Three registrars rapped for not paying ICANN fees

ICANN has sent compliance notices to three registrars for allegedly not paying their dues.
Dotted Ventures, Basic Fusion and A. Telecom S.A owe a total of roughly $25,000 in unpaid ICANN fees, according to the notices.
Basic Fusion and A Telecom also didn’t notify ICANN about changes of address, according to the notices.
All three have until May 14 to pay up or risk losing their registrar accreditation.
None of them are of notable size in the gTLD space, with fewer than 1,000 domains under management between them.

New registrar deal to bring big changes to the domain name industry

Big changes are coming to Whois, privacy services and resellers, among other things, under the terms of a newly agreed contract between domain name registrars and ICANN.
A proposed 2013 Registrar Accreditation Agreement that is acceptable to the majority of registrars, along with a plethora of supporting documentation, has been posted by ICANN this morning.
This “final” version, which is expected to be approved by ICANN in June, follows 18 months of often strained talks between ICANN and a negotiating team acting for all registrars.
It’s expected that only 2013 RAA signatories will be able to sell domain names in new gTLDs.
Overall, the compromise reflects ICANN’s desire to ensure that all registrars adhere to the same high standards of conduct, bringing contractual oversight to some currently gray, unregulated areas.
It also provides registrars with greater visibility into their future businesses while giving ICANN ways to update the contract in future according to the changing industry landscape.
For registrants, the biggest changes are those that came about due to a set of 12 recommendations made a few years ago by law enforcement agencies including the FBI and Interpol.
Notably, registrars under the 2013 RAA will be obliged to verify the phone number or email address of each registrant and suspend the domains of those it cannot verify.
That rule will apply to both new registrations, inter-registrar transfers and domains that have changes made to their Whois records. It will also apply to existing registrations when registrars have been alerted to the existence of possibly phony Whois information.
It’s pretty basic stuff. Along with provisions requiring registrars to disclose their business identities and provide abuse points of contact, it’s the kind of thing that all responsible online businesses should do anyway (and indeed all the big registrars already do).
Registrars have also agreed to help ICANN create an accreditation program for proxy and privacy services. Before that program is created, they’ve agreed to some temporary measures to regulate such services.
This temporary spec requires proxy services to investigate claims of abuse, and to properly inform registrants about the circumstances under which it will reveal their private data.
It also requires the proxy service to hold the registrant’s real contact data in escrow, to be accessed by ICANN if the registrar goes out of business or has its contract terminated.
This should help registrants keep hold of their names if their registrar goes belly-up, but of course it does mean that their private contact information will be also stored by the escrow provider.
But the biggest changes in this final RAA, compared to the previously posted draft versions, relate to methods of changing the contract in future.
Notably, registrars have won the right to perpetual renewal of their contracts, giving them a bit more long-term visibility into their businesses.
Under the current arrangement, registrars had to sign a new RAA every five years but ICANN was under no obligation to grant a renewal.
The 2013 contract, on the other hand, gives registrars automatic renewal in five-year increments after the initial term expires, as long as the registrar remains compliant.
The trade-off for this is that ICANN has codified the various ways in which the agreement can be modified in future.
The so-called “unilateral right to amend” clauses introduced a few months ago — designed to enable “Special Amendments” — have been watered down now to the extent that “unilateral” is no longer an accurate way to describe them.
If the ICANN board wants to introduce new terms to the RAA there’s a series of complex hoops to jump through and more than enough opportunities for registrars to kill off the proposals.
Indeed, there are so many caveats and a so many procedural kinks that would enable registrars to prevent ICANN taking action without their consent I’m struggling to imagine any scenario in which the Special Amendment process is successfully used by the board.
But the final 2013 RAA contains something entirely new, too: a way for ICANN’s CEO to force registrars back to the negotiating table in future.
This seems to have made an appearance at this late stage of negotiations precisely because the Special Amendment process has been castrated.
It would enable ICANN’s CEO or the chair of the Registrars Stakeholder Group to force the other party to start talking about RAA amendments with a “Negotiation Notice”. If the talks failed, all concerned would head to mediation, and then arbitration, to sort out their differences.
My guess is that this Negotiation Notice process is much more likely to be used than the Special Amendment process.
It seems likely that these terms will provide the template for similar provisions in the new gTLD Registry Agreement, which is currently under negotiation.
The 2013 RAA public comment period is open until June 4, but I don’t expect to see any major changes after that date. The documents can be downloaded, and comments filed, here.

