[NCAP-Discuss] Honeypots: A Cost-Benefit Analysis (thought content)

[rubensk at nic.br]

Jeff,

Thanks for get the ball rolling. I would add to notification that a number of software tools already take "127.0.53.53" into account, like Google Chrome (#1 browser in user share) which presents "ERR_ICANN_NAME_COLLISION" for such address.

On the other hand, on "host data", there are same TCP/IP stacks that will try to send traffic to 127.0.53.53. 2014-version macOS was one of those, so in some times data leaves the host and eventually gets to a router that drops it. This doesn't change the fact that no host ever receives that data, and that a majority of Internet-connect hosts drop the traffic before leaving the host, but it's probably worth mentioning.


Rubens


> On 17 Feb 2022, at 18:40, Jeff Schmidt via NCAP-Discuss <ncap-discuss at icann.org> wrote:
> 
> <Honeypot cost-benefit.pptx>

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 529 bytes
Desc: Message signed with OpenPGP
URL: <https://mm.icann.org/pipermail/ncap-discuss/attachments/20220217/45821205/signature.asc>