Re: HTML email, was Re: Phishing and BGP Blackholing

["Fergie" <fergdawg () netzero net>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- -- Randy Bush <randy () psg com> wrote:

> > Back in the day, pre-CIRA, .CA was managed according to rules which  
> > included the restriction that a single company was only allowed one  
> > domain name. So, to choose a company at random, General Motors Canada  
> > was welcome to GMC.CA but they couldn't also register PONTIAC.CA or  
> > GM.CA or GENERALMOTORS.CA.
>
> for those of us who manage smaller cctlds pro bono, it is also good
> for our sanity, especially when paired with the requirement that the
> registrant be real and in-country.
>
> it also encourages the isps in-country to take over the cctld, which
> is good.  they can charge a bit for the service and multiple name
> registrants become a good thing.

It's funny you should bring this up (or whomever).

I'm actually in the process of putting together my presentation
for next week's ISOI meeting in Redmond on DNS issues in the security
realm, and one of the major bullet items on my check-list of
"why we suck" is the whole mish-mash of issues w.r.t a combination
of retarded registry policies (pitting business interests against
common technical sense) and the lag between published domain
registrations and trickle-down WHOIS information (and admittedly,
there are a couple of associated social-engineering foos in there,
too).

We do suck. And we have created a horrible situation wherein we
need to stop pointing fingers and figure out how to dig ourselves
out of this sh*thole.

It's deplorable.

- - ferg

p.s. Since I'm still putting my presentation together, I'd love to
solicit comments from the field. :-)

See: http://isotf.org/isoi2.html

-----BEGIN PGP SIGNATURE-----
Version: PGP Desktop 9.5.2 (Build 4075)

wj8DBQFFsGkhq1pz9mNUZTMRAsljAKCaU9+SSpJReSPhgs6g2SPptFlxcgCguvsr
wkO8LAtIBcmxwdxmcf8SQE4=
=b1N5
-----END PGP SIGNATURE-----

--
"Fergie", a.k.a. Paul Ferguson
 Engineering Architecture for the Internet
 fergdawg(at)netzero.net
 ferg's tech blog: http://fergdawg.blogspot.com/