Verisign seizes .com domain registered via foreign Registrar on behalf of US Authorities.

But at the end of the day what has happened is that US law (in fact, Maryland state law) as been imposed on a .com domain operating outside the USA, which is the subtext we were very worried about when we commented on SOPA. Even though SOPA is currently in limbo, the reality that US law can now be asserted over all domains registered under .com, .net, org, .biz and maybe .info (Afilias is headquartered in Ireland by operates out of the US).

via Verisign seizes .com domain registered via foreign Registrar on behalf of US Authorities. » blog2.easydns.org – Happenings and observations.

DNS-Based Service Discovery

This document specifies how DNS resource records are named and structured to facilitate service discovery. Given a type of service that a client is looking for, and a domain in which the client is looking for that service, this allows clients to discover a list of named instances of that desired service, using standard DNS queries. This is referred to as DNS-based Service Discovery, or DNS-SD.

via. http://files.dns-sd.org/draft-cheshire-dnsext-dns-sd.txt

Takedowns run amok? The strange Secret Service/GoDaddy assault on JotForm

The shutdown of his entire domain, without notice, for something a user had done even after protections were in place against it, seemed hugely unfair to Tank; he made his public case in terms that would also apply to other user-generated sites like YouTube. “We have 2 millions user generated forms,” he wrote. “It is not possible for us to manually review all forms. This can happen to any Web site that allows user-generated content.”

via Takedowns run amok? The strange Secret Service/GoDaddy assault on JotForm (updated).

Jotform.com is back up and it seems like an interesting idea.  Creating a form on that site is very easy but creating one locally in WordPress is easy too.  They seem to have a lot of users however.  It will also be interesting to see what happens with dns should the government abuse its authority (or lack thereof) in taking down sites capriciously and without due process.  The Internet was designed to route around damage.  Also this …

JotForm today moved its domains away from GoDaddy to registrars NameCheap and Hover. Tank still doesn’t know why his domain was suspended or when it might be returned; however, a WHOIS search this afternoon revealed that GoDaddy has at last removed the domain from its penalty box.

Half of Fortune 500s, US Govt. Still Infected with DNSChanger Trojan

Rasmussen said there are still millions of PCs infected with DNSChanger. “At this rate, a lot of users are going to see their Internet break on March 8.”

via Half of Fortune 500s, US Govt. Still Infected with DNSChanger Trojan — Krebs on Security.

Given the Conficker Working Group’s experience, shutting down the surrogate DNS network on March 8 may actually be a faster — albeit more painful — way to clean up the problem.

BIND 9.7.2 and automatic DNSSEC signing

BIND 9.7.0 introduced automatic in-server signature re-freshing and automatic key rollover. This allows BIND 9.7, if provided with the DNSSEC private key files, to sign records as they are added to the zone, or as the signatures need to be refreshed. This refresh happens periodically to spread out the load on the server and to even out zone transfer load.

via BIND 9.7.2 and automatic DNSSEC signing | Internet Systems Consortium.

Managed DNS Advanced Feature:Active Failover

Datacenter and/or server failures are no fun for anyone, especially those responsible for website operations. If you’ve protected yourself by using Active Failover — an advanced feature available for DynECT Managed DNS users — your site will remain live and accessible without any of your visitors knowing the difference.

via Managed DNS Advanced Feature:Active Failover – Dyn.

How to Compare Hosted DNS Providers (with Data!) – DNS

How to Compare Hosted DNS Providers (with Data!) – DNS.

My colleagues & I run a popular website and are constantly concerned with scaling and performance. Until last week, we had been running our own DNS servers (BIND) on Amazon EC2 instances.

We use Pingdom to monitor many functions of our servers, including DNS. What we saw was a resonable average resolution time of about 130ms, but frequent outliers higher than 500ms! The thought of a half-second penalty to the load time for first time visitors is not appealing. So we started to dig into the problem.