Senators slate NTIA, to demand answers on new gTLD security

Did Verisign get to the US Congress? That’s the intriguing question emerging from a new Senate appropriations bill.
In notes attached to the bill, the Senate Appropriations Committee delivers a brief but scathing assessment of the National Telecommunication and Information Administration’s performance on ICANN’s Governmental Advisory Committee.
It says it believes the NTIA has “not been a strong advocate for U.S. companies and consumers”.
The notes would order the agency to appear before the committee within 30 days to defend the “security” aspects of new gTLDs and “urges greater participation and advocacy within the GAC”.
While the NTIA had a low-profile presence at the just-finished Durban meeting, it would be difficult to name many other governments that participate or advocate more on the GAC.
This raises an eyebrow. Which interests, in the eyes of the committee, is the NTIA not sufficiently defending?
Given the references to intellectual property, suspicions immediately fall on usual suspects such as the Association of National Advertisers, which is worried about cybersquatting and associated risks.
The ANA successfully lobbied for an ultimately fruitless Congressional hearing in late 2011, following its campaign of outrage against the new gTLD program.
It’s mellowed somewhat since, but still has fierce concerns. Judging by comments its representatives made in Durban last week, it has shifted its focus to different security issues and is now aligned with Verisign.
Verisign, particularly given the bill’s reference to “security, stability and resiliency” and the company’s campaign to raise questions about the potential security risks of new gTLDs, is also a suspect.
“Security, stability and resiliency” is standard ICANN language, with its own acronym (SSR), rolled out frequently during last week’s debates about Verisign’s security concerns. It’s unlikely to have come from anyone not intimately involved in the ICANN community.
And what of Amazon? The timing might not fit, but there’s been an outcry, shared by almost everyone in the ICANN community, about the GAC’s objection last week to the .amazon gTLD application.
The NTIA mysteriously acquiesced to the .amazon objection — arguably harming the interests of a major US corporation — largely it seems in order to play nice with other GAC members.
Here’s everything the notes to “Departments of Commerce and Justice, and Science, and related agencies appropriations Bill, 2014” (pdf) say about ICANN:

ICANN — NTIA represents the United States on the Internet Corporation for Assigned Names and Numbers [ICANN] Governmental Advisory Committee [GAC], and represents the interests of the Nation in protecting its companies, consumers, and intellectual property as the Internet becomes an increasingly important component of commerce. The GAC is structured to provide advice to the ICANN Board on the public policy aspects of the broad range of issues pending before ICANN, and NTIA must be an active supporter for the interests of the Nation. The Committee is concerned that the Department of Commerce, through NTIA, has not been a strong advocate for U.S. companies and consumers and urges greater participation and advocacy within the GAC and any other mechanisms within ICANN in which NTIA is a participant.
NTIA has a duty to ensure that decisions related to ICANN are made in the Nation’s interest, are accountable and transparent, and preserve the security, stability, and resiliency of the Internet for consumers, business, and the U.S. Government. The Committee instructs the NTIA to assess and report to the Committee within 30 days on the adequacy of NTIA’s and ICANN’s compliance with the Affirmation of Commitments, and whether NTIA’s assessment of ICANN will have in place the necessary security elements to protect stakeholders as ICANN moves forward with expanding the number of top level Internet domain names available.

While the bill is just a bill at this stage, it seems to be a strong indication that anti-gTLD lobbyists are hard at work on Capitol Hill, and working on members of diverse committees.

NTIA fights Big Content’s corner, tells ALL new gTLD applicants to submit PICs

The National Telecommunications and Information Administration said today that all new gTLD applicants, even those that have not already been hit by government warnings, should submit Public Interest Commitments to ICANN.
In a rare comment sent to an ICANN public forum today, the NTIA suggested that applicants should use the process to help combat counterfeiting and piracy.
The agency, the part of the US Department of Commerce that oversees ICANN and participates in its Governmental Advisory Committee, said (emphasis in original):

NTIA encourages all applicants for new gTLDs to take advantage of this opportunity to address the concerns expressed by the GAC in its Toronto Communique, the individual early warnings issued by GAC members, and the ICANN public comment process on new gTLDs, as appropriate.

