<meta http-equiv="Content-Type" content="text/html; charset=utf-8"><div id="__MailbirdStyleContent" style="font-size: 10pt;font-family: Arial;color: #000000">
Sorry my use on non issue may not have been descriptive, it poses no risk to the security or stability of the DNS was the core of my message, in reply to the DoS characterisation.<br><div class="mb_sig"></div><blockquote class="history_container" type="cite" style="border-left-style:solid;border-width:1px; margin-top:20px; margin-left:0px;padding-left:10px;">
<p style="color: #AAAAAA; margin-top: 10px;">On 8/27/2020 7:35:18 PM, Dev Anand Teelucksingh <devtee@gmail.com> wrote:</p><div style="font-family:Arial,Helvetica,sans-serif"><div dir="ltr"><div>Thanks for the link to the OCTO-008 (at <a href="https://www.icann.org/en/system/files/files/octo-008-15apr20-en.pdf">https://www.icann.org/en/system/files/files/octo-008-15apr20-en.pdf</a>) file. <br></div><div> However, it doesn't say its a non-issue. Under 3.1 <br></div><div><br></div><div>"The Chromium queries are the largest single cause of queries to root servers. Other IMRS instances often see over 50% of all incoming queries from Chromium. The purpose of these queries is to check if Chromium is behind a captive portal. Provisioning for root servers is often a function of the overall load on root servers to satisfy the scaling needs. While these queries are free for Chromium to make, the cost of provisioning for root-server instances is not. Google has been notified of this issue, but it remains outstanding."</div><div></div><div><br></div><div></div><div>The two related Bug issues :</div><div><a href="https://bugs.chromium.org/p/chromium/issues/detail?id=946450&q=intranet%20redirect&can=2">https://bugs.chromium.org/p/chromium/issues/detail?id=946450&q=intranet%20redirect&can=2</a></div><div><a href="https://bugs.chromium.org/p/chromium/issues/detail?id=1090985">https://bugs.chromium.org/p/chromium/issues/detail?id=1090985</a></div><div><br></div><div>Dev Anand <br></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Wed, Aug 26, 2020 at 3:08 AM James Gannon <<a href="mailto:james@cyberinvasion.net">james@cyberinvasion.net</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<div lang="en-CH">
<div class="gmail-m_611620181326367517WordSection1">
<p class="MsoNormal"><span lang="EN-US">Matts APNIC blog describes exactly what they are for…<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">And no these are not any kind of attack on the root, the Ars article blows it out of all proportion, OCTO presented on this at some stage earlier in the year and its also mentioned as
a non issue in OCTO-008 </span><a href="https://www.icann.org/en/system/files/files/octo-008-15apr20-en.pdf" target="_blank">https://www.icann.org/en/system/files/files/octo-008-15apr20-en.pdf</a><u></u><u></u></p>
<p class="MsoNormal"><span><u></u> <u></u></span></p>
<p class="MsoNormal"><span><u></u> <u></u></span></p>
<div style="border-color:rgb(181,196,223) currentcolor currentcolor;border-style:solid none none;border-width:1pt medium medium;padding:3pt 0cm 0cm">
<p class="MsoNormal"><b><span style="font-size: 12pt;color: black">From: </span></b><span style="font-size: 12pt;color: black">ttf <<a href="mailto:ttf-bounces@atlarge-lists.icann.org" target="_blank">ttf-bounces@atlarge-lists.icann.org</a>> on behalf of Sergio Salinas Porto <<a href="mailto:presidencia@internauta.org.ar" target="_blank">presidencia@internauta.org.ar</a>><br>
<b>Date: </b>Wednesday, 26 August 2020 at 07:59<br>
<b>To: </b>Carlton Samuels <<a href="mailto:carlton.samuels@gmail.com" target="_blank">carlton.samuels@gmail.com</a>><br>
<b>Cc: </b>Technical issues <<a href="mailto:technical-issues@atlarge-lists.icann.org" target="_blank">technical-issues@atlarge-lists.icann.org</a>>, At-Large Worldwide <<a href="mailto:at-large@atlarge-lists.icann.org" target="_blank">at-large@atlarge-lists.icann.org</a>>, Technology Taskforce WG <<a href="mailto:ttf@atlarge-lists.icann.org" target="_blank">ttf@atlarge-lists.icann.org</a>><br>
<b>Subject: </b>Re: [technology taskforce] [At-Large] Ars Technica : A Chrome feature is creating enormous load on global root DNS servers<u></u><u></u></span></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">Good question Carlton, I asked myself the same questions ...<br clear="all">
<u></u><u></u></p>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<pre><b><span style="color:rgb(34,34,34)">Sergio Salinas Porto </span></b><u></u><u></u></pre>
<pre><b><span style="color:rgb(34,34,34)">Presidente Internauta Argentina - <a href="https://atlarge.icann.org/ralos/lacralo" target="_blank">LACRALO/ICANN</a></span></b><u></u><u></u></pre>
