DNS Abuse Responses

DNS Abuse Responses are the various tools, methods, collaboration, and philosophies spawning from DNS Abuse itself.

Overview

There are four time-related categories of responses to DNS Abuse:

1. reactionary detection and removal of sources of abuse (necessarily after the fact),
2. cotemporal efforts to mitigate the amount and likelihood of abuse or its impact,
3. future-focused work on stopping abuse before it can happen, and
4. ongoing allowance of abuse for ideological or jurisdictional reasons.

Points of View

Every type of Internet user has worries over DNS Abuse and the responses to it. For instance, there is an ongoing multistakeholder debate over where to draw the line between technical abuse and content abuse.

Governments/Intergovernmental Organizations

IGO responses generally see DNS Abuse as a facet of Cybercrime. Government responses tend to focus on what can be adjudicated; content abuse, such as child pornography; and outlining how and when electronic evidence can be collected.

Pro-Mitigation

• Budapest Convention

• Domestic Legislation

Pro-Privacy

• Pro-privacy legislation, such as the GDPR, limits access to natural persons' data.

Internet Governance Organizations

ICANN

So far, ICANN has been steadfast in its focus on technical DNS abuse and avoidance of policymaking around content abuse. As recently as ICANN 71, the organization was criticized by [[____]] and [[ ___]] for not doing enough to steward contracted parties and non-contracted parties toward involvement in reducing abuse. However, ICANN and SSAC, in particular, can point to SAC115.

DNS Abuse Institute

Currently, this newcomer is entirely focused on creating an interoperable framework.

Private Sector

BC

The business community wants

IP

Intellectual property lawyers

ISPCP

Internet Service and Connectivity providers

End Users

End users, even those who work in the DNS industry, need help managing DNS Abuse mainly because of the timeless effectiveness of Social Engineering Attacks. For instance, at the end of 2020, GoDaddy notoriously tested its workers to see if they would share sensitive information after clicking on dubious links from a spoofed email.