Time is running out for Net4 as ICANN questions Indian court ruling

Struggling registrar Net 4 India has been hit with an unprecedented fourth concurrent breach-of-contract notice by ICANN, but an Indian court has ruled that ICANN should NOT terminate its accreditation.

It also turns out that Public Interest Registry wants to terminate its Registry-Registrar Agreement with Net4, after it failed to deposit about $22,000 in its account to cover renewal fees, putting 1,644 .org domains at risk.

The latest ICANN breach notice is much the same as the two delivered in December, both of which suggest that Net4 has been transferring its customers’ domains to a partner registrar, OpenProvider, without the registrants’ knowledge or consent.

They further suggest that Net4 has not enabled its customers to renew their domains or reclaim them after they’ve expired, and claim that the company has consistently refused to hand over records proving that its disputed transfers were legit.

Net4 also owes ICANN thousands in past due fees.

The company has been in quasi-judicial insolvency proceedings since 2017 over $28 million in unpaid bank loans that were acquired by a debt recovery agency called Edelweiss; its first breach notice came two years later when ICANN first learned of the case.

For some reason, ICANN did not terminate or suspend Net4’s contract back then.

With hindsight, this may have proven a bad move — during India’s first coronavirus lockdown last year, hundreds of Net4 customers started complaining about lost domains and non-existent customer service.

It was not until December last year that these complaints were escalated to the level of formal breach notices, and more threats to terminate its Registrar Accreditation Agreement.

Net4, in response, asked its insolvency court for a ruling preventing ICANN and PIR from terminating their respective agreements. It reckons it can get is house in order in the next five or six weeks.

ICANN presented what appears to be a wealth of evidence of the company’s misconduct and argued that the court has no jurisdiction over ICANN anyway, because the RAA is governed by California law and ICANN has no presence in India.

Nevertheless, the National Company Law Tribunal in New Delhi has ruled, in a virtually impenetrable word soup of a document (pdf) that reads like it was vomited up by a Victorian-era college freshman who’d just rolled up and smoked an entire legal dictionary, that ICANN and PIR should not “terminate these agreements at least until three months from hereof”.

That would stay Net4’s executive until April 25. The latest ICANN breach notice gives the company until February 19 to come back into compliance, though technically there’s nothing stopping it starting termination proceedings today based on past notices.

The orders given to ICANN and PIR are more “requests”, due to the fact that the court couldn’t decide whether its words had any jurisdictional power over either.

Rather hilariously, ICANN said in a press release late Friday:

When a registrar fails to allow registrants to renew, transfer, and manage their domain names, ICANN will not hesitate to take whatever actions are necessary, up to and including termination of the registrar, to protect registrants’ rights and interests.

These are words that ring hollow, given that it’s allowed Net4 to slide three times already and has been hesitating since June 2019.

ICANN could block Donuts from buying Afilias

In what appears to be an almost unprecedented move, ICANN is to review Donuts’ proposed acquisition of rival Afilias at the highest level, raising a question mark over the industry mega-merger.

The org’s board of directors will meet Thursday to consider, among other things, “Afilias Change of Control Approval Request”.

It’s highly unusual for a change of control to be discussed at such a high level.

Every registry contract contains clauses requiring ICANN’s consent before a registry switches owners, and it has approved hundreds over the last decade. But the process is usually handled by legal staff, without board involvement.

The only time, to my memory, that the board has got involved was when it withheld consent from .org manager Public Interest Registry earlier this year.

It’s not entirely clear why Afilias has been singled out for special treatment.

It’s probably not due to its status as a legacy gTLD registry operator because of .info — when GoDaddy bought .biz operator Neustar’s registry business earlier this year, there was no such board review.

In addition, the .info contract’s change of control provisions are very similar to those in the standard new gTLD contract.

Could it be due to Donuts executives former ties to ICANN and the perception of a conflict of interest? Again, it seems unlikely.