PICs were introduced by ICANN earlier this month as a way for applicants to voluntarily add binding commitments — for example, a promise to restrict their gTLD to a certain user base — to their registry contracts.
The idea is to let applicants craft and agree to stick to special terms they think will help them avoid receiving objections from the GAC, GAC members and others.
NTIA said that applicants should pay special attention in their PICs to helping out the “creative sector”.
Specifically, this would entail “ensuring that WHOIS data is verified, authentic and publicly accessible”.
They should also “consider providing an enforceable guaranty that the domain name will only be used for licensed and legitimate activities”, NTIA said, adding:

NTIA believes that these new tools may help in the fight against online counterfeiting and piracy and is particularly interested in seeing applicants commit to these or similar safeguards.

The PICs idea isn’t going down too well in the applicant community, judging by other submissions this week.
The Registries Stakeholder Group of ICANN, for example, says its members are feeling almost “blackmailed” into submitting PICs, saying the timing is “completely unreasonable”.
As DI noted when PICs was first announced, applicants have been given until just March 5 to submit their commitments, raising serious questions about the timetable for objections and GAC advice.
The RySG has even convened a conference call for March 4 to discuss the proposal, which it says “contains so many serious and fundamental flaws that it should be withdrawn in
its entirety”.

Winners and losers in the new .com pricing regime

Today’s shock news that Verisign will be subject to a .com price freeze for the next six years will have broad implications.
The US Department of Commerce has told the company it will have to continue to sell .coms at $7.85 wholesale until 2018, barring exceptional circumstances.
Here’s my initial take on the winners and losers of this new arrangement.
Domain investors
Volume .com registrants are of course the big winners here. A couple of dollars a year for a single .com is pretty insignificant, but when you own tens or hundreds of thousands of names…
Mike Berkens of Most Wanted Domains calculated that he’s saved $170,000 $400,000 over the lifetime of the new .com deal, and he reckons fellow domainer Mike Mann will have saved closer to $800,000 $2 million.
Brand owners
The other big constituency of volume registrants are the brand owners who spend tens or hundreds of thousands of dollars a year maintaining defensive registrations — mostly in .com — that they don’t need.
Microsoft, for example, owns over 91,000 domain names, according to DomainTools. I’d hazard a guess that most of those are defensive and that most are in .com.
Registries
There’s potentially trouble on the horizon for new gTLD applicants and existing registry operators. Verisign is looking for new ways to grow, and it’s identified its patent portfolio as an under-exploited revenue stream.
The company says it has over 200 patents either granted or pending, so its pool of potential licensees could be quite large.
Its US portfolio includes patents such as 7,774,432, “Registering and using multilingual domain names”, which appear to be quite broad.
Verisign also owns a bunch of patents related to its security business, so companies in that field may also be targeted.
Registrars
Verisign’s registrars will no longer have to pass their cost increases on to consumers every year.
While this may help with renewal rates, it also means registrars won’t be able to sneak in their own margin increases whenever Verisign ups its annual fees.
IDN buyers
Another area Verisign plans to grow is in internationalized domain names, where it’s applied to ICANN for about a dozen non-Latin variants of .com and .net.
Those registry deals, assuming they’re approved by ICANN, will not be governed by the .com pricing restrictions. Now that Verisign’s growth is getting squeezed, we might expect higher prices for IDN .com variants.
ICANN
ICANN may have suffered a small reputational hit today, with Commerce demonstrating it has the balls to do what ICANN failed to do six years ago, but money-wise it’s doing okay.
The new .com contract changes the way Verisign pays ICANN fees, and Commerce does not appear to have made any changes to that structure. ICANN still stands to get about $8 million a year more from the deal.
The Department of Commerce
Unless you’re a Verisign shareholder, Commerce comes out of this deal looking pretty good. It played hard-ball and seems to have won a lot of credibility points as a result.

ICANN, Verisign and NTIA “ready for 100 new gTLDs per week”

The three main entities responsible for managing the domain name system’s root zone have confirmed that they’re ready to add 100 or more new gTLDs to the internet every week.
In a statement, (pdf), ICANN, Verisign and the US National Telecommunications & Information Administration jointly said:

Based on current staffing levels and enhancements that are currently underway to the [Root Zone Management] system, the Root Zone Partners are able to process at least 100 new TLDs per week and will commit the necessary resources to meet all root zone management volume increases associated with the new gTLD program.