<pre><b><span style="color:rgb(34,34,34)"><a href="http://www.internauta.org.ar/" target="_blank">Asociación Argentina de Usuarios de Internet</a>/<a href="http://www.fetia.org.ar/" target="_blank">FeTIA</a></span></b><u></u><u></u></pre>
<pre><b><span style="color:rgb(34,34,34)">FUILAC- <a href="https://fuilac.org" target="_blank">Federación de Usuarios de Internet de LAC</a></span></b><u></u><u></u></pre>
<pre><b><span style="color:rgb(34,34,34)">facebook: <a href="http://www.facebook.com/salinasporto" target="_blank">salinasporto</a> </span></b><u></u><u></u></pre>
<pre><b><span style="color:rgb(34,34,34)">twitter: <a href="http://twitter.com/sergiosalinas" target="_blank">sergiosalinas</a></span></b><u></u><u></u></pre>
<pre><b><span style="color:rgb(34,34,34)">Mobi:+54 9 223 5 215819</span></b><u></u><u></u></pre>
<pre><b><span style="color:rgb(34,34,34)">"Ojalá podamos ser desobedientes, cada vez que recibimos órdenes que humillan nuestra </span></b><u></u><u></u></pre>
<pre><b><span style="color:rgb(34,34,34)"> conciencia o violan nuestro sentido común" Eduardo Galeano</span></b><u></u><u></u></pre>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<p class="MsoNormal"><u></u> <u></u></p>
<div>
<div>
<p class="MsoNormal">El mar., 25 ago. 2020 a las 19:35, Carlton Samuels (<<a href="mailto:carlton.samuels@gmail.com" target="_blank">carlton.samuels@gmail.com</a>>) escribió:<u></u><u></u></p>
</div>
<blockquote style="border-color:currentcolor currentcolor currentcolor rgb(204,204,204);border-style:none none none solid;border-width:medium medium medium 1pt;padding:0cm 0cm 0cm 6pt;margin-left:4.8pt;margin-right:0cm">
<div>
<p class="MsoNormal">I'm still left with little understanding of why this is important?<u></u><u></u></p>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">What is the use of these lookups for the browser? A previously undisclosed security feature? <u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">And what is being alleged from the name service side? A unintentional DOS-type attack on the root server system itself? <u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">CAS.<u></u><u></u></p>
</div>
</div>
<p class="MsoNormal"><u></u> <u></u></p>
<div>
<div>
<p class="MsoNormal">On Tue, 25 Aug 2020, 3:39 pm Dev Anand Teelucksingh, <<a href="mailto:devtee@gmail.com" target="_blank">devtee@gmail.com</a>> wrote:<u></u><u></u></p>
</div>
<blockquote style="border-color:currentcolor currentcolor currentcolor rgb(204,204,204);border-style:none none none solid;border-width:medium medium medium 1pt;padding:0cm 0cm 0cm 6pt;margin-left:4.8pt;margin-right:0cm">
<p style="max-width:100%"><span style="font-size: 14.5pt;font-family: "-apple-system-font",serif;color: rgb(27,27,27)">The Chromium browser—open source, upstream parent to both Google Chrome and the new Microsoft Edge—is getting some serious negative attention for a
well-intentioned feature that checks to see if a user's ISP is "hijacking" non-existent domain results.<u></u><u></u></span></p>
<p style="max-width:100%"><span style="font-size: 14.5pt;font-family: "-apple-system-font",serif;color: rgb(27,27,27)">The <a href="https://bugs.chromium.org/p/chromium/issues/detail?id=1090985" target="_blank"><span style="color:rgb(65,110,210);text-decoration:none">Intranet
Redirect Detector</span></a>, which makes spurious queries for random "domains" statistically unlikely to exist, is responsible for roughly half of the total traffic the world's root DNS servers receive. Verisign engineer Matt Thomas wrote a lengthy APNIC
blog <a href="https://blog.apnic.net/2020/08/21/chromiums-impact-on-root-dns-traffic/" target="_blank"><span style="color:rgb(65,110,210);text-decoration:none">post</span></a> outlining the problem and defining its scope.<u></u><u></u></span></p>
<div>
<p class="MsoNormal" style="max-width:100%"><span style="font-family:"-apple-system-font",serif">Read rest of Ars Technica article : <u></u><u></u></span></p>
</div>
<div>
<div>
<p class="MsoNormal"><span style="font-family:"-apple-system-font",serif"><a href="https://arstechnica.com/gadgets/2020/08/a-chrome-feature-is-creating-enormous-load-on-global-root-dns-servers/" target="_blank">https://arstechnica.com/gadgets/2020/08/a-chrome-feature-is-creating-enormous-load-on-global-root-dns-servers/</a><u></u><u></u></span></p>
</div>
<p class="MsoNormal"><span style="font-family:"-apple-system-font",serif"><u></u> <u></u></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:"-apple-system-font",serif">The APNIC blog post : <u></u><u></u></span></p>
</div>
<div>
<div>
