Dean wrote: >The fact still remains that DNS entries do not necessarilly imply >registration, and that the DNS protocol cannot be used to make registry >queries. This is getting so far from the topic it's not funny. Do any of the systems broken by Verisign try and do REGISTRY queries through DNS? No. So how is this relevant AT ALL to what Verisign have done? You also keep saying how Verisign are operating completely within the DNS protocol. Yes, they are. But so are programs that use DNS lookup to determine the existence of the domain! (not its registered status - that is IRRELEVANT to a user program, hadn't you noticed?) The protocol specifies NXDOMAIN for this very reason. This (obviously enough) can lead to conflicts - this is where external guidelines come in to ensure compatibility. Now, in this case there were none. So the IAB came up with some: don't play with wildcards! --James Disclaimer: Whilst every attempt has been made to ensure that material contained in this email is free from computer viruses or other defects, the attached files are provided, and may only be used, on the basis that the user assumes all par responsibility for the use of the material transmitted. The email is intended only for the use of the individual or entity named above and may contain information, distribution or copying that is confidential and privileged. If you are not the intended recipient please note that any dissemination, distribution or copying of this email is strictly prohibited. If you have received this email in error, please notify us immediately by return email and destroy the original message.