Latest news of the domain name industry

Recent Posts

Will ICANN be forced to reject Islamic gTLDs?

Kevin Murphy, November 14, 2013, Domain Policy

The Organisation of Islamic Cooperation has condemned applications for .islam and .halal gTLDs filed by a Turkish company, despite the applicant recently fighting off an OIC-backed objection.
Claiming to represent the world’s 1.6 billion Muslims, the OIC expressed in a November 4 letter to ICANN and its Governmental Advisory Committee:

official opposition of the Member States of the OIC towards probable authorization by the GAC allowing use of these new gTLDs .Islam and .Halal by any entity not representing the collective voice of the Muslim people.

The letter seems to have been sent in response to the GAC’s current stalemate on these two TLDs, which were applied for, uncontested, by Istanbul-based Asia Green IT System.
At the ICANN meeting in Beijing six months ago, the GAC was unable to reach a consensus to object to .islam and .halal, instead merely noting:

Some GAC members have raised sensitivities on the applications that relate to Islamic terms, specifically .islam and .halal. The GAC members concerned have noted that the applications for .islam and .halal lack community involvement and support. It is the view of these GAC members that these applications should not proceed.

As a non-consensus objection, there’s no presumption that the ICANN board of directors should reject the applications.
And it seems that the New gTLD Program Committee, which carries board powers, has been deliberately ignoring the controversy pending the resolution of two formal Community Objections.
The objections were filed by the United Arab Emirates’ Telecommunications Regulatory Authority, the UAE’s ccTLD registry operator, with backing (it claimed) from the OIC.
But the TRA lost both objections, partly because the wishy-washy government-speak OIC letter it submitted in evidence failed to convince International Chamber of Commerce adjudicator Bernardo Cremades that it really did have that OIC support.
Whether the OIC really does object to Asia Green’s bids now seems beyond dispute.
In fact, the organization says it intends to pass a formal resolution containing its position on Islamic gTLDs during its Council of Foreign Ministers meeting in early December.
ICANN chair Steve Crocker has now asked the GAC to provide further guidance before it decides whether to accept or reject the two bids.
Given that a single governmental hold-out in the GAC would be enough to kill any chance of consensus, the OIC may be right to presuppose that the GAC will not fully object.
That would leave ICANN in the tricky position, for the first time in this application round, of having to decide the fate of a gTLD without the cover of a uniform international objection.
Would it reject .islam, opening the door for other gTLDs to be killed off by minority government concerns? Or would it approve the controversial strings, potentially pissing off the Muslim world?
I expect there’s at least one NGPC member — Lebanese-born Christian ICANN CEO Fadi Chehade — who would certainly not relish having to cast a vote on such a resolution.

Applicants call for new gTLD objections appeals process

Kevin Murphy, November 6, 2013, Domain Policy

Twelve new gTLD applicants, representing many dozens of applications, have called on ICANN to create an appeals process for when Community Objections have debatable outcomes.
Writing to ICANN and the International Chamber of Commerce this week, the applicants focus on the recent decision in the .sport case, which they said proves that ICC panelists don’t fully understand the Community Objection policy as laid out in ICANN’s Applicant Guidebook.
The letter points to five “glaring errors” in the “fatally flawed” .sport decision, in which Olympics-backed applicant SportAccord prevailed over Famous Four Media’s competing application.
The signatories — which include Radix, United TLD, Donuts, Famous Four, TLDH and others — say that the ICC panelist simply assumed SportAccord represented the “sport” community and failed to pinpoint any “likelihood of material detriment” that would be caused by Famous Four’s .sport going ahead.
It seems to me that the latter arguments are much more well-founded.
While the letter tries to pick holes in the panelist’s finding that SportAccord represents enough of the “sport” community to be able to win the objection, the arguments are pretty tenuous.
The applicants use an definition of “community” found elsewhere in the Guidebook, for example, to attempt to show that the panelist failed to follow the guidelines for establishing a community in a Community Objection.
The panelist’s actual ruling uses the definition of “community” from the relevant part of the Guidebook and seems to follow it fairly closely. The applicants make a poor job of questioning his logic.
However, on “detriment”, the letter seems to be on much firmer ground.
It argues that the panelist deliberately lowered the bar from “likelihood of material detriment” to “possibility of material detriment” in order to hand SportAccord a victory.
The letter states:

If the Expert’s current logic is followed, every application, including the Objector’s own application, creates “possible” damage. In this case, an allegation of material detriment against any application would be upheld because there is future “possible” damage.

