No Such Weblog

Reuters reports that Verisign will ask outside experts for advice about Sitefinder: They are going to create a committee of "Internet leaders" to advise it on technical matters. Recommendations on what to do, though, are apparently not welcome.

Of course, the necessary expert advice has been readily available for several days now. It's telling that Verisign convenes a committee (and wastes more time) instead of listening to what's out there.

I'd respectfully suggest that whoever is asked to join this group decline the invitation.

ICANN's Security and Stability Advisory Committee has issued some recommendations on sitefinder: Recognizing the concerns about the wildcard service, we call on VeriSign to voluntarily suspend the service and participate in the various review processes now underway. We call on ICANN to examine the procedures for changes in service, including provisions to protect users from abrupt changes in service.

Also, the committee is soliciting input on practical security and stability implications, to be sent to secsac-comments@icann.org.