Actually, if ISPs and engineering folks at ISPs are so pissed off at VeriSign they can easily kill the entire Sitefinder scam by simply routing its traffic to a bit bucket. And by rerouting the .COM and .NET to the boxes having the sanitized versions of zones. It does not say anywhere that providers are oblidged to carry all DNS traffic directly to the original nameservers. If VeriSign tries to do more of their monopolistic tricks, it may be a very good idea to give them taste of their own medicine. This can even be defensible from the legal point of view as protection of business assets (i.e. working Internet connectivity) from being tampered with by an unauthorized party. No different than shutting off a script kiddie. "Not doing business" with VeriSign can easily mean "not routing". --vadim