The looooong road to urgently hiring ICANN’s next CEO

ICANN expects to appoint its next CEO about a year from now, up to 18 months after Göran Marby quit, despite impressing on job-hunters the need to act with speed or risk ICANN’s very existence.

After about 16 “listening sessions” with pretty much every part of the ICANN community over the last three months, the board of directors has approved a 10-page job description for the role.

The document pretty much prays for the Second Coming, at one point calling for a “servant leader” — an oxymoron arguably originating with the words of Jesus H Christ Himself and recently echoed by King Charles III during his coronation.

The new boss will have to be a global visionary with reams of experience managing large, big-budget technical organizations; an impeccably ethical open book; an international diplomat; a compassionate, empathetic nerd; a consensus-building polyglot; a disinterested ICANN insider.

The job description acknowledges that “few, if any” candidates will tick all the boxes, but it’s still setting itself a pretty high bar.

The fact that it takes half a year to write a job ad for a role that’s already been held by nine people over the last quarter century is baffling enough, but the recruitment process itself hasn’t even started yet.

ICANN now says it will put out a request for proposals for executive recruitment companies to manage the hiring process. It doesn’t expect to start interviewing candidates until the start of next year.

The actual appointment should come in the second quarter 2024, ICANN says. Whether the next chief will be available to start immediately is of course unknowable. In the meantime, interim CEO Sally Costerton will carry on filling the role.

You might expect the hiring process to get faster as ICANN gets older, better-resourced and more experienced, but it’s actually months slower than on the last few occasions a new CEO has been sought.

It was 10 months between Rod Beckstrom announcing he was quitting in 2011 and Fadi Chehadé being named heir apparent. After he announced he was out in 2015, it was nine months before Marby was crowned.

We’re now looking at potentially twice as long a runway between CEOs, and a job description that unironically calls for leadership amidst a “rapidly evolving” governance space, addressing the “the need to ‘get things done'” and ICANN’s need to “act with urgency” to manage emerging technological threats that could Balkanize the namespace and threaten ICANN’s very raison d’etre.

2 Comments Tagged: ICANN

Rwanda picked for ICANN meeting

ICANN is inviting its community to Kigali, Rwanda, for its ICANN 80 public meeting.

The shorter “Policy Forum” meeting, the same format as the one that took place in Washington DC this month, will start from June 10 next year at the Kigali Convention Centre, ICANN’s board decided last week.

It’s the first time ICANN has visited Africa since before the Covid-19 pandemic and the first time Rwanda will have hosted a meeting.

ICANN has hosted meetings in Africa on 12 occasions over the last 25 years, in seven countries — Morocco, Egypt, Tunisia, Kenya, Ghana, Senegal and South Africa.

ICANN’s practice is to rotate meetings through each of its five geographic regions, but it rarely happens in a strict order and obviously the pandemic shook up scheduling.

Rwanda and questions about its safety and human rights record have been in the news here in the UK for the last couple of years due to the British government’s plan to deport illegal migrants there.

But the UK and US authorities class Rwanda as safe, as long as you stay away from contested border regions. Visas appear to be free upon arrival for all travelers, regardless of origin.

Comment Tagged: ICANN, icann 80, kigali, rwanda

Governments call for ban on gTLD auctions

Governments are calling for a ban on new gTLD contention sets being settled via private auctions, a practice that allowed many tens of millions of dollars to change hands in the last application round.

ICANN’s Governmental Advisory Committee said in its ICANN 77 communique that it formally advises ICANN: “To ban or strongly disincentivize private monetary means of resolution of contention sets, including private auctions.”

Private auctions typically see the losers split the winner’s winning bid among themselves. The GAC endorsed the At-Large Advisory Committee’s recommendation that applicants should be forced to ICANN-run “last resort” auctions, where ICANN gets all the money, instead.

The concern is that companies with no intention of actually operating a gTLD will file applications purely in order to have a tradeable asset that can be sold to competing applicants for a huge profit.

In the 2012 round, 224 contention sets were settled in private, often via auctions. ICANN not only allowed but encouraged the practice.

For example, publicly listed portfolio registry Minds + Machines disclosed tens of millions of income from losing private auctions, some of which was reinvested into winning auctions for gTLDs that it did intend to run.

Another applicant, Nu Do Co, did not win a single auction it was involved in, with the exception of the ICANN-run “last resort” auction for .web, where its winning $135 million bid was secretly funded by Verisign.

In the case of .web, rival bidders urged NDC to go to private auction until almost the last moment, eager to get a piece of the winning bid. It remains the subject of legal disputes to this day.

