UK intros global domain takedown law

The UK government has introduced legislation that would give police the power to order registries and registrars outside the country to take down domain names being used for serious crime.

The new Crime and Policing Bill (pdf), published yesterday, is a sprawling piece of proposed legislation, covering everything from mobile phone theft to antisocial behavior.

But it includes a section that would codify the police’s ability to demand domain names and IP addresses to be suspended for the first time.

The law would allow the police to ask a judge for a “domain name suspension order”, applicable for up to a year, where they believe the domain is being used to commit “serious crime”.

That’s defined as “the use of violence” or conduct that “results in substantial financial gain” or that would reasonably be expected to carry a jail sentence of three years or more.

Today, the UK police have voluntary relationships with local companies on takedowns. Nominet suspends many thousands of domains every year, most related to intellectual property crime, on the advice of police.

But according to the explanatory notes provided by the government, the law will not replace these deals. It says:

The government strongly supports these voluntary arrangements, and they will continue to be the first port of call for any activity in this space.

However, most domain name registries and registrars are situated outside of the UK and require a court order before they will action requests. These orders (an IP address suspension order or a domain name suspension order) will therefore primarily be served internationally, to ensure that any threat originating from outside the UK can be effectively tackled.

If overseas registries/registrars declined to enforce the court order, UK police could use “police-to-police cooperation and Mutual Legal Assistance” to get it done, the notes say.

The bill has to follow the usual parliamentary process before it becomes law.

Registries have started shutting down Whois

Nominet seems to have become the first major registry services provider to start to retire Whois across its portfolio, already cutting off service for about 70 top-level domains.

Queries over port 43 to most of Nominet’s former Whois servers are no longer returning responses, and their URLs have been removed from the respective TLDs’ records on the IANA web site.

The move follows the expiration last month of ICANN’s contractual requirements to provide Whois in all gTLDs. Now, registries must use the successor protocol RDAP instead, with Whois optional.

A Nominet spokesperson tells us the shut-off, which affects large dot-brand clients including Amazon, happened after consultation with ICANN and clients on January 29.

TLDs Nominet was supporting under ICANN’s Emergency Back-End Registry Operator program are also affected.

The registry spokesperson said that the gTLDs .broadway, .cymru, .gop, .pharmacy, and .wales are still offering Whois, due to an interoperability issue:

“The sole reason for the retention of these gTLD WHOIS services is for interoperability with the Brand Safety Alliance (BSA) service integration, which does not yet support RDAP,” she said.

The BSA is the GoDaddy-backed project that offers the multi-TLD GlobalBlock trademark-blocking service.

Nominet’s flagship .uk is also still offering Whois, because Nominet discovered that some of its registrars were still using it, rather than EPP, to do domain availability checks.

The fact that a GoDaddy service and some .uk registrars still don’t support RDAP, even after a years-long ICANN transition plan, is perhaps revelatory.

I’ll admit the only reason I noticed Nominet’s Whois coverage was patchy was that I’d neglected to update one of my scripts and it started failing. Apparently I was not alone.

While RDAP can be fairly simple to implement (if I can do it…), actually finding each registry’s RDAP server is a bit more complicated than under the Whois regime.

All gTLD registries were obliged to offer Whois at whois.nic.[tld], and IANA would publish the URLs on its web site, but RDAP URLs are not standardized.

It’s not super obvious, but it seems instead you have to head over to IANA’s “Bootstrap Service” and download a JSON file containing a list of TLDs and their associated base RDAP URLs.

Nominet names directors after tight election

Ashley La Bolle and Rex Wickham have been named Nominet non-executive directors after an election that saw the top three candidates finish with very close numbers.

Nominet said La Bolle, who works for Tucows, and Wickham, who works for 2020Media, were elected after three rounds of votes and took their seats immediately at the company’s AGM yesterday.

La Bolle was an incumbent, having been originally elected three years ago amid one of the most fractious periods in Nominet’s history.

Wickham replaces Simon Blackler, who won his seat in 2021 as lead of the PublicBenefit.uk campaign, which managed to oust key members of management and board and force Nominet to refocus its business the same year. He did not stand for reelection.

Voting results shared by the company show that Rob Golding of Astutium came a close third in the race, receiving a third-round total of 272,213 votes, compared to Wickham’s 287,794 and La Bolle’s 297,258.

Turnout was 10.6%, the lowest level in the last few years, perhaps indicating a lack of displeasure with Nominet’s current direction.

