Post by @ilumium@eupolicy.social
PIR, the Public Interest Registry ("Based in Reston, Virginia, Public Interest Registry is a nonprofit organization created by the Internet Society to manage the .ORG domain."), seems to have put autistici.org on status serverHold and that is why you cannot resolve their name anymore. This is what can happen to your .org domain name when the Trump administration decides to add you to the OFAC (Office of Foreign Assets Control) list.
@jwildeboer I'm new to much of this, so apologies if this is obvious: Where do DNS resolvers get their information from, PIR or Gandi? Could Gandi and supportive DNS resolvers ignore those flags and continue to resolve the domain name?
@ilumium Ultimately PIR is authoritative on all .org domains. Technically gandi could keep an active entry in their DNS zones, but it would be in violation of the DNS delegation rules. They risk their designated registrar status with such things.
@jwildeboer Ah okay that's fair, thank you. Do you know if anyone has formally asked EUrid if they care about the SDN list or would resist pressure? Am a bit worried about their business membership:
@ilumium@eupolicy.social
TIL that while the .eu TLD registrar #EUrid is technically a non-profit org, it is very much dominated by #business interests.
Would EUrid roll over US #sanctions and block domain names or would they resist? 🤔
@ilumium I am not aware of any official communication or statement on this and I don't expect there will ever be. The answer will be a variant of "we respect the laws, rules and regulations and will not publicly discuss proceedings". But there are some court rulings that establish a high level of independence, so I am not too worried.
@jwildeboer @ilumium One could try a more oblique question, such as "are there contingency plans for [adverse event]", from the more blatant like "being cut off SWIFT" to the more anodyne like "a temporary disruption in payment processing" to the abstract "an erosion of the reserves due to delays in receivables".
(The question is not unreasonable, for example I would make sure to not send staff travelling abroad without a backup payment method off the Visa/Mastercard/etc. circuit.)
🍵
@ilumium @jwildeboer
As ever, it depends. Your local DNS service from your ISP most likely does standard recursive resolution starting with one of the 13 root name servers across the globe. This is where a registrar can turn off the top level domain (as in this case). However, the service could use alternate root servers, or hold its own database to respond to you queries, bypassing global controls. We may see such national resolvers appearing if this sort of thing escalates.