Verisign - .COM and .NET not as we know it...

[HM2K]

Well since no one else posted it...

As of 15/09/2003 Verisign has assigned all unregistered .com and .net domains to the following IP: 64.94.110.11

It slowly began around 12am (GMT) when .net domains started to change over, shortly followed by .com domains as root-servers were updated.

IE:
* Dns resolved verisign-sucks.net to 64.94.110.11
* Dns resolved 64.94.110.11 to sitefinder-idn.verisign.com

Verisign basicly added an A record for *.com and *.net to 64.94.110.11

News can be found here: http://www.cbronline.com/latestnews/d04 ... 9c0018be8b
and here: http://slashdot.org/articles/03/09/16/0 ... =98&tid=99

Verisign will now be forwarding all unregistered domains to their website.

IE: http://sitefinder.verisign.com/lpc?url= ... -sucks.net

Shortly after this text file was posted with more information: http://www.deliver3.com/nanog.verisign.txt

Offical Verisign Documentation:

http://www.verisign.com/resources/gd/si ... tation.pdf
http://www.verisign.com/resources/gd/si ... ctices.pdf

A patch was released for BIND8 as a way to stop verisign: http://achurch.org/bind8-verisign-patch.txt

A bug in verisign's sitefinder script was found: http://sitefinder.verisign.com/lpc?url= ... /script%3E

asdf.dk released some comical images: http://asdf.dk/dearverisign.jpg http://asdf.dk/getaclueverisign.jpg

[Pills]

Moved to off-topic.

[munky]

the 'bug' posted has been somewhat patched. you can work around the patch with http://sitefinder.verisign.com/lpc?url= ... %3b%22.net

ISC Delegation Only patches are here: http://www.isc.org/products/BIND/delegation-only.html

> Anyone have a magic named.conf incantation to counter the verisign
> braindamage?

zone "com" { type delegation-only; };
zone "net" { type delegation-only; };

[Auriga]

Lame...

Truly lame.

[prefect]

One thing is cute about this is that major corporations and big isps all over the world are showing that they wont allow this. Several norwegian isps and the biggest .dk isp (afaik) have already patched their nameservers or nullrouted the ip and more follow each day.

I think we'll win this one.

[munky]

http://lnks.us/?U0MRQZ

Popular Enterprises Files $100 Million Lawsuit against VeriSign Inc.

KNOXVILLE, Tenn.--(BUSINESS WIRE)--Sept. 18, 2003--Popular Enterprises LLC, the parent company of Netster.com, has filed a $100 million dollar lawsuit against VeriSign, Inc.
The Complaint alleges antitrust violations, unfair competition and violations of the Deceptive and Unfair Trade Practices Act based upon VeriSign's release of the http://sitefinder.verisign.com product.

[HM2K]

http://www.petitiononline.com/icanndns/
http://www.icann.org/announcements/advisory-19sep03.htm
http://news.com.com/2100-1032_3-5077530.html
http://www.imperialviolet.org/dnsfix.html

Interesting...

[munky]

icann's latest:
http://www.icann.org/correspondence/two ... 3oct03.htm