The letter was sent in response to a request from ICANN’s Security and Stability Advisory Committee, which asked in July whether ICANN, Verisign and the NTIA were ready for the new gTLD load.
The three-party Root Zone Management procedure used to add TLDs or update existing ones is getting more automation, which is expected to streamline the process.

US probing Verisign price hikes, .com contract may be extended

The US Departments of Commerce and Justice are investigating the price increase provisions of Verisign’s .com registry agreement.
Verisign CEO Jim Bidzos disclosed the “review” on a conference call with financial analysts tonight.
It is likely that it will last beyond November 30 2012, the date the current .com agreement expires, he said.
“There’s a possibility it will not be complete by November 30,” he said.
A special six-month extension is likely to be triggered, he said.
“The status of our ability to operate .com is not an issue here,” he said.
He declined to comment on questions related to the likelihood that the company would be forced to change its pricing plans.
Verisign has spent $3.9 million in legal and other fees related to the US review, it emerged during the call.
ICANN approved the contract, which gives Verisign the right to increase its .com registry fees by 7% in four of the next six years, in June.
ICANN will see an extra $8 million in revenue from Verisign as a result.
Due to the special nature of .com, Justice and Commerce approval is required before the contract can be renewed. Verisign had previously expected that to come before November 30.
Verisign shares are trading down 14% in after-hours trading following the news.

Strickling urges ICANN to bolster trademark protection for all gTLDs

US Department of Commerce assistant secretary Larry Strickling has called on ICANN to create more trademark protection mechanisms across new and existing gTLDs.
In a letter to ICANN yesterday, Strickling, head of the National Telecommunications and Information Administration, also expressed concerned about the slow progress on implementing the Uniform Rapid Suspension and Trademark Clearinghouse systems.
The URS has run into a problem because no provider ICANN has approached to date wants to run it for the $300 to $500 filing fee.
Meanwhile, the way ICANN plans to implement the Clearinghouse has been hit by criticism from registries, registrars and new gTLD applicants, many of which believe it is too inflexible.
Strickling told ICANN that “it is imperative that all fees associated with the URS remain low”, and suggested that cost savings could be achieved through integration with the Clearinghouse.
But he also called for stronger trademark protections in general, above and beyond what the ICANN community has already decided to implement.

Industry stakeholders have presented a variety of suggestions to reduce the cost of defensive registrations (e.g. trademark blocking mechanisms) and others have suggested enhanced safeguards for new gTLDs targeted at creative sectors.
While not taking a position in support of any specific proposal at this time, NTIA does believes that ICANN should continue and open and transparent dialogue between all actors in order to find solutions to these issues which have come into clearer focus since the release of the 1,930 applications this past June.

The letter was sent due to NTIA’s meeting with the 30-odd so-called “brand summit” companies — almost all household names — last month.
Among other things, they want the Clearinghouse to alert them whenever somebody registers a domain name containing their trademarks, instead of just exact matches.
The counter-argument from the domain industry is that such a proposal would create millions of false positives, due to dictionary words, run-ons and acronyms.
An example recently aired by attorney John Berryhill is the Yellow Pages trademark on “YP”, which would be triggered in the Clearinghouse whenever PayPal registered its brand as a domain name.
The brand summit companies also want a blanket trademark blocking system based on ICM Registry’s .xxx Sunrise B process, under which they pay a one-off fee to block their mark in a gTLD forever.
Opponents point out that such systems may be appropriate in single TLDs, but problems could arise when applied to all TLDs. Different companies have rights to the same strings in different fields.
Strickling appears to be aware of the problems that could be caused if the trademark community gets everything it wants. In the letter, he urges mutual understanding, writing:

Whatever process ICANN follows, trademark holders should provide clear, fact-based descriptions of the challenges they encounter in the global DNS and registries and registrars should clarify issues relating to the technical feasibility and costs of implementing any additional protections.

It’s a nice idea, but attempts to reach a sane solution have so far been unsuccessful.
Melbourne IT’s HARM proposal, which would give special rights to particularly vulnerable brands, was shot down by trademark owners as too limited during a meeting in Washington DC last month.