While Donuts CEO Akram Atallah is former president of ICANN’s Global Domains Division, former ICANN CEO Fadi Chehadé is no longer involved with Donuts owner Abry Partners, having jumped to erstwhile PIR bidder Ethos Capital this July.

Are there competition concerns? It’s a possibility.

Afilias holds the contracts for 24 gTLDs new and legacy, but supports a couple hundred more, while Donuts is contracted for over 240.

But between them, they have barely 10 million domains under management. Donuts isn’t even the market leader in terms of new gTLD registrations.

And ICANN avoids making competition pronouncements like the plague, preferring instead to refer to national competition regulators.

Could ICANN’s interest have been perked by the fact that Afilias is the back-end provider for .org’s 10 million domains, and the proposed Donuts deal comes hot on the heels of the failed PIR acquisition? Again, it’s a possibility.

But none of the dangers ICANN identified in the .org deal — such as pricing, freedom of speech, and the change from a non-profit to for-profit corporate structure — appear to apply here.

There could be technical concerns. Atallah told DI a couple weeks ago that the plan was to ultimately migrate its managed TLDs to its Amazon cloud-based registry.

But moving its clients’ TLDs to a new back-end infrastructure would require their consent — it would be up to PIR and its overlords at the Internet Society to agree to moving .org to the cloud.

I think it’s likely that a combination of all the above factors, and maybe others, are what’s driving the Afilias acquisition to the ICANN boardroom. It will be interesting to see what the board decrees.

.org made $97 million last year

Public Interest Registry has published its 2019 tax returns, revealing a top line of $97.1 million.

That’s a tad under the $101.1 million it reported for 2018, presumably due to the declining number of .org domains under management.

It lost roughly 200,000 names in 2019, bottoming out at 10.4 million, though it has since recovered in 2020.

The returns also reveal that back-end provider Afilias was paid $18.3 million for its trouble, and ICANN was paid $2.6 million in fees.

The Internet Society, which owns PIR and uses it for most of its funding, was paid $67.5 million, up from the $48.7 million given in 2018.

The form also list the salary and bonuses for 20-odd staffers and directors, for the salary voyeurs among you.

These eight companies account for more than half of ICANN’s revenue

While 3,207 companies contributed to ICANN’s $141 million of revenue in its last fiscal year, just eight of them were responsible for more than half of it, according to figures just released by ICANN.

The first two entries on the list will come as no surprise to anyone — they’re .com money-mill Verisign and runaway registrar market-leader GoDaddy, together accounting for more than $56 million of revenue.

Registries and registrars pay ICANN a mixture of fixed fees and transaction fees, so the greater the number of adds, renews and transfers, the more money gets funneled into ICANN’s coffers.

It’s perhaps interesting that this top-contributors list sees a few companies that are paying far more in fixed, per-gTLD fees than they are in transaction fees.

Binky Moon, the vehicle that holds 197 of Donuts’ 242 gTLD contracts, is the third-largest contributor at $5.2 million. But $4.9 million of that comes from the annual $25,000 fixed registry fee.

Only 14 of Binky’s gTLDs pass the 50,000-name threshold where transaction fees kick in.

It’s pretty much the same story at Google Registry, formally known as Charleston Road Registry.

Google has 46 gTLDs, so is paying about $1.1 million a year in fixed fees, but only three of them have enough regs (combined, about one million names) to pass the transaction fees threshold. Google’s total funding was almost $1.4 million.

Not quite on the list is Amazon, which has 55 mostly unlaunched gTLDs and almost zero registrations. It paid ICANN $1.3 million last year, just to sit on its portfolio of dormant strings.

The second and third-largest registrars, Namecheap and Tucows respectively, each paid about $1.7 million last year.

The only essentially single-TLD company on the list is Public Interest Registry, which runs .org. Despite having 10 million domains under management, it paid ICANN less than half of Binky’s total last year.

The anomaly, which may be temporary, is ShortDot, the company that runs .icu, .cyou and .bond. It paid ICANN $1.6 million, which would have been almost all transaction fees for .icu, which peaked at about 6.5 million names earlier this year.

