Comments on: New Chinese TLDs http://www.lightbluetouchpaper.org/2006/03/01/new-chinese-tlds/ Security Research, Computer Laboratory, University of Cambridge Fri, 12 Mar 2010 21:13:00 +0000 http://wordpress.org/?v=2.7.1 hourly 1 By: Steven J. Murdoch http://www.lightbluetouchpaper.org/2006/03/01/new-chinese-tlds/comment-page-1/#comment-668 Steven J. Murdoch Tue, 04 Jul 2006 12:37:56 +0000 http://www.lightbluetouchpaper.org/2006/03/01/new-chinese-tlds/#comment-668 @Robert Marceau Have a look at this <a href="http://www.isoc.org/briefings/016/" rel="nofollow">introduction to the DNS</a> for more information. @Robert Marceau

Have a look at this introduction to the DNS for more information.

]]> By: Robert Marceau http://www.lightbluetouchpaper.org/2006/03/01/new-chinese-tlds/comment-page-1/#comment-664 Robert Marceau Mon, 03 Jul 2006 00:02:39 +0000 http://www.lightbluetouchpaper.org/2006/03/01/new-chinese-tlds/#comment-664 I don't understand that I read here? I have only an 8th grade education. I still have no idea what the meaning of .com, .org, .net is.? Could you explain it to me laymen language? I still don't have a clue. Forgive me of my ignorance. I would like just a very simple answer? Thank you, bob I don’t understand that I read here? I have only an 8th grade education. I still have no idea what the meaning of .com, .org, .net is.? Could you explain it to me laymen language? I still don’t have a clue. Forgive me of my ignorance. I would like just a very simple answer? Thank you, bob

]]> By: Light Blue Touchpaper http://www.lightbluetouchpaper.org/2006/03/01/new-chinese-tlds/comment-page-1/#comment-112 Light Blue Touchpaper Thu, 09 Mar 2006 13:22:39 +0000 http://www.lightbluetouchpaper.org/2006/03/01/new-chinese-tlds/#comment-112 [...] Since my blog post last week, discussion continues on what has actually happened with the new Chinese TLDs and what the consequences will be. Rebecca MacKinnon’s posting on CircleID triggered an interesting discussion. It has also been mentioned on a few blogs including My Heart’s in Accra, Joho the Blog, China Digital Times, Shanghaiist, Virtual China, the LINX public affairs news and even in a Czech blog which I can’t understand. The ICANN Generic Names Supporting Organization (GNSO) mailing list has a thread discussing the move, as does the DomainState forum. [...] [...] Since my blog post last week, discussion continues on what has actually happened with the new Chinese TLDs and what the consequences will be. Rebecca MacKinnon’s posting on CircleID triggered an interesting discussion. It has also been mentioned on a few blogs including My Heart’s in Accra, Joho the Blog, China Digital Times, Shanghaiist, Virtual China, the LINX public affairs news and even in a Czech blog which I can’t understand. The ICANN Generic Names Supporting Organization (GNSO) mailing list has a thread discussing the move, as does the DomainState forum. [...]

]]> By: Steven J. Murdoch http://www.lightbluetouchpaper.org/2006/03/01/new-chinese-tlds/comment-page-1/#comment-105 Steven J. Murdoch Sat, 04 Mar 2006 12:08:44 +0000 http://www.lightbluetouchpaper.org/2006/03/01/new-chinese-tlds/#comment-105 @Joshua Lim <blockquote>with the “virtual root split”, will IE6 and IE7 users with the plugin still be able to access .中国 websites?</blockquote> The ISPs' DNS changes have no effect on IE6 users. With the plugin they should still be able to access the new TLDs. Without the plugin, they cannot access any international domain names. IE7 users can only access the new TLDs if their ISP's DNS server is modified. Alternatively, i-DNS may release a plugin which also works with IE7. @Joshua Lim

with the “virtual root split”, will IE6 and IE7 users with the plugin still be able to access .中国 websites?

