[dns-operations] Delegation checking

Jo Rhett jrhett at netconsonance.com
Tue Jan 22 22:09:15 UTC 2008


On Jan 18, 2008, at 11:34 AM, Florian Weimer wrote:
> * Jo Rhett:
>> If the contact information for the zone is invalid...
>
> Ah, okay.  But this will reduce our suffering only if you can revoke
> the delegation in a reasonable time frame.  And I don't think through
> checks are possible.

What do you mean by this?  Either you can contact them or not.  If  
they don't respond (reply, click a link, call in, lots of options)  
the information is invalid.  Obviously you could give them a long,  
long time and multiple attempts to respond.  But if someone doesn't  
respond in 4 weeks with 4 attempts, it's safe to assume the contact  
information is invalid.

> It also encourages fraudsters to use stolen identities in WHOIS data,
> which is probably even worse that simply bad data.

How does this encourage it more than any other thing?

And frankly, wouldn't that help people with stolen identities realize  
that they've been personally hacked faster?

-- 
Jo Rhett
Net Consonance : consonant endings by net philanthropy, open source  
and other randomness





More information about the dns-operations mailing list