UK and Israel cut ICANN funding

The ccTLD registries for UK and Israel cut their funding to ICANN by the largest amounts in the Org’s last financial year, according to the latest numbers.

ICANN received mostly voluntary ccTLD contributions totaling $2,135,937 in its fiscal 2024, which ended June 30, according to its report, which was published (pdf) a couple weeks ago. That’s down $80,302 from the $2,216,240 it received in FY23.

The biggest single reason for the decline is that Nominet, the .uk registry, slashed its contribution from its usual $225,000 tribute by $75,000 to $150,000 in FY24.

Under ICANN guidelines (pdf) for ccTLDs, registries with over five million domains under management should contribute the maximum $225,000 a year. While .uk has been in decline for a while, it still has well over 10 million DUM.

But Nominet was the only ccTLD still paying the $225,000. All the other ccTLDs with over five million domains were already paying substantially less.

The Netherlands reduced its contribution from $225,000 to $180,000 in FY23. Germany has not given ICANN more than $130,000 a year in the last five years. China always pays $45,000. Brazil pays $100,000.

Nick Wenban-Smith, Nominet’s general counsel told us: “Our relationship with ICANN has not changed. We are a long-standing supporter of the organisation in many ways, lending our resources to policy work and other community efforts alongside our annual financial contribution.”

Israel is the second big funding-cutter in the latest report. It had been giving the recommended $15,000 for its 250,000+ domains, but reduced that to just $5,000 in FY24, despite its DUM being up slightly over the period.

Registries from nine territories that contributed $1,000 or less every year from FY20 to FY23 did not contribute at all in FY24. These include Nigeria, Antigua and Barbuda, Malawi, Guernsey, Jersey, Saint Lucia, Tokelau, and the US Virgin Islands.

The lack of any money from Tokelau’s .tk is expected given the death of the registry. Jersey and Guernsey are perhaps more surprising, given the registries are run by a former ICANN director.

A handful of other ccTLDs from small territories that have only sporadically given in the past did not contribute in FY24.

Fourteen registries contributed more in FY24 than they did in FY23, but the difference amounted to just $13,000 extra cash in ICANN’s coffers. South Africa, Slovenia, Vietnam, Tanzania, and Mongolia all paid $1,000 or more over FY23.

Russia, which stopped providing funding in FY23 despite its almost six million DUM, also did not give any money in FY24.

Microsoft switches two gTLDs from GoDaddy to Nominet

Microsoft has moved two of its branded gTLDs from GoDaddy’s registry back-end to Nominet’s.

Records show that .skype and .office both recently made the switch.

Microsoft had already moved six TLDs — .azure, .bing, .hotmail, .microsoft, .windows and .xbox — from Verisign to Nominet about a year ago, and .skype and .office mean its whole collection is now on Nominet’s service.

While .office isn’t technically a dot-brand because it does not have a Spec13 exemption in its ICANN contract, it is in use — you can log in to your email and other services, at least for now, via www.office.

.skype, meanwhile, has a handful of domains that work as redirects to skype.com.

No .uk price hikes despite tumbling sales

Nominet said today that it has no plans to raise the price of .uk domains, even as registration volumes continue to sink and profits tumbled.

The registry said in its annual report that its net loss for the year ended March 31 was £6 million ($7.7 million), compared to £3.9 million ($5 million) in fiscal 2023, on revenue up £2.3 million ($3 million) to £56.4 million ($72.4 million).

The increase in revenue was due to its non-domains Cyber business, which was up by £2.7 million, offsetting a £400,000 decrease in domains revenue that was due to a 300,000 decline in domains under management.

Domains brought in £41.1 million at the top line during the period, but profit dropped from £14.8 million in 2023 to £9.8 million.

Nominet also lost a Protective DNS contract with the UK government during the year, which led to 40 layoffs and 19 employees being reassigned, but said the setbacks will not lead to price hikes.

“Even with the loss of the UK PDNS contract, and lower domain name renewals indicative of a maturing market, we see no immediate need to increase pricing, but we will continue to regularly review,” chair Andy Green and CEO Paul Fletcher said in the report.

.uk names currently cost £3.90 per year, with the last price increase happening in 2020.

Fletcher and CFO Carolyn Bedford both received hefty bonuses during the year, amounting to an extra £180,000 for Fletcher on top of his £304,500 base salary and an extra £94,557 for Bedford to add to her £190,000 base.

