<div dir="ltr"><div><div>A related observation: according the ICANN webinar on this topic from a couple of weeks ago, all new gTLDs delegated on or after August 18th were supposed to deploy these kinds of controlled interruption wildcard records. The slides are here:<br>
<br> <a href="https://www.icann.org/en/system/files/files/name-collision-framework-slides-12aug14-en.pdf">https://www.icann.org/en/system/files/files/name-collision-framework-slides-12aug14-en.pdf</a><br><br></div>It looks like the following new gTLDs were delegated on/after that date. But only .otsuka has the records:<br>
<br>business<br>gbiz<br>gmail<br>immo<br>network<br>otsuka<br>pizza<br>xn--vhquv<br><br></div>--Shumon.<br><br><div class="gmail_extra"><div class="gmail_quote">On Thu, Aug 28, 2014 at 8:38 AM, Chris Thompson <span dir="ltr"><<a href="mailto:cet1@cam.ac.uk" target="_blank">cet1@cam.ac.uk</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">The gTLD "otsuka", created sometime in the last 24 hours, appears to be the<br>
first to use the wildcards described at<br>
<br>
<a href="https://www.icann.org/news/announcement-2-2014-08-01-en" target="_blank">https://www.icann.org/news/<u></u>announcement-2-2014-08-01-en</a> <a href="https://www.icann.org/en/system/files/files/name-collision-framework-30jul14-en.pdf" target="_blank">https://www.icann.org/en/<u></u>system/files/files/name-<u></u>collision-framework-30jul14-<u></u>en.pdf</a><br>
<br>
That is, it contains<br>
<br>
*.otsuka. 3600 IN A 127.0.53.53<br>
*.otsuka. 3600 IN TXT "Your DNS configuration needs immediate attention see <a href="https://icann.org/namecollision" target="_blank">https://icann.org/<u></u>namecollision</a>"<br>
*.otsuka. 3600 IN SRV 10 10 0 your-dns-needs-immediate-<u></u>attention.otsuka.<br>
*.otsuka. 3600 IN MX 10 your-dns-needs-immediate-<u></u>attention.otsuka.<br>
<br>
and the corresponding RRSIGs.<br>
<br>
What do people think about this business? Is anyone taking specific precautions<br>
to detect attempts to connect to 127.0.53.53?<span class="HOEnZb"><font color="#888888"><br>
<br>
-- <br>
Chris Thompson University of Cambridge Information Services,<br>
Email: <a href="mailto:cet1@uis.cam.ac.uk" target="_blank">cet1@uis.cam.ac.uk</a> Roger Needham Building, 7 JJ Thomson Avenue,<br>
Phone: <a href="tel:%2B44%201223%20334715" value="+441223334715" target="_blank">+44 1223 334715</a> Cambridge CB3 0RB, United Kingdom.<br>
______________________________<u></u>_________________<br>
dns-operations mailing list<br>
<a href="mailto:dns-operations@lists.dns-oarc.net" target="_blank">dns-operations@lists.dns-oarc.<u></u>net</a><br>
<a href="https://lists.dns-oarc.net/mailman/listinfo/dns-operations" target="_blank">https://lists.dns-oarc.net/<u></u>mailman/listinfo/dns-<u></u>operations</a><br>
dns-jobs mailing list<br>
<a href="https://lists.dns-oarc.net/mailman/listinfo/dns-jobs" target="_blank">https://lists.dns-oarc.net/<u></u>mailman/listinfo/dns-jobs</a><br>
</font></span></blockquote></div><br></div></div>