The ISPs’ DNS changes have no effect on IE6 users. With the plugin they should still be able to access the new TLDs. Without the plugin, they cannot access any international domain names.

IE7 users can only access the new TLDs if their ISP’s DNS server is modified. Alternatively, i-DNS may release a plugin which also works with IE7.

]]> By: Joshua Lim http://www.lightbluetouchpaper.org/2006/03/01/new-chinese-tlds/comment-page-1/#comment-104 Joshua Lim Sat, 04 Mar 2006 09:50:30 +0000 http://www.lightbluetouchpaper.org/2006/03/01/new-chinese-tlds/#comment-104 "The i-DNS plugin appears not to work with IE7, as even when it is enabled, the new TLDs do not function" Well, that explains why they are in the rush to "split the root virtually". Btw, with the "virtual root split", will IE6 and IE7 users with the plugin still be able to access .中国 websites? I think our friend zhu hongbing might be able to answer this. :-) “The i-DNS plugin appears not to work with IE7, as even when it is enabled, the new TLDs do not function”

Well, that explains why they are in the rush to “split the root virtually”.

Btw, with the “virtual root split”, will IE6 and IE7 users with the plugin still be able to access .中国 websites? I think our friend zhu hongbing might be able to answer this. :-)

]]> By: Steven J. Murdoch http://www.lightbluetouchpaper.org/2006/03/01/new-chinese-tlds/comment-page-1/#comment-103 Steven J. Murdoch Fri, 03 Mar 2006 23:18:28 +0000 http://www.lightbluetouchpaper.org/2006/03/01/new-chinese-tlds/#comment-103 For completeness, I have installed IE 7 Beta 2 and tested some Chinese URLs. The results are as expected, and almost the same as with Firefox. http://北京大学.cn/ causes a DNS request for xn--1lq90ic7fzpc.cn, which is resolved by the normal DNS servers. The webpage is displayed without errors. http://北京大学.中国/ causes a DNS request for xn--1lq90ic7fzpc.xn--fiqs8s which is not resolved by normal DNS servers, although will succeed with the modified Chinese ones. The webpage fails to load and the error message "Internet Explorer cannot display the webpage" is shown. The only difference appears to be that IE7 will display the internationalised URL in the address bar with a Chinese font, whereas Firefox only displays the ASCII punycode. Firefox does this to mitigate a <a href="http://www.mozilla.org/security/announce/mfsa2005-29.html" rel="nofollow">homograph spoofing</a>, a security issue raised in February 2005. I don't know how Microsoft deals with this problem. The i-DNS plugin appears not to work with IE7, as even when it is enabled, the new TLDs do not function. For completeness, I have installed IE 7 Beta 2 and tested some Chinese URLs. The results are as expected, and almost the same as with Firefox.

http://北京大学.cn/ causes a DNS request for xn--1lq90ic7fzpc.cn, which is resolved by the normal DNS servers. The webpage is displayed without errors.

http://北京大学.中国/ causes a DNS request for xn--1lq90ic7fzpc.xn--fiqs8s which is not resolved by normal DNS servers, although will succeed with the modified Chinese ones. The webpage fails to load and the error message “Internet Explorer cannot display the webpage” is shown.

The only difference appears to be that IE7 will display the internationalised URL in the address bar with a Chinese font, whereas Firefox only displays the ASCII punycode. Firefox does this to mitigate a homograph spoofing, a security issue raised in February 2005. I don’t know how Microsoft deals with this problem.

The i-DNS plugin appears not to work with IE7, as even when it is enabled, the new TLDs do not function.

