VeriSign's rapid DNS updates in .com/.net

Suresh Ramasubramanian suresh at outblaze.com
Sun Jul 11 03:04:34 UTC 2004


On Sat, 10 Jul 2004, David A.Ulevitch wrote:

> It also means that changes can be made to host records quickly which is 
> important for people who don't plan well or have unexpected changes 
> that they want propagated.
> 
> I'm appreciative of this change -- but fyi, they aren't the only TLD 
> operators doing this, there are quite a few doing near-instant changes 
> to their respective zones.

.biz, .info etc do this as well.

It is an excellent policy, and a convenient thing not to wait several 
hours for your new .com domain to appear online immediately.

The disadvantage is, of course, that several abusers who register domains 
at a rapid clip with these two tlds, setting < 1 minute TTL on these and 
pointing these domain names to IPs that are basically compromised boxes or 
virus infected boxes, will now also start using .com / .net

There should be some way of fixing this, like requiring registrars to do
more due diligence when registering domains, maybe, and some better /
faster procedures to take down [say] phisher domains with fake contact
info.  Well yes, there is already a process, but it could sure do with 
more streamlining.

regards
--srs




More information about the NANOG mailing list