Slashdot Mirror

But then how would we all exercise the Republican-sponsored right to see what Republicans want us to see, think what Republicans want us to think, and do what Republicans want us to do?

mi is just sad that ownership didn't get transferred to a capitalist corporation that would eventually become a multinational corporation then become a wholly owned subsidiary of Arabian Oil Sheikh Inc, who would then proceed to block the entire populace from "hate speech", "blasphemy", and "mocking the king". But that would be okay because it was decided by capitalism, and therefore beyond reproach and anyone who complains should make their own internet if they think they can do better, which they can't do now because it's impossible to compete against the government.

The DNS root zone is the top-level DNS zone in the hierarchical namespace of the Domain Name System of the Internet. For example, it contains the name servers of top level domains (TLDs).

The National Telecommunications and Information Administration (NTIA), an agency of the United States Department of Commerce exercises ultimate authority over the DNS root zone of the Internet.

Through the NTIA, the root zone is managed by the Internet Corporation for Assigned Names and Numbers (ICANN), acting as the Internet Assigned Numbers Authority (IANA), while the root zone maintainer is Verisign.

In March 2014, the NTIA announced that it will cede this authority to an organization whose nature has yet to be specified.

Also regarding who would take over from NTIA, they state:

"The U.S. Government has made it clear that we will not accept a proposal that replaces its role with a government or intergovernmental organization.

The criteria specified by the Administration firmly establish Internet governance as the province of multistakeholder institutions, rather than governments or intergovernmental institutions, and reaffirm our commitment to preserving the Internet as an engine for economic growth, innovation, and free expression.

The U.S. government will only transition its role if and when it receives it receives a satisfactory proposal to replace its role from the global Internet community - the same industry, technical, and civil society entities that have successfully managed the technical functions of Internet governance for nearly twenty years."

Note that there is a history of alternative DNS roots (OpenNIC for example). Generally few people bother to use them.

Please check http://wiki.opennicproject.org...

I use an alternative DNS server, becausde the ISPs in my country are orderd to block certain (torrent) sites. As I already give enough info to Google, I use servers I found on http://wiki.opennicproject.org...
With http://wiki.opennicproject.org... you can find witch one are closest,

I used to run my own, but after a re-install I did not yet bother.

What I think is strange is that nobody has made an easy local DNS server (for Windows) e.g. just a program that listens on port 53and only fromlocalhost and is just a DNS server. So no additional (local) zones. No additional things. Just a stripped down caching DNS server.

Just point to 127.0.0.1 as DNS server and done. No other changes should be needed. No kill of domains.No nothing should be needed.

I use an alternative DNS server, becausde the ISPs in my country are orderd to block certain (torrent) sites. As I already give enough info to Google, I use servers I found on http://wiki.opennicproject.org...
With http://wiki.opennicproject.org... you can find witch one are closest,

I used to run my own, but after a re-install I did not yet bother.

What I think is strange is that nobody has made an easy local DNS server (for Windows) e.g. just a program that listens on port 53and only fromlocalhost and is just a DNS server. So no additional (local) zones. No additional things. Just a stripped down caching DNS server.

Just point to 127.0.0.1 as DNS server and done. No other changes should be needed. No kill of domains.No nothing should be needed.

OpenNIC:

OpenNIC - home
OpenNIC - nearest servers
OpenNIC - configure your dns

OpenNIC:

OpenNIC - home
OpenNIC - nearest servers
OpenNIC - configure your dns

OpenNIC:

OpenNIC - home
OpenNIC - nearest servers
OpenNIC - configure your dns

Guess you never heard about:

http://www.orsn.org/

All root servers are located in Europe.

And my guess is you never heard about this one either:

http://www.opennicproject.org/

Oh yeah - I forgot. For Germany's Angela Merkel this is all "Neuland" - Undiscovered Country.

... they're quickly running out of countries that'll give them a DNS address.

Are they? I haven't seen that. Yeah, they lose domains fairly quickly often, but they're pretty nimble and appear well capable of staying five or so steps ahead of their pursuers.

Yes, there will be entirely different solutions found ...

Such as, ignoring the MafiAA controlled (DHS/ICE) DNS servers?

