Slashdot Mirror


Verisign's SiteFinder - An Engineer's View

ixs writes "CircleID has an interesting article by David Monosov about Verisign's plans to reintroduce Sitefinder. The article presents the thesis that the Internet engineering community is partly to blame for Verisign's ability to mess with the .com and .net root zones. According to the author we spend too much time with our systems and not enough with politics. The writeup was previously posted to NANOG and received a favorable response from Paul Vixie."

14 of 159 comments (clear)

  1. Wow! Worst summary for an article ever? by Anonymous Coward · · Score: 4, Insightful

    The tone of the summary makes it seem like Monosov is advocating leaving Verisign alone and letting them do whatever they want.

    In fact, the article is exactly the opposite and states that we should wrest control of .com,.net, and .org registration from capitalist companies, and give it to a more global entity. Then, use those funds to help the Internet infrastructure further instead of lining the pockets of the already-rich.

  2. They shouldn't draw attention to themselves by Capt'n+Hector · · Score: 4, Insightful

    What Verisign doesn't understand is that the public will put up with it's monopoly if we can use the internet day to day without seeing the verisign logo. This company has somehow cheated the system to become the overlord of the internet. As long as everyday consumers aren't aware where their meat comes from, they'll eat it. But if the harsh truth faced them every day, nobody would touch a big mac. In the same way, Verisign can get away with it's monopoly because nobody cares where the internet comes from. I hope sitefinder changes this. Let sitefinder be the 21st century "The Jungle."

    --
    Quid festinatio swallonis est aetherfuga inonusti?
    Africus aut Europaeus?
    1. Re:They shouldn't draw attention to themselves by steve_l · · Score: 4, Insightful

      I wrote an article on this not so long ago, The impact of sitefinder on Web Services.

      All verisign are trying to do is steal the revenue that MS get with their 90+ share of the browser world. But MS wont like, and will come up with a workaround, like a 'critical' IE patch.

      but in the meantime, everyone whose app uses DNS suffers, not just web browsers. Web Services -programs hitting servers for their own posts and gets- really suffer, because any configuration failure now results in really obscure messages (bad mime type), (307: not supported), instead of ones that users are vaguely familiar with ('not found), and that makes diagnostics and support worse. Once people start patching their DNS, a lot worse, as replication gets harder.

      That is what irritates me: Verisign are screwing up every network application other than a web browser to get advertising $.

  3. A Solution by 1s44c · · Score: 5, Insightful

    Verisign put a DNS wildcard in to sell their search service and generally piss off the world.

    We put in a bind patch to prevent DNS wildcarding on top level domains.

    We don't need to play brain-dead political games with these losers. It's our internet, not theirs. We have the right to totally ignore any and all of ICANN's setup and use our own DNS servers without notice and without asking for their permission.

    1. Re:A Solution by burns210 · · Score: 4, Insightful

      there was mention of creating a .alt TLD... Now i am of the personal belief that an owner of a .com should prove they are a for-profit company, a .org a nonprofit organization, etc. could we create a .alt where things are independent of verisign? By not giving them ownership over the TLD, we don't give them power.... Maybe an open source-run TLD?

      Or better yet, a decetralized, p2p like DNS. one where there aren't A-M servers, but just peers with their DNS caches. It would become what the internet was meant for: a network of computer systems that can communicate with one another even after a significant portion of them are taken offline(due to attack or otherwise).

  4. Engineering vs. politics by BitwizeGHC · · Score: 5, Insightful

    Countries and corporations are both run by people whose primary job is politics. It is extremely difficult to go up against these people without becoming one of them.

    Not many engineers want to become politicians, even if it means fighting for something they value. They want to do their job, which is designing stuff.

    --
    N4st0r, trixx0r h0bb1tz0rz! Th3y st0l3 0ur pr3c10uzz!
  5. Re:ICANN? by 1s44c · · Score: 5, Insightful

    I mean, if they can get away with this, what's to stop them from doing things like shutting out other registrars, etc?

    We are. There is only a minor edit to resolv.conf between having a monopoly and having nothing.

    ICANN could be forced to revoke verisigns status if an alternate .com and .net registry was setup and honoured all existing third level domains.

