Community tells ICANN to walk and chew gum at the same time

Whois or new gTLDs? Whois or new gTLDs? Whois or new gTLDs?

It’s the question ICANN has been pestering the community with since early May. ICANN can’t work on developing the proposed Whois Disclosure System (formerly known as SSAD) without delaying work on the next round of new gTLDs, Org said, so the community was given a Sophie’s Choice of which of its babies to sacrifice on the altar of failed resource planning.

And now it has its answer: why the heck can’t you do both, and why the heck are you asking us anyway?

GNSO Council chair Philippe Fouquart has written to Maarten Botterman, his counterpart on the ICANN board of directors, to request that Org figure out how to do both Whois and new gTLDs at the same time, and to existing deadlines:

While Council members might differ on which project should take precedence, there is unanimous agreement that the Subsequent Procedures ODP and SSAD development are among the most important tasks before ICANN. Therefore, we urge that every effort should be undertaken by ICANN Org to complete the work in parallel and to meet currently published milestones.

Fouquart goes on (pdf) to puzzle as to why ICANN decided to “inappropriately include the broad community in the minutiae of ICANN operations planning”.

ICANN had told the GNSO that if it wanted the Whois work to kick off, it would add “at least” six weeks of delay to the new gTLDs Operational Design Phase, which is scheduled to wrap up in October.

Naturally enough, folks such as IP lawyers were very keen that ICANN start to do something — anything — to roll back the damage caused by GDPR, while domain-selling companies are anxious that they get more inventory for their virtual shelves.

The public record has always been a bit sketchy on where the resource bottleneck actually is, in an organization with half a billion bucks in the bank, a $140 million operating budget, and around 400 staff.

Maintaining Whois and the expansion of the root zone are, after all, two of the main things ICANN was founded to do, being unable to do both at once could be seen as embarrassing.

But now it has its answer, as unhelpful as it is.

And it only took two months.

Comment Tagged: gnso, ICANN, new gTLDs, ssad, subpro, whois disclosure system

Five things I learned from UK prime minister candidates’ domain names

Boris Johnson announced he is to resign as UK prime minister after a series of scandals last week, and as of this evening 11 of his former friends have announced their plans to replace him as leader of the Conservative party and therefore UK PM.

I’ll spare you the details of Johnson’s downfall and the process used to find his successor, but domain names became part of the story over the weekend when a so-called “Dirty Dossier” began circulating among Tory MPs, denouncing candidate Rishi Sunak.

Among the allegations was that Sunak, whose resignation as chancellor last week eventually led to the Johnson’s own resignation, had been plotting Johnson’s demise and his own rise to power since last December, using Whois records for his campaign site as a smoking gun.

I thought I’d take a look at all 11 candidates’ registrations to see what else we could learn.

1. Sunak wasn’t the only “plotter”

Sunak came under scrutiny over the weekend when it emerged that the domain name readyforrishi.com has been registered since December 23 last year, a few weeks into the Partygate scandal, when the foundations of Johnson’s premiership began to weaken.

This, it was claimed in the Dirty Dossier, showed that Sunak had been plotting his boss’s downfall for six months.

His team have subsequently claimed that the name wasn’t necessarily registered by them, and his campaign is currently using the similar domain ready4rishi.com, which was registered July 7, the day Johnson announced his resignation.

The December domain forwards to Sunak’s official campaign site, suggesting its registrant is at the least a supporter.

We can’t tell for sure because all Whois records are redacted due to GDPR, which is still in effect in the UK despite Brexit.

But Sunak wasn’t the only prescient registrant in the clown car. Liz Truss’s campaign site is at lizforleader.co.uk, which was registered June 8, a month before there was a leadership job opening available, Whois records show.

Jeremy Hunt, Tom Tugendhat and Sajid Javid have names registered last week. Penny Mordaunt’s pm4pm.com was registered in 2019, but that’s because she also stood for Tory leader in 2019, ultimately losing to Johnson.

2. Not much patriotism on display

Of the 11 candidates, only five are campaigning using .uk addresses.

Kemi Badenoch uses a .org.uk. Suella Braverman uses a .co.uk. While Jeremy Hunt usually uses a .org, he’s using a .co.uk for his campaign. Same for Truss. Javid is using a thoroughly modern .uk, eschewing the third level, at teamsaj.uk.