It also makes reference to the fact that the panelist appears to in many cases have been weighing the Famous Four application against SportAccord’s, which was not his job.
It reads in part: “The Expert did not identify a single objectionable or lacking aspect in the application that creates a likelihood of material detriment.”
The applicants call on ICANN to immediately create an appeals mechanism for Community Objections, and to ensure that ICC panelists are given training before making any more decisions.
Here’s the full list of signatories: Radix, United TLD, DotClub Domains, Top Level Design, Donuts, Top Level Domain Holdings, Priver Nivel, Fegistry, Employ Media, Famous Four Media, Merchant Law Group, DotStrategy.

ICANN makes GAC’s Category 1 new gTLD advice less stupid

Kevin Murphy, November 6, 2013, Domain Policy

After six months, ICANN is finally giving its Governmental Advisory Committee what it wants. Kinda.
The New gTLD Program Committee has quietly sent its plan to implement the GAC’s so-called “Category 1” advice on new gTLDs, which called for regulated gTLDs where applicants had applied for open namespaces.
But it’s rewritten the advice in such a way that it’s unlikely to win many fans in either camp, causing headaches for applicants while also falling short of giving the GAC everything it wanted.
In a letter to GAC chair Heather Dryden, ICANN chair Steve Crocker laid out the NGPC’s plan.
The Category 1 advice, which comprised eight “safeguards” applicable to at least 386 gTLD applications for 174 unique strings, has been rewritten, making it a little more palatable to the majority of applicants.
The list of strings has also been cut in two, with the 42 strings considered most often linked to highly regulated industries taking the brunt of the regulation.
These 42 may or may not find their business models killed off, but are certainly facing more friction as a result of the NGPC’s decision:

.abogado, .attorney, .autoinsurance, .bank, .banque, .bet, .bingo, .carinsurance, .casino, .charity (and Chinese IDN), .corp, .cpa, .creditcard, .creditunion, .dds, .dentist, .gmbh, .hospital, .inc, .insurance, .ira, .lawyer., .lifeinsurance, .llc, .llp, .lotto, .ltd, .ltda, .medical, .mutualfunds, .mutuelle, .pharmacy, .poker, .sal, .sarl, .spreadbetting, .srl, .surgery, .university, .vermogensberater, .versicherung

Each of these registries is going to have to sign up to eight new mandatory Public Interest Commitments, obliging them to engage with the industries associated with their strings, among other things.
And while the GAC wanted these strings to be limited to credential-holding members of those industries, ICANN seems to be giving the applicants much more implementation wiggle room.
The GAC had originally called for all 386 Category 1 registries to:

Establish a working relationship with the relevant regulatory, or industry self-regulatory, bodies, including developing a strategy to mitigate as much as possible the risks of fraudulent, and other illegal, activities.

But ICANN has reinterpreted the advice to make it a bit less onerous on applicants. It will also only affect 42 strings. The advice, now rewritten as a PIC, reads:

Registry operators will proactively create a clear pathway for the creation of a working relationship with the relevant regulatory or industry self-regulatory bodies by publicizing a point of contact and inviting such bodies to establish a channel of communication, including for the purpose of facilitating the development of a strategy to mitigate the risks of fraudulent and other illegal activities.

Does that PIC mean registries will actually be obliged to listen to or give policy-making power to the relevant industries on a formal basis? It’s ambiguous enough that the answer might easily be no.
The GAC had also called for some Category 1 gTLDs to become restricted to card-carrying members of the industry or industries the strings relate to, saying in Beijing:

At the time of registration, the registry operator must verify and validate the registrants’ authorisations, charters, licenses and/or other related credentials for participation in that sector.

ICANN has basically rejected that advice, replacing it instead with the much more agreeable (to registries) text:

Registry operators will include a provision in their Registry-Registrar Agreements that requires Registrars to include in their Registration Agreements a provision requiring a representation that the Registrant possesses any necessary authorisations, charters, licenses and/or other related credentials for participation in the sector associated with the Registry TLD string.

