Critical.
Authoritative.
Strategic.
Subscribe to CIO Magazine »

Redirecting DNS requests can harm the Internet, says ICANN

Privacy and performance issues could arise when DNS operators substitute results for nonexistent domain requests

ICANN (Internet Corporation for Assigned Names and Numbers) on Tuesday condemned the practice of redirecting Internet users to a third-party Web site or portal when they misspell a Web address and type a domain name that does not exist.

Rather than return an error message for DNS (Domain Name System) requests for nonexistent domains, some DNS operators send back the IP (Internet Protocol) address of another domain, a process known as NXDOMAIN substitution. The target address is often a Web portal or information site.

Handling DNS requests this way has a number drawbacks that could lead to the Internet not working properly, according to ICANN.

For example, users sending e-mail to a domain that does not exist should get an immediate error message. However, if the message is redirected to a site set up to handle Web traffic, it's likely to get queued and an error message won't arrive for days, ICANN said.

Also, users will get longer response times if the site to which they're supposed to be redirected goes down.

Redirection sites are prime targets for attacks by hackers that want to send users to their own servers.

There are also privacy issues, according to ICANN. If sensitive data is redirected via a country with a different jurisdiction and local law, there could be consequences for both users and registries, it said.

ICANN, which handles assigning domain names and IP addresses, published its opinions and findings in a draft memo before the introduction of new gTLDs (generic top-level domains).

The organization discourages the practice of redirecting requests for nonexistent domains, and suggested banning it in a draft of the agreement owners of the new gTLDs would have to sign. ICANN wants domain owners wishing to redirect DNS requests to first explain why doing so won't cause any problems.

Join the CIO Australia group on LinkedIn. The group is open to CIOs, IT Directors, COOs, CTOs and senior IT managers.

More about: ICANN, Internet Corporation for Assigned Names and Numbers, NN
References show all

Comments

Post new comment

The content of this field is kept private and will not be shown publicly.
Users posting comments agree to the CIO comments policy.
Login or register to link comments to your user profile, or you may also post a comment without being logged in.
Related Coverage
Related Whitepapers
Latest Stories
Community Comments
Tags: DNS (Domain Name System), DNS redirecting, icann, NXDOMAIN substitution
Latest Blog Posts
Whitepapers
  • Protecting Against the Leading Causes of Data Breach
    This whitepaper was written for the organisation that wants to focus on prevention of data loss and doesn’t have millions to spend, but needs affordable solutions that can be implemented today to protect millions of sensitive records and dollars worth of intellectual property. This whitepaper addresses: - What organisations can do to prevent the four leading causes of data breaches - Why dedicated (pure-play) DLP solutions may not protect you from all four leading causes of data breaches - How to get prevent sensitive data leaving your organisation
    Learn more »
  • Mastering Backup and Restoration
    A backup strategy should not be static. Rather, it should establish a platform for a business to deliver continuous improvement through faster backup and restore features, easier management, lower operating expenditure, reduced complexity and delayed capital investment. These will in turn support greater business competitiveness. Read on.
    Learn more »
  • BPM Basics for Dummies
    This book helps you understand what BPM is really all about. We wrote it because BPM is so useful and so powerful — and because it is also very accessible. We wrote this book for you — the individual. You may be a business manager, or an Information Technology practitioner, or maybe an ambitious career individual who wants to know what BPM is all about and how to apply it.
    Learn more »
All whitepapers
rhs_login_lockGet exclusive access to Invitation only events CIO, reports & analysis.
Recent comments