Name Collision

From ICANNWiki
Revision as of 00:46, 6 February 2014 by Jonah (talk | contribs)
Jump to navigation Jump to search

Currently building this page.

A Name Collision is a term used to describe the circumstance in which a term is used to try and reach a private Domain Name that results in resolving to a public Domain Name unintentionally. Private domain names are used in Intranets and in many corporations and organizations throughout the world. A domain name on a private network that matches a name in the public Internet can create security risks in which private information is obtained or private networks are hacked.

History

New gTLD Program

A renewed interest in the name collision issue came about as ICANN's New gTLD Program was preparing to delegate hundreds of New domain names to the Root.

Interisle Consulting Report

ICANN contracted Interisle Consulting to carry out an investigation into the effects the delegation of 100s of new gTLDs would have on the security of the existing Internet and intranets around the world. The resulting report, which was published on August 6th, 2013 by ICANN, found that there would be many name collisions for new gTLDs that could create potential security risks. ICANN's initial response to this report was to propose a delay based on the assessed security risk each New gTLD would carry. [1]

  • For .home and .corp, ICANN deemed the two strings "high-risk" because of the widespread use of the terms on internal networks. Currently, ICANN is indefinitely delaying the delegation of these string to the Root Zone.
  • 20% of applications had been deemed an "uncalculated risk" by ICANN initially, saying these strings would be delayed 2-3 months in their application process while they conduct more research into whether the string is of "high" or "low" risk.
  • 80% of applications were deemed "low risk" by ICANN. These strings would face a delay in activating domains until 120 days after contracting with ICANN, but otherwise would not face any long terms delays towards delegation.

Overall, the initial reaction to the publishing of the Interisle report took the form of outrage by many New gTLD applicants, especially since the delays could potentially add on millions of dollars in costs to the applicants on their way to delegating a new gTLD. In the months following the report's publishing, the ICANN community mobilized to create alternative solutions to the Name Collision issue, as well as argue whether or not the issue was serious enough to delay delegation of 100s of gTLDs.[2]

Reception by New gTLD Applicants

Reception by New gTLD Applicants to the Interisle Report as well as ICANN's response to the report was varied. Many applicants were angered that the timing of the report was poor, since ICANN was only months away from delegating the first New gTLDs in the program. Others pointed out to the potential of millions of dollars in extra costs because of this delay. A few applicants, most notably Verisign, were more supportive of ICANN's response to the report and felt the delay was warranted in order to make sure the security of the Internet would not be compromised. Many applicants however, felt that the report and ICANN's response was too conservative and that the Name Collision issue was not that serious of a risk.[3]

Alternative Path to Delegation

Research

References