Latest news of the domain name industry

Recent Posts

Virtual cocktails coming to ICANN meetings. Really.

Kevin Murphy, June 18, 2020, Domain Policy

Fancy a virtual coffee? How about a virtual cocktail? These are both real events coming to ICANN’s public meetings, which for the rest of the year are online-only due to coronavirus restrictions.

It’s part of an effort to better capture the sense of socializing and community-building found at normal, in-person ICANN meetings.

The schedule for ICANN 68, which kicks off on Monday, has just been updated to include several 30-minute “virtual coffee” sessions, which of course will be conducted over Zoom.

ICANN’s calling these “Fika” sessions.

It’s not an acronym, but rather a reference to the Swedish workplace tradition of taking a break to drink coffee, eat cake, and chat with colleagues. I’m guessing Swedish CEO Göran Marby had a hand in the naming.

Each Fika session comes with a number of sub-rooms, in which participants can discuss issues such as “Bingeworthy: My Favorite Shows and Movies During Quarantine” or “I’ve Got the Time Now: Quarantine DIY Projects”.

It’s all very sweet and cuddly.

There’s no confirmed “virtual cocktail” sessions (which strike me as an exceptional excuse for day-drinking, depending on your time zone) on the ICANN 68 schedule yet, but the idea has been floated as part of ICANN org’s plan for enhancing its virtual meetings.

This plan is part of a draft four-phase plan to eventually re-open physical meetings when it becomes safe and permitted.

In the current Phase 0, ICANN’s going to encourage greater use of remote video — by all participants, not just the ICANN hosts — and sponsorship opportunities in a virtual “exhibition hall”.

ICANN’s even thinking about arranging for the shipping of schwag bags filled with sponsor loot.

Phase 1 would see the return of in-person meetings, but only at the local or regional level, Phase 2 would see a return to in-person ICANN public meetings, but with a “hybrid” approach that would retain the current online components.

Phase 3 would be essentially a return to business as usual.

The decision to enter a new phase would be guided by issues such as pandemic status, government guidelines, venue safety, and so on.

There’s no chance of up-phasing public meetings this year. ICANN has already confirmed that ICANN 69, originally set for Hamburg, will also be online-only.

But it does seem that this year’s meetings will be slightly friendlier affairs.

Fortunately for female participants, haptic technology has not sufficiently advanced to accurately replicate the experience of being sexually harassed in a hotel bar by a bearded middle-aged man who stinks of virtual vodka.

1 Comment Tagged: , , ,

More dot-brands dump their gTLDs

A further three new gTLDs have applied to ICANN for self-termination over the last few months, bringing the total to 76.

They’re all dot-brands: .sbs, .rightathome and .symantec.

The most recent application came from the Australian broadcaster SBS, for Special Broadcasting Service. This seems to be a case of a brand owner briefly experimenting with redirects to its .au domain, then deciding against it.

.symantec is biting the dust because the security company Symantec recently rebranded as NortonLifeLock Inc.

.rightathome also appears to be a case of a discontinued brand, in this case formerly used by consumer products firm SC Johnson.

10 Comments Tagged: , , , , , ,

GoDaddy, PorkBun and Endurance win domain “blocking” court fight

Kevin Murphy, June 17, 2020, Domain Policy

Three large registrar groups last week emerged mostly victorious from a court battle in which a $5.4 billion-a-year consumer goods giant sought to get domains being used in huge scam operations permanently blocked.

Hindustan Unilever, known as HUL, named Endurance, GoDaddy and PorkBun in a lawsuit against unknown scammers who were using cybersquatted domains to rip off Indians who thought they were signing up to become official distributors.

The .in ccTLD registry, NIXI, was also named in the suit. All of the domains in question were .in names.

Among other things, HUL wanted the registrars to “suspend and ensure the continued suspension of and block access to” the fraudulent domains in question, but the judge had a problem with this.