  6. Re:I kind of like SiteFinder by tyldis · · Score: 5, Insightful
    If you want that then you can use a browser which supports it and sends you to a search page of *your* liking. If I don't want it, I can configure my browser to display an error instead. This is freedom of choice. SiteFinder did not seem to find the best webpage matching your search, but the company that paid them the most to match.

    Another thing is that the way they implement this SiteFinder is breaking other stuff on the net. Internet is more than just Web, you know.

    And it certainly did not help that they ran an SMTP server aswell. God knows what it collected before it dropped the connection, and the server was also RFC ignorant with programmed responses.

    I was tempted to mod you a troll, but figured all the answers you would get would be quite informative on the issue.

  7. Not wrong, but naive by The+Famous+Brett+Wat · · Score: 4, Insightful
    The suggestion that the generic TLDs should be administered by a non-profit organisation (with international representation, I would add) is entirely reasonable and seems like the Right Answer. The point that David Monosov seems to have missed, however, is that politics doesn't work on the basis of finding the Right Answer and applying it. If politics were like that, it would be a branch of engineering. The actual process of placing the management of the GTLDs under the control of an appropriate organisation would involve a reduction in control for those presently in charge, including the government of the USA. This is a showstopper of a problem, and it doesn't rank a mention in Monosov's analysis.

    Putting it simply, I think the present organisation works this way: people with power (government) and people with money (corporation) get together so that some of the power can be used to generate more money. The corporation is happy because of easy money; the government can use the threat of taking the money away to influence the behaviour of the corporation, which is happy to appease its master so long as the money is there. Both parties are happy. Everyone else doesn't really figure in on the equation unless the corporation does something to rile the general public, at which point the government may be obliged to take steps which make it look like it's doing its job.

    Suppose the government delegates control of the GTLDs to a non-profit organisation which has a mandate to ensure the smooth operation of DNS infrastructure, and can be relied upon to do a good job of that. What's in it for the government? They can't easily coerce the organisation into doing things in a manner which leaves them in control (governments thrive on control), since there's no greed to manipulate. Further, no filthy lucre means no pork for the politicians to direct back to their electorate. What's in it for the politicians?

    How do you sell a politician on an idea when the best you can come up with is, "this is obviously the Right Thing to do." What you really need is a P.R. headline which emphasises how it's good for employment, or the economy, or security, or will save the children, and a subtle undergirding of, "this will make you (politicians) more powerful and/or popular and/or provide economic benefits to your constituents."

    So what we need is some very creative P.R. spin, and I'm not very talented at it. Any suggestions?

    --
    proof, n. A demonstration that a conclusion is implied by certain premises and axioms.
  8. it goes both ways by humankind · · Score: 5, Insightful

    I agree that the tech community has traditionally been averse to playing politics, and this is evidenced in many areas. Nowhere is this more poignant than in the issue of SPAM, which is now more of a political than a technical issue. The tech community needs to form a hardcore lobbying group to force the Federal Authorities to do their job and prioritize the prosecution of spammers and other groups who are stealing, breaking into and destroying resources. The ineffectiveness of anti-spam efforts nowadays is the perfect testimonial to the much-needed aggressive politicking the tech community needs to do to solve this problem.

    On the other hand, the business community is also being too political and not technical enough. Tens, perhaps hundreds of thousands of businesses do not have secure networks and related policies and 99% of the larger operations are not fully-exploiting the technology available to them.

    Likewise, the mainstream business community is excessively political and seems to have had the common sense, as well as technical insight, sucked out of a majority of their business models. The whole "dot bomb" implosion was the result of too many companies relying exclusively on hype and politics to drive their business model.

    While the tech community can stand to be more political, I think the mainstream business community even more desperately needs to get technical.

  9. Verisign, not the engineers, lacks respectability by 0x0d0a · · Score: 4, Insightful

    We don't need to play brain-dead political games with these losers. It's our internet, not theirs. We have the right to totally ignore any and all of ICANN's setup and use our own DNS servers without notice and without asking for their permission.

    While a shift is not as trivial as you make it, I do agree with on major point.

    Paul Vixie has been running around trying to ensure that nobody acts "immaturely" or engages in name-calling with Verisign. He's desperate to be taken seriously.

    That's ridiculous. Verisign, not the engineers criticising them, is the side lacking respectability. The engineers run and design the networks and control the systems that Verisign uses. Verisign is a comparatively tiny collection of a few people who have buddies in politics, scientists, and engineers.