All the rest use a .com for their sites.

3. Truss and Hunt didn’t register their matching .uk

While Javid appears to have registered the .co.uk matching his .uk, Truss and Hunt have not registered their matching second-level domains, which is just asking for trouble from pranksters and opponents.

That said, while it’s been six or seven years since .uk domains became available from Nominet, they haven’t really caught on in terms of adoption or popular mind-share. It would be a much greater crime to register a 2LD without the matching 3LD than vice versa.

4. Two candidates own their surnames

While all of the candidates own their full names in their chosen TLDs, only Grant Shapps and Nadhim Zahawi own their .com surnames.

Whois records and Archive.org show that Shapps has owned Shapps.com since 2000, years before he won his first parliamentary seat. He has a history of being involved in questionable online get-rich-quick schemes and used to follow me on Twitter, so he’s probably quite domain-savvy.

Zahawi, who’s been Chancellor of the Exchequer since Sunak quit last week, has owned zahawi.com since he first ran for parliament in 2009.

5. Here’s what domains everyone else is using

According to Google and the Twitter accounts of the candidates, these are the URLs used by each candidate for their regular official sites and, if they have one, their premiership campaign sites.

Note that in most cases their regular sites are managed by a company called Bluetree, which specializes in running boilerplate web sites for Tories, so the choice of domain may not necessarily be the choice of the MP in question.

[table id=1 /]

3 Comments Tagged: .uk, election

Universal unacceptance? ICANN lets XYZ dump languages from UNR gTLDs

Even as CEO Göran Marby was accepting an ambassadorship from the Universal Acceptance Steering Group last month, ICANN was quietly approving a registry’s plan to drop support for several languages, potentially putting dozens of domains at risk.

It seems portfolio registry XYZ.com was having problems migrating the 10 gTLDs it recently acquired in UNR’s firesale auction from the UNR back-end to long-time partner CentralNic, so it’s cutting off some language support to ease the transition.

The company told ICANN in a recent Registry Services Evaluation Process request (pdf) that internationalized domain names in Cyrillic, Chinese, Japanese and German were “causing issues with the [Registry System Testing] for the technical transition”.

“So, in order to move forward with the migration to CentralNic, we have no choice but to remove support for these IDNs. This will only impact fewer than 50 registrations in these TLDs,” the company told ICANN.

I asked both XYZ and CentralNic whether this means the IDN domains in question would be deleted but got no response from either.

Support for the four languages will be removed in .christmas, .guitars, .pics, .audio, .diet, .flowers, .game, .hosting, .lol, .mom according to contractual amendments that ICANN has subsequently approved.

The RSEP was published the same week ICANN signed a memorandum of understanding with .eu registry EURid, promising to collaborate on IDNs and universal acceptance.

The same week, Marby, who has stated publicly on several occasions his commitment to IDNs and UA, was named an honorary ambassador of the UASG to “help amplify the importance of UA work to enable a multilingual Internet”.

UPDATE July 24, 2022: CentralNic CTO Gavin Brown says:

I can confirm that no domains will be deleted or suspended due to the withdrawal of these IDN tables. The RSEP request template we provided to XYZ incorrectly stated that domains would be deleted, however, neither we nor XYZ have any plans to delete or suspend any domains, and we hope to re-enable the IDN tables in the near future.

2 Comments Tagged: centralnic, ICANN, idns, universal acceptance, unr, xyz.com

ICANN terminates these three deadbeat registrars

Registrars based in the US, Philippines and Bangladesh have lost their ICANN accreditations for non-payment of fees.

ICANN recently sent termination notices to Domainia, HOAPI, and Innovadeus, which the Org says have breached their contracts by not paying and in some cases failing to provide required information and services on their web sites.

It appears all three companies are no longer operational. Domainia’s domain resolves to a GoDaddy sales lander, HOAPI’s is NX’d, and Innovadeus’s site is riddled with WordPress errors.

Innovadeus and HOAPDI were first deemed “past due” on their fees in November 2020, according to ICANN. For Domainia, it was September 2020.

Fortunately, it seems few to no registrants will be affected by the terminations. HOAPI had one gTLD domain under management, its own. Domainia had none, and Innovadeus had a few hundred, which will be transferred to another registrar.