He’d had the domain name lifecycle explained to him and he decided in a June 12 order (pdf) that it was not technically possible for a registrar to permanently suspend a domain, taking into account that the registration will one day expire.

He also defined “block access to” rather narrowly to mean the way ISPs block access to sites at the network level, once again letting the registrar off the hook.

Judge GS Patel of the Bombay High Court wrote:

Any domain name Registrar can always suspend a domain that is registered. But the entire process of registration itself is entirely automated and machine-driven. No domain name registrar can put any domain names on a black list or a block list.

Where he seems to have messed up is by ignoring the role of the registry, where it’s perfectly possible for a domain name to be permanently blocked.

NIXI may not have its hands directly on the technology, but .in’s EPP registry is run by back-end Neustar (now owned by GoDaddy but not directly named in the suit), which like all gTLD registries already has many thousands of names permanently reserved under ICANN’s direction.

Patel also seems to assume that NIXI doesn’t get paid for the domain names its registrar sells. He wrote:

The relief against Defendants Nos. 14 and 15, the dot-IN registry and NIEI [NIXI] at least to the extent of asking that they be ordered to de-register or block access is misdirected. Neither of these is a registrar. Neither of these receives registration consideration. Neither of these registers any domain name. The reliefs against them cannot therefore be granted.

NIXI actually charges INR 350 ($4.60) per second-level .in name per year, of which a reported $0.70 goes to Neustar.

The judge also ruled that the registrars have to hand over contact information for each of the cybersquatters.

He also ordered several banks, apparently used by the scammers, to hand over information in the hope of bringing the culprits to justice.

Comment Tagged: , , , , , , ,

You won’t need a password for ICANN 68 after all

Kevin Murphy, June 17, 2020, Domain Policy

ICANN has ditched plans to require all ICANN 68 participants to enter a password whenever they enter one of the Zoom sessions at the meeting next week.

The org said today that it will use URLs with embedded passwords, removing the need for user input, after reviewing changes Zoom made last month.

These included features such as a waiting room that enables meeting hosts to vet participants manually before allowing them to enter the meeting proper.

ICANN said: “Please use these links cautiously, only share them on secure channels such as encrypted chat or encrypted e-mail, and never post them publicly.”

ICANN had said last month, before the Zoom changes, that it would require passwords in order to limit the risk of Zoombombing — where trolls show up and spam the meeting with offensive content. One ICANN Zoom session had been trolled in this way in March.

The org also said today that participants will be asked to give their consent to be recorded upon entry to a session.

“It is our hope that this small change empowers attendees by providing quick access and more control over the acceptance of our policies as it relates to attending virtual meetings,” ICANN lied, to cover for the obvious piece of legal ass-covering.

Refuse consent and see how far you get.

Comment Tagged: , , , ,

Donuts rolls out free phishing attack protection for all registrants

Donuts is offering registrants of domains in its suite of new gTLDs free protection from homograph-based phishing attacks.

These are the attacks where a a bad guy registers a domain name visually similar or identical to an existing domain, with one or more characters replaced with an identical character in a different script.

An example would be xn--ggle-0nda.com, which can display in browser address bars as “gοοgle.com”, despite having two Cyrillic characters that look like the letter O.

These domains are then used in phishing attacks, with bad actors attempting to farm passwords from unsuspecting victims.

Under Donuts’ new service, called TrueNames, such homographs would be blocked at the registry level at point of sale at no extra cost.

Donuts said earlier this year that it intended to apply this technology to all current and future registrations across its 250-odd TLDs.

The company has been testing the system at its registrar, Name.com, and reckons the TrueNames branding in the shopping cart can lead to increased conversions and bigger sales of add-on services.

It now wants other registrars to sign up to the offering.

It’s not Donuts’ first foray into this space. Its trademark-protection service, Domain Protected Marks List, which has about 3,500 brands in it, has had homograph protection for a few years.

But now it appears it will be free for all customers, not just deep-pocketed defensive registrants.

Comment Tagged: , , , , , ,

.black gTLD has seen boost since George Floyd killing

Afilias’ little-known new gTLD .black has seen a noticeable increase in registrations in the last few weeks, as Black Lives Matter protests span the globe.

Between January 1 and May 25 this year, the day on which George Floyd was killed by Minneapolis police over a trivial offence, the gTLD’s zone file grew by 227 domains.

But in the 22 days since the killing, as BLM protests have spread across the US and elsewhere, it’s grown by 292 domains, currently standing at a modest 4,490.

Basically, it’s grown in three weeks by more than the previous five months combined.

The domain georgefloyd.black was registered May 27, after video of the incident shared on social media had attracted mainstream media attention, and is currently parked at GoDaddy.

Other .black domains registered since his death include accountable.black, lives.black, understanding.black, listen.black and itshardbeing.black.

Comment Tagged: , , ,

ICANN confirms Hamburg cancellation

Kevin Murphy, June 16, 2020, Domain Policy

With ICANN 68 due to start online next Monday, ICANN has confirmed that its annual general meeting in October is going to be online-only also.

ICANN 69 will now be held on Zoom, instead of at Hamburg’s new convention center, the organization confirmed on Friday.

It’s because of coronavirus, of course. ICANN’s taking the depressing yet realistic view that mass gatherings of international travelers will still be inadvisable and maybe even illegal four months hence.

It’s bad news for ICANN’s core staff in Los Angeles who, if ICANN sticks to the Hamburg time zone as it has with canceled meetings in Cancun and Kuala Lumpur, will start their working day at 0130 local time for a week straight.

It’s particularly bad news for me. I had a whole range of Ombudsman-enraging jokes lined up related to “sausage fests”, “69s”, etc.

Still, I suppose it could be wurst.

1 Comment Tagged: , , ,

Bored? Try the DI Fiendishly Difficult Domain Name Pub Quiz

Kevin Murphy, June 11, 2020, Gossip

One of the many trends to emerge since most of the world went into coronavirus lockdown is the emergence of the online pub-style quiz as a way to kill time while we wait for normality to resume or death to kick in.

This gave me a great idea: why not copy this idea?

While most of these quizzes are usually conducted over YouTube or some other streaming platform, I’ve long been told I have a face for radio and a voice for print, so you’re going to have to make do with text.

So, here I present the inaugural DI Fiendishly Difficult Domain Name Pub Quiz.

It’s split into rounds that should test the breadth and depth of your domain industry and ICANN knowledge to their fullest.

There are no prizes. It’s just a bit of fun.

Go ahead and test yourself, your boss isn’t looking!

The Trivia Round

  • Which two alcoholic beverages feature on Domain Name Journal’s list of the top 20 secondary-market cash sales of all time?
  • What’s the only one of ICANN’s five geographic regions not to have had one of its citizens elected chair of ICANN’s board of directors?
  • Which horror movie director publicly called GoDaddy founder Bob Parsons a “sick fuck” in 2011?
  • How many companies applied for the .web gTLD in 2012?
  • Over 170 domainers got a nasty bacterial infection during the DomainFEST conference in 2011. Which saucy place did they catch it? I’m looking for the location, not the body part.

The ccTLD Round

There are over 200 ccTLDs in active use today. How many can you match to the correct country, and vice versa?

First, name the countries or territories associated with the following five ccTLDs:

  • .aq
  • .tw
  • .bb
  • .bj
  • .lr

Now, name the ccTLDs for the following five countries or territories:

  • Myanmar
  • Macao
  • Mali
  • Morocco
  • Mauritania

The Acronym Round

These are all acronyms used in the domain name industry and ICANN community, but what do they stand for?

  • MX
  • EPDP
  • NPOC
  • LGR
  • SSAC

The Spot-the-gTLD Round

Some of these gTLDs are real, some are not. But which is which?

  • .jcrew
  • .blockbuster
  • .toysrus
  • .tjmaxx
  • .paylessshoesource

The Anagram Round

These five strings are all anagrams of well-known people or well-known companies in the domain/ICANN space. Solve the anagrams. If you follow DI on Twitter and have a long memory, these might be a little easier for you.

  • barman orgy
  • cretin clan
  • enema chap
  • boner storm
  • lewd anal manner

Bonus Round — Name That Beard

For a bonus point, whose beard is this?

Who's beard is this?

The Answers

There are 31 points on offer, and I’ll post the answers early next week. If you’re impatient, pretty much everything here is Googleable.

But remember, you’d only be cheating yourself!

If you enjoyed this, or like some bits but not others, let me know in the comments on via other channels. If there’s sufficient positive feedback, I may make this a regular feature.

1 Comment Tagged:

Three big registries will take down opioid domains for US govt

Verisign, Public Interest Registry and Neustar (now part of GoDaddy) will suspend domain names being used to illegally sell opioids under a pilot scheme with the US government.

The Food and Drug Administration announced this week that this new “trusted notifier” program will go into effect for 120 days.

When the FDA finds a site suspected of selling opioids illegally, it will notify the registry as well as the web site’s owner and hosting provider.

The registries will then be able to decide whether to suspend the domain or not. It’s voluntary.

The National Telecommunications and Information Administration will also take part in the project.

Verisign runs .com and .net, PIR runs .org and Neustar runs .us, .co and .biz.

Opioids are legal, pharmaceutical pain-killers derived from opium. They’re ridiculously addictive and account for as many drug overdose deaths in the US as heroin, but are over-prescribed by US doctors.

It’s not the first time registries have agreed to trusted notifier programs. Some new gTLD registries have deals with the movie and music industries to suspend domains involved in copyright infringement.

The announcement comes just a few weeks after ICANN rejected a deal that would have seen PIR create a community oversight body with responsibilities to monitor domain-suspension policies in .org.

Comment Tagged: , , , , , , ,

Should Epik be banned from NamesCon as racism debate spills over into domain industry?

Should GoDaddy-owned domain conference NamesCon ban the controversial registrar Epik from its conferences, after a day in which the domaining fraternity descended into a race row?

The fight kicked off last night when Epik director and noted domain investor Braden Pollock announced he was quitting the board over ideological differences with CEO Rob Monster.

Pollock did not explain his exact reasons for quitting, but the assumption among domainers on Twitter and elsewhere, perhaps due to heightened race awareness during the ongoing Black Lives Matter protests, was that it was race-related.

Pollock’s wife is the civil rights attorney Lisa Bloom, who is currently representing victims of police violence during the BLM protests.

Monster is a conspiracy theorist and Bible-bashing Christian who has been accused over the years of racism, antisemitism, and worse.

Even if Monster is not a racist (and plenty of his associates, even his critics, believe he is not), Epik is certainly friendly to racist registrants.

It caused controversy in March last year by publicly offering to host gab.com, the Twitter clone most often used by right-wing refugees escaping Twitter’s ban hammer.

It also took the domain business of 8chan, a forum site frequented by racists, though it refused to actually host the site.

The registrar is also very popular with domainers, due to its low price and domainer-friendly services.

Before long, Pollock’s tweet had spawned a thread of domainers expressing support for either Pollock or Monster, as well as casually throwing accusations of racism at each other.

Pretty much the same thing was going on over on NamePros and Facebook.

Epik all but confirmed that race was at the center of the disagreement by tweeting out the names of a couple dozen employees, whom I can only assume are not white, with the hashtag #diversity.

Monster himself posted a short video in which he appeared to denounce racism.

Later today, Epik posted a screenshot of a Facebook comment by NamesCon CEO Soeren von Varchmin, in which he suggested Epik had been banned from the conference, which the company has previously sponsored.

The tweet tagged both GoDaddy and the US Federal Trade Commission.

While the von Varchmin comment is genuine, I’m told that he was speaking in a personal capacity and it’s not current GoDaddy policy to ban Epik.

But should it?

24 Comments Tagged: , , , ,