New gTLD security implications
by Jonathan French - security analyst at AppRiver - Tuesday, 10 September 2013.
The provisioning and modification of the new gTLDs will greatly increase the workload and maintenance of the 13 root servers. As with many things, the more something is changed, the more likely it is to break. Fortunately the Domain Name System is built with redundancy. If there are any failures, these redundant systems should be able to handle it. In the case of incorrect data, though, there is the potential for large issues. We just have to hope that with the close attention to detail, these problems will not be something to worry about.

Many oppose the new gTLD rollout as well, but one of the more prominent voices against it is Verisign. Verisign is widely known for its certificate services, but its core business is running the .com and .net gTLD servers (and a few others). Verisign is concerned about the name collision issues as well as implementation problems. The company believes these new gTLD’s may cause a bigger problem than the experts think, potentially affecting many companies and individuals on the Internet. That’s why they are recommending more investigation and testing before allowing the changes to go live. ICANN has set a limitation of up to 1000 new gTLD’s per year and they believe that should be a slow enough rate as to not overburden anyone during the provisioning processes for each new gTLD.

The first gTLDs are expected to hit the Internet around November this year as part of the phased rollout. For the most part, it will be sort of a cosmetic change in DNS and we don’t expect problems. Experience teaches, however, that technology doesn’t always conform to what we expect.


101,000 US taxpayers affected by automated attack on IRS app

The IRS has revealed more details about an attack it suffered last month, mounted by unknown individuals with the aim to file fraudulent tax returns and funnel the returned money to their own bank accounts.

Weekly newsletter

Reading our newsletter every Monday will keep you up-to-date with security news.

Daily digest

Receive a daily digest of the latest security news.

Wed, Feb 10th