I don't believe this should be handled by the DNS software. We shouldn't have to add rate-limiting code into every individual service we run. It's easily implemented using a firewall. Even iptables (software firewall) supports rate limiting:

http://wiki.opennicproject.org/IPTablesRulesToBlockDDOSTraffic
http://falkhusemann.de/blog/2012/07/iptables-dns-query-limiting-with-burst-rate/

...that we really don't need ICANN when we have alternative democratic roots such as OpenNIC? Those who complain about the money-grubbing ways of ICANN really shouldn't complain if they haven't checked out the alternatives.

You gotta love the crassness that ICANN displays when it comes to objections. Not only are you limited to the grounds upon which you object, but "you must pay a filing fee in the amount set and published by the relevant dispute resolution service provider at the time you file your objection." So IOW, if you can't afford to object (to the tune of USD6200 or more), you're shit out of luck.

For all that's holy, support the alt-roots movement before the Internet is completely consumed by commercial interests.

100% decentralized

The issues boil down to how do you trust your DNS peers to not be issuing poisoned responses but allow personal domains.

rootservers are in international waters.

I see three possibilities
1) Bandwidth limitations imitating DoS attacks
2) Literally staying afloat in an attack, accident, or storm.
3) Someone gaining access and control (locally or remotely, via covert op or inside job)

A place to start. I use OpenNic Server Status

Already here.

Really, it baffles my mind why people keep calling for an "open" DNS structure when there is already one in place, has been in fact for over a decade. With enough public nameservers in place mirroring the root zone, it would literally be impossible for any government to shut down OpenNIC.

It's already here, my friend...all you need to do is pitch in and help.

...to welcome Telecomix to the alt-root scene. OpenNIC has been doing this for about a decade now. Let me let you guys in on a little secret: The less the "bad guys" know about you, the better. Meaning you shouldn't advertise yourselves as a solution to censorship, because you'll just get blocked at the IP level. Offer your services, and the censored masses will find you.

The bad guys read /. too, you know. Just the summaries, like all good /.ers.

http://wiki.opennicproject.org/ClosestT2Servers

...OpenNIC charges $0 for TLD applications, and since it's a transparent democratic approval process, you get to actively participate in the approval process. We need to show ICANN there are alternatives to their extortion attempts.

I often wonder what would happen if a group of nerds..like ourselves.. decided to start our own root DNS.. I would suspect that it would be shut down by the FCC in short order under some new or trumped up mangled misinterpretation of some law.

Alternative root servers have existed for years. The largest is probaby OpenNIC.

I think this is pretty forward thinking advice.

Though I can't imagine ISPs are going to be happy about the NSA's frank assessment that their DNS servers "typically don't provide enhanced security services," and that home users should be using a third-party DNS, including open source.

On that topic: http://www.opennicproject.org/

I wonder how they feel about them?

(The cynic in me also wonders if they're trying to strong-arm the major ISPs into accepting some sort of "enhanced" DNS security package from the NSA. The best way to control Internet users, if they don't know about dotted quads (or IPv6 addresses), is to have backdoor control of DNS. If you can't reach the information, it doesn't exist.)

Does it mean http://www.opennicproject.org/publictier2servers is no longer reliable?

http://www.opennicproject.org/

OpenNIC already does this. OpenNIC is totally independent of ICANN, and can resolve names to IP addresses without consulting the ICANN root zone. They've been doing it for 10+ years, with 40+ servers spread across the globe, both hemispheres. The solution is out there; folks just need to take advantage of it.

OpenNIC's public DNS servers.

OpenNIC's public DNS servers.

It would make measures like the Australian blacklist falderall all that much more difficult to actually pull off, and would render efforts like COICA similarly difficult.

Do it. Do it now.

If it is for making the Big Brother's job slightly more difficult, until yet-another-TDL-DNS gets created, maybe you can trust some OpenNIC DNS-es? Just asking.

...then it's rather clear that the U.S. gov't is taking advantage of ICANN's incestuous relationship with their benefactor, the U.S. Dept. of Commerce.

Now's the time to seriously start looking at alternative DNS frameworks that aren't whored out to ICANN.

Or alternate root DNS servers?

You know, that used to sound like a really stupid idea. Now I am not so sure.

