] The IAB feels that the system VeriSign had deployed ] for .com and .net contains significant DNS protocol ] errors, risks the further development of secure DNS, ] and confuses the resolution mechanisms of the DNS ] with application-based search systems. The Internet Architecture Board gives SiteFinder the thumbs down. ] The IAB has begun the process of shepherding the ] creation of an Informational RFC on concerns with ] operational practices with the DNS. We anticipate ] discussing the issues raised in your notes in more ] detail as part of that document. Given the scope of ] the issue, and our desire to ensure that it will have ] adequate review by the (DNS) operational community, ] we will be enlisting the help of the broader IETF ] community through relevant IETF working groups. ] In advance of that document, we have outlined below ] the issues with the VeriSign system which led us to ] the conclusion above. They are going to come up a set of SOPs for the NIC, and find a way to force VeriSign to obey them. IAB to ICANN on VeriSign: 'the DNS is designed to provide authoritative answers to queries' |