News: 1646339420

  ARM Give a man a fire and he's warm for a day, but set fire to him and he's warm for the rest of his life (Terry Pratchett, Jingo)

ICANN responds to Ukraine demand to delete all Russian domains

(2022/03/03)


ICANN on Wednesday rebuffed a request from Mykhailo Fedorov, First Vice Prime Minister of Ukraine, to revoke all Russian web domains, shut down Russian DNS root servers, and invalidate associated TLS/SSL certificates in response to the Russian invasion of Ukraine.

Fedorov [1]made his request because Russia's assault has been "made possible mainly due to Russia propaganda machinery using websites continuously spreading disinformation, hate speech, promoting violence and hiding the truth about the war in Ukraine."

In a publicly posted reply

[2]PDF

, Göran Marby, CEO of ICANN, said his organization is an independent technical body charged with overseeing the global internet's DNS and unique identifiers and must maintain neutrality.

[3]

"ICANN is a facilitator of the security, stability, and resiliency of these identifiers with the objective of a single, global, interoperable Internet," said Marby.

[4]

[5]

"In our role as the technical coordinator of unique identifiers for the Internet, we take actions to ensure that the workings of the Internet are not politicized, and we have no sanction-levying authority. Essentially, ICANN has been built to ensure that the Internet works, not for its coordination role to be used to stop it from working."

Moreover, Marby said ICANN does not have the authority to do what Fedorov asked.

[6]

"For country-code top-level domains, our work predominantly involves validating requests that come from authorized parties within the respective country or territory," Marby wrote. "The globally agreed policies do not provide for ICANN to take unilateral action to disconnect these domains as you request."

The root server system, he said, is maintained by independent operators. And ICANN does not have the ability to revoke the mentioned TLS/SSL certificates.

The RIPE Network Coordination Center also cited the need to remain neutral [7]in its reply on Tuesday.

[8]

However, CENTR, the Council of European National Top-Level Domain Registries, did choose a side. The Belgium-based non-profit, which focuses on legal, administrative, and technical policies and best practices for ccTLD registries, on Tuesday suspended the membership of the Coordination Center for TLD .RU/.РФ – administrator for those ccTLDs.

"The CENTR Board is following Russian military actions in Ukraine with concern and strongly condemns the violation of international law and Ukraine’s territorial integrity," the group said in [9]a statement posted to its website. "Ukraine’s national TLD registry is a member of CENTR and we stand with Ukrainians in their efforts to resist Russia’s invasion."

The long game matters

This is a symbolic gesture as it does not prevent Russia's ccTLDs from functioning. The Coordination Center's status, CENTR said, will be considered at the CENTR General Assembly meeting later this month.

Milton Mueller, professor at Georgia Tech and director of the Internet Governance Project, emphasized the need for neutral infrastructure in a [10]blog post on Tuesday that challenged Fedorov's disconnection request.

"Despite our strong opposition to Russia’s war, and our support for punitive sanctions targeting Russia’s capacity to sustain military operations economically, this proposal is misguided and dangerous," he wrote. "It strikes at the very basis of the neutral administration of naming and numbering registries that is required to make global communications fair and accessible to everyone."

For ICANN to intervene would undo the foundation of the internet and invite a variety of bad outcomes, he argues.

"Current calls for instantly bending the entire Internet governance regime to momentary outrage about Russia are more about posturing than effective responses to Russian aggression," he wrote. "These efforts to appear virtuous in opposition to a clear evil can inadvertently do long term damage to human rights."

Yet for those in Ukraine facing what is quite literally a mortal or existential threat, such arguments fail to satisfy. On an ICANN mailing list, Oksana Prykhodko, director of European Media Platform (an online NGO) and a member of ICANN's European Regional At-Large Organization, [11]asked , "Nuclear bombing of Ukraine – will it be enough to change your neutral position? Will try to record bomb alert in Kyiv just now and to send you."

[12]Ukraine asks ICANN to delete all Russian domains

[13]Oracle, SAP suspend business in Russia amid invasion

[14]US exempts South Korean smartphones from Russia export bans

[15]It only took four years and thousands of complaints but ICANN finally kills off rogue Indian domain registrar

The Register spoke with professor Mueller and asked whether there are any circumstances in which neutrality might become untenable, citing the remarks attributed to the late South African theologian and human rights activist Desmond Tutu: "If you are neutral in situations of injustice, you have chosen the side of the oppressor."

"I think that is a bit of a manipulative framing," Mueller said. "Nobody is neutral about Russia vs. Ukraine. The value of having neutral administration of global internet identifiers is extremely important for everybody and you don't press those neutral institutions into the service of a political objective of a particular nation."

Mueller cited observations made by others that no one has asked the ITU to revoke Russia's country code for the global telephone number system. That's because, he said, we've decided it's better not to weaponize the phone system.

