Slashdot Mirror


ICANN Won't Get DNS Root Servers

daria42 writes "The US Department of Commerce has reversed its original decision on the Internet's root DNS servers, which would have eventually seen them pass into the hands of ICANN. While the original decision would have seen ICANN take full responsibility after it met a number of conditions, the new declaration means Commerce would keep that control, regardless of whether and when those conditions are met. It is possible that some countries could withdraw support from ICANN, and this decision even opens up the gate for a separate DNS system to be established outside the US's control."

15 of 343 comments (clear)

  1. Re:Root DNS servers by EuphoricaL · · Score: 2, Informative

    completely wrong. The Root DNS servers are the servers which have the authoritative DNS records. You probably use a ISPs DNS server, which will cache DNS queries. If it doesn't have a DNS lookup it will query DNS servers further up hierachy. The Buck stops with the Root DNS servers.

  2. Read the actual statement by Ingolfke · · Score: 5, Informative

    Don't interact w/ a summarized article. Read the actual statement from the US government. I wish these news sites would link to their sources when they're available.

  3. Hmm... by kc0re · · Score: 1, Informative

    We allow countries to have their domain, what else do you want? We (US) invented the internet (actually more specifically, Al Gord did), but the United States invented it, we want to control it.

    okay.. now seriously...I think each country should have their its own root DNS server. (France should own .fr)...
    But what I think is funny, is how the mainstream media is portraying this. By not telling people that these are just the DNS servers, the world things that there are 13 computers in the United States that control the whole internet.

    While that may be true about the naming conventions (DNS) it is certainly not true that 13 computers "control" the internet. Now we have Joe Homeuser thinking that his bank tranactions pass through one of these root 13, and that the government sniffs it all.

    (on the other hand, who is to say that they don't...)

  4. Re:Fine by me. by iamwahoo2 · · Score: 5, Informative
    Aren't there already a number of "free" root servers that are under non-govermnental or non-verisign control? There is nothing prohibiting changing to new root servers other than just getting people to bother making the switch

    http://www.orsn.org/

  5. Re:Change the DNS system! by Anonymous Coward · · Score: 1, Informative

    Just a minor, unrelated point first - the D stands for Domain, not distributed.

    Also, with registering domains, your description is exactly what takes place - if I wanted to register microsoft.co.uk, all I had to do was tell Nominet (who run .co.uk) that I wanted it before they did. Granted, after that I'd have hide in a bunker away from all the lawyers, but thats the price to pay for living in a society that provides a mechanism to protect the trademarks of companies.

  6. Re:On the fence by swimin · · Score: 5, Informative

    How about using something that already exists, like opennic?

    It is a currently running, non-profit organization that provides its own set of root DNS servers. They resolve all of the official domains(with the exception of .biz, because there is a dispute over it), and several others, like .oss (open source software).

  7. Uh, no... by A+beautiful+mind · · Score: 4, Informative

    You got it almost right, but it works like this:

    The ISP nameserver has a huge cache with a timeout. If a record cannot be found (because it hasn't been cached before or it has been discarded because of the timeout) then it goes to resolve the domain. To resolve the domain, you actually go backwards (from a higher hierarchy to lower), thus:

    root -> country level -> domain level

    ...not the other way around. The whole thing starts with the dns servers, they are Archimedes' one (13) fixed points the whole dns revolves around.

    --
    It takes a man to suffer ignorance and smile
    Be yourself no matter what they say
  8. Re:Don't intereract with more BS by Anonymous Coward · · Score: 1, Informative

    Well, I did what you said, and I do not understand.

    Mind informing me? What the hell is wrong with a telus routing to get there?

  9. Re:Change the DNS system! by TheRaven64 · · Score: 4, Informative
    The root servers are almost never actually used. All they do is let querying servers find the DNS server for a particular top level domain (e.g. .com). These are updated very infrequently (every year or so), and so their contents are cached by every DNS cache in existence. If the root DNS servers vanished hardly anyone would notice for quite a while.

    A study a few months back showed that 97% of all queries to the root servers came from people who have mis-typed the top level domain.

    I don't really care who controls the root servers, as long as they are all reliable and situated sufficiently far apart that they are not affected by geographical problems.

    --
    I am TheRaven on Soylent News
  10. Re:Redundancy is good by AndroidCat · · Score: 3, Informative

    Those are the logical servers. The physical servers for five of the roots have multiple locations. (But that might just be a building across town for some of them.) The Wiki claims that As a result most of the physical, rather than nominal, root servers are now outside the United States. And if it's in a Wiki, it must be true, right? ;)

    --
    One line blog. I hear that they're called Twitters now.
  11. Re:Don't intereract with more BS by Anonymous Coward · · Score: 1, Informative

    You mean "prisoner.iana.org"?

  12. Re:Fine by me. by daveschroeder · · Score: 2, Informative

    Um, only two of the 13 root nameservers are controlled by VeriSign. And three are "controlled" by the government. The rest are at academic/research institutions or telecommunications providers, some international.

    Four of the 13 are *already international*, and there are servers directly supported by the root server administrators that are all over the world.

    A ns.internic.net - VeriSign - Dulles, Virginia, USA
    B ns1.isi.edu - ISI - Marina Del Rey, California, USA
    C c.psi.net - Cogent - Herndon, Virginia, USA
    D terp.umd.edu - University of Maryland - College Park, Maryland, USA
    E ns.nasa.gov - NASA - Mountain View, California, USA
    F ns.isc.org - ISC - Palo Alto, California, USA
    G ns.nic.ddn.mil - U.S. DoD NIC - Vienna, Virginia, USA
    H aos.arl.army.mil - U.S. Army Research Lab - Aberdeen Proving Ground, Maryland, USA
    I nic.nordu.net - Autonomica - Stockholm
    J VeriSign - Dulles, Virginia, USA
    K RIPE - London
    L ICANN - Los Angeles, California, USA
    M WIDE Project - Tokyo

    You should probably, you know, take a look at the actual root servers list for a complete rundown, including locations.

  13. Re:Fine by me. by jacksonj04 · · Score: 2, Informative

    Bring it in with IPv6. If you look at the spec, nameservers *always* have the same IP address no matter where you are or what you're trying to get to. There are 3 IPs which are guaranteed to resolve to a nameserver, even if the nameserver doesn't have that specific IP.

    I'm not clear on the details, but I remember that point.

    --
    How many people can read hex if only you and dead people can read hex?
  14. Re:Redundancy is good by chrj · · Score: 2, Informative

    Actually some of the nodes does some distribution like ISC's F-root using anycast:

    http://www.isc.org/index.pl?/ops/f-root/

    The NORDUnet rootserver is also distributed (to three locations in europe).

  15. Re:i can i can't ... why not let the UN look after by JhohannaVH · · Score: 2, Informative

    What, the UN that rapes children?? And you want to put them in charge of the root DNS servers? America needs to get over the KofiAddiction and how. I have never seen an International Peace organization allowed to be so frickin' filthy. I would honestly like to know what would happen if it were made public that our soldiers were raping Iraqi children. Or selling them into sex slavery. Have you been to Darfur or Bosnia and seen the conditions of the UN Refugees??? They can't live up to what their charter says they are supposed to do to facilitate peace.

    No offense, but the UN needs to pull their head out of the sand, make a complete reformation and revamp the Security Council before they can have *any* more power in the World, developing or otherwise.

    --
    Sorry man... the Internet pooped on me.