Cops say new gTLDs shouldn’t launch without a Big Brother RAA

Law enforcement agencies are not happy with the proposed 2013 Registrar Accreditation Agreement, saying it doesn’t go far enough to help them catch online bad guys.
Europol and the FBI told ICANN’s Governmental Advisory Committee yesterday that people need to have their full identities verified before they’re allowed to register domain names.
They added that new gTLDs shouldn’t be allowed to launch until a tougher RAA is agreed to and signed by registrars.
The draft 2013 RAA would force registrars to validate their customers’ email addresses or phone numbers after selling them a domain, but law enforcement thinks this is not enough.
“We need a bit more in this area,” Troels Oerting, head of Europol’s European Cybercrime Centre, told the GAC during a Sunday session. “We need a bit more to be verified in addition to the phone or email.”
“It’s very, very important that we are able to identify perpetrators able, to identify the originators, and it’s not enough that you just put in the email or phone,” he said.
He added that there should also be re-verification procedures and ongoing compliance monitoring from ICANN, and said that only registrars signing the 2013 RAA should be allowed to sell new gTLD domains.
Europol has sent a letter to ICANN (not yet published, it seems) outlining four areas it wants to see the RAA “improved”, Oerting said.
Given that many GAC members, including the US, seem to support this position, it’s yet another threat to ICANN’s new gTLD launch timetable, not to mention privacy and anonymous speech in general.
The law enforcement recommendations are not new, of course. They’ve been in play and GAC-endorsed for many years, but were watered down during ICANN’s RAA talks with registrars.

Go Daddy hires CTO from Yahoo

Go Daddy has made its third top-level hire from CEO Blake Irving’s alma mater, Yahoo.
Elissa Murphy, formerly vice president of engineering, will join the registrar as chief technology officer and head of platform, All Things D reports.
Go Daddy has reportedly confirmed the move, saying she’s due to start next month.
The news comes just a few weeks after the company recruited James Carroll from Yahoo to head its international business.
Irving joined Go Daddy in January.

ICANN to pay $2 million to keep Trademark Clearinghouse “free” for registrars

ICANN is putting its money where its mouth is when it comes to helping new gTLDs be successful, committing $2 million to keep Trademark Clearinghouse access “free” for registrars.
While TMCH pricing for trademark owners is now well-publicized, ICANN COO Akram Attalah last night revealed some of the fees for new gTLD registries and registrars.
Registries will have to pay a one-time fee of $5,000 per TLD to access the TMCH, he said.
That was reduced from $10,000 during talks with TMCH back-end provider IBM after ICANN promised to handle billing and administration, he said.
There’s also going to be a $0.30 fee for each domain that matches a TMCH record registered during Sunrise and Trademark Claims periods, he added. The specifics on this fee were a little fuzzy.
But registrars won’t have to pay a penny, it seems. Attalah said that ICANN will pay IBM $2 million to make sure the Clearinghouse is accessible and free for registrars.
“ICANN will pay $400,000 per year for five years to keep the TMCH up and running and that provides free access to all registrars,” he said on last night’s new gTLDs update webinar.
It won’t be completely free for registrars, of course.
Registrars will have to do some implementation work to support the new Trademark Claims and Sunrise specs, but the absence of fees gives them one less excuse to avoid the two rights protection periods.

Go Daddy poaches another Yahoo exec

Go Daddy has hired another Yahoo executive to join its senior management.
James Carroll, senior vice president of the consumer and global platform group, is to head Go Daddy’s international business, according to All Things D.
Go Daddy is of course now headed by former Yahoo Blake Irving, who has made international expansion one of his key growth strategies.
Irving hired Carroll at Yahoo too, All Things D reported.
With Yahoo apparently undergoing a shakeup under its new CEO Marrissa Meyer, it’s not impossible we might see more execs winding up at Go Daddy before long.

