[sg-ops] Advisory on Name Collision

[Kerk Chun Sing]

Hi all,

Message from ICANN.
In an enterprise environment, I felt the probability of this happening 
is low.


/chunsing

*_ICANN Advisory to IT Professionals on Name Collision Identification 
and Mitigation_*

ICANN <http://www.icann.org/>, the international body responsible for 
oversight of the Internet's Domain Name System (DNS), has issued 
comprehensive advice to IT professionals worldwide on how to proactively 
identify and manage an issue known as "domain name collision".

In a report titled 'Name Collision Identification and Mitigation for IT 
Professionals 
<https://www.icann.org/en/about/staff/security/ssr/name-collision-mitigation-05dec13-en.pdf>', 
ICANN explains the nature and causes of name collision and proposes a 
range of possible solutions.

A name collision occurs when an attempt to resolve a name that is used 
in a private name space (e.g., under a non-delegated Top Level Domain, 
or a short, unqualified name) results in a query to the public DNS.  To 
explain the issue using an analogy, consider calling for "Mary" in your 
office where you've assumed there's only one "Mary", and then calling 
out "Mary" in a shopping mall and expecting that "office Mary" will respond.

Domain name collisions are not new.  However, with up to 1,300 new 
generic Top Level Domains (TLDs) being introduced over the next year, 
there is an increased level of concern and ICANN is ensuring that IT 
professionals are aware of the issue.  The ICANN report addresses some 
concerns that a number of applied-for new TLDs may be identical to names 
used in private name spaces.

The report explains how DNS queries leak into the global DNS from 
private name spaces and how these leaks can have unintended 
consequences. It shows that private networks will consistently, stably, 
and reliably perform name resolution when they use Fully Qualified 
Domain Names (FQDNs) and resolve them from the global DNS, and proposes 
methods to migrate to FQDNs.

*For more information:*The report, along with additional useful 
information and resources, can be found at: 
http://www.icann.org/en/help/name-collision.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://list.sgnog.net/pipermail/sgops/attachments/20131226/ca5b5f28/attachment.html>