You’ll notice that the ICANN version does not require credentials to be provided at the point of registration. In fact, the PIC seems to require nothing more than a check-box that the registrant must click.
This is obviously tolerably good news for applicants that had proposed unrestricted policies for their gTLDs — they no longer face the kiss of death in the registrar channel that the GAC’s version would have created — but let’s not pretend it’s what the GAC had asked for.
Again, it only applies to the 42 strings ICANN has identified as particularly broadly regulated.
These registries are not getting an easy ride, however. They will have to enforce a post-registration regime of verifying credentials in response to complaints. The new ICANN PIC reads:

If a Registry Operator receives a complaint expressing doubt with regard to the authenticity of licenses or credentials, Registry Operators should consult with relevant national supervisory authorities, or their equivalents regarding the authenticity.

It’s implied, but not stated, that uncredentialed registrants should lose their domains. Again, the ICANN version of the GAC advice may be less of a nightmare to implement, but it’s still very vague indeed.
For any Category 1 applicant that is not on the sub-list of 42 sensitive strings, there will be three new PICs to adopt.
These all instruct the registry to require registrars to get registrants to agree to abide by “all applicable laws”. It’s the kind of stuff that you usually find in registration agreements anyway, and doesn’t appear at first look to present any hugely problems for registries or registrars.
Overall, ICANN seems to have done a pretty good job of making the Category 1 advice less onerous, and applicable to fewer applicants, than the GAC originally wanted.
But applicants for the 42 strings most heavily affected still face some vague contractual language and the very real possibility of industry complaints in future.

Is ICANN ready to start rejecting some new gTLDs?

Kevin Murphy, November 4, 2013, Domain Policy

Is ICANN getting ready to give marching orders to new gTLD applicants? It seems likely given recent hints out of LA.
Currently, of the original 1,930 new gTLD applications, 125 have been withdrawn but only two or three have been rejected.
GCC’s .gcc and DotConnectAfrica’s .africa are both “Not Approved” while Nameshop’s .idn failed to pass its applicant support program tests and seems to have been put aside for this round.
But there are at least 22 active applications that are due to be hit with the ban hammer, by my reckoning. That’s not including those that may be killed off by Governmental Advisory Committee advice.
First, there are seven bids (so far) that have failed Community Objections or Legal Rights Objections filed against them, or have lost String Confusion Objections filed by existing TLD operators.
Applications such as Ralph Lauren’s .polo, Dish DBS’ .direct and Demand Media’s .cam have fallen foul of these three objection types, respectively.
Under the Applicant Guidebook rules, these applications are not allowed to proceed.
There are also 10 active applications for .home and five for .corp, two gTLD strings ICANN has said it will not approve due to their substantially higher risk of causing name collisions.
(Personally, I think these applicants should get full refunds — ICANN screwed up by not doing its homework on name collisions before opening the application window last year).
So far, ICANN seems to have been waiting for applicants to withdraw, rather than initiating a formal rejection.
But none of them actually have withdrawn.
The International Union of Architects, which won a Community Objection against Donuts over .architect in September, has noticed this too, and recently wrote to ICANN to find out what was going on.
Responding October 31, Generic Domains Division president Akram Atallah wrote (with my emphasis):

as a result of the objection determination, we have updated the status of the objection on the .ARCHITECT application to “Objector Prevailed” on the Objection Determinations page (http://newgtlds.icann.org/en/program-­‐status/odr/determination) of the New gTLD microsite. Additionally, we will be updating the overall status of this application on the New gTLD microsite (https://gtldresult.icann.org/application-­‐result/applicationstatus) pursuant to Section 1.1.2.9 of the Applicant Guidebook in the near future.

This suggests either a “Not Approved” status for .architect, or a new status we haven’t seen before, such as “Lost Objection”.
So could, for example, Demand Media’s .cam application be rejected? Demand lost a SCO filed by Verisign, but its two competitors for the string prevailed in virtually identical cases.
Would it be fair to reject one but not the others, without any kind of ICANN review or oversight?
Last week at the newdomains.org conference in Munich, I asked Atallah a question during a panel discussion about consistency in the new gTLD program, with reference to objections.
I was on stage and not taking notes, but my recollection is that he offered a not at all reluctant defense of subjectivity in panelists’ decision-making.
It was certainly my impression that ICANN is less troubled by inconsistent rulings than the applicants are.
In the .architect case, Atallah told the UIA that ICANN intends to implement objection rulings, writing:

ICANN will, of course, honor all panel decisions regarding objection determinations, unless directed to do otherwise by some action, for example, by virtue of Reconsideration Requests or other accountability mechanisms or action of the ICANN Board of Directors. To our knowledge, Spring Frostbite [Donuts] has not filed a Reconsideration Request or invoked an Independent Review Process with respect to this objection determination regarding the .ARCHITECT string.

