This is not going to end. ICANN has revealed their hand -- they are corrupt.
But we don't actually need them. What we do need is a "Let's Encrypt" style initiative to replace the DNS roots in their entirety, run by competent, principled people.
It would be difficult, but the people who are pissed off about this have clout at Google, Microsoft, and Mozilla (the web browser gatekeepers) and might actually be able to pull this off.
There is no legal requirement that ICANN has to run this system. It's just a historical convention. We've successfully taken out arrogant/incompetent (billion dollar) certificate businesses -- I think trying to get ICANN to blink would be a good goal.
But we don't actually need them. What we do need is a "Let's Encrypt" style initiative to replace the DNS roots in their entirety, run by competent, principled people.
It would be difficult, but the people who are pissed off about this have clout at Google, Microsoft, and Mozilla (the web browser gatekeepers) and might actually be able to pull this off.
There is no legal requirement that ICANN has to run this system. It's just a historical convention. We've successfully taken out arrogant/incompetent (billion dollar) certificate businesses -- I think trying to get ICANN to blink would be a good goal.