ICANN accredits .tk registry as registrar

Freedom Registry, the company behind the oft-criticized .tk domain registry, seems to have been accredited as an ICANN registrar.
The new registrar business goes by the name OpenTLD. Its domain name currently bounces visitors to Freedom’s home page.
Freedom manages .tk, the ccTLD for tiny Tokelau. It’s the fastest-growing TLD — currently the second-largest ccTLD after Germany’s .de — because it’s free to register .tk domains.
As a result, it’s also regularly recognized by the Anti-Phishing Working Group as one of the most-abused TLDs out there, though the company says its business model allows it turn off abusive domains at will.

Melbourne IT gets out of brand protection with $157m sale to CSC

Corporation Service Company has acquired Melbourne IT’s flagship digital brand management service for a ridiculously expensive AUD 152.5 million ($157m).
The shock news takes Melbourne out of the high-margin defensive registration and brand monitoring market, leaving it as a basic domain registrar focused on small businesses.
For CSC, the deal leaves it with a considerably strengthened hand in the DBS space, which is poised to benefit from the massive influx of new gTLDs over the next few years.
It also means that all of the over 100 new gTLD applications Melbourne was supporting as a consultant will now be managed by CSC.
The price of AUD 152.5 million is far more than Melbourne IT could have hoped to ask for, equal to almost its entire market capitalization of AUD 160 million.
Melbourne has had a rocky time on the markets of late, and had previously disclosed that it was looking to sell off some units in order to appease shareholders and rationalize its business.
But DBS was considered a core business, bigger now than Melbourne’s regular domains business, and likely not for sale. CSC’s high-premium offer was too good, it seems, to be responsibly refused.
“While this was not a business that we had specifically earmarked for sale, given the value creation provided by the transaction, this was an opportunity which could not be ignored,” CEO Theo Hnarakis, said in a statement.
The deal follows the sale of MarkMonitor, a key Melbourne competitor, to Thomson Reuters last July. When it comes to brand protection in the domain name space, it’s a big boy’s game nowadays.
Melbourne will remain a domain registrar with over four million names under management.
The DBS business was formed in 2008, largely as a result of Melbourne’s purchase of Verisign’s brand services division for $50 million.

Chehade commits to grow the number of domain registrars in Africa

ICANN CEO Fadi Chehade has told African policymakers that he wants to make it easier for companies on the continent to become accredited registrars, saying he wants to grow the number five-fold in a year.
During a “Multistakeholder Internet Governance” meeting in Addis Ababa earlier this week, Chehade said he wants to see 20 more African registrars, in addition to the paltry five accredited today.
It can be hard for African firms to become accredited under ICANN’s rules due to assurances needed from banks and insurance companies, he said.

We committed to do our best. Dr Tarik Kamel and I made commitments yesterday. We will be talking to the African Development Bank, we will work with [the United Nations Economic Commission for Africa], we have relationships in the insurance industry. We will put our personal relationships — and I hope all of us cooperate on that — to change this.
We made a public commitment, that I may regret, that we will try as fast as we can by Durban to at least have some initial answers to facilitate this for the African community, because hopefully with your help and your assistance within a year we won’t be saying we have five accredited registrars, we’ll be saying we have 25.

The ICANN meeting in Durban, South Africa is slated for mid-July.
Chehade also told the audience that it didn’t make any sense that African domain registration money was flowing out of the continent due to the outdated registration practices of ccTLD operators there.
The speech largely focused on macro-policy issues of internet governance affecting the continent.
Naturalized American Chehade wore his Egyptian hat throughout, referring to Africans as “we”.
Listen to the whole 30 minutes here.