The current GNSO “SubPro” policy recommendations do not include a ban on private settlements, instead saying that applicants should affirm that they have a “bona fide” intent to operate the TLD, under penalty of unspecified sanctions if they lie.

The recommendations include a set of suggested red flags that ICANN should look out for when trying to determine whether an applicant is game the system, such as the number of applications filed versus contention sets won.

It’s pretty vague — the kind of thing that would have to be ironed out during implementation — and the ICANN board of directors has yet to formally approve these specific recommendations.

The GAC’s latest advice also has concerns about the “last resort” auctions that ICANN conducts, which see ICANN place the winning bid in a special fund, particular with regards non-commercial applicants.

The GAC advised ICANN: “To take steps to avoid the use of auctions of last resort in contentions between commercial and non-commercial applications; alternative means for the resolution of such contention sets, such as drawing lots, may be explored.”

Some previous ways to mitigate contention gaming include Vickrey auctions, where every applicant submits a high bid at the time of application and the applicant with the highest bid pays ICANN the amount of the second-highest bid.

Bidding before one even knows whether the gTLD string will be subject to contention is seen as a way to dissuade applicants from applying for strings they don’t really want.

ICANN directors said repeatedly at ICANN 77 last week that the Org will be hiring an auctions expert to investigate the best way to handle auctions and reduce gaming.

6 Comments Tagged: auctions, gac, gaming, ICANN, icann 77, new gTLDs, subpro

Red Cross gets takedown powers over .org domains

Public Interest Registry has inked a first-of-its kind domain takedown partnership with the American Red Cross.

The deal gives the Red Cross a “trusted notifier” status, meaning it will have a special channel to report fraudulent fundraising sites with domains, which PIR can then suspend at the registry level.

It’s designed mainly to quickly tackle fraud sites that spring up to exploit people’s good will in the aftermath of natural disasters to which the Red Cross would typically respond to.

It’s particularly relevant not only due to the size of PIR’s flagship .org, but also due to its recent takeovers of gTLDs including .charity and .giving.

PIR said the partnership is only for such cases, and would not permit the Red Cross to take down criticism or satire. It also said there’s an appeals process for registrants whose names are suspended.

Trusted notifier schemes are not uncommon among the larger registries, but they typically focus on Big Copyright and organizations that fight child sexual abuse material online.

2 Comments Tagged: .org, pir, red cross

Domain universe grew 1% in Q1

There was a 1% increase in domain names under management worldwide in the first quarter, compared to Q4 2022 and Q1 2022, according to Verisign’s latest Domain Name Industry Brief.

The period ended with 354 million names across all TLDs, according to the report, an increase of 3.5 million, the report says.

ccTLDs did most of the heavy lifting, up by 2.6 million names or 2% sequentially to 135.7 million at the end of the first quarter. The growth figures correct for an error in the Q4 report.

Verisign has its own .com recovering, having dipped last year, now up by 1.1 million names sequentially to 161.6 million. Sister TLD .net was flat on 13.2 million.

New gTLDs dipped by 200,000 names to 27.3 million, a 0.6% decrease quarter-over-quarter, but were up by 900,000 or 3.6% compared to a year earlier, the DNIB states.

Comment Tagged: dnib, verisign

Closed generics and IDNs debates are big drag on new gTLDs

As ICANN 77 officially kicks off in Washington DC today, the issues of closed generics and IDNs have already emerged as big drag factors on the launch of the next new gTLD application round.

During a day-long “day zero” session yesterday, the community heard that the absolute fastest the GNSO will be able to make policy on closed generics is 96 weeks — over 22 months — using its “expedited” Policy Development Process.

Meanwhile, making policy on internationalized domain names — mainly, how to handle string similarity conflicts in non-Latin scripts — is not expected to be done until March 2026 at the earliest. And that’s through an “expedited” PDP that has already been running for over two years.

The predicted closed generics timetable (on page 16 of this PDF presentation) is actually relatively aggressive compared to the two previous EPDPs (on post-GDPR Whois policy) that the GNSO has previously completed.

It only calls for 36 weeks — about eight months — for the actual working group deliberations, for example, compared to the 48 weeks the equally controversial Whois EPDP took a few years ago.

But the expected duration prompted some criticism yesterday from those wondering why, for example, a “call for volunteers” needs to take as long as three months to carry out.

The timetable was written up prior to the publication over the weekend of a draft framework for closed generics (pdf), which lays out a few dozen principles that should be taken into account in subsequent EPDP work.

With what looks like a certain amount of wheel-reinvention, the document describes a points-based system for determining whether an applicant is worthy of a closed generic. It seems to be based quite a lot on the process used to assess “Community” applications in the 2012 round.