Contention questions remain as ICANN reveals “last-resort” auction rules

Kevin Murphy, November 2, 2013, Domain Policy

ICANN has published a first draft of the rules for its “last resort” new gTLD auctions, but they do not yet address the contention created by controversial objection rulings.
The organization has hired Power Auctions to write the rules and manage the auctions.
They’ve agreed upon an “ascending clock” style, where the auctioneer sets upper and lower limits for each round of bidding. Applicants must bid within that range or withdraw — they cannot skip rounds.
A bid at the top of the round’s range is a “continue bid” that sees the applicant through to the next round. Lower, and it’s an “exit bid” that will count as a withdrawal if anyone else submits a higher bid.
When all but one applicants have withdrawn, the remaining applicant gets the gTLD, paying ICANN an amount equal to the highest exit bid submitted by a competitor in that round.
Unlike the private auctions that have been taking place for the last few months, losing applicants walk away empty-handed apart from a small application fee refund from ICANN.
Applicants’ bidding limits will be determined by their deposits. If your deposit is under $2 million, your bid ceiling is 10x your deposit, but if you put down $2 million deposit or more, there would be no upper limit.
It all seems fairly straightforward for direct, single-string contention sets.
Where it starts to get fuzzy is when you start thinking about “indirect” contention and multiple, connected auctions running simultaneously.
It’s a little tricky to explain indirect contention without diagrams, but let’s try an example, using .shop, instead.
There are nine applicants for .shop. These are all in direct contention with each other.
But one .shop applicant, Commercial Connect, won objections against applicants for “similar” strings — Amazon’s .通販 and Donuts’ .shopping.
Assuming ICANN upholds these objection findings, which seems increasingly likely given recent statements from generic domains president Akram Atallah, both .shopping and .通販 will be in direct contention with Commercial Connect’s .shop and in indirect contention with all the other .shop applications.
Complicating matters, while Amazon’s .通販 is uncontested, Donuts’ .shopping is also in direct contention with Uniregistry, which applied for the same string but did not lose an objection.
It will be quite possible for .shop, .shopping and .通販 to all be delegated, but only if Commercial Connect loses the auction for .shop or otherwise withdraws from the race.
The auction materials published by ICANN today are a bit fuzzy on what happens when indirect contention is in play. On the one hand it suggests that multiple applications can win an auction:

When a sufficient number of applications have exited the auction process, so that the remaining application(s) are no longer in contention with one another, and all the relevant string(s) can be delegated as gTLDs, the auction will be deemed concluded.

But the rules also say:

the rules set forth within this document will assume that there is direct contention only, a condition that holds for the substantial majority of Auctions. In the event that an Auction will include a Contention Set that does not satisfy this condition, ICANN or the Auction Manager may issue an Addendum to the Auction Rules to address indirect contention.

While it seems that the auctions for .shop, .shopping and .通販 would have to take place simultaneously due to the indirect contention, some weird edge cases have me confused.
ICANN’s list of indirect contention sets is currently empty.
It’s not at all clear to me yet whether, for example, Donuts’ .shopping application would be placed in the .shop auction or whether two separate auctions would be conducted.
That could be important because deposits — and therefore bidding limits — are specific to each auction.
Would Donuts have to stump up $4 million in deposits, rather than $2 million, just in order to win one string? Would Commercial Connect have to put down $6 million for three auctions for one string?
If the two .shopping applicants are placed in the .shop auction, and Commercial Connect withdraws first, would Donuts have to carry on bidding against the other eight .shop applicants, just to win .shopping?
I’m guessing not, but the rules don’t seem to envisage this scenario yet.
What about Uniregistry, which has an application for .shopping? Will ICANN force it into the .shop auction even though it’s not in direct contention with any .shop applicant?
If .shop and .shopping are two separate auctions, what happens if Commercial Connect withdraws from the .shop auction but not the .shopping auction? It would have little to gain — not being a .shopping applicant — but could it artificially bid up the .shopping set?
And could how these auctions play out have an impact on companies’ objection strategies in future rounds?
If Uniregistry, say, finds itself at a disadvantage because its .shopping competitor Donuts was objected to by Commercial Connect, maybe it would make sense for an entire direct contention set to cooperate to fight off an objection from an applicant for a similar string.
And if Commercial Connect finds itself financially hobbled by having to participate in three auctions rather than one, maybe that will discourage applicants from filing massive amounts of objections in future.
And another thing…

If you’re as confused as I am, ICANN is running a webinar November 7 at 2200 UTC in order to answer (hopefully) these kinds of questions.