Registrars and ICANN hit impasse on new RAA

ICANN and its accredited domain name registrars have hit a brick wall in their long-running contract negotiations, after ICANN demanded the right to unilaterally amend the deal in future.
Documents published by ICANN this morning reveal that the two sides have reached agreement on almost all of their previous sticking points — including the extremely thorny issue of Whois verification — but have run into some fundamental, eleventh-hour disagreements.
As we’ve been reporting for the last couple of weeks, the big unresolved issue is ICANN’s unilateral right to amend the Registrar Accreditation Agreement in future, which registrars absolutely hate.
Death of the GNSO? Again?
The text of that proposed change has today been revealed to be identical to the text ICANN wants to insert into the Registry Agreement that all new gTLD registries must sign.
It gives ICANN’s board of directors the right, by two-thirds majority, to make essentially any changes they want to the RA and RAA in future, with minimal justification.
Registrars are just as livid about this as new gTLD applicants are.
The proposed change appears to be one of those introduced last month that ICANN said “[stems] from the call by ICANN’s CEO, Fadi Chehadé, to work to improve the image of the domain industry and to protect registrants”.
Chehadé has been on the road for the last couple of months trying to raise ICANN’s profile in various stakeholder groups in the private and public sectors around the world.
One of the memes he’s impressed upon contracted parties and others is that people don’t trust the domain name industry. Part of ICANN’s solution, it seems, is to grant its board more powers over registries and registrars.
But the Registrars Stakeholder Group reckons unilateral amendments would torpedo the multistakeholder process by emasculating the Generic Names Supporting Organization. It said:

The effect of such a clause in the primary agreements between ICANN and its commercial stakeholders would be devastating to the bottom-up, multi-stakeholder model.
First, it will effectively mean the end of the GNSO’s PDP [Policy Development Process], as the Board will become the central arena for all controversial issues, not the community.
Second, it creates an imbalance of authority in the ICANN model, with no limits on the scope or frequency of unilateral amendments, and no protections for registrars and more important registrants.

That’s the biggest barrier to an agreement right now, and it’s one shared by the entire contracted parties constituency of ICANN. Expect fireworks in Beijing next month.
Friction over new gTLDs
Registrars and registries are also angry about the fact that ICANN wants to force registrars to adopt the 2013 RAA, even if their 2009 or 2001 deals are still active, if they want to sell new gTLDs.
RrSG secretary Michele Neylon of Blacknight told DI today that it looks like ICANN is trying to “drive a wedge” between registrars and registries.
Here’s why:
ICANN is trying desperately to stick to its new gTLD program timetable, which will see it start signing Registry Agreements with new gTLD applicants in late April.
But it wants the base RA to include a clause obliging registries to only sell via registrars on the 2013 RAA.
Because the 2013 RAA is not yet finalized, registrars could potentially hold up the approval and delegation of new gTLDs if they don’t quickly agree to the changes ICANN wants.
According to Neylon, the documents released today have been published prematurely; with a little more time agreement could be reached on some of the remaining differences.
Again: expect fireworks in Beijing.
Whois records will be verified
But the new RAA is not all friction.
ICANN and registrars have finally come to agreement on important topics where there was previously sharp divergence.
Registrars have agreed to a new Whois Accuracy Program Specification that is a lot weaker than ICANN had, working from a blueprint laid out by governments and law enforcement agencies, first asked for.
Under the 2013 RAA signed-up registrars will have to start verifying certain elements of the contact information submitted by their registrants.
Notably, there’ll be a challenge-response mechanism for first-time registrants. Registrars will ask their customers to verify their email address or enter a code that has been sent to them via SMS text message or phone.
Note the “or” in that sentence. ICANN and law enforcement wanted registrars to do email “and” phone verification, but ICANN appears to have relented after months of registrars yapping about costs.
In future practice, because email verification is far easier and cheaper to implement, I’d be surprised if phone verification is used in anything but the rarest of cases.
Other data points will also be verified, but only to see that they conform to the correct formats.
Registrars will have to make sure that mailing addresses meet the Universal Postal Union standards, and that phone numbers conform to International Telecommunications Union formatting, for example.
They’ll also have to verify that the street address exists (if they have access to that data) but there will be no obligation to make sure that address and phone number actually belong to the registrant.
Registrants that provide patently false information that fails registrar verification will get 15 days to correct it or face the suspension of their domains.
ICANN wants registrars to also verify their customer records (which are usually different to the Whois records and, anecdotally, more accurate anyway) too, but registrars have so far not agreed to do so.
Taken as a whole, at first reading it’s difficult to see how the new Whois verification spec will do anything to prevent fast-turnover abuse such as phishing, but it may go a small way to help law enforcement investigate longer-term scams such as counterfeit goods sites.
The proposed 2013 RAA, along with more explanatory documents than you could possibly read in a coffee break is now open for public comment, with the reply period closing shortly after the Beijing meeting.