Language Selection

English French German Italian Portuguese Spanish

Domain Hijacking Takes ICANN Spotlight

Filed under
Security

The report, announced Wednesday during an international meeting of the ICANN (Internet Corporation for Assigned Names and Numbers) in Luxembourg, followed at least two high-profile incidents this year of what is known as domain-name hijacking.

The committee advises the domain-name system overseer's board of directors and constituents such as the registrars that sell domain names to individuals and business and the registries that manage domains such as .com and .net.

Committee members expressed optimism that the report will lead to swift action, but it was still unclear as of late Wednesday whether ICANN's board planned to address the report's findings and recommendations at its meeting later this week.

The report left ICANN's recently changed policy for the transfer of domain names without blame in domain hijacking, although others in the domain-name industry have raised concerns that the change will fuel more stolen domain names. The new policy had focused on streamlining the process of transferring a domain.

The ICANN committee recommended 10 fixes for hijacking, which ranged from more public awareness and a domain-name emergency hotline to potentially stricter verification of the identity of domain-name holders and better record keeping of registrations.

One technical recommendation focused on the use of registrar locks and domain-name holder passwords. The report suggests that registrars use locks, which prevent a domain-name change until the name holder unlocks the name, and consider using a specification called "authInfo," which essentially password protects a domain name.

Currently, the authInfo password is not available for .com or .net, both of which are managed by VeriSign Inc. But VeriSign has said it plans to add the support, according to the report. Other domains, such as .org, .biz and .net, use the passwords.

Full Story.

More in Tux Machines

4 things governments need to know to adopt open source cloud - Red Hat

Open source cloud platforms, like OpenStack, can allow public sector agencies to connect systems and share data easily. Here are four things governments need to know to make open source cloud a success. Read more

Open source key to preserving human history, argues Vatican

Ammenti explained that, in order for the manuscripts to be readable, the Vatican Library opted for open source tools that do not require proprietary platforms, such as Microsoft Office, to be read. "We save it as a picture as it's longer life than a file. You don't rely on PowerPoint or Word. In 50 years they can still just look at it," he said. Read more

Open Source Router Connects US, Australia

The ONOS Project and partners said Wednesday they have demonstrated the real-world practicality of using a router with open source software to connect networks in Australia and the US. The test validates the vision of SDN, open source for carriers, as well as ON.Lab's ONOS network operating system, according to one of its coordinators. "SDN is about disaggregation of closed, proprietary boxes and separating of forwarding planes, control planes and applications," says Guru Parulkar, executive director and board member of ON.Lab , which coordinates ONOS development. The communications test between Australia and the US achieved just that, he says. (See ON.Lab Aims to Make White Boxes Carrier-Grade , ON.Lab Intros Open Source SDN OS and SK Telecom Bets on SDN for Wireless.) Read more

Xubuntu Core 15.04 Officially Released, Not Related to Ubuntu Core

A new official Xubuntu flavor called "core" has been announced by developers. It's based on Ubuntu, and it integrates the Xfce desktop environment and nothing else. Read more