I don't work for Google nor speak on their behalf. I checked the domains.google: I found that the price of the .zip is $15, and there is a requirement for a .zip website to use HTTPS. I don't think the SSL part could resolve the risk as anyone could obtain a free SSL certificate nowadays, but the price is reasonably higher than a .com The focus should not be on the ".zip" but on reducing the risk for end users. The solution could be at the browser level and the DNS level. Any attempt to resolve this issue at the DNS level would consider the effect of measures on the rest of the DNS. Khaled Koubaa Twitter : @koubaak <https://twitter.com/koubaak> LinkedIn : linkedin.com/in/koubaak/ <http://www.linkedin.com/in/koubaak/> Website : koubaa.net On Tue, May 30, 2023 at 3:49 PM John McCormac via CPWG <cpwg@icann.org> wrote:
On 30/05/2023 11:49, Khaled Koubaa via CPWG wrote:
Thank you Olivier.
There is indeed a long list of TLDs that are File Extension including very widely used ones such as .io or .xyz
This blog post has the full list : https://wkumari.github.io/2023/05/15/TLDs-that-are-extensions.html <https://wkumari.github.io/2023/05/15/TLDs-that-are-extensions.html> ble PS: The writer of the blogpost is Warren Kumari from Google PS2: I agree with his statement "I think that this particular ship has sailed"
I would not agree with that, Khaled, The .ZIP gTLD is going to be a major problem because of the way that domain names and links are parsed. Not everyone is an expert with regular expressions used to parse text so the default position for many mailserver administrators will be to ban the .ZIP gTLD at a mailserver level. The .MOV may also be a problem but it is the .ZIP which poses the greatest risk due to its widespread use.
The key factor in the damage that .ZIP will cause, and it will cause problems, will be the pricing of .ZIP new registrations. If Google prices them as a multiple of .COM then that will limit some of the damage. If it uses discounting to drive registration volume, that will turn a small problem into a much bigger one.
Regards...jmcc
Khaled
Khaled Koubaa
Twitter : @koubaak <https://twitter.com/koubaak>____
LinkedIn : linkedin.com/in/koubaak/ <http://www.linkedin.com/in/koubaak/
Website :koubaa.net <https://koubaa.net/>
On Tue, May 30, 2023 at 1:29 PM Olivier MJ Crépin-Leblond via CPWG <cpwg@icann.org <mailto:cpwg@icann.org>> wrote:
From ARS Technica, 18 May 2023:
A recent move by Google to populate the Internet with eight new top-level domains is prompting concerns that two of the additions could be a boon to online scammers who trick people into clicking on malicious links.
https://arstechnica.com/information-technology/2023/05/critics-say-googles-n... < https://arstechnica.com/information-technology/2023/05/critics-say-googles-n...
_______________________________________________ CPWG mailing list CPWG@icann.org <mailto:CPWG@icann.org> https://mm.icann.org/mailman/listinfo/cpwg <https://mm.icann.org/mailman/listinfo/cpwg>
_______________________________________________ By submitting your personal data, you consent to the processing of your personal data for purposes of subscribing to this mailing list accordance with the ICANN Privacy Policy (https://www.icann.org/privacy/policy <https://www.icann.org/privacy/policy>) and the website Terms of Service (https://www.icann.org/privacy/tos <https://www.icann.org/privacy/tos>). You can visit the Mailman link above to change your membership status or configuration, including unsubscribing, setting digest-style delivery or disabling delivery altogether (e.g., for a vacation), and so on.
_______________________________________________ CPWG mailing list CPWG@icann.org https://mm.icann.org/mailman/listinfo/cpwg
_______________________________________________ By submitting your personal data, you consent to the processing of your
personal data for purposes of subscribing to this mailing list accordance with the ICANN Privacy Policy (https://www.icann.org/privacy/policy) and the website Terms of Service (https://www.icann.org/privacy/tos). You can visit the Mailman link above to change your membership status or configuration, including unsubscribing, setting digest-style delivery or disabling delivery altogether (e.g., for a vacation), and so on.
-- ********************************************************** John McCormac * e-mail: jmcc@hosterstats.com MC2 * web: http://www.hosterstats.com/ 22 Viewmount * Domain Registrations Statistics Waterford * Domnomics - the business of domain names Ireland * https://amzn.to/2OPtEIO IE * Skype: hosterstats.com **********************************************************
-- This email has been checked for viruses by Avast antivirus software. www.avast.com _______________________________________________ CPWG mailing list CPWG@icann.org https://mm.icann.org/mailman/listinfo/cpwg
_______________________________________________ By submitting your personal data, you consent to the processing of your personal data for purposes of subscribing to this mailing list accordance with the ICANN Privacy Policy (https://www.icann.org/privacy/policy) and the website Terms of Service (https://www.icann.org/privacy/tos). You can visit the Mailman link above to change your membership status or configuration, including unsubscribing, setting digest-style delivery or disabling delivery altogether (e.g., for a vacation), and so on.