Here mate. Just put the entry most convenient to you as the first entry in your DNS list.

Or alternate root DNS servers?

You know, that used to sound like a really stupid idea. Now I am not so sure.

Here mate. Just put the entry most convenient to you as the first entry in your DNS list.

Or alternate root DNS servers?

You know, that used to sound like a really stupid idea. Now I am not so sure.

Others are sure of the contrary.

...so those in the know can select the nameserver(s) closest to them without having to depend upon a 3rd party to determine (sometimes erroneously) what servers are closest.

...and OpenNIC has no interest in maintaining records of your visits.

Google is beginning to get scary.

STOP SUGGESTING OPENDNS, THEY DO THIS SHIT TOO.

Yes, but OpenNIC does not. When will people figure out that they are not beholden to their ISP for DNS services? It's really a no-brainer: If you don't like your ISP's policies in this regard, point your DNS settings to another resolver.

I think it's a shame that OpenDNS is doing this as well...I fondly remember the "good" days of everydns.net, before David U. went commercial on us.

I have Charter, and they do the same thing . I just use 4.2.2.1 and 4.2.2.2 as my primary DNS servers. Although, I can't really speak to their IPv6 capability.

OpenNIC offers IPv6 DNS resolution services on some of their servers.

OpenNIC offers free, open, and democratic domain name services. No redirects like your favorite ISP or OpenDNS (and to think these used to be the "good" guys back in the days of everydns.net). All ICANN domains, plus a good helping of alternate roots (including OpenNIC) as a bonus. The OpenNIC DNS network is slowly building, with servers around the world

Using your ISP's name servers is so passe. They'd like the masses to think that's the only choice.

Now, ICANN is preparing to open a potentially unlimited number of new top-level domains as early as the first quarter of 2010.

Well, this should prove interesting, since the alt root I'm associated with (OpenNIC) hasn't received notification from ICANN as to how colliding TLDs will be handled. And I don't know of any other alternate roots that have been contacted either.

I think he missed on the name. And, unlike me, he didn't take the time to JFGI before he shot his mouth off. He was trying to point at OpenNIC rather than OpenDNS.

The really funny thing about this whole DNS server argument is that it is a trivial technical problem to setup a DNS server. If the UN and/or any other organization was really so inclined they could have their own root DNS servers running in the time it takes me to drink my morning coffee (running well might take a bit longer). From there, they just have to convince ISP's to switch their pointers.

Since the impetus for the US DoC giving up control seems to be be from EU nations, I would suggest that the EU sets up its own DNS root servers, and convinces the ISPs within the EU economic zone to use these alternative root servers, with maybe a forwarder to or mirror of the US controlled root servers, just to make things a bit more seamless. At this point, the EU has all the control it wants, and the US has no choice in the matter.

You could get a .geek at OpenNIC...

OpenNIC fits that description perfectly. The European servers listed as partaking in the coallition seem to be performing well to me. http://www.opennicproject.org/ Now, and I really mean this on a completely unrelated note, I am probably one of the few people who see this move as an sudden outbreak of common sense, at least in theory. Although everyone sees OMG ICANN will make lots of moneys. The fact that TLDs are all ASCII has hampered the adoption (and subsequently implementation in browsers) of non-ASCII domains because you need to switch input methods. This is one area where most old-time hackers are completely off in what they think is a good idea. To work well the internet needs domains in the native languages of various peoples, I think it's cultural imperialism masked as common-hacker-sense to insist otherwise.

Currently, the OpenNIC operates the .indy, .geek, .null, .oss, .parody, .bbs, .fur, .free and .ing Top Level Domains.

As far as I am concerned centralisation of DNS control to a single organisation is a bad thing. It distorts the free market and can lead to political manipulation. People with brains use OpenNIC or run their own DNS servers. Nothing can beat the speed of a DNS server in your LAN, and if you know how to do it right it's also more secure.

OpenNIC has been around since 2000, offering free TLDs. We're still doing it, 8 years later, and it's still free. The only way altroots will flourish in the oppressive environment forced upon us by ICANN is if more people vote with their feet and migrate away from ICANN to alternate roots.

The alternative to ICANN is out there. When will people stop bitching about ICANN and actually do something about it through action rather than words?