[LINK] 'Shake-up' for internet proposed by ICANN

[Kim Davies]

Quoting Glen Turner on Monday June 30, 2008:
| 
| You'd think some of that short-term cash would be going to
| subsidise the cost of root name servers, but no.

I believe the root server operators have been resistant to being funded
through ICANN and prefer to remain independent. That being said, L root
service is provided by ICANN itself.

| Registrars have been very good at avoiding costs. For example,
| the cost of DNSSEC falls mainly upon them. DNSSEC offers
| a great deal of security against phishing to users, and
| the technical community (ie, IETF DNS WG) have wanted it
| deployed for years. But the registrars seem to have convinced
| ICANN against doing this, despite the benefit to net users.

I'm not aware of any registrar pressure against DNSSEC. .ORG will be the
first gTLD to deploy DNSSEC as approved on Thursday; and several ccTLD
operators already operate the technology. IANA has been signing the
root zone for over a year, but essentially political hurdles currently
prevent the real root zone from being signed presently.

One of the biggest hurdles to DNSSEC deployment in most registry zones
to date has been the ability to walk a zone through NSEC records, which
would effectively allow one to build a list of registered domains. Only
recently NSEC3 (RFC 5155) has been developed to disallow this.

kim