Here’s the list:

[table id=62 /]

Combined, the total is over $70.5 million.

The full spreadsheet of all 3,000+ contributors can be found over here.

Three big registries will take down opioid domains for US govt

Verisign, Public Interest Registry and Neustar (now part of GoDaddy) will suspend domain names being used to illegally sell opioids under a pilot scheme with the US government.

The Food and Drug Administration announced this week that this new “trusted notifier” program will go into effect for 120 days.

When the FDA finds a site suspected of selling opioids illegally, it will notify the registry as well as the web site’s owner and hosting provider.

The registries will then be able to decide whether to suspend the domain or not. It’s voluntary.

The National Telecommunications and Information Administration will also take part in the project.

Verisign runs .com and .net, PIR runs .org and Neustar runs .us, .co and .biz.

Opioids are legal, pharmaceutical pain-killers derived from opium. They’re ridiculously addictive and account for as many drug overdose deaths in the US as heroin, but are over-prescribed by US doctors.

It’s not the first time registries have agreed to trusted notifier programs. Some new gTLD registries have deals with the movie and music industries to suspend domains involved in copyright infringement.

The announcement comes just a few weeks after ICANN rejected a deal that would have seen PIR create a community oversight body with responsibilities to monitor domain-suspension policies in .org.

ICANN dissenter explains why she wanted .org sale approved

ICANN has finally published the dissenting statement made by one of its directors following the vote to deny Ethos Capital the right to acquire Public Interest Registry from the Internet Society.

Avri Doria was one of only two directors to vote against the majority on the April 30 resolution, and the only one to file a written statement for the record, which ICANN has now published (pdf). It reads:

Briefly, I believe that the contractual conditions have been met by PIR and Ethos and that they have gone beyond these required contractual conditions to offer significant public interest commitments currently missing from the current contract.

On balance after intense study of the proposal I have come to conclusion that the Public Interest of registrants and users is better served by the PICs offered by PIR, though they could
be stronger, than by forcing PIR to remain within ISOC without any guarantees on public interest related to data usage and freedom of expression.

In exchange for ICANN approval of the deal, Ethos had promised to cap its price increases at 10% for eight years and to create a largely independent stewardship council to monitor issues related to privacy and free speech in .org.

With ICANN voting to deny the acquisition, PIR is not required to live up to those commitments, but opponents of the deal feel that its not-for-profit status under ISOC control provide stronger protections against bad behavior.

ICANN said it rejected the deal on “public interest” grounds for a variety of reasons including the lack of transparency into Ethos’ ultimate ownership, distrust that Ethos would be able to service its debt, doubt over its management in the long term, and the sheer volume of dissent from the community.

Also playing a strong role was an objection from the California attorney general, who pulled rank and informed ICANN that it should reject the deal, reminding the organization that it was subject to his oversight. This has been described as a dangerous precedent.

ICANN’s .org decision was NOT unanimous, and it was made in secret

When ICANN announced its decision to deny Public Interest Registry’s request to be acquired by Ethos Capital at the end of April, I felt a little foolish.

I’d confidently predicted just days earlier that the decision by the board would not be unanimous, but ICANN, in announcing the decision, said “the entire Board stands by this decision”.

But it turns out I was right after all. Three directors voted against the consensus and one abstained.

The dissenting votes were cast by industry policy consultant Avri Doria, Serbian internet pioneer Danko Jevtović, and former Sudanese ccTLD operator Ihab Osman.

Doria and Jevtović voted against the first resolved clause, which rejected PIR’s request. All three voted against the second resolved clause, which would have allowed PIR to file a second request.

Sarah Deutsch, a private practice lawyer, abstained from both votes, presumably because she also sits on the board of the Electronic Frontier Foundation, the civil liberties group that can, via California’s attorney general, probably be credited most with getting the transaction killed.

All three dissenters and Deutsch are Nominating Committee appointees.

According to the preliminary report of the April 30 meeting, “Doria indicated that she would be voting against the resolution and explained her views about how the public interest would be better served by ICANN granting its consent to PIR’s request.”

