Second DNSSEC screw-up takes down Aussie web sites

.au domains failed to resolve for many internet users for almost an hour on Monday, after the registry operator messed up a DNSSEC update.

ccTLD overseer auDA said the issue was caused by a “key re-signing process that generated an incorrect record”. Users on ISPs that strictly enforce DNSSEC would have returned not-found errors for .au domains during the outage.

.au’s technical back-end is managed by Identity Digital, which reportedly said that the outage lasted from 0005 UTC until 0052 UTC.

With over four million domains, .au is I believe the largest TLD zone to fall victim to DNSSEC-related downtime, but it’s not the first time it has happened to the domain.

In March 2022, thousands of .au domains were affected by a DNSSEC snafu that lasted a few hours.

DNSSEC is meant to make the DNS more secure by reducing the risk of man-in-the-middle attacks, but it’s appears to be easy to screw up, judging by a list of TLD outages. Just this year, Mexico, New Zealand and Venezuela have also suffered downtime.

Four more years for Identity Digital in Oz

Identity Digital has won another fours years as .au registry back-end provider.

Australian ccTLD manager auDA said the reappointment was decided after an open Request for Tender process that started in May.

It’s not clear how many other registries responded, but there’s a limited pool of companies that have a proven track record of handling such a large zone.

When .au moved from Neustar (now part of GoDaddy) to Afilias (now part of Identity Digital) in 2018 it was the largest back-end migration in the history of the DNS.

Back then, .au had 3.1 million domains under management. Now, following the release of second-level names last year, it’s closer to 4.3 million. Another migration would have been another record-breaker.

auDA said dentity Digital’s next four-year contract begins July 1 next year, with a two-year extension option.

About 6,000 .au domains remain contested

Australia’s .au ccTLD has added about 25,000 direct second-level domains since the start of the year, according to auDA.

The registry said this week that it had 740,000 2LD .au names as of March. In its annual report for 2022, published in February, it said it had 716,000 at the end of the year.

auDA also revealed some statistics on its Priority Allocation Process, including the fact that some 6,000 .au domains remain unallocated because more than one registrant has staked a claim.

The process allowed registrants of third-level domains to claim their matching 2LD, but in some cases there’s a conflict because on person owns the .com.au and another owns the .org.au or .net.au.

The 3LD owners have to renew their application for the matching 2LD every year or risk losing it to their rival applicant. The first renewal is due this September.

Over 450,000 contention sets have been resolved so far. There are 4.2 million .au domains registered overall.

One in six .au domains is a 2LD

The .au ccTLD had over 700,000 direct second-level registrations at the end of 2022, according to registry auDA.

In its annual report (pdf) published this week, auDA said it had over 716,000 2LD regs. The second level space was opened up in March last year with a six-month grandfathering period.

It had 4,160,209 domains overall at the end of December, so roughly one in six .au regs was a 2LD.

In the comparable .uk liberalization, which had a five-year grandfathering period, at its peak in 2019 roughly one in four names was a 2LD. Today, it’s more like one in 10.

Whether .au will follow the same trend remains to be seen.

.au adds 100,000 names in days after 2LD floodgates open

The Australian ccTLD, .au, added over 100,000 domain registrations in just a couple of days after restrictions were lifted on second-level names last week.

Local registry auDA is currently reporting 4,109,218 registered names (second and third-level combined), compared to 4,003,804 at the start of the month.

My records show that about 90,000 names were added in the day after unclaimed 2LDs were released back into the available pool after a six-month grandfathering period in which only matching 3LD owners could register.

.au had 3.4 million domains under management in late March, when auDA first started selling 2LDs.

At AUD 7.83 ($5) a year wholesale, the expansion seems to have netted auDA an extra recurring $3 million at least, of which back-end operator Identity Digital will also claim a slice.

Adoption light with four weeks to .au’s 2LD deadline

Australians have just four weeks left to take advantage of auDA’s second-level domain grandfathering program, but so far uptake has been light.

Owners of third-level .au domains have until September 20 to claim their matching 2LDs before they are released into the general availability pool, the end of a six-month process.