<p class="MsoNormal"><span style="font-family:"-apple-system-font",serif"><a href="https://blog.apnic.net/2020/08/21/chromiums-impact-on-root-dns-traffic/" target="_blank">https://blog.apnic.net/2020/08/21/chromiums-impact-on-root-dns-traffic/</a><u></u><u></u></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:"-apple-system-font",serif"><u></u> <u></u></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:"-apple-system-font",serif">Not aware if this is mentioned before in ICANN circles <u></u><u></u></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:"-apple-system-font",serif"><u></u> <u></u></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:"-apple-system-font",serif">Dev Anand <u></u><u></u></span></p>
</div>
<p class="MsoNormal"><span style="font-family:"-apple-system-font",serif"><u></u> <u></u></span></p>
</div>
<p class="MsoNormal">_______________________________________________<br>
ttf mailing list<br>
<a href="mailto:ttf@atlarge-lists.icann.org" target="_blank">ttf@atlarge-lists.icann.org</a><br>
<a href="https://mm.icann.org/mailman/listinfo/ttf" target="_blank">https://mm.icann.org/mailman/listinfo/ttf</a><br>
<br>
_______________________________________________<br>
By submitting your personal data, you consent to the processing of your personal data for purposes of subscribing to this mailing list accordance with the ICANN Privacy Policy (<a href="https://www.icann.org/privacy/policy" target="_blank">https://www.icann.org/privacy/policy</a>)
and the website Terms of Service (<a href="https://www.icann.org/privacy/tos" target="_blank">https://www.icann.org/privacy/tos</a>). You can visit the Mailman link above to change your membership status or configuration, including unsubscribing, setting digest-style
delivery or disabling delivery altogether (e.g., for a vacation), and so on.<u></u><u></u></p>
</blockquote>
</div>
<p class="MsoNormal">_______________________________________________<br>
At-Large mailing list<br>
<a href="mailto:At-Large@atlarge-lists.icann.org" target="_blank">At-Large@atlarge-lists.icann.org</a><br>
<a href="https://atlarge-lists.icann.org/mailman/listinfo/at-large" target="_blank">https://atlarge-lists.icann.org/mailman/listinfo/at-large</a><br>
<br>
At-Large Official Site: <a href="http://atlarge.icann.org" target="_blank">http://atlarge.icann.org</a><br>
_______________________________________________<br>
By submitting your personal data, you consent to the processing of your personal data for purposes of subscribing to this mailing list accordance with the ICANN Privacy Policy (<a href="https://www.icann.org/privacy/policy" target="_blank">https://www.icann.org/privacy/policy</a>)
and the website Terms of Service (<a href="https://www.icann.org/privacy/tos" target="_blank">https://www.icann.org/privacy/tos</a>). You can visit the Mailman link above to change your membership status or configuration, including unsubscribing, setting digest-style
delivery or disabling delivery altogether (e.g., for a vacation), and so on.<u></u><u></u></p>
</blockquote>
</div>
</div>
</div>
_______________________________________________<br>
ttf mailing list<br>
<a href="mailto:ttf@atlarge-lists.icann.org" target="_blank">ttf@atlarge-lists.icann.org</a><br>
<a href="https://mm.icann.org/mailman/listinfo/ttf" rel="noreferrer" target="_blank">https://mm.icann.org/mailman/listinfo/ttf</a><br>
<br>
_______________________________________________<br>
By submitting your personal data, you consent to the processing of your personal data for purposes of subscribing to this mailing list accordance with the ICANN Privacy Policy (<a href="https://www.icann.org/privacy/policy" rel="noreferrer" target="_blank">https://www.icann.org/privacy/policy</a>) and the website Terms of Service (<a href="https://www.icann.org/privacy/tos" rel="noreferrer" target="_blank">https://www.icann.org/privacy/tos</a>). You can visit the Mailman link above to change your membership status or configuration, including unsubscribing, setting digest-style delivery or disabling delivery altogether (e.g., for a vacation), and so on.</blockquote></div>
_______________________________________________
ttf mailing list
ttf@atlarge-lists.icann.org
https://mm.icann.org/mailman/listinfo/ttf
_______________________________________________
By submitting your personal data, you consent to the processing of your personal data for purposes of subscribing to this mailing list accordance with the ICANN Privacy Policy (https://www.icann.org/privacy/policy) and the website Terms of Service (https://www.icann.org/privacy/tos). You can visit the Mailman link above to change your membership status or configuration, including unsubscribing, setting digest-style delivery or disabling delivery altogether (e.g., for a vacation), and so on.
</div></blockquote>
</div>