The framework was created in private over the last six months by a cross-community group of 14 people from the GNSO and Governmental Advisory Committee. Chatham House rules applied, so we don’t know exactly whose opinions made it into the final draft. But it exists now, and at first glance it looks like a decent starting point for a closed generics policy.

The major issue is that the work, at its core, is about predicting and preemptively shutting down all the ways devious corporate marketing people might try to blag themselves a closed generic for competitive or defensive purposes, rather than for the public interest, and I’m not sure that’s possible.

Discussion on closed generics will continue this week at ICANN 77, including a session that starts around about the same time I’m hitting publish on this article.

Comment Tagged: closed generics, ICANN, icann 77, new gTLDs

New gTLD registry gets second ICANN breach notice

A new gTLD registry has become the second to receive a second ICANN breach notice from ICANN.

Asia Green IT System, based in Turkey, hasn’t been paying its fees on four of its TLDs, ICANN says in its notice, and isn’t displaying Whois data in the required format.

The gTLDs concerned are .nowruz (Iranian New Year), .pars (refers to Persia/Iran), .shia (a branch of Islam), and .همراه (.xn--mgbt3dhd, appears to mean something like “comrade” in Persian).

ICANN has given the company until July 5 to pay up or risk having its contracts terminated.

No domains would be at risk if that were to happen — none of the four TLDs has launched. Each has a single domain in its zone file, despite being in the root for several years.

Asia Green was hit with a similar notice in 2019, which it ultimately resolved.

Comment Tagged: asia green, breach, compliance, ICANN

Epik lost another 22,000 domains to transfers in February

Troubled registrar Epik saw another flood of outbound transfers in February, but the number was down on January.

The latest gTLD registry transaction reports show net transfers of negative 22,284 in the month, compared to minus 30,596 the previous month. There were 23,783 outbound transfers and 1,499 inbound.

The relatively improved net transfers number may reflect the shorter month, and possibly the emergence of problems Epik had actually executing transfers due to its serious cash flow problems.

Epik’s overall domains under management dropped from 684,691 to 648,092 over the course of the month.

The number of deleted domains was also down, from 20,363 in January to 16,591.

The company over the weekend said it has been sold to an undisclosed buyer for almost $5 million and that it has settled its registry debts and customer lawsuit.

Comment Tagged: epik

Mystery buyer rescues Epik at end of crazy week

Limping registrar Epik isn’t out of the woods yet by a long shot, but its life became considerably easier late last week when a mystery buyer snapped up its assets for almost $5 million, enabling it to pay off many of its creditors.

The company said on Twitter that it had closed a deal that allowed it to pay off ICANN, which had filed a public breach notice just two days earlier, as well as various registries and loan providers.

It also allowed it to pay off Matthew Adkisson, the customer who was owed over $300,000 following a botched secondary market domain deal last year, who has now dropped his fraud and racketeering lawsuit.

Adkisson appears to have come away poorer, however, as the payoff seems to have only covered the money owed and not the probably substantial legal fees he has incurred since then.

The events of last week were pretty wild, including claims about literal assassination attempts, judging by court documents from Adkisson’s case.

Epik had told his lawyers that an “asset purchase agreement” for the Epik registrar was imminent, which would allow the company to settle its debts.

Disappointed with the offer, Adkisson filed for a temporary restraining order to prevent the sale, believing the money would wind up being squirreled away by the registrar’s current or former management.

That TRO disappeared when he withdrew his complaint and got paid at the weekend. ICANN, Identity Digital and Verisign all appear to have been paid at the same time, along with creditors called TVT and JJE.

The ICANN breach notice provides some poor optics for ICANN, which now looks like it only initiated Compliance proceedings in March, when its own registrar fees went unpaid, despite being aware of the many customer complaints against Epik.

However, now that the Compliance process has started, getting paid may not be enough to end it. The breach notice also refers to “several hundred” domains that were affected by Epik’s cash flow problems — it seems the company was unable to renew or transfer domains while in was in hock to the registries.

Adkisson’s docket contains several sworn declarations from customers saying they have lost important domains to others or been forced to spend thousands of dollars to move their domains elsewhere lest risk losing them.

While Epik cannot provide satisfactory answers to ICANN’s questions about these domains, its accreditation is still at risk.

Complicating matters, the new buyer will need to have the old registrar accreditation transferred to it, a process that takes time and subjects the registrar to a certain amount of ICANN scrutiny.

And the identity of the buyer is pretty mysterious.