    Nobody should feel constrained in their online conversation for fear of "sounding respectable". The engineers who run the networks need prove nothing. They are running things. The only organization that has to worry about image at all is Verisign, which must seem at least impartial and benevolent enough to keep ICANN from axing their monopoly, which could be done.

    Verisign was granted a special, unique opportunity to get money for doing almost no work (some bandwidth and adding an entry to a database). Yes, they *can* be expected not to play hardball, as would be accepted in a general business arena, as they are not operating as a regular business. They have a monopoly that was granted to them that they do very well off of. If they want to continuously test their limits and see how much additional money they can soak people for, ICANN and other engineers are under no requirement to keep granting Verisign the right to continue making vast amounts of money for almost no effort.

    Verisign has clearly indicated that it is not currently willing to operate a public trust in good faith. They have continued to spout what most engineers consider to be bullshit, and have ignored frusterated feedback. Unfortunately, we have only one remedy, aside from formal complaints from ICANN (which have already been tried), and that is threats against and ultimately termination of Verisign's special privileges. Doing so will mean work for a lot of systems around the world, temporary service interruptions, bad blood at Verisign (and with political buddies of Verisign) and the risk that nobody else will be willing to step up after Verisign (given that their role might be terminated). Verisign is gambling that the Internet's collection of network engineers do not have the balls to actually terminate their role with a certain amount of bad behavior on their part. I am increasingly wanting to see Verisign's gamble proven wrong.

    Shifting to OpenNIC or similar has its own set of problems -- can the same level of service be provided? What happens when an name schisms start appearing?

    However, it may be better to be safe than sorry. Every day, Verisign makes it harder and harder to extricate them from a position where they can feed on vast amounts of technology money. This is acceptable, as long as they operate in good faith, which they have not done. Verisign's management has tried deceptive renewal forms sent to Verisign competitors. They have tried mucking about with fundamental components of the Internet. They may not be at a point where they must immediately be replaced, but I think that they are at a point where they must be made to modify their behavor or be terminated.

  10. You know, his suggestion was already tried . . . by SEE · · Score: 4, Insightful

    A non-profit organization was set up to run Internet name assignments, with international participation, representation of major infrastructure players, and even a nascent direct interested-person representation system.

    It was called the Internet Corporation for Assigned Names and Numbers, and it's the organization that went ahead and so solidly entrenched VeriSign in the first place.

    Merely passing along control to another NGO is not, in itself, a solution; there is no reason to expect it won't be politicized and turned into another ICANN.

  11. Re:Why have non-country specific TLDs at all? by cpghost · · Score: 4, Insightful

    Agreed! :-)

    So let's find out the UN's new URL:

    www.united-nations.nyc.ny.us for the HQ.
    Oh, wait, they have dependencies elsewhere:
    www.united-nations.wien.at
    www.united-nations.geneva.ch, www.united-nations.geneve.ch, www.united-nations.genf.ch, ...

    Or how's about, say, www.apache.org, slashdot.org, ...?

    --
    cpghost at Cordula's Web.
  12. Re:I kind of like SiteFinder by orthogonal · · Score: 5, Insightful

    Sometimes I misspell URLs and I actually *like* having a service that attempts to find the site I'm looking for.

    Hey, good point! You can't type, so we should break the internet and one of the few effective anti-spam techniques, so that you don't have to retype "www.hot-mokney-porn.com".

    By the way, I'm a fat slob with a heart condition, but I can't keep my fat ass out of McDonalds, inhaling lard-burger after lard-burger. I'd actually like a service that shut down all McDonalds and inconvenienced everybody else who can manage to control their compulsion to have evry meal at McDonalds.

    By the way, I'm an alky; I jus' can't stay awy from dat ol' demon rum. Howsabout we Prohibit all alcohol, jus' 'cause I can't figure out how to stop after two drinks?

    By the way, I get really afraid of Ay-rabs, and I don't understand why anybody would mind being on camera 24/7 unless they had something to hide. Can we tear up the Fourth Amedment and let John Ashcroft read your mail and tap your phones in order to give me a spurious sense of security?

    I mean, that would be really convenient to me if we could do these things. I don't care how it would inconvenience you, becuase I, just like Verisign, am in the business of offloading my costs onto the community, in order to increase the personal profits I keep all to myself.