<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class=""><div class=""><br class=""></div>On the original topic of <a href="http://corp.com" class="">corp.com</a>, press coverage of it:<div class=""><a href="https://krebsonsecurity.com/2020/02/dangerous-domain-corp-com-goes-up-for-sale/" class="">https://krebsonsecurity.com/2020/02/dangerous-domain-corp-com-goes-up-for-sale/</a></div><div class=""><br class=""></div><div class=""><br class=""></div><div class="">Rubens</div><div class=""><br class=""><div><br class=""><blockquote type="cite" class=""><div class="">On 9 Feb 2020, at 13:17, Rubens Kuhl <<a href="mailto:rubensk@nic.br" class="">rubensk@nic.br</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div class="protected-part" style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;"><div class="protected-title">Signed PGP part</div><div class="protected-content"><br class=""><div class=""><br class=""><blockquote type="cite" class=""><div class="">On 9 Feb 2020, at 13:06, Patrik Fältström <<a href="mailto:paf@frobbit.se" class="">paf@frobbit.se</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div class="">On 9 Feb 2020, at 7:06, Rubens Kuhl wrote:<br class=""><br class=""><blockquote type="cite" class="">Where can I find (regardless of author) well-thought analysis supporting the claim that the delegation of new TLDs could make people die ?<br class=""></blockquote><br class="">The only claim of people dying I know of is coming from a blogger:<br class=""><br class=""><<a href="http://domainincite.com/13221-verisign-says-people-might-die-if-new-gtlds-are-delegated" class="">http://domainincite.com/13221-verisign-says-people-might-die-if-new-gtlds-are-delegated</a>><br class=""><br class="">I have not seen many statements by bloggers like this author which are based on analysis and because of that I do not think we have to go down that path and investigate it further.<br class=""></div></div></blockquote><div class=""><br class=""></div>Actually, this made into the new gTLD program, and included the following mitigation mechanism:</div><div class=""><a href="https://www.icann.org/en/system/files/files/name-collision-framework-30jul14-en.pdf" class="">https://www.icann.org/en/system/files/files/name-collision-framework-30jul14-en.pdf</a></div><div class=""><br class=""></div><div class="">"7. EMERGENCY RESPONSE ICANN will limit emergency response for name collision reports to situations where there is a reasonable belief that the name collision presents a clear and present danger to human life."</div><div class=""><br class=""></div><div class="">So, this already found its way into current in-force policy. </div><div class=""><br class=""><blockquote type="cite" class=""><div class=""><div class=""><br class="">Also note that the link in this blog post to Verisigns actual response is wrong. You can find Verisigns response here:<br class=""><br class=""><<a href="https://forum.icann.org/lists/comments-gac-safeguard-advice-23apr13/pdfzz0VhyFkZw.pdf" class="">https://forum.icann.org/lists/comments-gac-safeguard-advice-23apr13/pdfzz0VhyFkZw.pdf</a>></div></div></blockquote><br class=""></div><div class="">And the actual words from Pat Kane and Danny Mcpherson are:</div><div class="">"These "outlier" strings with very low query rates may actually pose the most risks because they could support critical devices including emergency communications systems or other life-supporting networked devices."</div><div class=""><br class=""></div><div class="">But besides that response, no other published document has ever went to describe how this could be a reasonable line of thinking. Pink fish could turn into white fish too, but that never happened. And having the data to support that risk analysis could make all of us propose a different set of mitigations, so if it's somewhere to be found, it would be very interesting material for the NCAP project. </div><div class=""><br class=""></div><div class=""><br class=""></div><div class=""><br class=""></div><div class=""><br class=""></div><div class="">Rubens</div><div class=""><br class=""></div><div class=""><br class=""></div><div class=""> </div></div></div><br style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class=""><iframe class="untrusted-content-test" scrolling="auto" width="616px" height="20" data-src="data:text/html;charset=UTF-8;base64,PGlmcmFtZS1jb250ZW50Pl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fPEJSPk5DQVAtRGlzY3VzcyBtYWlsaW5nIGxpc3Q8QlI+TkNBUC1EaXNjdXNzQGljYW5uLm9yZzxCUj5odHRwczovL21tLmljYW5uLm9yZy9tYWlsbWFuL2xpc3RpbmZvL25jYXAtZGlzY3VzczxCUj48QlI+X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX188QlI+Qnkgc3VibWl0dGluZyB5b3VyIHBlcnNvbmFsIGRhdGEsIHlvdSBjb25zZW50IHRvIHRoZSBwcm9jZXNzaW5nIG9mIHlvdXIgcGVyc29uYWwgZGF0YSBmb3IgcHVycG9zZXMgb2Ygc3Vic2NyaWJpbmcgdG8gdGhpcyBtYWlsaW5nIGxpc3QgYWNjb3JkYW5jZSB3aXRoIHRoZSBJQ0FOTiBQcml2YWN5IFBvbGljeSAoaHR0cHM6Ly93d3cuaWNhbm4ub3JnL3ByaXZhY3kvcG9saWN5KSBhbmQgdGhlIHdlYnNpdGUgVGVybXMgb2YgU2VydmljZSAoaHR0cHM6Ly93d3cuaWNhbm4ub3JnL3ByaXZhY3kvdG9zKS4gWW91IGNhbiB2aXNpdCB0aGUgTWFpbG1hbiBsaW5rIGFib3ZlIHRvIGNoYW5nZSB5b3VyIG1lbWJlcnNoaXAgc3RhdHVzIG9yIGNvbmZpZ3VyYXRpb24sIGluY2x1ZGluZyB1bnN1YnNjcmliaW5nLCBzZXR0aW5nIGRpZ2VzdC1zdHlsZSBkZWxpdmVyeSBvciBkaXNhYmxpbmcgZGVsaXZlcnkgYWx0b2dldGhlciAoZS5nLiwgZm9yIGEgdmFjYXRpb24pLCBhbmQgc28gb24uPC9pZnJhbWUtY29udGVudD4=" sandbox="allow-scripts" name="untrusted-content-test_0" src="data:text/html;charset=UTF-8;base64,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" style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; border: none; display: block; overflow: auto; height: 154px;"></iframe><br class="Apple-interchange-newline"></div></blockquote></div><br class=""></div></body></html>