What her reasons were are not reflected in the record.

It also seems likely that any substantive minuting of ICANN’s decision is likely to be limited, as it appears to have been made at a different, off-the-books session at an unspecified earlier date.

The preliminary report notes the “the Board discussed and considered alternative draft resolutions for potential Board action as part of an earlier briefing”.

No such earlier meeting is listed on ICANN’s web site. The board’s previous formal meeting, two weeks earlier, had PIR’s request removed from the agenda at the last minute.

So it appears that ICANN’s board decided to reject the deal basically in secret at some point between April 17 and April 29, during a meeting of which ICANN has no obligation to publicly release the minutes.

Nice transparency loophole!

There’s always the Documentary Information Disclosure Policy, I suppose.

.org sale officially dead

Public Interest Registry has formally announced that its proposed $1.13 billion acquisition by Ethos Capital is dead.

The company told ICANN yesterday that it is withdrawing its request for a change of control under its .org contract and that it “will not be pursuing an ICANN Request for Reconsideration or taking any other action to try to revive the Transaction”.

In a statement, CEO Jon Nevett said that PIR is no longer for sale to any other party. It will remain under the Internet Society’s control.

He also pointed out that it’s not within ICANN’s power to arbitrarily transfer .org to another registry, as some critics have called for.

“Such a transfer by ICANN is a contractual impossibility under our registry agreement,” he wrote.

ICANN rejected the change of control request after deciding it was not in the public interest for .org to pass into for-profit hands.

Following the decision, ISOC had indicated that PIR was no longer for sale.

The .org deal may be dead and buried, but calls remain for PIR to lose its contract

The Internet Society has revealed that the .org registry operator PIR is no longer for sale.

The news came in a statement from ISOC chair Andrew Sullivan late Friday, less than 24 hours after ICANN withheld its consent for the proposed $1.13 billion acquisition by private equity firm Ethos Capital.

ICANN had held the door open for Ethos and ISOC to resubmit a change of control request, and Ethos had said Thursday that it was evaluating its options, but it appears the decision has been made to keep PIR under ISOC’s wing.

In his statement, Sullivan expressed his dismay that ICANN had acted as a “regulator” by evaluating the deal using a public interest test rather than simply rubber-stamping it as it has in all other cases of registry acquisitions. He wrote:

It should concern the Internet community that ICANN has shown itself to be much more susceptible to political pressure than its limited mandate would recommend.

…

Now that we know that ICANN believes its remit to be much larger than we believe it is, we can state this clearly: neither PIR nor any of its operations are for sale now, and the Internet Society will resist vigorously any suggestion that they ought to be.

But who would want to, or could afford to, buy it? While ICANN has made it clear that PE firms are welcome to acquire other TLDs, it wants .org to remain in non-profit hands.

During the last few months of controversy, one other embryonic effort to take over .org was announced, led by founding ICANN chair Esther Dyson.

Called the Cooperative Corporation of dot-org Registrants (CCOR), it had no intention of handing over a billion dollars for .org, it simply wanted ICANN to assign the contract to its control.

It still wants that, or something like that. In a statement Saturday, CCOR said it “calls upon ICANN to proceed with the established multi-stakeholder led open request for proposals for stewardship of the dot-org domain”.

Unless it can be shown that PIR has seriously broken the terms of its Registry Agreement, the chances of ICANN randomly opening up .org to tender is pretty much zero.

CCOR goes on to say that it is still worried about .org falling into private hands and that it will lobby for legally binding policies “including the preservation of privacy, diversity and human rights, and freedom from censorship”.

“Dangerous precedent” as ICANN rejects $1.13 billion .org buyout

In a decision that will shock many, ICANN won’t let Ethos Capital buy Public Interest Registry from the Internet Society.

Its board of directors yesterday voted to reject PIR’s request for a change of control of the .org contract, saying that “the public interest is better served in withholding consent”.

