Re: [weirds] Domain Reputation in RDAP

Hmm... that depends. Is the idea to provide meta-data so a reputation
can be determined, or is the idea to actually provide a reputation?

The latter idea is subjective and could be dangerous. But providing
meta-data can be fact based and put reputation in the eye of the
beholder.

It seems like a simple thing to do with existing RDAP would be to
provide a history of registrations and expirations using events. That
way a long held domain changing hands is something an observer can
draw their own conclusions about. Just an idea.

-andy

On Wed, Dec 2, 2015 at 11:07 AM, Hollenbeck, Scott
<shollenbeck@verisign.com> wrote:
> Someone recently asked me to read this article and consider if or how RDAP might be helpful in identifying bogus academic journal web sites:
>
> http://news.sciencemag.org/scientific-community/2015/11/feature-how-hijack-journal
>
> The author uses the word "hijack" to describe what's happening with domains (based on the title I thought it would be about bogus transfers), but I read it as more of a problem with two scenarios:
>
> 1. A domain expires and is re-registered by someone who does bad things with it.
>
> 2. A domain is registered and used to impersonate or appear to function as a "legitimate" journal.
>
> Does anyone see value in adding something to RDAP that could be used as a measure of domain stability or reputation? The article describes how WHOIS data can be used to detect suspicious activity ("If the registration date is recent but the journal has been around for years, that's the first clue."). Might we do something more explicit?
>
> Scott
>
> _______________________________________________
> weirds mailing list
> weirds@ietf.org
> https://www.ietf.org/mailman/listinfo/weirds