https://circleid.com/posts/20230627-alleviating-the-risks-.zip-and-similar-domain-extensions-could-pose-via-dns-intelligence

An interesting article on .zip and other similarly confusing gTLDs .(app, .cab, .cam, .mobi, .mov, .pub, .rip, and .win cited) from a DNS Abuse point of view.

Kind regards,
Justine



On Wed, 31 May 2023 at 13:56, Greg Shatan [NARALO] <gregshatanalac@gmail.com> wrote:
There are not many ICANN-related issues that break through to the general consciousness and mainstream media.  The attempted sale of .ORG was one such issue.

.ZIP (specifically) is another such issue.  I have seen it now mentioned on TV news.  I have also seen a large global financial institution issue a warning about .zip to employees and vendors, even while noting the gTLD's existence is "above board."

It is true that .zip is not unique in the type of risk it might pose.

However, I think it is fair to consider .zip a highly malignant variation on this type of risk, with some special features. "Zip files" are sent by email all day every day by general business and non-business users. Indeed, they exist to be sent by email. ".io files" do not fit the same profile (and .io is a ccTLD, which changes the analysis as well).

While this might be an opportunity to educate end-users about the existence of the larger problem, the .zip problem cannot be treated as merely one of many.

Greg


On Tue, May 30, 2023 at 9:21 PM Justine Chew via CPWG <cpwg@icann.org> wrote:
Maria, 

Carlton is correct. In the 2012 round, there was a Top-Level Reserved Names List which contained strings that were not allowed, these were mainly associated with ICANN-related entities and functions as well as some "well-known technical words":

AFRINIC  ALAC  APNIC  ARIN  ASO  CCNSO  EXAMPLE  GAC  GNSO  GTLD-SERVERS  IAB  IANA  IANA-SERVERS ICANN IESG IETF
INTERNIC  INVALID  IRTF ISTF  LACNIC  LOCAL LOCALHOST NIC  NRO  RFC-EDITOR  RIPE  ROOT-SERVERS  RSSAC  SSAC  TEST 
TLD  WHOIS  WWW

For the next round, the ICANN Board has already approved a SubPro PDP recommendation to add PTI to the above list.

Justine



On Wed, 31 May 2023 at 07:18, Carlton Samuels via CPWG <cpwg@icann.org> wrote:
Hi Maria,
Not sure if forbidden is the right label here but in the old rules - this would be like the 2012 round of gTLD - each TLD had a list of reserved names, meaning those that could not be in the trade.  If memory serves, those were listed in the RA.

At the top level, there are reserved strings that may not be delegated and those were listed. Well, almost all of them anyways; .internet itself was an outlier.

Carlton

==============================
Carlton A Samuels
Mobile: 876-818-1799
Strategy, Process, Governance, Assessment & Turnaround

=============================


On Tue, 30 May 2023 at 17:53, Maria A via CPWG <cpwg@icann.org> wrote:
Hi everyone,

Sorry my view might not be too informed - but what is even Google's rationale to pushing these?

Also isn't there some sort of black list of forbidden domains? 

Thank you, 
Maria

On Tue, May 30, 2023, 11:09 PM Jonathan Zuck via CPWG <cpwg@icann.org> wrote:

Chantelle,

Let’s find some time on the next CPWG call to discuss this situation. This might result in a discussion of advice or in a discussion of correspondence to the SSAC. Let’s get it on the agenda. Thanks.

Jonathan

 

 

From: CPWG <cpwg-bounces@icann.org> on behalf of Bill Jouris via CPWG <cpwg@icann.org>
Date: Tuesday, May 30, 2023 at 4:26 PM
To: cpwg@icann.org <cpwg@icann.org>
Subject: Re: [CPWG] Google pushes .zip and .mov domains onto the Internet, and the Internet pushes back

I apologize for misunderstanding your point.  Indeed we should look at other existing gTLDs as well.  

 

But .ZIP is something that we already know about, and thus can act on immediately.  Plus, as we do so, we create a process for dealing with other problematic existing gTLDs as we discover them. 

 

Bill Jouris

 

On Tue, May 30, 2023 at 12:25 PM, Khaled Koubaa via CPWG

<cpwg@icann.org> wrote:

_______________________________________________
CPWG mailing list
CPWG@icann.org
https://mm.icann.org/mailman/listinfo/cpwg

_______________________________________________
By submitting your personal data, you consent to the processing of your personal data for purposes of subscribing to this mailing list accordance with the ICANN Privacy Policy (https://www.icann.org/privacy/policy) and the website Terms of Service (https://www.icann.org/privacy/tos). You can visit the Mailman link above to change your membership status or configuration, including unsubscribing, setting digest-style delivery or disabling delivery altogether (e.g., for a vacation), and so on.

_______________________________________________
CPWG mailing list
CPWG@icann.org
https://mm.icann.org/mailman/listinfo/cpwg

_______________________________________________
By submitting your personal data, you consent to the processing of your personal data for purposes of subscribing to this mailing list accordance with the ICANN Privacy Policy (https://www.icann.org/privacy/policy) and the website Terms of Service (https://www.icann.org/privacy/tos). You can visit the Mailman link above to change your membership status or configuration, including unsubscribing, setting digest-style delivery or disabling delivery altogether (e.g., for a vacation), and so on.
_______________________________________________
CPWG mailing list
CPWG@icann.org
https://mm.icann.org/mailman/listinfo/cpwg

_______________________________________________
By submitting your personal data, you consent to the processing of your personal data for purposes of subscribing to this mailing list accordance with the ICANN Privacy Policy (https://www.icann.org/privacy/policy) and the website Terms of Service (https://www.icann.org/privacy/tos). You can visit the Mailman link above to change your membership status or configuration, including unsubscribing, setting digest-style delivery or disabling delivery altogether (e.g., for a vacation), and so on.
_______________________________________________
CPWG mailing list
CPWG@icann.org
https://mm.icann.org/mailman/listinfo/cpwg

_______________________________________________
By submitting your personal data, you consent to the processing of your personal data for purposes of subscribing to this mailing list accordance with the ICANN Privacy Policy (https://www.icann.org/privacy/policy) and the website Terms of Service (https://www.icann.org/privacy/tos). You can visit the Mailman link above to change your membership status or configuration, including unsubscribing, setting digest-style delivery or disabling delivery altogether (e.g., for a vacation), and so on.
_______________________________________________
CPWG mailing list
CPWG@icann.org
https://mm.icann.org/mailman/listinfo/cpwg

_______________________________________________
By submitting your personal data, you consent to the processing of your personal data for purposes of subscribing to this mailing list accordance with the ICANN Privacy Policy (https://www.icann.org/privacy/policy) and the website Terms of Service (https://www.icann.org/privacy/tos). You can visit the Mailman link above to change your membership status or configuration, including unsubscribing, setting digest-style delivery or disabling delivery altogether (e.g., for a vacation), and so on.


--
Greg Shatan
Chair, NARALO