[NCAP-Discuss] Update on wpad.domain.name

[Justine Chew]

+1.  Thanks very very very much, Matt

Justine



On Wed, 16 Feb 2022 at 23:57, Warren Kumari <warren at kumari.net> wrote:

>
>
> On Wed, Feb 16, 2022 at 8:33 AM Thomas, Matthew via NCAP-Discuss <
> ncap-discuss at icann.org> wrote:
>
>> NCAP DG,
>>
>>
>>
>> I would like to provide a brief update on wpad.domain.name.
>>
>>
>>
>> Immediately after the ‘wpad.domain.name’ security threat was discovered
>> in 2017, Verisign contacted D-Link[1] about their suffix search list
>> misconfiguration and we have subsequently contacted them again. Verisign
>> recently received a response from D-Link stating the effected devices are
>> now deemed the End-of-Life/End-of-Service [2].
>>
>
> https://www.youtube.com/watch?v=IjmtVKOAHPM
>
>
>
>> Verisign also contacted the registrar of record to enquire about its use.
>> The registrar acknowledged the security threat WPAD poses, and they placed
>> the domain on clientHold, which prevents the domain to resolve.
>>
>
> So, as a meta comment, I think that ICANN / NCAP / the Internet community
> owes a large debt of thanks to Matt and Verisign for jumping in and helping
> fix these sorts of issues. This is only one of the many that he's helped
> fix for the good of the Internet.
> I've previously done some similar type mitigations, and it's always a
> large amount of annoying grunge work trying to reach the right people,
> educating them on the issues, dealing with their grumpiness for having
> created extra work for them, and then following up.
>
> I much prefer snarking at people and companies, but Matt's doing awesome
> work here.
>
> W
>
>
>
>>
>>
>> Matt Thomas
>>
>> Verisign
>>
>>
>>
>> [1]
>> http://mm.icann.org/pipermail/gnso-newgtld-wg-wt4/2017-October/000187.html
>>
>> [2]
>> https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10268
>>
>>
>> _______________________________________________
>> NCAP-Discuss mailing list
>> NCAP-Discuss at icann.org
>> https://mm.icann.org/mailman/listinfo/ncap-discuss
>>
>> _______________________________________________
>> By submitting your personal data, you consent to the processing of your
>> personal data for purposes of subscribing to this mailing list accordance
>> with the ICANN Privacy Policy (https://www.icann.org/privacy/policy) and
>> the website Terms of Service (https://www.icann.org/privacy/tos). You
>> can visit the Mailman link above to change your membership status or
>> configuration, including unsubscribing, setting digest-style delivery or
>> disabling delivery altogether (e.g., for a vacation), and so on.
>
>
>
> --
> The computing scientist’s main challenge is not to get confused by the
> complexities of his own making.
>   -- E. W. Dijkstra
> _______________________________________________
> NCAP-Discuss mailing list
> NCAP-Discuss at icann.org
> https://mm.icann.org/mailman/listinfo/ncap-discuss
>
> _______________________________________________
> By submitting your personal data, you consent to the processing of your
> personal data for purposes of subscribing to this mailing list accordance
> with the ICANN Privacy Policy (https://www.icann.org/privacy/policy) and
> the website Terms of Service (https://www.icann.org/privacy/tos). You can
> visit the Mailman link above to change your membership status or
> configuration, including unsubscribing, setting digest-style delivery or
> disabling delivery altogether (e.g., for a vacation), and so on.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://mm.icann.org/pipermail/ncap-discuss/attachments/20220217/bfd267e7/attachment-0001.html>