Investigations of Top-Level Domain Name Collisions in Blockchain Naming Services
Daiki Ito, Yuta Takata, Hiroshi Kumagai, Masaki Kamizono
Abstract
Traditionally, top-level domains (TLDs) are managed by the Internet corporation for assigned names and numbers (ICANN), and the domain names under them are managed by registrars. Against such a centralized management, a blockchain naming service (BNS) has been proposed to manage TLDs on blockchains without authority intervention. BNS users can register TLD strings as non-fungible tokens and manage the TLD root zone. However, such a decentralized management results in the introduction of a new security issue, BNS TLD name collision, wherein the same TLD is registered in several different BNSs. In this study, we investigated BNS TLD name collisions by analyzing TLDs registered on two BNSs: Handshake and Decentraweb. Specifically, we collected TLDs registered in Handshake and Decentraweb and the associated data, and analyzed the data registration status of BNS TLDs and BNS TLD name collisions. The analysis of 11,595,406 Handshake and 11,889 Decentraweb TLDs revealed 6,973 BNS TLD name collisions. In particular, lastname TLDs, which are intended for use as person names, yielded a large number of registered domain names. In addition, the analysis identified 10 name collisions between the BNS and operational ICANN TLDs. Further, the ICANN TLD candidates under review also had name collisions against the BNS TLDs. Consequently, based on the characteristics of these name collisions and discussions in BNS communities, we considered countermeasures against BNS TLD name collisions. For the further development of BNSs, we believe that it is essential to discuss with the existing Internet communities and coexist with the existing Internet.
Ask about this paper
Ask your agent about it.
Lune has read the top-tier papers around this one, so every answer names the papers it rests on.
Your agent calls
Lunesearch_papers
Free to start. No credit card required.
Terminal
Install the CLIlune papers get 4da2a9dd-312a-4163-94bb-7e9b076ae5d3Cited by top-tier papers1
Ask how each one uses itRelated papers
- Client-side Name Collision Vulnerability in the New gTLD Era: A Systematic StudyQi Alfred Chen, Matthew Thomas, Eric Osterweil, Yulong Cao et al.CCS 2017 · 13 citations
- MitM Attack by Name Collision: Cause Analysis and Vulnerability Assessment in the New gTLD EraQi Alfred Chen, Eric Osterweil, Matthew Thomas, Zhuoqing Morley MaoS&P 2016 · 25 citations
- Under the Hood of DANE Mismanagement in SMTPHyeonmin Lee, Md. Ishtiaq Ashiq, Moritz Müller, Roland van Rijswijk-Deij et al.USENIX Security 2022
- "Centralized or Decentralized?": Concerns and Value Judgments of Stakeholders in the Non-Fungible Tokens (NFTs) MarketYunpeng Xiao, Bufan Deng, Siqi Chen, Kyrie Zhixuan Zhou et al.CSCW 2024 · 22 citations
- Characterizing and Mitigating Phishing Attacks at ccTLD ScaleGiovane C. M. Moura, Thomas Daniels, Maarten Bosteels, Sebastian Castro et al.CCS 2024 · 7 citations
