nanog mailing list archives

Re: VeriSign's rapid DNS updates in .com/.net


From: Suresh Ramasubramanian <suresh () outblaze com>
Date: Sun, 11 Jul 2004 04:04:34 +0100 (BST)


On Sat, 10 Jul 2004, David A.Ulevitch wrote:

It also means that changes can be made to host records quickly which is 
important for people who don't plan well or have unexpected changes 
that they want propagated.

I'm appreciative of this change -- but fyi, they aren't the only TLD 
operators doing this, there are quite a few doing near-instant changes 
to their respective zones.

.biz, .info etc do this as well.

It is an excellent policy, and a convenient thing not to wait several 
hours for your new .com domain to appear online immediately.

The disadvantage is, of course, that several abusers who register domains 
at a rapid clip with these two tlds, setting < 1 minute TTL on these and 
pointing these domain names to IPs that are basically compromised boxes or 
virus infected boxes, will now also start using .com / .net

There should be some way of fixing this, like requiring registrars to do
more due diligence when registering domains, maybe, and some better /
faster procedures to take down [say] phisher domains with fake contact
info.  Well yes, there is already a process, but it could sure do with 
more streamlining.

regards
--srs


Current thread: