Recently in whois Category
The three registrars have been informed that their agreements with ICANN will not be renewed.
South American Domains (NameFrog), Simply Named and Tahoe Domains have been sent letters by ICANN outlining the decision and the reasons for it.
So what now?
On the plus side, as ICANN's compliance team is becoming more active in pursuing non-compliant registrars the processes for handling the domains held by de-accredited registrars is becoming more finely tuned.
Expect to see an announcement very shortly asking for other registrars to takeover the various portfolios, though this time round they are incredibly small.
According to the latest figures I was able to access the breakdown would be as follows:
- Namefrog appears to have less than 300 gTLD domains
- Simply Named about the same number
- Tahoe less than 250
- Namefrog did not have a whois server
- Simply Named wasn't escrowing registrant data and hadn't paid their ICANN fees
- Tahoe no data escrow and owed fees to ICANN


Image via Wikipedia
However you'd be forgiven for thinking that their view on the feedback process was ever so slightly biased.
Basically they seem to have taken on board any comments and feedback that supported their views and either ignored or dismissed any that didn't.
To view all the comments that were left you can go here (they seem to have moved the pages around, so the other links I had to the comments are no longer working)
The comments that were submitted came from a wide variety of sources, but included end users, end user groups, registrars, lawyers and companies interested in launching new gTLDs.
So what is in the final report that is so abhorrent?
Take the issue of whois and privacy, which I mentioned during the comment period:
After carefully consideration, the IRT believes that the provision of WHOIS information at the registry level under the Thick WHOIS model is essential to the cost-effective protection of consumers and intellectual property owners. For this reason, the IRT recommends that ICANN amend the proposed Registry Agreement to include an obligation that all registry operators for new gTLDs must provide registry-level WHOIS under the Thick WHOIS model currently in place in the .info and .biz registriesI love the way they lump "consumers" in with "intellectual property owners", but I digress. There is a footnote that basically brushes off concerns about privacy:
They have completely ignored or are ignorant of the very important difference between data collection and display. As I mentioned in my comments on this particular subject:
The IRT acknowledges that some comments raised privacy concerns about this recommendation. However, it notes that the thick registry Whois model has been employed in many new gTLDs for many years without any evidence of legal problems, and also that ICANN, on the unanimous recommendation of the GNSO Council, has established a procedure that can be invoked by any registry that believes it faces a conflict between its contractual Whois obligations and requirements of national privacy laws. See http://www.icann.org/en/announcements/announcement-18dec07.htm. To date, this procedure has never been invoked.
The IRT recommendation for Thick WHOIS as implemented by the .BIZ and .INFO registries could be put forward for incorporation into the next version of the Guidebook, but the IRT should also recognize that variations may occur depending on local law (Telnic is one example). In other words, the data that is displayed to the public vs. the data that is actually captured is something that needs to be clarified.In essence if the IRT has their way private individuals will be left with three options:
As I already stated, I would have huge issues with the display of personally identifiable data without there being safeguards in place. The .tel implementation is very sane and balances individual's rights to privacy with law enforcements requirements
- Not register domains if they value their privacy
- Provide bogus contact information, while this may breach registry rules it's quite easy to provide plausible information that is not correct
- Use a proxy service, which would again lead to issues of display (self defeating?)
From their report (my emphasis added):
In order to test the efficacy of each proposal and the solution to be developed by the IRT Sub-Groups based upon the proposals prioritized, the IRT also developed the following list of questions to be asked as a benchmarking checklist against which to measure all proposals:There is no clear distinction to my knowledge between a "user" and a "consumer", as a "consumer" can also encompass registrants, who, as private individuals have rights.
what are the harms that are being addressed by the solution;
will it scale;
does it accommodate territorial variations in trademark rights;
does it conform to extent of actual legal rights;
does it work in light of IDNs;
can it be gamed and abused;
is it the least-burdensome solution;
is it technologically feasible;
how will it affect consumers and competition; and
what are the costs and who pays them.
While a right to privacy may not be guaranteed under US law, it is definitely guaranteed under EU law, so how a namespace for global use, which may be legally constituted within the EU could be compatible with a "thick whois" display is beyond me.
And as I already mentioned, abuse of whois is child's play. So by ignoring registrants' rights to privacy they seem to be doing themselves no favours.
With regard to proxy registration services the IRT does consider them worthy of research, but doesn't actually make any firm statement on them:
However, the IRT did identify one proposal, in particular, that it believes should be further considered to determine whether it has any merit; namely the development of universal standards and practices for proxy domain name registrationConsidering how much of a policy "football" whois is in ICANN circles it is understandable that the IRT did not wish to get too deeply embroiled, but that they would also insist on their thick whois model is abhorrent.
services.
Many of those who filed comments to the DAG have asked that ICANN consider the issue of proxy domain name registrations with regard to new gTLDs. The IRT
recognizes that proxy domain name registration services raise complex concerns that require a great deal more analysis and consideration that were outside the limited time frame available. As a result, the IRT takes no position at this time on proxy domain name registrations. The IRT does recommend, however, that ICANN consider this issue and report to the community on whether it should or is able to make any recommendations with regard to the use, standards and practices of proxy registrations.
The timetable of such recommendations may be independent of the timetable for the introduction of new gTLDs, but the IRT strongly recommends that ICANN's consideration of this issue commence as soon as possible.
Other areas that caused issues for people in the draft report have also been more or less ignored. While the original draft report spoke of a specific number of trademark registrations qualifying an IP holder to special protection, they have toned this down in the final document. Unfortunately they still haven't dropped the idea completely, so the "tiered" trademark holder concept is still alive and well in IRTville.
It is obvious to anyone reading this final report that the document was drafted from the perspective of intellectual property rights owners only, and even within that group only the "heavyweights" seem to really matter.
George Kirikos sums up some of the issues very nicely:
The URS in particular is an extremist view of trademark rights, tilted in favour of IP interests compared to the UDRP and beyond what is protected or
recognized by law and due process. It also obfuscates the dual requirement of BOTH bad faith use AND registration (there are lots of inconsistencies in the
language that seek to weaken the standard to make it "OR" instead of "AND").
The level of defaults will be even higher than the UDRP simply because good faith registrants never receive actual notice of complaints. Even faxes were
considered too expensive! A 1 page fax, using email-to-fax technology (so it can easily be automated by the URS provider) would cost less than $1 ANYWHERE
in the world! The IRT team should try sending registered letters in a statistically valid sample size and measure how long it takes them to be
delivered to different parts of the world -- it can be more than a week, even from the USA to Canada, let alone from Europe to Canada
As I mentioned previously, not all WIPO UDRP decisions go as smoothly for trademark holders as they would like. In many cases the trademark holders seem to work under the assumption that their trademark and IP gives them rights that negate those of 3rd parties.
Of course, in common with other ICANN documents, there is now a public comment period open for people to make their feelings heard. You don't need to be a registrar or anything special to make your voice heard.

The Intellectual Property Constituency's draft report on trademark issues is now available for comment.
The draft report was put together behind closed doors, which would appear to go against the normal policy development process at ICANN, which is quite worrying.
Its contents, however, are even more disturbing.
While reading the 48 page document, which is littered with acronyms and terminology that would make your head hurt, it is a worthwhile exercise if you have any interest in the development of new TLDs.
From a registrant perspective the most disturbing part of their report is that dealing with WHOIS. The IP people seem to have zero interest in registrants' right to privacy. Under EU law, for example, I can register a domain as a private individual in most European ccTLDs (including .eu) and have some level of privacy. Not so the case with the IRT's proposals:
After carefully consideration, the IRT believes that the provision of WHOIS information at the
registry level under the Thick WHOIS model is essential to the cost‐effective protection of
consumers and intellectual property owners. For this reason, the IRT recommends that ICANN
amend the proposed Registry Agreement to include an obligation that all registry operators for
new gTLDs must provide registry‐level WHOIS under the Thick WHOIS model currently in place
in the .info and .biz registries.
And if that wasn't enough, they also want to centralise whois:
In addition, the IRT recommends that ICANN immediately begin to explore the establishment of a central, universal WHOIS database to be maintained by ICANN
While that may not have much impact on registrants at one level it could have an interesting impact at various other levels of the system eg. syncing of data.
The timelines surrounding the draft report are also a bit confusing.
The comment period was opened on a Friday 24 April 2009 and closes one month later, but you only have until May 6th to submit comments for inclusion in the final report! So you don't really have the full 30 day comment period you'd be expecting and with the May bank holiday affecting most countries, the period is even more reduced.
George Kirikos, in an email submission to the comment forum, goes into some detail on the issues surrounding both the IRT's composition, behaviour and the timeline for comments:
So what are the options for members of the ICANN community?We object to the extremely short comment period for this report, and the method by which it was drafted.
It was released at the end of the day on April 24, 2009 (a Friday) We are told that "those wishing to have the IRT consider their comments in connection with its final report should submit comments by 6 May, 2009." Given that May 1st is a holiday in a large number of countries, this leaves many people with only 7 (seven) or at best 8 (eight) business days in which to read the report, consult with colleagues, and write a coherent response to a lengthy document.
Given the IRT's extreme lack of transparency and its very narrow representation of interests (i.e. it was not an open GNSO workgroup or task force where any stakeholder could join; there was no public mailing list archive or MP3 recordings/transcripts of meetings), it is unclear whether any responses submitted by the May 6 deadline will even be considered, especially given that detailed comments and recommendations made to the DAG v1 and v2 reports did not receive any apparent consideration by the committee in this draft report. There is no public audit-trail of any discussions leading up to this report, but it instead appears to be a rehashing of certain "wish list" items by a narrow few in the community, instead of a balanced proposal representative of all stakeholders.
The IRT is working within artificial deadlines imposed by the ICANN Board in its March 6th resolution. We recommend that the IRT go back to the Board to advocate that these artificial deadlines need to be rethought. Given the comments overwhelmingly opposed to new gTLDs both in the first and second versions of the DAG (with the 2nd comment period ending only last week), ICANN has not justified that the gTLD program should go forward in any form, and not justified the colossal misuse of time that could be better spent on important issues such as DNSSEC, IPv6 and IDN ccTLDs, and fixing problems in existing gTLDs. It is our hope that the NTIA/DOC/DOJ will provide ICANN with far clearer and direct guidance in this regard, as it is clear to us that certain minority interests have captured the agenda at ICANN and are setting its plans to the detriment of the public.
There is no "pressing need" that a final report be delivered by May 24, 2009, especially given that the Sydney meeting begins on June 21, 2009. A rushed job will not lead to a solution that has consensus support, and forming consensus is ICANN's mission. If a consensus cannot be reached, ICANN has to realize that the matter might be a threshold issue that must lead to continued study and work, rather than proceeding with half-baked solutions over the objections of a large number of stakeholders.
We note the comment period for version 1 of the DAG closed on January 7, 2009 (after 76 days), and allowed for translation into multiple languages before the end of the comment period. Analysis and summary of those comments by ICANN staff were released to the public on February 18, 2009, namely 42 days later (at which time version 2 of the DAG was also released). We would expect the IRT, if it's to even have a remote possibility of reaching a global consensus, would need similar time periods. At a minimum, the time periods should be shifted so that public comments are due 2 weeks before Sydney, with analysis of those comments to be released just before Sydney, and discussion to take place during Sydney. A final report would then be released a few weeks after Sydney, with a further comment period on that final report.
In conclusion, we look forward to the IRT's realization that the current schedule is needlessly rushed, and requires adjustment. We expect that the IRT will make in the immediate future a clarifying announcement with a reasonable time frame for comments if it expects to maintain the goodwill of the community in its ongoing efforts to reach a consensus. We also expect that they will positively respond to the request for public archives of mailing lists and MP3 recordings/transcripts in order to improve transparency.
How is it possible that a report with as much impact as this could be prepared in practical secrecy? (The IRT states clearly that its members were forbidden to discuss the proceedings)
It's available from the command line or via the web based whois
What makes the .tel whois slightly different is the little addition at the end of the output:
Contact information: Disclosure of contact data is restricted becauseUnlike other gTLDs, .tel offers a certain degree of security that other TLDs lack when it comes to the sharing of data via DNS.
of UK and EU Data Protection legislation. The contact details for this
contact ID may be available by looking up a domain object in the WHOIS
system. The information can also be obtained through the Telnic
Special Access Service. Visit http://www.sas.nic.tel for more details.
You can read more about encrypting details held in NAPTR records on the Telnic site

John's latest project has been in development for several months and offers an alternative to some of the existing domain statistics sites already on the market.
What makes it different is that HosterStats cares about ccTLD data.
Sites like WebHosting.info and DomainTools all but ignore ccTLD data and give a rather skewed perspective of non-US based providers.
With Hosterstats you can easily check the DNS history on any .com/.net/org/info/mobi/eu/asia/co.uk or .ie domain name.
While the site isn't the prettiest at present it is incredibly functional and nice and fast to load, so you get the information that you want quickly and easily.
It will be interesting to see what John plans on adding in terms of features in the coming weeks and months.
One of the criticisms that is often levelled at ICANN is with regard to compliance issues. There are a number of areas where ICANN accredited registrars maybe flounting the rules, but if nobody does anything about it then none of the registrars will have any incentive to actually comply.
According to the latest ICANN news alert notices have been sent to both Joker.com and DNS.com.cn for WHOIS policy issues.
All ICANN accredited registrars are bound under their contract with ICANN (the RAA, which has been under review for over a year) and if ICANN deems it necessary they may actually lose their accreditation for non-compliance.
In the last 12 months there have been a number of registrars who have lost their accreditation, though none would have attracted the level of media attention of Registerfly. That a relatively large European registrar such as Joker would be subject to this kind of "wake up call" puts things in a whole new perspective.
What would be the impact on the European internet community if one of their own were to lose their ICANN accreditation?
As some of you may know the IE registration system involves manual validation of each and every application request. Each application is valid for 30 days, however previously it was impossible for a member of the public to know when an application expired.
You can now see it, for example:
whois chef.ieThat domain application will expire 30 days from now..
% Rights restricted by copyright; http://www.domainregistry.ie/copyright.html
% Do not remove this notice
domain: chef.ie expiry: 01 February 2008
% Application Pending - There is currently an application being processed for
% the domain name you have requested. If unsuccessful, the application would
% expire on the date above.
It makes life a small bit easier I hope!
It would be interesting to see how many high profile sites / organisations actually are publishing accurate WHOIS data.
DomainBlog points to the "oldest domain" which whois currently shows as having been registered in 1950!!
Not bad!
I wouldn't care to get into the finer points of the arguments, as the parties involved have done so time and again without reaching an acceptable compromise or agreement.
Milton Mueller's article, "Whois Privacy Stalemate .. Again", which was published on the Internet Governance Project site earlier today covers the situation and the various points of view in some detail.
For those of you who want a bluffer's guide the issues can be split into two broad camps.
On the one side you have individuals and groups who are concerned about privacy issues. Under the current system anyone with access to a computer can glean quite a bit of information regarding a domain holder (registrant) by simply checking the WHOIS output. (There are a multitude of online services that facilitate this).
On the other side of the fence sit law enforcement and IP protection lawyers who want to be able to track down criminals and wrongdoers quickly and easily. If, for example, a domain is being used to run a scam or a phishing attack you might be able to get the site taken offline quickly, but ultimately it would be preferable to trackdown the person or persons behind it (of course it's unlikely that the information they provided to register the domain is accurate, but that's a completely different argument.
The whois debate has also spilled over into the current discussions surrounding the registrar accreditation agreement which I mentioned recently. While whois output may not be central to the RAA the treatment of registrants is, so it's only natural that there would be some discussion. Of course there is a fine line between useful discussion and distracting debate.
Is there a solution? One would hope so, but finding one that marries all parties' concerns into an acceptable compromise solution is not going to be easy.
![Reblog this post [with Zemanta]](http://img.zemanta.com/reblog_e.png?x-id=d3bb7366-5c5a-4ffb-a540-4d0eaf4c72ff)
![Reblog this post [with Zemanta]](http://img.zemanta.com/reblog_e.png?x-id=31d1fd9a-1f7c-40d1-93b0-c6f4438dcc02)




Recent Comments
Tom Murphy on High Profile DNS Still Vulnerable To Kaminsky Exploit: I'm the fo
Michele Neylon on High Profile DNS Still Vulnerable To Kaminsky Exploit: Dan Thank
Dan Kaminsky on High Profile DNS Still Vulnerable To Kaminsky Exploit: Not really
Ken on ICANN Ignoring Deadlines: Lets hope
Dave on ICM Registry's Graphic of ICANN options: Seems simp
Hosting365 Accreditation Sunk on Domain Registry Of America Get Slapped In UK: McCarron l
Francesco on EU IDNs - Some Governments Still Don't Get It!: Actually i
Michele Neylon on Food Fight Anyone?: Jorge Nic
Jorge on Food Fight Anyone?: Coming soo