Ethos responded angrily almost immediately, saying the decision “sets a dangerous precedent with broad industry implications” and that it is “evaluating its options”.

The ICANN resolution, which was published overnight, is justified by setting out the case that .org is a unique case: a large legacy gTLD with a mandate to serve non-profit entities.

The Board was presented with a unique and complex situation – a request to approve a fundamental change of control over one of the longest-standing and largest registries, that also includes a change in corporate form from a viable not-for-profit entity to a for-profit entity with a US$360 million debt obligation, and with new and untested community engagement mechanisms relying largely upon ICANN contractual compliance enforcement to hold the new entity accountable to the .ORG community. ICANN is being asked to agree to contract with a wholly different form of entity; instead of contracting with the mission-based not-for-profit that has responsibly operated the .ORG registry for nearly 20 years, with the protections for its own community embedded in its mission and status as a not-for-profit entity. If ICANN were to consent, ICANN would have to trust that the new proposed for-profit entity that no longer has the embedded protections that come from not-for-profit status, which has fiduciary obligations to its new investors and is obligated to service and repay US$360 million in debt, would serve the same benefits to the .ORG community.

Essentially, ICANN is holding ISOC to the by-and-for non-profits commitment that it made when it inherited the registry from Verisign back in 2002. You may recall I went into some depth on the history of .org back in December.

While noting the broad criticism from various parties — which included domainers and non-profits — about the proposed acquisition, the resolution makes specific reference to the investigation by the office of the California attorney general, which had made vague threats of legal action against ICANN.

Some commentators, including Jonathan Zuck and Michele Neylon — are worried that the AG’s influence now means ICANN has a new boss, and that special interest groups in future need only lobby his office in order to override community-built consensus.

But ICANN did not single out one reason for its decision, saying withholding consent was “reasonable in light of the balancing of all of the circumstances”.

Ethos, while not calling out the AG directly, made the broader claim that ICANN has acted outside its mandate by succumbing to lobbying by outside parties.

Its statement, which I think contains hints at future legal action, reads in full:

Today’s decision by ICANN sets a dangerous precedent with broad industry implications. ICANN has overstepped its purview, which is limited to ensuring routine transfers of indirect control (such as the sale of PIR) do not impact the registry’s security, stability and reliability. Today’s action opens the door for ICANN to unilaterally reject future transfer requests based on agenda-driven pressure by outside parties. It allows ICANN to base its decisions on a subjective interpretation of what it deems to be relevant in these transactions, rather than following its own clear and specified legal directive.

This decision will suffocate innovation and deter future investment in the domain industry. ICANN has empowered itself to extend its authority into areas that fall well outside of its legal mandate in acting as a regulatory body. Today’s decision also creates an uncertain and unpredictable business environment, where the enforceability and value of the ICANN contract itself may be called into question now that the rules of transferring ownership are open to influence by outside interests. Ethos is evaluating its options at this time.

In the same statement, PIR called the decision “a failure to follow its bylaws, processes, and contracts” and ISOC said ICANN “has acted as a regulatory body it was never meant to be”.

While the decision could be chalked up as a win for domain investors and civil libertarians that had challenged the acquisition, it has implications that may not entirely please them.

Assuming the deal stays dead, PIR is no longer promising to only increase prices by 10% a year. It will be able to raise its registry fee arbitrarily, whenever it likes, subject to notice periods and the usual uniform pricing rules.

Domainers will have to hope there’s no sour grapes at ISOC, or they could be looking at big price hikes before long.

And for those interested in censorship, remember PIR is no longer committing to a Stewardship Council that would help protect free speech in .org domains.

The ICANN decision came in spite of a last-minute plea from former chair and ISOC co-founder Vint Cerf, who in a letter (pdf) described the deal as a “wedge issue” that could be leverage to force ICANN into an existential crisis, with outside interests such as the ITU pushing itself as a replacement.

ICANN also received eleventh-hour submissions from the German government (which was against the deal) and German trade group Eco (which was vague but appeared to be for the deal).