Comment Tagged: compliance, domainia, hoapi, ICANN, Innovadeus, termination

.xyz kicks France out of the top 10 TLDs — Verisign

Verisign is reporting that the total number of registered domains worldwide topped 350 million in the first quarter, under its new reporting methodology.

The company’s latest Domain Name Industry Brief states that there were 350.5 million names across (almost) all TLDs, up by 8.8 million or 2.6% compared to the end of 2021 or 13.2 million (3.9%).

It’s sequential growth well beyond the 3.3 million increase reported in Q4, but the first quarter of any year is usually seasonally strong.

It’s the second DNIB that excludes Freenom’s collection of free TLDs, notably .tk, making comparisons beyond what Verisign itself calculates challenging.

Verisign’s own .com was up from 160 million to 161.3 million domains over the period, while .net was flat at 13.4 million.

Total ccTLD names were up 6 million or 4.7% sequentially to 133.4 million and up 3.1 million or 2.4% year over year.

The top 10 TLDs saw a new entry, with XYZ.com’s .xyz taking the tenth position with 4 million names, kicking out French ccTLD .fr, which has 3.9 million.

Comment Tagged: .fr, .xyz, dnib, verisign

ICANN puts blockchain on the agenda for good

ICANN’s board of directors is apparently worried about the rise of blockchain-based alt-roots.

Its Board Technical Committee voted in May to make blockchain a permanent agenda item going forward, according to just-published minutes.

“After discussion, the Committee decided to have a standing topic on the agenda to address Blockchain Names,” the minutes read.

The minutes don’t record the content of the discussion, but the alt-root topic has been addressed at every one of the committee’s meetings since last July and resulted in the CTO’s office putting together a briefing paper I blogged about last month.

Blockchain alt-roots include the likes of ENS, Handshake and Unstoppable. They are likely to present legal challenges and interoperability problems when ICANN finally opens up the next round of new gTLDs in a couple years.

8 Comments Tagged: alt-roots, blockchain, ICANN

New gTLD in trouble as largest registrar gets suspended

The .gdn gTLD registry, Navigation-information systems, is facing more trouble from ICANN Compliance, but this time it’s because its largest registrar has got itself suspended for non-payment of fees.

ICANN has suspended the accreditation of Dubai-based registrar Intracom for failing to cure an April breach notice demanding money, not implementing an RDAP service, not escrowing its data, and generally giving Compliance staff the runaround for the last eight months.

Intracom is NIS’ biggest partner, responsible for over 10,000 of its 11,000 registered domain names. It doesn’t appear to have many domains in other gTLDs.

The company will not be allowed to sell gTLD domains or accept inbound transfers from July 6 to October 4.

NIS has been hit with its own breach notices twice in the last year, most recently the day after Intracom’s own notice, for failing to keep its Whois service up, but it cured the breaches before ICANN escalated.

Comment Tagged: .gdn, complicance, ICANN, intracom, Navigation-information systems, new gTLDs

ICANN picks comms firm for new gTLDs outreach

The next round of new gTLDs is getting real.

ICANN has selected a communications firm to promote the next round ahead of its launch, and authorized a wedge of cash to pay for it, according to a resolution of the board of directors.

The resolution does not name the firm or the exact amount of money earmarked, because a deal has yet to be signed, but it is worth over $500,000.

In the 2012 round, I believe ICANN worked with long-time PR agency Edelman.

The agency will be responsible for planning the outreach campaign and then executing it over three months ahead of the application window opening, whenever that may be.

The resolution states that ICANN will contract the firm for 50 “instances”, where an instance is a country or industry.

The 2011/2012 outreach campaign came under criticism for not doing enough to entice applications from the global south and emerging economies, something which current ICANN management has said they hope to rectify next time around.

Comment Tagged: ICANN, new gTLDs

Donuts goes with bland, forgettable, for new company name [rant]

What is it with domain name companies and their terrible brands?

Donuts is now Identity Digital Inc, the company said today, with the Donuts and Afilias brands being retired.

The new name was chosen “to reflect better the commitment to helping customers find, grow and protect their authentic digital identities” the company said in a press release. I also get the vibe that the company may be expanding further outside of domains in future. Blockchain stuff, maybe?

