Re: [DNSOP] RDBD (Related Domains By DNS)

[Ben Schwartz <[e-mail]>]

Thanks for the draft.  I haven't been following this, and I found it
interesting.

I would appreciate more fully worked use cases to explain the motivation.
What is the use in correlating different domains?  How would one use this
to prevent "cousin" attacks?

On Tue, Mar 3, 2020 at 2:12 PM Brotman, Alex <[e-mail]>
wrote:

> Hello,
>
> A while ago, Stephen and I had sent out a few versions of this, and we had
> some discussions and revisions were made.  At the time, discussion waned,
> however I wanted to pick this up again before the onset of IETF107.
>
> https://datatracker.ietf.org/doc/draft-brotman-rdbd/
>
>  I've had some folks contact me privately, and I saw an inquiry on another
> list.  There does seem to be some interest, at least in the anti-abuse and
> research communities, of making this a functional proposition.
>
> To recap, the rough idea is that implementers would be able to positively
> or negatively confirm relationships between domains.  In the world of
> anti-abuse and research, these links are not always obvious.  For example,
> in a large corporation, some teams may go outside acceptable practice and
> register a domain through another provider.  Or it may be that you have
> international branches that operate on a different TLD, but you may not
> have registered with all TLDs.  In the latter case, being able to both
> positively and negatively state a relationship could be useful for
> anti-spam/phishing.
>
> Any questions or comments would be greatly appreciated.  Thank you.
>
> --
> Alex Brotman
> Sr. Engineer, Anti-Abuse & Messaging Policy
> Comcast
>
> _______________________________________________
> DNSOP mailing list
> [e-mail]
> https://www.ietf.org/mailman/listinfo/dnsop
>