On paper, the buyer is Epik LLC, a Wyoming corporation that formed about a week before the deal was finalized. Former Epik CEO Rob Monster has had to agree to change the names of operating company Epik Inc and parent Epik Holdings Inc to remove the “Epik” brand.

But the new LLC was created by a company called Registered Agents Inc, and the acquisition deal signed by its president, Jon Spear.

Registered Agents is a company that enables people to set up shell companies pretty much anonymously, and is often used by “[o]ligarchs, criminals and online scammers”, according to the Washington Post.

This is exactly the kind of association Epik does not need right now.

Making the new owners look even worse, an anonymous individual claiming to be a representative of the new Epik introduced himself or herself on the domainers forum Namepros at the weekend in probably the dumbest way imaginable if the company wants to claw back any credibility at all among what was once a core customer base.

The post does contain an apology to those “financially hurt” by Epik’s actions, and a commitment to “make things right for as many people as possible”, but it also contains several sideswipes at Namepros users, many of them victims of Epik’s mismanagement, calling their commentary “worthless”. It looks like the work of a troll.

In short, Epik still has a hell of a tough time ahead of it if it wants to shake off its bad reputation.

But before this article ends, I promised you some stuff about assassination attempts.

The material disclosed in the Adkisson case includes what appears to be a dense, multi-layered, rambling, paranoid conspiracy theory from Rob Monster, which draws in everyone from disgraced shock jock Alex Jones to Domain Name Wire editor Andrew Allemann (who hilariously Monster accuses of writing “hit pieces” about him).

I have to confess to being slightly disappointed that I didn’t get a shout-out.

He accuses people I’m not going to name here as secretly convening in late 2021 to discuss removing Monster from Epik by any means possible, with “lethal options” possibly on the table. He goes on to say:

For the record, I do have reason to believe that there have been attempts on my life including recently. This was the main reason why I stayed in Asia from January 20 through April 4 and maintained a heightened degree of privacy. I am in excellent health and not suicidal.

Monster, who I believe UK defamation law allows me to describe as “a bit of a character”, is known to frequently indulge in conspiracy theories, particularly with regards mass shootings (which feature in the theory outlined in his email to Adkisson’s lawyers).

Comment Tagged: compliance, epik, ICANN, registered agents

Millions of domains to be deleted as Freenom loses its first TLD

Controversial free-domains registry Freenom has lost its deal with the government of Gabon after years of abuse. The government has retaken its ccTLD and will delete as many as seven million .ga domains.

That’s according to the French ccTLD registry, AFNIC (pdf), which says it has been helping migrate the TLD from Freenom to Gabonese government entity ANINF for the last year.

The technical handover will begin today and run until June 7, this coming Wednesday, according to ANINF.

AFNIC said the migration is happening due to “the failure of the company Freenom, which has managed the .ga TLD up until now, to provide the Internet community with a satisfactory service.”

ANINF said it wants to: “Put an end to abusive practices, through the will and support of the Gabonese State, which have had a negative impact on the image of the country and its influence on the Internet.”

Freenom’s business model is to allow people to register domains for free, then bring them in-house and monetize them when they expire or are suspended for abuse such as spam and phishing — something that happens rather a lot.

Security blogger Brian Krebs reported last week that abuse levels originating from ccTLD domains have plummeted since Freenom’s troubles began earlier this year.

ANINF reckons there are currently over seven million domains in .ga, and says most of those will be deleted.

That would make .ga the seventh-largest TLD overall and fourth-largest ccTLD after China, Germany and the UK. But Gabon has a population of just 2.3 million with a relatively low internet penetration of 62%.

Could it be the beginning of the end for Freenom?

Presumably most of the domains Gabon will delete are owned and currently monetized by Freenom, so it will be losing a large parking network when ANINF swings the ban hammer.

There’s also reason to believe .ga will not be the last ccTLD it loses. The tech contact in the IANA record for Mali’s .ml switched from Freenom’s Netherlands-based subsidiary to a Mali government agency back in March, suggesting a takeover is also imminent there.

Then of course there’s the lawsuit by Facebook owner Meta, filed earlier this year, which accuses Freenom of cybersquatting and seeks a ruinous amount in damages.

Freenom has not allowed anyone to register domains in any of its managed TLDs — .ml, .ga, .cf, .gq and .tk — since at least January 1 this year.

I asked Freenom to explain this a few weeks ago and the company declined to comment.

ANINF says the migration this week will cause disruptions, but says it’s been reaching out to registrars with legit registrations to minimize the turbulence for their customers.

Comment Tagged: afnic, aninf, freenom, ga, gabon