It appears that the company has adopted a practice-what-you-preach approach to branding — it’s advocating that businesses register domains with strong keywords to the left and right of the dot, so that’s what Identity Digital will also do.

That’s fair enough, I guess.

It’s using identity.digital as its new domain, which is just as well, because the company seems to have just made itself search-proof.

If you couldn’t tell already, I don’t like the name. It strikes me as the kind of name a company might pick if it wanted to keep a low profile.

It sounds like a two-man SEO startup operating in a room above a vape shop in a northern English market town.

The name “Donuts” had been picked when the company formed in 2010 to reflect the fact that the founders were nuts about domains. Afilias was named as such because it was a joint venture of over a dozen registrars.

These were great, memorable brands!

GoDaddy, Tucows, Porkbun… all examples of strong, colorful, novel brands in the domain space. When I read about these companies, I know immediately who I’m reading about, and they don’t have any keywords in their names.

Even after 12 years writing this blog, I still have to remind myself which registrar is Name.com and which is Domain.com. Now, I’m going to be constantly reminding myself which company used to be Endurance and which used to be Donuts. Meh.

Perhaps I’m just irritated that I’m going to have to spend the next year writing “Identity Digital, formerly Donuts”.

Still, at least it’s better than “TrueName”.

2 Comments Tagged: afilias, donuts, identity digital, rebrand

Broker says it will sue after DNS abuse sting operation

The CEO of domain broker VPN.com is threatening to sue an online safety advocacy group after a report was published alleging the company trades in names that could be used for illegal activity.

Michael Gargiulo said he will take action against the Digital Citizens Alliance unless it removes a report that claimed one of the company’s brokers agreed to coordinate the $21,000 purchase of covidvaccinecardsforsale.com, even after being told it would be used for illegal purposes.

“[We] sadly have no choice but to sue the Digital Citizens Alliance, Executive Director Tom Galvin, their Managing Editor, and every John Doe that coordinated this fraud unless this content is removed within 48 hours from now,” Gargiulo said.

The DCA report, entitled “Peddling For Profit — How Website Retailers Enable Bad Actors to Become the Master of Illicit Domains” (pdf), is largely an attempt to highlight how domain registrars don’t vet domains for potentially illegal use before allowing them to be registered.

It’s mostly familiar nonsense, apparently written with a general audience and tabloid headlines, rather than the domain industry or tech industry, in mind.

There’s no attempt to explore the complexities of automatically determining a registrant’s intent at the point of sale and comparing it to the world’s hundreds of legal jurisdictions, it’s mainly just “Woah, GoDaddy let me register untraceablegunsforsale.com!”

Where the report differs from the norm is when it looks at the secondary market, where human beings work with buyer and seller to agree a price and transfer a domain.

With VPN, the DCA reporter posed as the potential buyer of covidvaccinecardsforsale.net and carried out an email conversation with a broker in which it was stated the domain would be used to sell “Covid cards” to “the unvaccinated”, from which one could certainly infer a nefarious purpose.

The VPN broker responded by trying to negotiate the sale of the matching .com for a higher price, the DCA report states. Later, the DCA reporter says he wants to “stay under the radar of the FTC” but VPN’s response, if any, is not reported.

Gargiulo told DI that DCA “posed as a legitimate Buyer on the original inquiry with fraudulent intent, which by their publication admission, is fraudulent and illegal in America.”

The broker in question is from outside the US and “did not understand their [DCA’s] illegal intent” he said.

“In many parts of the world including Europe, Covid cards are used for vaccinated and unvaccinated people,” he said, giving the Netherlands as an example.

“We take this matter very seriously as the characterization of our company is absolutely ridiculous in this document,” he said. “There was little-to-no journalistic integrity to verify the other side of this story by DCA and the transaction never even got remotely close to occurring.”

DCA also attempted to buy buystolencreditcards.com via broker Domain Agents, but after blatantly describing how the name would be used for crime, “the broker canceled the deal.”

DCA, as its name implies, is funded by undisclosed companies in Big Content, Big Pharma, internet security and consumer safety. It’s led by former Verisign PR man Tom Galvin.

“We will let the report speak for itself,” a DCA spokesperson said when asked for comment on the legal threat.

2 Comments Tagged: brokers, crime, digital citizens alliance, domain agents, vpn.com