Post by @jtk@infosec.exchange

2024-05-02 20:23 UTC

@briankrebs@infosec.exchange I assume you're half-joking. But in case not, this will never happen. While those three registry operations are all US-controlled companies, two of which being Verisign, there are numerous registrars for those TLDs located all over the world. Do you also stipulate US-only registrars too? Which ones if so? Then what about all the other TLDs that are effectively in US control? Any of those OK? Why or why not? How does this square with all the other goods that may not be entirely US-sourced? Placing a name under a certain TLD has potential consequences, and some are potentially problematic, but it may be a lot more complicated than that.

Replies (2)

@hal8999@infosec.exchange 2024-05-02 21:23

@jtk@infosec.exchange @briankrebs@infosec.exchange I don't think it's a matter of controlling com/net/org from non-US organizations. If you register a domain in another country's TLD, that country or contractor who runs the registry, can invalidate your domain. Or change SOA and publish different DNS records. Case in point: gay[.]af Mastodon instance was taken offline when Afghanistan decided the content offended their sensitivities. Also, less likely to get com/net/org get filtered. For a while, couldn't send a text message to iPhone users if a domain with *.me was included. Some strange filter.

Open ##5286372
@briankrebs@infosec.exchange 2024-05-02 22:39

@jtk@infosec.exchange Why would you assume that? I guess I'm less interested in the fairness arguments, or the globalist view here.

Open ##5286373