ICANN compliance not broken, Ombudsman rules

Kevin Murphy, October 28, 2013, Domain Policy

Ombudsman Chris LaHatte has rejected a complaint from spam research firm KnujOn — and 173 of its supporters — claiming that ICANN’s compliance department is failing consumers.
In a ruling posted online today, LaHatte said there was “no substance” to complaints that a small number of “bad” registrars, notably BizCN, have been allowed to run wild.
KnujOn’s Garth Bruen is a regular and vocal critic of ICANN compliance, often claiming that it ignores complaints about bad Whois data and fails to enforce the Registrar Accreditation Agreement, enabling fake pharma spamming operations to run from domains sponsored by ICANN-accredited registrars.
This CircleID blog post should give you a flavor.
The gist of the complaint was that ICANN regularly fails to enforce the RAA when registrars allow bad actors to own domain names using plainly fake contact data.
But LaHatte ruled, based on a close reading of the contracts, that the Bruen and KnujOn’s supporters have overestimated registrars’ responsibilities under the RAA. He wrote:

the problem is that the complainants have overstated the duties of the registrar, the registrant and the role of compliance in this matrix.

He further decided that allegations about ICANN compliance staff being fired for raising similar issues were unfounded.
It’s a detailed decision. Read the whole thing here.

Chehade talks up split from US oversight

Kevin Murphy, October 28, 2013, Domain Policy

ICANN CEO Fadi Chehade used his keynote address at the newdomains.org conference this morning to discuss his plans to divorce the organization from US governmental oversight.
With a split from the US recurring theme in his recent speeches, Chehade nevertheless warned that there were risks that such a move could create a dangerous governance vacuum.
“The current ICANN contract that gives the US government a unique role in the root management function is not sustainable,” he said. “It’s just not sustainable.”
That seems to be a reference to the IANA contract, in which the US has essentially a veto on ICANN’s decisions regarding root zone changes such as new gTLD delegations.
“I think we need to think together how we grow from that and how we globalize that contract,” he said. “But we need to be very careful about creating a vacuum or uninteded consequences that would destabilize the root of the internet.”
While Chehade noted that a split from the US has always been envisaged, he said that the revelations about US internet surveillance made by NSA defector Edward Snowden has provided a catalyst to speed it up.
When Brazilian president Dilma Rousseff recently called for a “multilateral” (read: inter-governmental, (read: ITU)) approach to internet governance, Chehade and an ICANN team traveled to Brazil to persuade her to instead focus on the creation of a “multistakeholder” model instead.
There’s now a “coalition” of the “I*” groups (ICANN, IETF, etc), big-name companies such as Disney, and governments such as Brazil, focused on creating multistakeholder solutions to problems — such as spam and cyber-bullying — that are not in ICANN’s purview Chehade said.
There’s a multistakeholder meeting planned for April or May next year (I’ve heard both dates), to be hosted by Brazil, that will look at internet governance post-Snowden.
This meeting is about “allowing ICANN to not expand its remit”, according to Chehade. He said: “We don’t want to expand our remit.”
What we seem to be looking at here is the creation for a new organization, of which ICANN could be a member, that will allow stakeholders to coordinate responses to tricky cross-border internet problems.
While ICANN seems to be taking the leading role in its creation, it doesn’t sound like ICANN is trying to get into issues beyond naming and addressing, judging by Chehade’s speech this morning
Chehade also talked up ICANN’s support for the domain name industry.
He admitted that ICANN has caused a lot of problems for new gTLD applicants over the course of the gTLD program, but promised that this will change, with ICANN taking a more “background” role.
“You need less risk and more stability from the ICANN side,” he said. “You have suffered for a long time from a lot of instability, a lot of unknowns.”
Increased automation, internationlization and professionalism from ICANN will serve this goal, he said.
ICANN’s compliance department, he added, should “not be the policeman for the industry but be customer service for the registrants”, he said.