ICANN to get $8 million more from new .com deal

Verisign will pay ICANN roughly $8 million more per year in fees under its new .com registry agreement, CEO Jim Bidzos told financial analysts last night.
Under the new deal, approved by ICANN last month, the company pays ICANN a $0.25 fee for every .com registration-year, renewal or transfer, instead of the lump sums it paid previously.
That’s going to work out to about $25 million in 2013, Bidzos said on Verisign’s second-quarter earnings call last night, compared to about $17 million under the old arrangement.
The new agreement continues to give the company the right to increase its price by 7% a year in most years, of course, so it’s not all bad news for Verisign investors.
The deal is currently under review by the US Department of Commerce and Bidzos said he expects it to be approved before November 30, when the current contract expires.

Breaking: ICANN awarded IANA contract

ICANN has been awarded the contract to run IANA for another three to seven years.
It’s almost eight months since the US National Telecommunications and Information Administration put the contract up for rebid and four months after ICANN’s initial proposal was deemed unsatisfactory.
“This is the longest IANA functions contract we’ve ever had, running for a period of three years with two 2-year renewal options,” said Akram Atallah, ICANN’s new interim CEO, in a statement.
The new contract starts October 1.
A cynic might note that the renewal, which was of course expected, comes just a day after the departure of former CEO Rod Beckstrom. That cynic might also suggest that the timing was deliberate.

Former CEO Rod Beckstrom tweeted tonight that his last act as CEO was to sign the new contract yesterday.
The IANA contract gives ICANN its powers over the domain name root system and IP address allocation.
More on the story when we have it…

US reopens IANA contract re-bid

ICANN’s key contract with the US government is open for proposals again, a month after ICANN was told its first bid wasn’t up to the expected standards.
The US National Telecommunications and Information Administration yesterday posted a revised request for proposals, looking for a new IANA contractor.
The IANA contract is what gives ICANN its operational powers over the domain name system root database.
Based on a quick comparison of the new RFP with the old, there have been few notable, substantial changes, giving little indication of why ICANN’s previous response fell short.
The RFP has a strong emphasis on accountability, transparency, separation of ICANN/IANA powers, conflicts of interest and the “global public interest”, as before.
While many of the requirements have been edited, clarified or shifted around, I haven’t been able to spot any major additions or subtractions.
The RFP now envisages a contract running from October 1, 2012 until September 30, 2015, with two two-year renewal options, bringing the expiry date to September 30, 2019.
The deadline for responses is May 31.
The current contract had been due to expire at the end of March but the NTIA unexpected extended it by six months just before ICANN’s meeting in Costa Rica kicked off last month.
The NTIA said it canceled the first RFP “because we received no proposals that met the requirements” but neither it nor ICANN has yet provided any specifics.
Over a month ago, at an ICANN press conference in Costa Rica, CEO Rod Beckstrom said: “We were invited to have a debriefing with [the NTIA] to learn more about this. Following that discussion we will share any information we are allowed to share.”
Since then, no additional information has been forthcoming.
The new RFP can be read here. For comparison, the old version can be downloaded here.

Six hot topics for new gTLD applicants at ICANN 43

Hundreds of stakeholders are gathering in San Jose, Costa Rica today for the first official day of ICANN’s 43rd public meeting.
While the news that the US government has deferred the renewal of ICANN’s IANA contract for another six months has set the most tongues wagging so far, there’s a lot more going on.
In this in-depth DomainIncite PRO ICANN 43 preview, we take a look at:

• Why many attendees think the shock IANA news is a personal slight against ICANN CEO Rod Beckstrom.
• How protecting the Olympic and Red Cross trademarks could lead to the new gTLD application window being extended.
• Why the Governmental Advisory Committee is pushing for greater powers to reject new gTLD applications.
• Which companies have applied for the potentially lucrative Trademark Clearinghouse contract (and which one is our favorite to win), and why unanswered questions have the IP community worried.
• What criteria new gTLDs will be judged against after they launch.
• Why critical talks between ICANN and domain name registrars could lead to the retail price of domain names doubling, and why that probably won’t happen any time soon.

DomainIncite PRO subscribers can read the full analysis here. Non-subscribers can find subscription information here.