]]> By: …My heart’s in Accra » More on Chinese TLDs http://www.lightbluetouchpaper.org/2006/03/01/new-chinese-tlds/comment-page-1/#comment-102 …My heart’s in Accra » More on Chinese TLDs Fri, 03 Mar 2006 22:09:43 +0000 http://www.lightbluetouchpaper.org/2006/03/01/new-chinese-tlds/#comment-102 [...] Steven Murdoch has done some experiments and written an excellent blog post elucidating the technical details behind the new Chinese top level domains. He makes the argument that, while CCNIC has not technically “split the root” by creating a rival DNS rootserver, they’ve done something almost indistinguishable in practical terms. When you access a Chinese DNS server and ask for a .com or .net domain, you’re directed to the A-M rootservers (A.ROOT-SERVER.NET, etc.) But when you ask for one of the new TLDs (.中国, .公司, .网络), you skip the root servers and move directly to hawk2.cnnic.net.cn, the nameserver which has authority for these new domains. [...] [...] Steven Murdoch has done some experiments and written an excellent blog post elucidating the technical details behind the new Chinese top level domains. He makes the argument that, while CCNIC has not technically “split the root” by creating a rival DNS rootserver, they’ve done something almost indistinguishable in practical terms. When you access a Chinese DNS server and ask for a .com or .net domain, you’re directed to the A-M rootservers (A.ROOT-SERVER.NET, etc.) But when you ask for one of the new TLDs (.中国, .公司, .网络), you skip the root servers and move directly to hawk2.cnnic.net.cn, the nameserver which has authority for these new domains. [...]

]]> By: Joshua Lim http://www.lightbluetouchpaper.org/2006/03/01/new-chinese-tlds/comment-page-1/#comment-101 Joshua Lim Fri, 03 Mar 2006 16:30:28 +0000 http://www.lightbluetouchpaper.org/2006/03/01/new-chinese-tlds/#comment-101 Hi guys, i'm not a techie for dns stuff, but i think i'm sure my xiamen isp has manually added the three new TLDs to their DNS server configuration since i am able to access 搜房.中国 via a newly installed Firefox browser - those plugins do not work for Firefox, right? That being so, the question is, did this happened on the 1st March, or had this been implemented 3 years ago. I vaguely remembered trying to do the same in early Feb and it didn't work. Since the implementation is not universal, can we assume that some ISPs are still in the process of adding the 3 TLDs, at the directive from the Chinese government? Hi guys, i’m not a techie for dns stuff, but i think i’m sure my xiamen isp has manually added the three new TLDs to their DNS server configuration since i am able to access 搜房.中国 via a newly installed Firefox browser - those plugins do not work for Firefox, right?

That being so, the question is, did this happened on the 1st March, or had this been implemented 3 years ago. I vaguely remembered trying to do the same in early Feb and it didn’t work. Since the implementation is not universal, can we assume that some ISPs are still in the process of adding the 3 TLDs, at the directive from the Chinese government?

]]> By: Steven J. Murdoch http://www.lightbluetouchpaper.org/2006/03/01/new-chinese-tlds/comment-page-1/#comment-100 Steven J. Murdoch Fri, 03 Mar 2006 12:12:25 +0000 http://www.lightbluetouchpaper.org/2006/03/01/new-chinese-tlds/#comment-100 There is further interesting discussion about this issue <a href="http://www.circleid.com/posts/chinas_new_domain_names_lost_in_translation/#comments" rel="nofollow">on CircleID</a>. There is further interesting discussion about this issue on CircleID.

]]> By: zhu hongbing http://www.lightbluetouchpaper.org/2006/03/01/new-chinese-tlds/comment-page-1/#comment-98 zhu hongbing Thu, 02 Mar 2006 12:34:35 +0000 http://www.lightbluetouchpaper.org/2006/03/01/new-chinese-tlds/#comment-98 In US, US Government/FBI/CIA may also be able to get the information even he/she hide the information from whois. so for my opinion, if you do not want to leak your information to China Government, you could just not register Chinese domain names or use an alternative name to register it. In US, US Government/FBI/CIA may also be able to get the information even he/she hide the information from whois.
so for my opinion, if you do not want to leak your information to China Government, you could just not register Chinese domain names or use an alternative name to register it.

]]>