Asked whether the potential threat of nuclear weapons changes the equation, Mueller said, "If the world is headed for a nuclear war, then Russian domains are the last thing we need to worry about. We need to be deterring nuclear war." ®

Get our [16]Tech Resources



[1] https://www.theregister.com/2022/03/01/ukraine_icann_domains/

[2] https://www.icann.org/en/system/files/correspondence/marby-to-fedorov-02mar22-en.pdf

[3] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_onprem/networks&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2YiFIm7Oz9MCeTvhLx2JvTAAAAMw&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0

[4] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_onprem/networks&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44YiFIm7Oz9MCeTvhLx2JvTAAAAMw&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0

[5] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_onprem/networks&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33YiFIm7Oz9MCeTvhLx2JvTAAAAMw&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0

[6] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_onprem/networks&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44YiFIm7Oz9MCeTvhLx2JvTAAAAMw&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0

[7] https://www.ripe.net/ripe/mail/archives/ripe-list/2022-March/002462.html

[8] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_onprem/networks&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33YiFIm7Oz9MCeTvhLx2JvTAAAAMw&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0

[9] https://centr.org/news/news/suspension-ru.html

[10] https://www.internetgovernance.org/2022/03/01/icann-ukraine-and-leveraging-internet-identifiers/

[11] https://atlarge-lists.icann.org/pipermail/at-large/2022q1/007821.html

[12] https://www.theregister.com/2022/03/01/ukraine_icann_domains/

[13] https://www.theregister.com/2022/03/02/oracle_and_sap_suspend_business/

[14] https://www.theregister.com/2022/03/03/south_korea_tech_russia_export_ban_exemptions/

[15] https://www.theregister.com/2021/03/04/icann_domain_woes/

[16] https://whitepapers.theregister.com/



They won't and can't get everything they ask for.

Anonymous Coward

While Ukraine has been owning the role of asymmetric warfare, and I don't really blame them for swinging for the fences, this is one of the rare cases I agree with a statement coming out of ICANN. It wouldn't surprise if they collected six bribes before breakfast, inculding two from each side of this issue. In this case they, regardless of their other motives are making the right call.

Whatever action the might have took would have set a precedent for every future conflict, and risked embroiling both the organization and internet in a permanent state of turmoil. The consequences of knocking down the gTLDs would have been a hot mess anyway. Indiscriminate and disruptive actions on that scale during war is a great way to teach the law of unintended consequences. While it might of felt good for a second to pwn the Russians that hard, it at minimum could have turned sentiment against them in the Russian public, and would have necessitated Putin engage in an escalation of similar scale. And that's just THIS conflict.

Re: They won't and can't get everything they ask for.

ShadowSystems

ICANN has a point in that they need to remain neutral to maintain the stability of the global network. You can't let politics get into it else the stability turns rather fragile.

The problem is that when one nation uses that same network to attack another nation, that's when the neutrality gloves need to come off. In order to maintain that stability you need to defend it from serious abuses like the very one being done by one nation against another.

Update all those DNS records to stop sending traffic to/from Russia until/unless Russia stops the electronic warfare via the global network. Over their own infrastructure without using global resources, sure, but absolutely not over the general global internet.

Yes it will take a while to update all the records, YES it may not populate to *every* DNS holder on the net (especially any smaller ones that refuse to update regularly), but enough of them will update soon enough to put a serious dent in the Russian traffic to cut back on their ability to misuse the internet.

"The only thing Evil needs to succeed is for Good men to do nothing." So if ICANN decides to sit on it's hands & twiddle it's thumbs up it's arse, it will have decided to be part of the problem rather than part of the solution.

DNS damage not necessary

Anonymous Coward

A nation-by-nation prohibition on peering with ASs in or controlled by Russia would cause pain. And some really strange flows.

Re: DNS damage not necessary

Anonymous Coward

Maybe EU and US ISPs could pull the plug on .ru.

I mean, who's going to be inconvenienced apart from malware writers?

Re: DNS damage not necessary

rcxb1

China won't abandon Russia, and the world isn't going to disconnect China from the Internet. Routes between Moscow and Europe will get slower and higher latency, but that's about all.

mark l 2

In the event ICANN did delete all the Russian domains, couldn't the Russian gov just instruct their ISP to update their DNS to look up the Russian domains on root servers under Russian control anyway? Effectively making the Russian domains just accessible within Russia only so still able to spread the propaganda to the Russian citizens

Doctor Syntax

The assumption seems to be that connection to the internet is regarded as a right. But rights are really a matter of mutual respect - the old argument of my right to extend my fist stops at the end of your nose. Where is Russia's respect in this?

People who have what they want are very fond of telling people who haven't
what they want that they don't want it.
-- Ogden Nash