Bling-maker kills off fifth dot-brand gTLD

Richemont, the company behind brands such as Cartier jewelry and Mont Blanc pens, has terminated its fifth dot-brand gTLD.
It filed with ICANN to terminate its registry contract for .iwc earlier this month.
IWC is a Swiss brand of expensive watches, but its dot-brand has never been used to any notable extent.
The company had registered the domain watches.iwc, which it apparently planned to use for URL redirection via Rebrandly.
It’s the third gTLD Richemont has voluntarily terminated, after .montblanc and .chloe last year.
The company also withdrew its unopposed applications for .netaporter and .mrporter back in 2014, before it actually signed contracts with ICANN.
Richemont was one of the more prolific dot-brand applicants, applying for 14 gTLDs in total back in 2012.
It also applied for (defensively?) and won the generic .watches and some translations.
While the .watches gTLD has been live in the DNS for two and a half years, Richemont has not yet set a launch date and has not yet said who will even be eligible to buy domains there.

Comment Tagged: .iwc, .watches, dot-brands, ICANN, richemont, termination

Now GNSO mulls emergency response to GDPR deadline

ICANN’s GNSO Council is thinking about deploying a never-before-used emergency mechanism to develop a Whois privacy policy in response to GDPR.
With the May 25 deadline for compliance with the EU’s General Data Protection Regulation fast approaching, the community is scrambling to figure out how it can bring ICANN’s policies and therefore its contracts into line with the Draconian privacy provisions of the new law.
Currently, ICANN contracts with registries and registrars demand the publication of full Whois records, something GDPR will not permit, so each company in the industry is busily figuring out how its own Whois database will comply.
Fearful of a “fragmented” Whois, ICANN’s board of directors is considering deploying its own top-down emergency measure — called a Temporary Policy in its contracts — to ensure uniformity across its contracts.
CEO Goran Marby revealed to DI earlier this month that a Temporary Policy was being considered, and he and other members of the board confirmed as much to GNSO leadership during a telephone briefing last week.
(It should be noted that the call took place prior to the receipt last week of guidance from the EU Article 29 Working Party, which prompted ICANN to start mulling legal options as one way to buy the industry some time to comply post-May.)
The call (recorded here with password Eur3wiEK and summarized in this letter (pdf)), focused almost exclusively on how the Council could respond to a board-mandated Temporary Policy, with the board suggesting a GNSO Expedited Policy Development Process might be the best way to proceed.
A Temporary Policy would expire within a year, so the GNSO would have to come up with a formal Consensus Policy within that time-frame if ICANN were to have any hope of having a uniform view of Whois across its contracts.
The Temporary Policy is a “strong option” for the board, and a “highly likely or likely” outcome, but nothing has been formally decided, the GNSO leaders heard from ICANN vice-chair Chris Disspain. He was briefly challenged by Marby, who appeared somewhat more committed to the move.
While the GNSO Council has not yet formally decided to deploy the EPDP, it appears to be the most-feasible option to meet the deadline a Temporary Policy would impose.
It is estimated that an EPDP could take as little as 360 days, compared to the estimated 849 days of a regular PDP.
The EPDP cuts out several of the initial steps of a regular PDP — mainly the need for an Initial Report and associated public comment period — which by my reading would shorten the process by at least 100 days.
It also seems to give the GNSO some wriggle room in how the actual policy creation takes place. It appears that the regular “working group” structure could be replaced, for example, with a “drafting team”.
If the EPDP has the Temporary Policy and WP29 guidance as its baseline for discussions, that could also help cut out some of the circular argument that usually characterizes Whois discussions.
Aware that the EPDP is a strong possibility, the Council is currently planning to give itself a crash course in the process, which has never been used before by any iteration of the Council.
It’s uncharted territory for both the GNSO and the ICANN board, and the only people who seem to have a firm grasp on how the two emergency mechanisms slot together are the ICANN staffers who are paid to know such things.
UPDATE: A couple of hours after this article was published, ICANN posted this three-page flow-chart (pdf) comparing EPDP to PDP. Lots of luck.

Comment Tagged: epdp, gdpr, gnso, ICANN, privacy, temporary policies, whois, wp29

auDA refers former directors to police

Imploding Australian ccTLD registry auDA has ratted out “several” of its former directors to the local cops, it was revealed this week.
In a message to its community to mark Chris Leptos’ 150th day as chair of the organization, he wrote:

I am disappointed to advise you that in my first week as Independent Chair I was briefed on a number of practices of several former auDA directors. Your Board concluded that those practices warranted referral to the Victoria Police. As you would appreciate, it is not appropriate at this stage to provide further details regarding this matter.

I’m told there are 48 former auDA directors, and auDA has not said which of them have been referred to the police.
Josh Rowe, a former director who’s orchestrating a campaign to oust Leptos, auDA CEO Cameron Boardman, and two other directors, called the move a “heinous act of bullying against all 48 ex auDA directors”.
Another former director, the Aussie domain industry blogger David Goldstein, has suggested that the timing of the revelation was designed to “silence” critics including Rowe.
The Grumpier.com.au petition organized by Rowe and others has forced auDA to hold a members meeting at which the four directors’ future employment will be voted on.
auDA lawyers contacted Grumpier earlier this week to warn that any defamatory or confidential information posted on the site could lead to litigation.
But Leptos has now seemingly confirmed that the special members meeting will in fact go ahead.
Goldstein also suggested that the police referrals are related to insinuations contained within a pair of Freedom of Information Act requests filed late last year by domain consultant Ron Andruff.
In one of Andruff’s FOIA requests, he suggests that auDA may have paid legal fees of up to AUD 120,000 incurred by Rowe when he was sued almost a decade ago by a alleged domain slammer he had regularly criticized.
Rowe has called these inferences “grossly inaccurate” and “defamatory”.
In the other, which we have reported on previously, Andruff has asked for records of expenses incurred by former auDA CEO Chris Disspain, current vice-chair of ICANN.
Both FOIA requests have been denied by the Aussie government and subsequently appealed by Andruff.
Andruff is known to have beef with Disspain after he was passed over for a prominent ICANN volunteer role.
I should note for the record that, for all of the allegations swirling around, I have not seen any evidence directly connecting any individual to any wrongdoing.

Comment Tagged: .au, auda, foia, grumpier.com.au, ICANN

CoCCA to charge trademark owners for Whois access

CoCCA has become the first domain registry to publicly announce that it will charge trademark owners for access to Whois records.
The company said it plans to release an updated version of its software and registry service, containing a range of features for ensuring General Data Protection Regulation compliance, on April 20.
The public Whois records of affected TLDs will have the name, email, phone and physical address of the registrant omitted, but only if the registrant is an EU resident or uses an EU-based registrar or reseller.
There will be ways to opt-out of this, for registrants who want their information public.
The changes will come into effect first at .af, .cx, .gs, .gy, .ht, .hn, .ki, .kn, .sb, .tl, .kn, .ms and .nf, CoCCA said.
But the registry runs almost 40 gTLDs on its shared infrastructure and has almost 20 more running its software. They’re all pretty small zones, mostly ccTLDs.
CoCCA said that it will give access to private data to law enforcement and members of the Secure Domain Foundation, a DNS reputation service provider.
But trademark owners will get hit in the wallet if they want the same privileges. CoCCA said:

intellectual property owners or other entities who have a legitimate interest in redacted data will be able to order historical abstracts online for a nominal fee (provided they sign an attestation).

While the affected TLDs are probably small enough that the IP lobby won’t be overly concerned today, if CoCCA’s policy becomes more widespread in the industry — which it well could — expect an outcry.

4 Comments Tagged: cocca, gdpr, ICANN, privacy, trademarks, whois

Panic stations as Europe plays hardball on Whois privacy

Hopes that Whois records will continue to be available to broad sections of the internet community appeared dashed this week as European data protection heads ripped holes in ICANN’s plan for the industry to comply with the General Data Protection Regulation.
ICANN CEO Goran Marby warned that Whois faces imminent fragmentation and expressed disappointment that authorities have basically ignored his repeated requests for a moratorium on GDPR enforcement.
The Article 29 Working Party, made up of the heads of data protection authorities of EU member states, told ICANN this week that its so-called “Cookbook” compliance plan is nowhere near detailed enough.
In a letter (pdf), it also strongly hinted that intellectual property interests have little hope of retaining access to Whois contact information after GDPR comes into effect next month.
Any notion that WP29 might tell ICANN that the Cookbook was an over-reaction to GDPR, eschewing too many data elements from public records, was firmly put to bed.
Instead, the group explicitly supported ICANN’s plan to replace email addresses in the public Whois with anonymized addresses or a web-based registrant contact form.
It said it “welcomes the proposal to significantly reduce the types of personal data that shall be made publically [sic] available, as well as its proposal [to] introduce alternative methods to contact registrants”.
It also approved of the plan for a “layered” access plan, under which some entities — law enforcement in particular — would be able to access private contact information under an accreditation program.
But WP29 pooh-poohed the idea, put forward by some in the trademark community, that access to Whois could be restricted merely with the use of an IP address white-list.
It warned that the purposes for such access should be explicitly defined and said that what can be accessed should be tightly controlled.
WP29 does not appear to be a fan of anyone, even accredited users, getting bulk access to private Whois data.
While the group endorsed the idea that law enforcement agencies should be able to access Whois, it failed to provide similar comfort to IP interests, security researchers and other groups with self-declared “legitimate interests” in the data.
In what I’m reading as a veiled attack on the IP lobby, the WP29 letter says:

ICANN should take care in defining purposes in a manner which corresponds to its own organisational mission and mandate, which is to coordinate the stable operation of the Internet’s unique identifier systems. Purposes pursued by other interested third parties should not determine the purposes pursued by ICANN. The WP29 cautions ICANN not to conflate its own purposes with the interests of third parties, nor with the lawful grounds of processing which may be applicable in a particular case.

While it would be fairly easy to argue that giving access to security researchers contributes to “stable operation of the Internet’s unique identifier systems”, I think it would be considerably harder to argue that giving trademark owners an easy way to pursue suspected cybersquatters does the same.
In short, the letter clarifies that, rather than complying too much, ICANN has not gone far enough.
WP29 also roundly ignored ICANN’s request for an enforcement moratorium to give the community enough time to come up with a compliance policy and the industry enough time to implement it, irking ICANN into threatening legal action.
Marby said in a blog post yesterday:

Without a moratorium on enforcement, WHOIS will become fragmented and we must take steps to mitigate this issue. As such, we are studying all available remedies, including legal action in Europe to clarify our ability to continue to properly coordinate this important global information resource. We will provide more information in the coming days.

He said that the WP29 statement puts ICANN at odds with the consensus advice of its Governmental Advisory Committee — which, it should be noted, includes the European Commission and most of the EU member states.
The GAC has told ICANN to “Ensure that the proposed interim model maintains current WHOIS requirements to the fullest extent possible” and to reconsider its plan to remove registrant email addresses from public records.
That’s how stupid the situation has become — the same governments telling ICANN to retain email addresses is also telling it to remove them.
Outside of Europe, the United States government has been explicit that it wants Whois access to remain available.
Marby said that an ICANN delegation will attend a meeting of the WP29 Technology Subgroup in Brussels on April 23 to further discuss the outstanding issues.
In a quick response (pdf) to the WP29 letter, he warned that a fragmented Whois and the absence of a moratorium could spell doom for the smooth functioning of the internet.

We strongly believe that if WHOIS is fragmented, it will have a detrimental impact on the entire Internet. A key function of WHOIS allows those participating in the domain name system and in other aspects of work on the Internet to know who else is working within that system. Those working on the Internet require the information contained within WHOIS to be able to communicate with others working within that system.

Reaction from elsewhere in the community has so far comprised variations of “told you so” and hand-wringing about the impact after May 25.
Michele Neylon, head of the registrar Blacknight, blogged that the letter signaled “game over” for the public Whois.
“Come the end of May, public whois as we know it will be dead,” he wrote.
Academic Farzaneh Badii, executive director of the Internet Governance Project and a leading figure in ICANN’s non-commercial users community, blamed several factors for the current 11th-hour predicament, but mainly the fact that her constituency’s lobbying was ignored for so long.
“The Noncommercial Stakeholders Group was the broken record that everyone perceived as not worth paying attention to. But GDPR got real and ICANN has to deal with it,” she wrote.
Matt Serlin of the IP-centric registrar Brandsight, wrote that the letter was “predictable” and said:

The WHOIS system, as it has been known for two decades, will cease to exist. Unfettered access to registration information for gTLDs is simply not going to be possible going forward after May 25th. Yes, there are still questions as to what the final model ICANN puts forth will be, but it will certainly drastically change how WHOIS will function.

Serlin held out some hope that the unspecified legal action Marby has floated may go some way to extend the May 25 GDPR enforcement date.
The community awaits Marby’s next update with bated breath.

6 Comments Tagged: .eu, article 29 working party, gdpr, ICANN, privacy, whois, wp29

101domain founder Wolfgang Reile dies at 67

Wolfgang Reile, founder and former CEO of the registrar 101domain, has died, according to his former business partner and other sources.
He died unexpectedly at 67, April 6, according to Anthony Beltran, who took over the management of 101domain from Reile when Afilias acquired it back in 2015.
Born in Munich, Reile migrated to the US in the early 1990s and founded the registrar in 1999, Beltran said. He told DI:

He was a regular fixture in the ICANN scene, was a fun guy to be around, and was a natural storyteller (once you got used to the authentic German accent)
He was a friend and mentor to many, especially the staff at 101domain, and if you knew him and his straight-forward German fashion — was very opinionated, passionate, and yelling at you only meant he considered you a friend. He brought a passionate and dedicated energy that’s rare these days.

His international business background, including a spell at Disney in Asia, inspired 101domain’s strategy of providing access to the broadest possible range of ccTLDs and gTLDs, Beltran said.
The company currently has close to 140,000 gTLD domains under management and says it has tens of thousands of clients.
After the two men sold 101domain to Afilias, Reile stepped away from the industry to focus on family, travel and other businesses, Beltran said.
He is survived by his wife and three daughters. I gather his funeral will be held in San Diego, California, later today.

5 Comments Tagged: 101domain, afilias, wolfgang reile

ICANN confirms GoDaddy Whois probe

ICANN is looking into claims that GoDaddy is in breach of its registrar accreditation contract.
The organization last week told IP lawyer Brian Winterfeldt that his complaint about the market-leading registrar throttling and censoring Whois queries over port 43 is being looked at by its compliance department.
The brief note (pdf) says that Compliance is “in receipt of the correspondence and will address it under its process”.
Winterfeldt is annoyed that GoDaddy has starting removing contact information from its port 43 Whois responses, in what the company says is an anti-spam measure.
It’s also started throttling port 43 queries, causing no end of problems at companies such as DomainTools.
Winterfeldt wrote last month “nothing in their contract permits GoDaddy to mask data elements, and evidence of illegality must be obtained before GoDaddy is permitted to throttle or deny port 43 Whois access to any particular IP address”.
It’s worth saying that ICANN is not giving any formal credibility to the complaint merely by looking into it.
But while it’s usual for ICANN to publish its responses to correspondence it has received and published, it’s rather less common for it to disclose the existence of a compliance investigation before it has progressed to a formal breach notice.
It could all turn out to be moot anyway, given the damage GDPR is likely to do to Whois across the industry in a matter of weeks.

10 Comments Tagged: compliance, godaddy, ICANN, port 43, raa, throttling, whois, winterfeldt

Grumpier Aussies call for more blood on the auDA boardroom floor

A group of pissed-off members of the Australian domain name industry are calling for the heads of auDA’s CEO, its new chair, and two other members of its board.
A triumvirate of long-time participants in the auDA community say they have secured enough signatures on a petition to force the organization to call the meeting under Aussie law.
They want a vote of no confidence in the CEO, Cameron Boardman, and the firing of all three “independent” directors: Chris Leptos (also chair), Sandra Hook and Suzanne Ewart.
Their list of beefs is long, but high on it is auDA’s plan to open up .au to direct, second-level registrations for the first time, enabling folk to register example.au instead of example.com.au.
If this all sounds worryingly familiar, it’s because it’s the second year in a row members have called a special meeting in order to oust its top brass.
A campaign orchestrated at Grumpy.com.au last year resulted in chair Stuart Benjamin quitting ahead of a member vote to fire him.
This year’s campaign is being coordinated, with a nod and a wink but none of Grumpy’s original leaders, at Grumpier.com.au.
Entrepreneur Josh Rowe appears to have held the pen on the petition, backed up by former head of auDA public affairs Paul Szyndler and businessman Jim Stewart.
As well as the direct registration issue, which the three men think is merely a cash-grab with no benefits for registrants, the petitioners have some harsh things to say about auDA’s governance and transparency.
The organization has promised to be more open in the wake of last year’s carnage, but Grumpier thinks “things have only got worse”.
The petition also alludes to rumors of “whispering campaigns” against former staff and “possible financial irregularities”.
Rowe recently complained on his blog about a freedom of information request related to his own conduct, filed by the same person pursing form auDA CEO (and current ICANN vice chair) Chris Disspain with FOIA requests.
They also unhappy that auDA is switching .au’s registry service provider from Neustar to Afilias, gaining a rumored 60% discount of which only 10% will be passed on to registrars.
It’s all getting rather nasty, and I’ve not even mentioned some of the rumors of shenanigans that I seem to find in my inbox on an almost daily basis.
To force a special member meeting under Australian law, Grumpier says it had to secure signatures of 5% of the members, which it says it has done.
That’s not much of a threshold, given that auDA only has about 320 members at the moment.
Assuming auDA agrees that it has to hold a meeting, it has a couple of months to do so.

Comment Tagged: .au, auda, direct, grumpier.com.au, grumpy.com.au, second-level

Afilias scraps plan to scrap Whois

Afilias has “temporarily suspended” its plan to migrate its TLDs to an essentially thin Whois model.
In what appears to be an effort to roll back some GDPR-related gun-jumping, the registry said it will instead wait and see how ICANN’s efforts to consult with European data protection authorities play out.
Afilias had told its registrars earlier this week that its public Whois output from May 25 will be devoid of any contact information for the registrant, as reported by DNW.
It had said that it would continue to work with law enforcement on access to Whois records, but said that others (such as trademark owners) would not have access until ICANN comes up with an accreditation program.
It was the first major gTLD registry to announce its GDPR plans, but it evidently received push-back.
The affected TLDs were to be: .info, .mobi, .pro, .poker, .pink, .black, .red, .blue, .kim, .shiksha, .promo, .lgbt, .ski, .bio, .green, .lotto, .pet, .bet, .vote, .voto, .archi, .organic and .llc.
Many more client gTLDs would have been able to opt-in to the same scaled-back system.
But the company told registrars today that it wanted to correct “mis-characterizations” of that message and wanted to “clarify that Afilias is not ‘going it alone'”.
Rather, it’s going to hang back until ICANN gets guidance from the EU’s DPAs.
“Importantly, we expect that ICANN’s request for guidance from the data protection authorities will yield helpful input that, in conjunction with the best thinking of the community, will enable a workable solution to emerge,” the Afilias message said.
The company said in a statement sent to DI tonight:

Afilias today announced that it is temporarily suspending plans to limit the display of WHOIS data to comply with the EU General Data Protection Regulation (GDPR) currently scheduled to take effect on 25MAY2018. Afilias has received a number of questions about its plans, and anticipates that they may be affected by guidance from data protection authorities that has been requested by ICANN. This guidance is expected to be materially helpful in the community’s efforts to resolve the various issues surrounding GDPR requirements.
Afilias is participating in a number of community groups that are considering these issues, including as a principal in ICANN’s pilot implementation of the Registration Data Access Protocol (RDAP), a potential technical solution for enabling differentiated access to registration data depending on the legitimate purpose of the requestor. For example, law enforcement may need access to certain types of Personally Identifiable Information (PII), trademark guardians to other types, etc. RDAP enables the management of this access in an efficient and effective manner.
As the deadline for GDPR implementation approaches, the community is working diligently in a number of areas to find solutions needed to balance a wide range of community interests. Afilias will continue working collaboratively within these groups in the expectation that appropriate solutions will be reached prior to the GDPR implementation date. Absent guidance from the data protection authorities, Afilias will reconsider its plans as appropriate to ensure compliance with GDPR.

It’s still very possible that Afilias, and other gTLD registries and registrars, could end up gutting Whois in much the same way come May 25 anyway, but for now at least it seems Afilias it willing to play wait-and-see.
As a reminder, there’s going to be an ICANN-supported conference call tomorrow on an Intellectual Property Constituency proposal for a post-GDPR Whois accreditation model.

1 Comment Tagged: afilias, gdpr, ICANN, privacy, whois

auDA role “could have killed me” says resigning domainer

Domainer and activist blogger Ned O’Meara has resigned from the auDA board of directors, about four months after being elected.
He said in an apologetic blog post that the “negative stress” caused by being on the .au registry’s board had sent his blood pressure up, making him worry about having a third heart attack.
“[I]f I continued slugging it out at auDA, I believe it could have killed me,” he wrote.
He went on to say that he expected to be sidelined on key votes such as auDA’s decision to sell domains directly at the second level, due to perceived “conflicts of interest”, which he disputed.
O’Meara was elected in November as a “demand-class” member of the board, after using his blog to spearhead a campaign for greater transparency at the organization.
It sounds to me like he’s made the correct decision in stepping aside. No matter how important you believe a domain policy to be, it’s not worth your health. I wish him well.
auDA said it is now looking for two demand-class directors, to fill O’Meara’s vacant seat and another seat that is opening up due to the end of another director’s term.

2 Comments Tagged: .au, auda