<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=utf-8"><meta name=Generator content="Microsoft Word 14 (filtered medium)"><!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><title>ICANN News Alert</title><style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
h2
{mso-style-priority:9;
mso-style-link:"Heading 2 Char";
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:18.0pt;
font-family:"Times New Roman","serif";
font-weight:bold;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p
{mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
span.Heading2Char
{mso-style-name:"Heading 2 Char";
mso-style-priority:9;
mso-style-link:"Heading 2";
font-family:"Cambria","serif";
color:#4F81BD;
font-weight:bold;}
span.EmailStyle19
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body bgcolor=white lang=EN-US link=blue vlink=purple><div class=WordSection1><p class=MsoNormal><span style='font-family:"Arial","sans-serif"'><a href="http://www.icann.org/"><span style='text-decoration:none'><img border=0 id="_x0000_i1025" src="http://www.icann.org/images/gradlogo_bow.jpg" alt=ICANN></span></a><o:p></o:p></span></p><h2><span style='font-family:"Arial","sans-serif"'>News Alert<o:p></o:p></span></h2><p style='mso-margin-top-alt:0in;margin-right:0in;margin-bottom:7.5pt;margin-left:0in'><span style='font-family:"Arial","sans-serif"'><a href="http://www.icann.org/en/announcements/announcement-24may11-en.htm">http://www.icann.org/en/announcements/announcement-24may11-en.htm</a><o:p></o:p></span></p><div class=MsoNormal align=center style='margin-top:15.0pt;text-align:center'><span style='font-family:"Arial","sans-serif"'><hr size=3 width="100%" align=center></span></div><h2 style='margin-bottom:0in;margin-bottom:.0001pt'><span style='font-family:"Arial","sans-serif"'>Report on the Assessment of Security and Stability Implications of the Use of DNAME Resource Records in the Root Zone of the DNS<o:p></o:p></span></h2><p style='mso-margin-top-alt:11.25pt;margin-right:0in;margin-bottom:0in;margin-left:0in;margin-bottom:.0001pt'><span style='font-family:"Arial","sans-serif"'>24 May 2011<o:p></o:p></span></p><p><span style='font-family:"Arial","sans-serif"'>ICANN commissioned a technical study into the security and stability implications of using the Domain Name System (DNS) DNAME Resource Record [RFC2672] in the root zone of the DNS. Testing was specified to be carried out in a captive lab environment which provided a functional replica of certain components of the public DNS. The results of that testing are presented in this report for the information of the wider DNS technical community.<o:p></o:p></span></p><p><span style='font-family:"Arial","sans-serif"'>This report found no failure in resolution nor in the ability to perform DNSSEC validation when DNAME was used in the root zone to provide isomorphism between two top-level domains (TLD), i.e. when one TLD was provisioned as a DNAME, compared to being provisioned as a distinct delegation. A variety of DNS software was tested as part of this study.<o:p></o:p></span></p><p><span style='font-family:"Arial","sans-serif"'>The use of DNAME in provisioning isomorphic domains is a candidate mechanism for the deployment of variant TLDs. However, the purpose of this report was not to investigate or make recommendations about whether DNAME provides a useful partial or complete solution to any problem related to variant TLDs, but rather to consider the narrower technical implications of using DNAME in the root zone. The more general requirements for variant TLD provisioning are being studied independently of this work within ICANN.<o:p></o:p></span></p><p><span style='font-family:"Arial","sans-serif"'>Since this study was performed using a captive replica of the public DNS, it should not be interpreted as an exhaustive answer to the question of whether DNAME can be usefully deployed in the public root zone. However, the conclusions of this report support future work which might (for example) propose the limited deployment of DNAME in the root zone for the purposes of real-world testing.<o:p></o:p></span></p><p><span style='font-family:"Arial","sans-serif"'><a href="http://www.icann.org/en/topics/ssr/report-bond-internet-systems-24mary11-en.pdf">Report on the Assessment of Security and Stability Implications of the Use of DNAME Resource Records in the Root Zone of the DNS</a> [PDF, 268 KB]<o:p></o:p></span></p><p class=MsoNormal style='margin-bottom:12.0pt'><span style='font-family:"Arial","sans-serif"'><o:p> </o:p></span></p><table class=MsoNormalTable border=0 cellspacing=0 cellpadding=0 width="100%" style='width:100.0%'><tr><td width="100%" style='width:100.0%;background:white;padding:0in 0in 0in 0in'><p style='mso-margin-top-alt:0in;margin-right:0in;margin-bottom:3.75pt;margin-left:0in;line-height:15.0pt'><span style='font-size:9.0pt;font-family:"Arial","sans-serif";color:#5E5E5E'>This message was sent to <a href="mailto:inne@icann.org">inne@icann.org</a> from:<o:p></o:p></span></p><p style='mso-margin-top-alt:0in;margin-right:0in;margin-bottom:3.75pt;margin-left:0in;line-height:15.0pt'><span style='font-size:9.0pt;font-family:"Arial","sans-serif";color:#5E5E5E'>ICANN | 4676 Admiralty Way Suite 330 | Marina del Rey, CA 90292-6601<o:p></o:p></span></p></td><td width="2%" style='width:2.0%;background:white;padding:0in 0in 0in 0in'><p style='line-height:9.75pt'><span style='font-size:7.0pt;font-family:"Arial","sans-serif";color:#5E5E5E'>Email Marketing by <a href="http://www.icontact.com/a.pl/144186" target="_blank"><span style='text-decoration:none'><img border=0 id="_x0000_i1027" src="http://app.icontact.com/images/icontact_tryFree.gif" alt="iContact - Try It Free!"></span></a><o:p></o:p></span></p></td></tr></table><p class=MsoNormal><span style='font-family:"Arial","sans-serif";display:none'><o:p> </o:p></span></p><table class=MsoNormalTable border=0 cellspacing=0 cellpadding=0><tr><td style='background:white;padding:0in 0in 0in 0in'><p class=MsoNormal><a href="http://app.icontact.com/icp/mmail-mprofile.pl?r=9826907&l=6333&s=VMK0&m=359069&c=165637"><b><span style='font-size:9.0pt;font-family:"Arial","sans-serif";color:#115880;text-decoration:none'>Manage Your Subscription </span></b></a><o:p></o:p></p></td></tr></table><p class=MsoNormal><span style='font-family:"Arial","sans-serif"'><img border=0 width=1 height=1 id="_x0000_i1028" src="http://click.icptrack.com/icp/track.php?msgid=359069&act=VMK0&r=9826907&c=165637"><o:p></o:p></span></p></div></body></html>