The company confirmed in its report that it plans to participate in the next new gTLD application round in 2026 as a back-end registry services provider, saying it expects the market to be very competitive.

Nominet names director hopefuls

Nominet has named the five people who have put themselves forward for two seats on its board of directors. While there are familiar faces, there are also notable absences.

Ashley La Bolle of Tucows is defending her non-executive director seat and standing for her second term, but fellow NED Simon Blackler, famously of the PublicBenefit.uk campaign, is not.

PublicBenefit.uk resulted in a boardroom bloodbath at Nominet in 2021 and a change of focus for the .uk registry under new management.

Jim Davies, who threatened legal action after being excluded from the 2023 election, is also not on the list.

Rex Wickham of TwentyTwentyMedia, who sits on Nominet’s .UK Registry Advisory Council, is also on the list, along with Rob Golding, who has previously stood unsuccessfully for a NED seat.

Thomas Mangin and David Ward, neither of whom I believe have been candidates in Nominet elections before, round off the list.

Candidates’ election statements appear to be available to members only.

Nominet members get to vote, weighted according to how many .uk domains they manage, from September 23, and the new NEDs take their seats at the company’s AGM the following month.

Four more gTLDs in emergency measures

ICANN has thrown four more gTLDs into the Emergency Back-End Registry Operator program, presumably as a prelude to terminating their registry’s contracts in a few weeks.

Asia Green IT System’s .pars, .shia, .tci and .همراه (.xn--mgbt3dhd) are all going EBERO, meaning Nominet will take over their operation on ICANN’s behalf.

Not that they need much operation, given that all four, which all connect in some way to Iran and Iranian culture, were unlaunched and dormant, with no third-party registrations.

The four TLDs, along with AGIT’s .nowruz, which went into EBERO last week, had been running on CoCCA’s back-end, but it sounds rather like the registry forgot to pay its bills, causing CoCCA to disable its services.

That led to functions such as Whois going offline, triggering a breach of the ICANN Registry Agreement. A day of Whois downtime in one week gives ICANN grounds to get Nominet involved and move towards termination.

A breach notice issued a couple weeks ago gave AGIT until the end of the month to come back into compliance or risk termination. That escalation now appears inevitable.

AGIT almost got to run .islam and .halal, but had its applications rejected after protests from governments of Muslim-majority country. Somehow, .shia did not receive the same outcry.

ICANN takes over gTLD after Whois failures

ICANN has swooped to take over operation of a new gTLD after it missed its strict thresholds for Whois availability.

.nowruz, originally operated by Istanbul-based Asia Green IT System, is now in the Emergency Back-End Registry Operator program, meaning its essential functions will be carried out by Nominet.

The gTLD is the Latinized version of the word for the Persian new year holiday. It has barely a dozen domains under management and is the only one of AgitSys’s five gTLDs with any registrations.

The company’s other gTLDs — .pars, .shia, .tci and .همراه (.xn--mgbt3dhd) — were also all found to have breached their registry agreements, but as they have no third-party domains where was no need for the EBERO, ICANN said.

The takeover follows a rapidly issued notice last week, in which ICANN Compliance accused AgitSys of a range of breaches of contract.

It seems AGIT went into breach with ICANN after its back-end provider, CoCCA, terminated its contract after a “breach” earlier this year. CoCCA said it had been turning off services ever since the contract ended.

.nowruz becomes the third gTLD from the 2012 round to go into emergency measures, the others being .desi and .wed, which went EBERO seven years ago.

ICANN said it planned to auction off .wed in 2021, but nothing has come of that plan yet.

Two seats up for grabs on Nominet board

The .uk registry, Nominet, has opened up its call for nominations for its 2024 non-executive director elections.

There are two seats up for grabs this year, currently occupied by Simon Blackler of Krystal Hosting and Ashley La Bolle of Tucows, both of whom were originally elected in 2021 and are eligible for reelection if they choose to stand again.

Blackler, you may recall, was the instigator of the PublicBenefit.uk campaign, which resulted in a boardroom bloodbath three years ago.

The seats represent half of the member-elected NEDs on Nominet’s board.

Non-members are eligible for nomination but only members may nominate and vote. Votes are weighted so the members with the most domains under management get the most votes, albeit with a cap to avoid capture by the largest players.

The deadline for nominations is July 7, and the vote takes place in September. Elections have historically reliably highlighted divisions in the .uk community.