First URS case decided with Facebook the victor

Kevin Murphy, October 25, 2013, Domain Policy

Facebook has become the first company to win a Uniform Rapid Suspension complaint.
The case, which dealt with the domain facebok.pw, took 37 days from start to finish.
This is what the suspended site now looks like:

The URS was designed for new gTLDs, but .PW Registry decided to adopt it too, to help it deal with some of the abuse it started to experience when it launched earlier this year.
Facebook was the first to file a complaint, on August 21. According to the decision, the case commenced about three weeks later, September 11, and was decided September 26.
I don’t know when the decision was published, but World Trademark Review appears to have been the first to spot it.
It was pretty much a slam-dunk, uncontroversial decision, as you might imagine given the domain. The standard is “clear and convincing evidence”, a heavier burden than UDRP.
The registrant did not respond to the complaint, but Facebook provided evidence showing he was a serial cybersquatter.
The decision was made by the National Arbitration Forum’s Darryl Wilson, who has over 100 UDRP cases under his belt. Here’s the meat of it:

IDENTICAL OR CONFUSINGLY SIMILAR
The only difference between the Domain Name, facebok.pw, and the Complainant’s FACEBOOK mark is the absence of one letter (“o”) in the Domain Name. In addition, it is well accepted that the top level domain is irrelevant in assessing identity or confusing similarity, thus the “.pw” is of no consequence here. The Examiner finds that the Domain Name is confusingly similar to Complainant’s FACEBOOK mark.
NO RIGHTS OR LEGITIMATE INTERESTS
To the best of the Complainant’s knowledge, the Respondent does not have any rights in the name FACEBOOK or “facebok” nor is the Respondent commonly known by either name. Complainant has not authorized Respondent’s use of its mark and has no affiliation with Respondent. The Domain Name points to a web page listing links for popular search topics which Respondent appears to use to generate click through fees for Respondent’s personal financial gain. Such use does not constitute a bona fide offering of goods or services and wrongfully misappropriates Complainant’s mark’s goodwill. The Examiner finds that the Respondent has established no rights or legitimate interests in the Domain Name.
BAD FAITH REGISTRATION AND USE
The Domain Name was registered and is being used in bad faith.
The Domain Name was registered on or about March 26, 2013, nine years after the Complainant’s FACEBOOK marks were first used and began gaining global notoriety.
The Examiner finds that the Respondent has engaged in a pattern of illegitimate domain name registrations (See Complainant’s exhibit URS Site Screenshot) whereby Respondent has either altered letters in, or added new letters to, well-known trademarks. Such behavior supports a conclusion of Respondent’s bad faith registration and use. Furthermore, the Complainant submits that the Respondent is using the Domain Name in order to attract for commercial gain Internet users to its parking website by creating a likelihood of confusion as to the source, sponsorship or affiliation of the website. The Examiner finds such behavior to further evidence Respondent’s bad faith registration and use.

The only remedy for URS is suspension of the domain. According to Whois, it still belongs to the respondent.
Read the decision in full here.

ICANN helps bust Russian child porn ring

Kevin Murphy, October 24, 2013, Domain Policy

ICANN recently helped break up a Russian child pornography ring.
That’s according to a remarkable anecdote from CEO Fadi Chehade, speaking during a session at the Internet Governance Forum in Bali, Indonesia today.
The “investigative effort” took “months” and seems to have entailed ICANN staff sifting through company records and liaising with law enforcement and domain name companies on three continents.
Here’s the anecdote in full:

We participated in a global effort to break down a child pornography ring.
You think: what is ICANN doing with a child pornography ring? Well, simple answer: where does child pornography get put up? On a web site. Where’s that web site hosted? Well, probably at some hosting company that was given the web site name by a registrar that is hopefully a registrar or reseller in the ICANN network.
We have a public responsibility to help with that.
We have some of the smartest people in the world in that space.
It took us months to nail the child pornography ring.
It took us through LA to Panama. We had to work with the attorney general of Panama to find the roots of that company. One of our team members who speaks Spanish went into public company records until he found, connected — these are investigative efforts that we do with law enforcement — then we brought in the registrars, the registries… and it turned out that this ring was actually in Russia and then we had to involve the Russian authorities.
ICANN does all of this work quietly, in the background, for the public interest.

