funsec mailing list archives

Re: ICANN: TLDs Could End With EXE. Confused? UsersMayBeToo...


From: "Hubbard, Dan" <dhubbard () websense com>
Date: Thu, 14 Feb 2008 19:29:54 -0800

whois iexplore.exe

return data ...

Sorry due to our new policy we are unable to show registrar data, however for a small fee this information is available 
at the following like ....


-----Original Message-----
From: funsec-bounces () linuxbox org on behalf of Larry Seltzer
Sent: Thu 2/14/2008 6:00 PM
To: Alex Eckelberry; Paul Ferguson; funsec () linuxbox org
Subject: Re: [funsec] ICANN: TLDs Could End With EXE. Confused? UsersMayBeToo...
 
Their objectives being.... Making lots of money without doing any work?

Larry Seltzer
eWEEK.com Security Center Editor
http://security.eweek.com/
http://blogs.pcmag.com/securitywatch/
Contributing Editor, PC Magazine
larry.seltzer () ziffdavisenterprise com


-----Original Message-----
From: funsec-bounces () linuxbox org [mailto:funsec-bounces () linuxbox org]
On Behalf Of Alex Eckelberry
Sent: Thursday, February 14, 2008 8:43 PM
To: Paul Ferguson; funsec () linuxbox org
Subject: Re: [funsec] ICANN: TLDs Could End With EXE. Confused? Users
MayBeToo...

Just read the article and I share your concerns.  Seems to me that there
are other (and better) ways of accomplishing their objectives...

Alex


-----Original Message-----
From: funsec-bounces () linuxbox org [mailto:funsec-bounces () linuxbox org]
On Behalf Of Paul Ferguson
Sent: Thursday, February 14, 2008 6:11 PM
To: funsec () linuxbox org
Subject: [funsec] ICANN: TLDs Could End With EXE. Confused? Users May
BeToo...

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Via ARS Technica.

[snip]

ICANN is in the process of hammering out its new generic top-level
domain
(gTLD) policy, and has begun to address technical issues that could pop
up once the new round of applications is open later this year. As part
of a discussion on how to manage DNS stability during this potentially
huge expansion of the TLD system, an organization within ICANN has
proposed a few basic rules for what can and can't be used as a domain
extension.

Put simply, new domains will be able to make use of nearly any string of
letters-including common file extensions such as .exe, .doc, and
.pdf-but there will be a number of other restrictions.

[snip]

More:
http://arstechnica.com/news.ars/post/20080214-icann-tlds-could-end-with-
exe
- -confused-users-may-be-too.html

Note: This needs to be watched very closely, as it could unintentionally
introduce some major security issues...

- - ferg

-----BEGIN PGP SIGNATURE-----
Version: PGP Desktop 9.6.3 (Build 3017)

wj8DBQFHtMpuq1pz9mNUZTMRAj3GAJ96HfHC8zzjwg6Mu2EznDTWmP0sIACgq6uf
p6bfP4y6dH3qlA/oWmalQSk=
=Tb6/
-----END PGP SIGNATURE-----


--
"Fergie", a.k.a. Paul Ferguson
 Engineering Architecture for the Internet  fergdawg(at)netzero.net
ferg's tech blog: http://fergdawg.blogspot.com/


_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.

_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.

_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.


 



 Protected by Websense Messaging Security -- www.websense.com 
_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.

Current thread: