ICANN shuffles regional bosses, drops “hub” concept

ICANN has made a couple of changes to its senior management team and abandoned the Chehade-era concept of “hub” offices.
Rather than having three offices it calls “hubs” in different parts of the world — Los Angeles, Istanbul and Singapore — it will now have five of what it calls “regional offices”.
As well as the three former hubs, one will be in Brussels, Belgium and the other in Montevideo, Uruguay.
A few vice presidents are being shuffled around to head up each of these offices.
Senior policy VP David Olive is being replaced as managing director of the Istanbul office by Nick Tomasso, who’s also VP in charge of ICANN’s public meetings. Olive will carry on in his VP role, but back in Washington DC, from August.
Fellow policy VP and veteran GAC relations guy Olof Nordling is retiring from ICANN at the end of the July. His role as MD of the Brussels office will be filled by Jean-Jacques Sahel, VP of stakeholder engagement for Europe.
Rodrigo de la Parra, VP of stakeholder engagement for the Latin America region, will be MD of the Montevideo office. Jia-Rong Low runs the Singapore office. ICANN CEO Goran Marby of course is top dog in LA.
The difference in nomenclature — “hub” versus “regional office” — looks to me like it’s quite minor.
Former CEO Fadi Chehade had early on in his stint at ICANN professed a desire to pursue a strategy of aggressive internationalization, with hub offices having equal importance, but I don’t think the idea ever really took off to the extent he expected and he didn’t stick around long enough to see it through.
In addition, the IANA transition last year, which separated ICANN from its US government oversight, pretty much carved ICANN’s California roots into stone for the time being.

Comment Tagged: ICANN

.net price increases approved

Verisign has been given the right to continue to raise the wholesale price of .net domains.
It now seems likely the price charged to registrars will top $15 by 2023.
ICANN’s board of directors at the weekend approved the renewal of the .net Registry Agreement, which gives Verisign the right increase its prices by 10% per year for the six years of the contract.
Assuming the company exercises all six options — and there’s no reason to assume it will not — the price of a .net would be $15.27 by the time the contract expires, $0.75 of which would be paid to ICANN in fees.
There was some negative public comment (pdf) about the increases, largely from domainers and those representing domainers, but the ICANN board saw nothing to persuade it to change the terms of the contract.
In notes appended to its resolution, the board stated:

the Board understands that the current price cap provisions in Verisign’s Registry Agreements, including in the .NET Registry Agreement, evolved historically to address various market factors in cooperation with constituencies beyond ICANN including the Department of Commerce. During the negotiations for the renewal, Verisign did not request to alter the pricing cap provisions, the parties did not negotiate these provisions and the provisions remain changed from the previous agreement. The historical 10% price cap was arguably included to allow the Registry Operator to increase prices to account for inflation and increased costs/investments and to take into account other market forces but were not dictated solely by ICANN.

(I assume the word “changed” in that quote should have read “unchanged”.)
Unlike contract renewals for other pre-2012 gTLDs, the .net contract does not include any of the new gTLD program’s rights protection mechanisms, such as the Uniform Rapid Suspension policy.
ICANN explained this disparity by saying these mechanisms are not consensus policies and that it has no right to impose them on legacy gTLD registry operators.

1 Comment Tagged: .net, ICANN, pricing, verisign

India to have SIXTEEN ccTLDs

While most countries are content to operate using a single ccTLD, India is to up its count to an unprecedented 16.
It already has eight, but ICANN’s board of directors at the weekend approved the delegation of an additional eight.
The new ccTLDs, which have yet to hit the root, are .ಭಾರತ, .ഭാരതം, .ভাৰত, .ଭାରତ, .بارت, .भारतम्, .भारोत, and .ڀارت.
If Google Translate and Wikipedia can be trusted, these words all mean “India” in, respectively, Kannada, Malayalam, Bengali, Odia, Arabic, Nepali, Hindi and Sindhi.
They were all approved under ICANN’s IDN ccTLD Fast Track program and will not operate under ICANN contract.
India already has seven internationalized domain name versions of its ccTLD in seven other scripts, along with its vanilla ASCII .in.
National Internet Exchange of India (NIXI) will be ccTLD manager for the whole lot.
India may have as many as 122 languages, according to Wikipedia, with 30 spoken by more than a million people.

6 Comments Tagged: .بارت, .ڀارت, .भारतम्, .भारोत, .ভাৰত, .ଭାରତ, .ಭಾರತ, .ഭാരതം, cctlds, ICANN, idns, nixi

ICANN heading to Japan and Canada in 2019

ICANN has named two of the host cities for its 2019 public meetings.
The community will descend upon Kobe, Japan in March 2019 for the first meeting of the year and will head to Montreal, Canada, for the annual general meeting in November.
Both locations were approved by the ICANN board of directors at a meeting this weekend.
The location of the middle “policy forum” meeting for 2019 has not yet been identified.
ICANN is currently meeting in Johannesburg, South Africa. Later this year it will convene in Abu Dhabi, UAE.
Spanish speakers can rejoice next year, when the locations, in order, are Barcelona, Panama City and San Juan (the Puerto Rican one).

Comment Tagged: ICANN, icann 59, johannesburg, kobe, montreal

Uniregistry sale leads to BBC telling millions that domainers exist

The BBC dedicated five minutes of prime-time air to telling the British public that domainers exist, after a Uniregistry domain name sale led to interest from producers.
The One Show appears on BBC One at 7pm five days a week. It’s the BBC’s flagship magazine program and appears to currently have about 3.5 million viewers per day.
It’s notorious for its hosts’ often jarring segues between sycophantic interviews with visiting celebrities and prerecorded human interest stories covering everything from people who collect doylies to people who are dying from AIDS.
In Friday’s episode — guest-hosted by Jerry Springer, no less — the first VT of the show is about domainers.
Regular host Alex Jones points out that while Springer and guest Rita Ora own their matching .com domains, fellow guest Tracey Ullman’s .com name is on the market for $795 (it’s registered to HugeDomains, but that isn’t mentioned).
Ullman laughs, and the UDRP-fodder is never mentioned again.
Cut to VT.
The roving reporter, whose name is not given, tells us that there are 335 million domains on the internet today, anyone can come up with one, and that “there are other people out there known as ‘domain dealers’ who buy these domains and sell them on for hundreds, thousands, or even millions of pounds”.
Brit domainer Graham Haynes is then introduced as “one of the first people to buy and sell domains”. He says he sold a portfolio of domains for £1.5 million ($1.91 million at today’s exchange rate) and spent $600,000 on furniture.co.uk.
Haynes says domains are always going up in value so he always tries to hold on as long as he can before he sells.
Then we get a few seconds over Skype with Aron Meystedt, who bought first-ever .com Symbolics.com eight years ago and says the name as been a “good cornerstone” of his portfolio. He uses the word “domainer” for the first time.
Then our reporter says she wants to find out whether she has what it takes to be a domainer.
We’re introduced to 25-year-old domainer Simon Whipps, who says he buys domains for £10 to £20 and sells them to end users for about £1,000.
The reporter hands him a list of domains she’s come up with and gives him half an hour to tell her whether they’re worth anything or not.
Then we’re off to the Cayman Islands, where a Londoner identified only as “Mo” lives. It’s presented as if he’s living the high life on a beach having made a killing from domains.
I believe he’s Mohammed Khan, a broker from Uniregistry. He says he helped broker personalloans.com ($1 million) and kiwi.com ($800,000).
Then it’s into the Uniregistry office, where a VP identified (mistakenly, it turns out) as “Alan Schwartz” mentions that he helped broker the $13 million sale of sex.com.
Back to Whipps, who tells the reporter than the only two domains on her list worth a damn are christmas.net and adventure.net. Given she owns neither, it’s not clear how she came up with these picks.
All in all, it’s a strange, thin, directionless fluff piece with nothing to say about domaining other than the fact that it exists. It could have been produced at basically any time in the last 15 years with barely any changes.
According to Uniregistry CEO Frank Schilling, the item came about as a result of interest from producers after Uniregistry made an aftermarket sale to somebody involved in the show.
It’s not clear who the buyer was or what the domain was, but apparently the kernel of the idea of the piece came about “organically” as a result of the deal.

10 Comments Tagged: the one show, uniregistry

Cybersquatting cases down in .uk

The number of cybersquatting complaints filed against .uk domains fell in 2016, according to data out this week from Nominet.
The .uk registry said that there were 703 complaints filed with its Dispute Resolution Service in the year, down from 728 in 2015.
However, the number of individual domains complained about appears to have increased, from 745 to 785. That’s partly due to registrants owning both .co.uk and .uk versions of the same name.
The number of cases that resulted in domains being transferred was 53%, the same as 2015, Nominet said.
The large majority of cases were filed by UK-based entities against UK-based registrants, the stats show.

Comment Tagged: .uk, cybersquatting, drs, nominet

As .boots self-terminates, ICANN will not redelegate it

The dot-brand .boots may become the first single-dictionary-word gTLD to be taken off the market, as The Boots Company told ICANN it no longer wishes to be a registry.
Boots, the 168-year-old British pharmacy chain, told ICANN in April that it is unilaterally terminating its Registry Agreement for .boots and ICANN opened it up for comment this week.
As with the 22 self-terminating dot-brands before it, .boots was unloved and unused, with just the solitary, ICANN-mandated nic.boots in its zone file.
Boots, as well as being a universally known brand name in the UK and Ireland, is of course a generic dictionary word representing an unrelated class of goods (ie footwear).
It’s the first dying dot-brand to have this kind of dual use, making it potentially modestly attractive as a true generic TLD.
However, because it’s currently a dot-brand with no third-party users, it will not be redelegated to another registry.
Under Specification 13 of the Registry Agreement, which gives dot-brands special rights, ICANN has the ability to redelegate dot-brands, but only if it’s in the public interest to do so. That’s clearly not the case in this instance.
These rules also state that ICANN is not allowed to delegate .boots to any other company for a period of two years after the contract ends.
Given that there’s no chance of ICANN delegating any gTLDs in the next two years, this has no real impact. Perhaps, if the ICANN community settles on a rolling gTLD application process in future, this kind of termination may be of more interest.

1 Comment Tagged: boots, dot-brands, ICANN, termination

GoDaddy launches security service after Sucuri acquisition

GoDaddy has revealed the first fruits of its March acquisition of web security service provider Sucuri.
It’s GoDaddy Website Security, what appears to be a budget version of the services Sucuri already offers on a standalone basis.
For $6.99 per month ($83.88/year), the service monitors your web site for malware and removes it upon request. It also keeps tabs on major blacklists to make sure you’re not being blocked by Google, Norton or McAfee.
This low-end offering gets you a 12-hour response time for the cleanup component. You can up that to 30 minutes by taking out the $299.99 per year plan.
The more expensive plan also includes DDoS protection, a malware firewall and integration with a content delivery network for performance.
There’s also an intermediate, $19.99-per-month ($239.88/year) plan that includes the extra features but keeps the response time at 12 hours.
An SSL certificate is included in the two more-expensive packages.
The pricing and feature set looks to compare reasonably well with Sucuri’s standalone products, which start at $16.66 a month and offer response times as fast as four hours.
As somebody who has suffered from three major security problems on GoDaddy over the last decade or so, and found GoDaddy’s response abysmal on all three occasions (despite my generally positive views of its customer service), the new service is a somewhat tempting proposition.

1 Comment Tagged: acquisition, godaddy, securi, security, website security

Zero registrars pass ICANN audit

Some of the biggest names in the registrar game were among a bewildering 100% that failed an ICANN first-pass audit in the latest round of random compliance checks.
Of the 55 registrars picked to participate in the audit, a resounding 0 passed the initial audit, according to data released today.
Among them were recognizable names including Tucows, Register.com, 1&1, Google and Xin Net.
ICANN found 86% of the registrars had three or more “deficiencies” in their compliance with the 2013 Registrar Accreditation Agreement.
By far the most problematic area was compliance with sections 3.7.7.1 to 3.7.7.12 of the RAA, which specifies what terms registrars must put in their registration agreements and how they verify the contact details of their customers.
A full three quarters of audited registrars failed on that count, according to ICANN’s report (pdf).
More than half of tested registrars failed to live up to their commitments to respond to reports of abuse, where they’re obliged among other things to have a 24/7 contact number available.
There was one breach notice to a registrar as a result of the audit, but none of the failures were serious enough for ICANN to terminate the deficient registrar’s contract. Two registrars self-terminated during the process.
ICANN’s audit program is ongoing and operates in rounds.
In the current round, registrars were selected from those which either hadn’t had an audit in a couple of years, were found lacking in previous rounds, or had veered dangerously close to formal breach notices.
The round kicked off last September with requests for documents. The initial audit, which all registrars failed, was followed by a remediation phase from January to May.
Over the remediation phase, only one third of the registrars successfully resolved all the issues highlight by the audit. The remainder issued remediation plans and will be followed up on in future rounds.
The 0% pass rate is not unprecedented. It’s the same as the immediately prior audit (pdf), which ran from May to October 2016.

2 Comments Tagged: audit, compliance, ICANN, raa

Zone file access is crap, security panel confirms

ICANN’s Centralized Zone Data Service has some serious shortcomings and needs an overhaul, according to the Security and Stability Advisory Committee.
The panel of DNS security experts has confirmed what CZDS subscribers, including your humble correspondent, have known since 2014 — the system had a major design flaw baked in from day one for no readily apparent reason.
CZDS is the centralized repository of gTLD zone files. It’s hosted by ICANN and aggregates zones from all 2012-round, and some older, gTLDs on a daily basis.
Signing up for it is fairly simple. You simply fill out your contact information, agree to the terms of service, select which zones you want and hit “submit”.
The purpose of the service is to allow researchers to receive zone files without having to enter into separate agreements with each of the 1,200+ gTLDs currently online.
The major problem, as subscribers know and SSAC has confirmed, is that the default subscription period is 90 days.
Unless the gTLD registry extends the period at its end and in its own discretion, each subscription ends after three months — cutting off access — and the subscriber must reapply.
Many of the larger registries exercise this option, but many — particularly dot-brands — do not.
The constant need to reapply and re-approve creates a recurring arse-ache for subscribers and, registry staff have told me, the registries themselves.
The approval process itself is highly unpredictable. Some of the major registries process requests within 24 hours — I’ve found Afilias is the fastest — but I’ve been waiting for approval for Valuetainment’s .voting since September 2016.
Some dot-brands even attempt to insert extra terms of service into the deal before approving requests, which defeats the entire purpose of having a centralized service in the first place.
Usually, a polite email to the person handling the requests can produce results. Other times, it’s necessary to report them to ICANN Compliance.
The SSAC has evidently interviewed many people who share my concerns, as well as looking at data from Compliance (where CZDS reliably generates the most complaints, wasting the time of Compliance staff).

This situation makes zone file access unreliable and subject to unnecessary interruptions. The missing data introduces “blind spots” in security coverage and research projects, and the reliability of software – such as security and analytics applications – that relies upon zone files is reduced. Lastly, the introduced inefficiency creates additional work for both registry operators and subscribers.

The SSAC has no idea why the need to reapply every 90 days was introduced, figuring it must have happened during implementation.
But it recommends that access agreements should automatically renew once they expire, eliminating the busywork of reapplying and closing the holes in researchers’ data sets.
As I’m not objective on this issue, I agree with that recommendation wholeheartedly.
I’m less keen on the SSAC’s recommendation that registries should be able to opt out of the auto-renewals on a per-subscriber basis. This will certainly be abused by the precious snowflake dot-brands that have already shown their reluctance to abide by their contractual obligations.
The SSAC report can be read here (pdf).

4 Comments Tagged: czds, ICANN, ssac, zone files