Wow.
At first I wasn’t sure what to make of this. On the one hand: this obviously excellent news for abused kids and ICANN should be congratulated for whatever role it took in bringing the perpetrators to justice.
On the other hand: is it really ICANN’s job to take a leading role in covert criminal investigations? Why are ICANN staffers needed to trawl through Panamanian company records? Isn’t this what the police are for?
ICANN is, after all, a technical coordination body that repeatedly professes to not want to involve itself in “content” issues.
Session moderator Bertrand de La Chappelle, currently serving out his last month on the ICANN board of directors, addressed this apparent disconnect directly, asking Chehade to clarify that ICANN is not trying to expand its role.
In response, Chehade seemed to characterize ICANN as something of an ad hoc coordinator in these kinds of circumstances:

There are many topics that there is no home for them to be addressed, so ICANN gets the pressure. People come to us and say: “Well you solve this, aren’t you running the internet?”
We are not running the internet. We do names and numbers. We’re a technical community, that’s what we do.
But the pressure is mounting on us. So it’s part of our goal to address the larger issues that we’re not part of, is to frankly keep us focused on our remit. In fact, ICANN should become smaller, not bigger. It should focus on what it does. The only area we should get bigger in is involving more people so we can truly say we’re legitimate and inclusive.
The bigger issues and the other issues of content and how the internet is used and who does what, we should be very much in the background. If there is a legal issue, if we are approached legally by an edict of a court or… if it’s a process we have to respond to it.
We don’t want to be instigating or participating or leading… we don’t, we really don’t.

A desire to make ICANN smaller doesn’t seem to tally with the rapid expansion of its global footprint of hubs and branch offices and the planned doubling of its staff count.
Indeed, the very next person to speak on today’s panel was Chehade’s senior advisor and head of communications Sally Costerton, who talked about her team doubling in size this year.
I don’t personally subscribe to the idea that ICANN should be shrinking — too much is being asked of it, even if it does stick to its original remit — but I’m also not convinced that it’s the right place to be be carrying out criminal investigations. That’s what the cops are for.

US raises ITU bogeyman as Chehade pushes for exit

Kevin Murphy, October 22, 2013, Domain Policy

ICANN CEO Fadi Chehade and a US ambassador today both talked up the multistakeholder model as a cure to concerns about PRISM and related surveillance programs.
But the US warned against using the spying scandal to push internet governance into the hands of “centralized intergovernmental control”, which I’m taking to mean the International Telecommunications Union.
Chehade and Ambassador Danny Sepulveda, US coordinator for international communications and information policy, were speaking at the opening ceremony of the Internet Governance Forum in Bali, Indonesia.
Chehade went first, telling the audience that ICANN plans to set up legal structures in other countries in addition to the US, following on from the three-hub strategy he put in place earlier this year.
It’s part of his effort to internationalize ICANN, he said.
“While we are a California corporation today there is nothing that precludes us from being also, in addition to that, a legal organization in other places, and we intend to do that in order to make ICANN a more international organization,” he said.
He went on to say something that could be interpreted as his intention to get rid of or renegotiate the Affirmation of Commitments with the US government:

We also believe our commitment to the world should be indeed to the world and not to any particular stakeholder, and we will work towards that and change that.

Minutes later, Sepulveda took the stage to more or less agree with Chehade — at least at a high level — whilst simultaneously warning about too much governmental control over the internet.
He said:

The internet today is no more any one country’s than any others. It is no more any one stakeholder’s than any others.

We support an open dialogue on the modernization and evolution of the multistakeholder system that enables the operation of the global internet. Bottom-up, inclusive, cooperative efforts to empower users and enable innovation, free from arbitrary government control, is what the US has been pulling for all along.

He directly addressed the Montevideo declaration, which I wrote about earlier today, which he said was a call “to modernize the internet’s governing system and make it more inclusive”.
The declaration, he said, “should be seen as an opportunity to seek that broad inclusion and for organizing multistakeholder responses to outstanding internet issues”.
“We must work together with these organizations, in good faith, on these important issues,” he said.
“We should however guard against recent arguments for centralized intergovernmental control of the internet that have used recent news stories about intelligence programs for their justification,” he said.
This seems to be a reference to the ITU, the standard US bogeyman when it comes to control over ICANN.
Watch Chehade’s speech here, then fast forward to 1:25 to hear Sepulveda’s response.