems administration of the Extensible Provisioning Protocol (EPP), performed by registries and registrars to ensure interoperability and share best practices when providing registration services. In this blog post I’ll describe a way to make that happen.
I’ve spoken to a number of registrars who have described the challenges they face in implementing the many different EPP extensions being developed by registry operators. Here’s a concrete example: the Net::DRI Perl implementation of an EPP client includes contact extensions for 24 different registries. A registrar that wishes to manage contacts with those registries needs to implement a contact extension for each one! With the addition of new gTLDs and many new registry operators with new business models the number of extensions can only increase. How would an industry association address these challenges and reduce confusion for everyone? How could an association be structured?
Is it Time for a Registration Operations Industry Association?
Since 2001 there have been occasional conversations on technical mailing lists exploring the concept of creating an independent industry association or consortium of domain registration operators. My recent experiences with the evolution of extensions to the Extensible Provisioning Protocol (EPP) have convinced me to look at these suggestions more closely, and I’m now convinced that this is an idea worth exploring.
“Registration Operations” refers to the technical tasks, such as the development, deployment, and ongoing systems administration of EPP, performed by registries and registrars to provide registration services. While EPP is used to provide domain name registration and management services, registration operations also include the tasks performed by Regional Internet Registries (RIRs) to provide address registration and systems administration services.
Verisign Mitigates 300 Gbps DDoS Attack and Other Q2 2014 DDoS Trends
It has been another busy quarter for the team that works on our DDoS Protection Services here at Verisign. As detailed in the recent release of our Q2 2014 DDoS Trends Report, from April to June of this year, we not only saw a jump in frequency and size of attacks against our customers, we witnessed the largest DDoS attack we’ve ever observed and mitigated – an attack over 300 Gbps against one of our Media and Entertainment customers.
Website Usage Analysis in the New gTLDs
A recent study, by EURid and the Leuven Statistics Research Centre, set out to better understand the most common usage of websites that are linked to domains, and we thought it would be an interesting exercise to extend similar analysis to the new generic top-level domain (gTLD) market. So, we analyzed all second-level domains registered in new gTLDs according to published zone files on June 29, 2014. Verisign utilizes our own proprietary process for classifying websites, which results in similar classifications to those by EURid. The primary difference is that the Verisign classification method is machine-based and is evaluated for each domain independently, while the EURid approach leveraged samples that humans classified.
Internet Grows to 276 Million Domain Names in the First Quarter of 2014
Today, we released the latest issue of the Domain Name Industry Brief, which showed the internet grew by five million domain names in the first quarter of 2014. The total number of domain names across all top-level domains (TLDs) is now 276 million! This is a 1.7 percent increase over the fourth quarter of 2013. [1]
New from Verisign Labs – Measuring Privacy Disclosures in URL Query Strings
http://www.example.com/path/submit.php?user=userabc&pageid=012345&utm_referrer=rss&localtime=+0500
In your personal experience, as in our example, you might have realized that the URL was as much about you, the client, as it was about the web resource you were trying to access. Indeed, internet addresses may contain a wealth of information about the identities and activities of the users visiting them. URLs often utilize query strings (i.e., key-value pairs appended to the URL path; in our example, everything after the question mark) as a means to pass session parameters and form data. While sometimes benign and necessary to render the web page, query strings often contain tracking mechanisms, user names, email addresses and other information that users may not wish to publicly reveal. In isolation this is not particularly problematic, but the growth of web 2.0 platforms such as social networks and micro-blogging means such URLs are increasingly being publicly broadcast.