@cabel Seems illegal, but Willamette is a navigable waterway and allowed under OAR. And “flying under” bridges has a loophole for take off.

But def a choice. That’s some AK bush pilot shenanigans.

@Albi Oh def, I already blocked .gram on principle. The problem is when they target your customers, partners and supply chains outside of your network. This is commonly observed with recruiting related domains like {brand}jobs and {brand}careers. The domains remain parked, but they’ll have active MX records and never send to your org specifically.

Then your average user or small business doesn’t have the skill or tooling to configure firewalls, NextDNS, etc. I take security by design to not just be memory safe computing, but holistic prevention at conceptual birth.

@darkuncle @rl_dane Wait until the infosec $vendors stay mum through the entire process. Stopping pre-crime doesn’t exactly increase shareholder value.

The applicant list in case y’all want in on the and find something I’ve missed.

https://newgtldprogram-aps.icann.org/applications

I missed .lan, .corp and .mail were also submitted. Corp and mail were originally rejected by ICANN in 2012 as thought too dangerous. Somehow 2026 is safer?

.pdf and .php are technically backup choices, but still an absurd submissions. As is .csr and .bin.

The inherent trust words have their own issues: .login .auth .account .admin .official .verified. I don't see how these are anything but a ransom against organizations to preempt squatting.

@Mustardfacial I am not at all worried typo squatting on .fart

And some solid future fedi server TLDs! .furry .meow .uwu .slay .neko

@svavar @pberry

Correct, .md is a ccTLD that's been around longer than markdown. But this is 2026 and these domains have an extremely high likelihood for abuse in phishing, clickfix, and supply chain attacks. ICANN allowing these would be irresponsible.

Once these are approved, there will be no oversight. .duo was applied for by ShortDot, a notorious bulletproof operator known for some of the most abused TLDs on the internet today: .bond .sbs .icu and .cyou

@mttaggart But no one was really paying attention when CRR (Google) acquired .zip and .mov in 2013.

This round we're going to file those objections (string confusion).

No filenames, no intranet names, no assumed trust names.

So I hope these orgs enjoyed their $227,000 donation to ICANN.

https://newgtlds.icann.org/en/program-status/odr#objection-dispute-resolution

Happy #ICANN Reveal Fresh Hell Day! A company in the Caymans would like the TLD .pdf

And these other spectacular submissions that surely won't end poorly: .sys .key .duo .lab .private .state .auth .conf .config .loc .log .php .url .vpn

#DNS #RevealDay #blueTeam #tld