<div dir="ltr">+1. Thanks very very very much, Matt<br clear="all"><div><div dir="ltr" class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><br><font color="#000000">Justine</font><br><b><br></b></div></div></div><br></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Wed, 16 Feb 2022 at 23:57, Warren Kumari <<a href="mailto:warren@kumari.net">warren@kumari.net</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr"><div dir="ltr"><br></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Wed, Feb 16, 2022 at 8:33 AM Thomas, Matthew via NCAP-Discuss <<a href="mailto:ncap-discuss@icann.org" target="_blank">ncap-discuss@icann.org</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<div lang="EN-US">
<div>
<p class="MsoNormal"><span style="color:black">NCAP DG,<u></u><u></u></span></p>
<p class="MsoNormal" style="font-variant-caps:normal;text-align:start;word-spacing:0px">
<span style="color:black"> <u></u><u></u></span></p>
<p class="MsoNormal" style="font-variant-caps:normal;text-align:start;word-spacing:0px">
<span style="color:black">I would like to provide a brief update on <a href="http://wpad.domain.name" target="_blank">wpad.domain.name</a>.<u></u><u></u></span></p>
<p class="MsoNormal" style="font-variant-caps:normal;text-align:start;word-spacing:0px">
<span style="color:black"> <u></u><u></u></span></p>
<p class="MsoNormal" style="font-variant-caps:normal;text-align:start;word-spacing:0px">
<span style="color:black">Immediately after the ‘<a href="http://wpad.domain.name" target="_blank">wpad.domain.name</a>’ security threat was discovered in 2017, Verisign contacted D-Link[1] about their suffix search list misconfiguration and we have subsequently contacted them again. Verisign recently received
a response from D-Link stating the effected devices are now deemed the End-of-Life/End-of-Service [2]. </span></p></div></div></blockquote><div><br></div><div><a href="https://www.youtube.com/watch?v=IjmtVKOAHPM" target="_blank">https://www.youtube.com/watch?v=IjmtVKOAHPM</a><br></div><div><br></div><div> </div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div lang="EN-US"><div><p class="MsoNormal" style="font-variant-caps:normal;text-align:start;word-spacing:0px"><span style="color:black">Verisign also contacted the registrar of record to enquire about its use. The registrar acknowledged the security threat WPAD poses, and they placed the
domain on clientHold, which prevents the domain to resolve.</span></p></div></div></blockquote><div><br></div><div>So, as a meta comment, I think that ICANN / NCAP / the Internet community owes a large debt of thanks to Matt and Verisign for jumping in and helping fix these sorts of issues. This is only one of the many that he's helped fix for the good of the Internet.</div><div>I've previously done some similar type mitigations, and it's always a large amount of annoying grunge work trying to reach the right people, educating them on the issues, dealing with their grumpiness for having created extra work for them, and then following up.</div><div><br></div><div>I much prefer snarking at people and companies, but Matt's doing awesome work here.</div><div><br></div><div>W</div><div><br></div><div> <br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div lang="EN-US"><div><p class="MsoNormal" style="font-variant-caps:normal;text-align:start;word-spacing:0px"><span style="color:black"><u></u><u></u></span></p>
<p class="MsoNormal" style="font-variant-caps:normal;text-align:start;word-spacing:0px">
<span style="color:black"> <u></u><u></u></span></p>
<p class="MsoNormal" style="font-variant-caps:normal;text-align:start;word-spacing:0px">
<span style="color:black">Matt Thomas<u></u><u></u></span></p>
<p class="MsoNormal" style="font-variant-caps:normal;text-align:start;word-spacing:0px">
<span style="color:black">Verisign<u></u><u></u></span></p>
<p class="MsoNormal" style="font-variant-caps:normal;text-align:start;word-spacing:0px">
<span style="color:black"> <u></u><u></u></span></p>
<p class="MsoNormal" style="font-variant-caps:normal;text-align:start;word-spacing:0px">
<span style="color:black">[1]<span> </span><a href="http://mm.icann.org/pipermail/gnso-newgtld-wg-wt4/2017-October/000187.html" title="http://mm.icann.org/pipermail/gnso-newgtld-wg-wt4/2017-October/000187.html" target="_blank"><span style="color:rgb(5,99,193)">http://mm.icann.org/pipermail/gnso-newgtld-wg-wt4/2017-October/000187.html</span></a><u></u><u></u></span></p>
<p class="MsoNormal" style="font-variant-caps:normal;text-align:start;word-spacing:0px">
<span><span style="color:rgb(5,99,193)">[2]</span></span><span><span style="color:black"> </span></span><span><span style="color:rgb(5,99,193)"><a href="https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10268" title="https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10268" target="_blank"><span style="color:rgb(5,99,193)">https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10268</span></a></span></span><span style="color:black"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt"><u></u> <u></u></span></p>
</div>
</div>
_______________________________________________<br>
NCAP-Discuss mailing list<br>
<a href="mailto:NCAP-Discuss@icann.org" target="_blank">NCAP-Discuss@icann.org</a><br>
<a href="https://mm.icann.org/mailman/listinfo/ncap-discuss" rel="noreferrer" target="_blank">https://mm.icann.org/mailman/listinfo/ncap-discuss</a><br>
<br>
_______________________________________________<br>
By submitting your personal data, you consent to the processing of your personal data for purposes of subscribing to this mailing list accordance with the ICANN Privacy Policy (<a href="https://www.icann.org/privacy/policy" rel="noreferrer" target="_blank">https://www.icann.org/privacy/policy</a>) and the website Terms of Service (<a href="https://www.icann.org/privacy/tos" rel="noreferrer" target="_blank">https://www.icann.org/privacy/tos</a>). You can visit the Mailman link above to change your membership status or configuration, including unsubscribing, setting digest-style delivery or disabling delivery altogether (e.g., for a vacation), and so on.</blockquote></div><br clear="all"><div><br></div>-- <br><div dir="ltr"><div dir="ltr">The computing scientist’s main challenge is not to get confused by the<br>complexities of his own making. <br> -- E. W. Dijkstra</div></div></div>
_______________________________________________<br>
NCAP-Discuss mailing list<br>
<a href="mailto:NCAP-Discuss@icann.org" target="_blank">NCAP-Discuss@icann.org</a><br>
<a href="https://mm.icann.org/mailman/listinfo/ncap-discuss" rel="noreferrer" target="_blank">https://mm.icann.org/mailman/listinfo/ncap-discuss</a><br>
<br>
_______________________________________________<br>
By submitting your personal data, you consent to the processing of your personal data for purposes of subscribing to this mailing list accordance with the ICANN Privacy Policy (<a href="https://www.icann.org/privacy/policy" rel="noreferrer" target="_blank">https://www.icann.org/privacy/policy</a>) and the website Terms of Service (<a href="https://www.icann.org/privacy/tos" rel="noreferrer" target="_blank">https://www.icann.org/privacy/tos</a>). You can visit the Mailman link above to change your membership status or configuration, including unsubscribing, setting digest-style delivery or disabling delivery altogether (e.g., for a vacation), and so on.</blockquote></div>