But to date there have only been about 200,000 2LD registrations, auDA said in a press release this week, a small percentage of the almost 3.7 million overall .au registrations.

“We received more than 35,000 registrations in the first 24 hours, nearly 80,000 registrations in the first week and over 200,000 registrations to date,” CEO Rosemary Sinclair said, describing uptake as “strong”.

Second-level liberalizations in other ccTLDs have not exactly set the world on fire. Nominet’s .uk 2LDs under management currently run at less than 15% of the 3LD level.

auDA updates on 2LD .au sales

Registrations of second-level domains in .au led to strong growth in the second quarter, according to auDA.

The number of 2LDs registered between the namespace opening up March 24 and the end of June was more than 170,000 the registry said in its latest quarterly report.

There were 218,886 newly registered names in the second quarter, which ended with 3,603,924 total names under management, auDA said.

From launch and for the next few months, all 2LDs are reserved for owners of the matching 3LDs in for example .com.au, so it seems adoption is still quite slow.

In .uk, which liberalized its own zone several years ago, there were 1,370,488 registered 2LDs, compared to 9,777,315 3LDs, at the end of July, registry stats show.

Gee, thanks. auDA cuts price of .au names by five cents

Australian ccTLD registry auDA has cut the wholesale price of .au domains by a measly five cents, according to local reports.

Aussie domainer blog Domainer reports that registry back-end provider Afilias, owned by Donuts, has notified registrars that the price is coming down to AUD 7.83 ($5.56), from AUD 7.88, not including sales tax.

The cut kicks in June 1 and effects all new registrations, renewals and transfers.

With about 3.6 million .au domains under management, that amounts to $180,000 a year out of the registry’s pocket, but the price reduction obviously won’t be noticeable for any but the most prolific domain collector.

2LDs boost .au’s growth

Australian ccTLD registry auDA has been reporting registration volumes growing much faster than usual in the days since it started selling .au domains directly at the second level.

The company is currently reporting a grand total of 3,492,366 domains, which is up by almost 78,000 since March 24, when 2LDs went on sale.

Normally, .au rarely grows by more than about 500 domains per day.

Right now and for the next six months, all 2LDs have been reserved for the owners of their exact-match third-level domains, so there’s not the same kind of rush you might expect in a first-come, first-served scenario.

.au names available today

Australians are able to register domain names directly under .au for the first time today, after ccTLD registry auDA liberalized its hierarchy.

Second-level names under .au will at first only be available to existing registrants of matching third-level names in zones such as .com.au and .net.au, under a priority allocation process.

This process lasts for six months and allows domain owners to claim their matching 2LD more or less immediately, assuming there are no other registrants with matching rights.

In cases where more than one registrant applies for the name domain — such as when example.com.au and example.net.au are owned by different people — a contention process kicks in.

Registrants with reg dates before the cut-off of February 4, 2018 get priority over those with later dates.

If there are only registrants with names newer than the cut-off date, the oldest one gets priority.

If there are only registrants with names older than the cut-off date, they’ll have to come to a bilateral agreement about who gets the name. If they can’t come to a deal, the name stays reserved, and the applicants will have to renew their applications annually, until only one applicant remains.

There are no auDA-backed auctions envisaged by the process.

Any domains that are unclaimed at the end of the priority process will be released into the available pool on September 20.

It’s a much shorter grandfathering period than other liberalized ccTLDs, such as Nominet, which gave .co.uk registrants five years to claim their matching 2LD, and it will be interesting to see what impact this has on uptake.

Direct .uk domains became available in June 2014, and six months later barely a quarter million had been registered, against over 10 million third-level names.

As the five-year priority window drew to a close in 2019, there were about 2.5 million .uk 2LDs, but this spiked to 3.6 million in the final month, as registrants waited until the last minute to claim their names.

That turned out to be the peak — .uk 2LDs stand at fewer than 1.4 million today, compared to the 9.7 million third-level names. It’s still quite rare to spot a direct .uk name in the wild here.

One interesting kink in the priority process is that auDA, which has stricter rules than many other ccTLDs, will check that anyone who applies for a 2LD is in fact eligible for the 3LD they currently hold, which could dissuade applications.

.au currently has 3.4 million third-level domains under management.