ICANN feeds troll, refuses to censor “rip-off” web site

ICANN’s board has rejected a formal demand that it “take down” the web site RipoffReport.com in what is possibly the strangest Request for Reconsideration case it has considered to date.
The almost 20-year-old site hosts reports from consumers about what they consider to be “rip-offs”. It’s seen its fair share of controversy and legal action over the years.
Somebody called Fraser Lee filed the RfR in December after (allegedly) trying and failing to get the site’s registrar, DNC Holdings (aka Directnic), to yank the domain and then trying and failing to get ICANN Compliance to yank DNC’s accreditation.
The request (pdf) is a rambling, often incoherent missive, alleging that RipoffReport contains “legally proven illegal defamatory, copyright infringing, hateful, suicidal and human rights depriving content” and demanding ICANN “take down the site RIPOFFREPORT.COM AS EXPECTED BY THEIR POLICIES OR RISK BEING SUED AS AN ENDORSER OF CYBER TERRORISM.”
ICANN’s Board Governance Committee has naturally enough rejected (pdf) the request, largely on the grounds that it does not have the authority to police internet content and that it could find no evidence that DNC had breached its contract:

the Requester ultimately seeks to have ICANN assume greater responsibility of policing purportedly illegal activity on the Internet, and attempts to place the burden on ICANN to regulate content on the Internet. That is not ICANN’s role. If content is to be regulated, that review and enforcement falls to institutions charged with interpreting and enforcing laws and regulations around the world, such as law enforcement

In a bizarre twist, the BGC further decided that “Fraser Lee” may not even be the person who filed the original complaints with DNC and ICANN Compliance.
“Fraser Lee, has never initiated a complaint with the ICANN Contractual Compliance department,” the BGC wrote.
A lengthy (and, one imagines, maddening) email thread between DNC’s lawyer and somebody called “Smith”, evidently provided by DNC to ICANN (pdf), appears show that at least two different identities are in play here.
It’s an odd one for sure, but it does have the virtue of getting ICANN’s board on the record again stating that it does not police content.

ICANN loses another IRP — .sport gTLD fight reopens as panel finds “apparent bias”

The future of the .sport gTLD was cast into turmoil this week after an independent panel ruled that there was “apparent bias” in the decision that awarded the string to a group linked to the Olympics.
The new Independent Review Panel ruling found that ICANN broke its own bylaws by refusing to allow Famous Four Media to appeal a 2013 decision that essentially awarded .sport to rival bidder SportAccord.
FFM claims the expert panelist tasked with deciding SportAccord’s Community Objection had undisclosed conflicts of interest that made him much more likely to rule in favor of SportAccord, which is backed by the International Olympic Committee, than FFM, which is a purely commercial operator.
And the IRP panel did not disagree, ruling this week that ICANN should have taken FFM’s claims into account before rejecting its requests for an appeal in 2014.
The ruling means that ICANN may be forced to throw out the Community Objection decision from 2013 and order it to be re-tried with a new expert, potentially allowing FFM back into the .sport contest.
As usual with IRP cases, the ruling is a complex and very dry read, involving multiple layers of objections, appeals, panels and experts.
FFM and SportAccord were the only two applicants for .sport in the 2012 application round.
SportAccord, which has the backing of dozens of sporting organizations in addition to the IOC, claims to represent pretty much all organized sport and wants to run .sport with restrictions on who can register.
FFM, conversely, wants to keep it open to everyone with a passing interest in sport.
In an attempt to kick FFM out of the contest without a potentially expensive auction, SportAccord filed, and then won, a Community Objection in 2013.
To win, it had to prove that the interests of the sport community would be harmed if FFM got to run it. The objection expert panelist, Guido Tawil, came down on SportAccord’s side.
FFM naturally enough disagreed with his conclusion, and vowed to fight to overturn it.
The registry later discovered that Tawil had undisclosed ties to the IOC, which it said should have disqualified him from acting as an independent expert.
First, Tawil attended a conference of the International Bar Association in Rio de Janeiro in 2011 called “Olympic‐Size Investments: Business Opportunities and Legal Framework”, where he co‐chaired a panel entitled “The quest for optimising the dispute resolution process in major sport‐hosting events”.
Second, the law firm he works for, Argentina-based M & M Bomchil, counts DirecTV among its key clients and at the time of the Community Objection DirecTV was negotiating with the IOC for Latin America broadcasting rights for the Sochi 2014 and Rio 2016 Olympics, rights it subsequently obtained.
Third, a partner in Tawil’s law firm is president of Torneos y Competencias, a sports broadcaster with ties to DirecTV.
FFM has claimed: “Guido Tawil’s own legal practice and business is built around a company for whom IOC broadcasting rights are a core aspect of its business.”
While FFM filed two Requests for Reconsideration with ICANN in late 2013 and early 2014, raising the possibility of conflicts of interest and demanding ICANN have Tawil’s ruling thrown out, both were rejected by ICANN’s Board Governance Committee.
It also took its claims to the ICANN Ombudsman, who drafted (but did not finalize) a finding that agreed with FFM that the Community Objection should be retried with a new expert.
The subsequent IRP filing challenged the two RfR decisions and, two years later, the IRP panel has now ruled:

the IRP Panel is of the view that in order to have upheld the integrity of the system, in accordance with its Core Values, the ICANN Board was required properly to consider whether allegations of apparent bias in fact gave rise to a basis for reconsideration of an Expert Determination. It failed to do so and, consequently, is in breach of its governing documents.

The panel also said that ICANN should have taken the Ombudsman’s draft report into account.
It declared:

that the action of the ICANN Board in failing substantively to consider the evidence of apparent bias of the Expert arising after the Expert Determination had been rendered was inconsistent with the Articles, Bylaws and/or the Applicant Guidebook.

The panel has ordered ICANN to pay FFM’s share of the $152,673 IRP costs.
ICANN’s board will now have to consider the IRP decision, and it seems very possible that a new Community Objection review might be ordered.
On the face of it, it looks like a big win for FFM.
That does not mean that SportAccord will not prevail in its objection for a second time, even with a different presiding expert, however.
One fact in its favor is that it now has three years’ worth of evidence of how Famous Four conducts its business — selling domains at super-cheap prices, some say at the expense of the cleanliness of its namespaces — with which to attempt to show the likelihood of harm.
What seems certain is that the .sport gTLD is not going to see the light of day any time soon.
Read the ruling as a PDF here.

Trump’s ‘Muslim ban’ draws fire, creates confusion in ICANN community

At least two senior-level ICANN community members, including a new member of its board of directors, have been affected by US President Donald Trump’s controversial travel restrictions, imposed this weekend on the citizens of seven Muslim-majority nations.
The so-called “Muslim ban” has also attracted criticism from other members of the community.
Kaveh Ranjbar, Amsterdam-based chief information officer for RIPE/NCC and an ICANN director, said that he is unable to attend this week’s board retreat in Los Angeles because he holds an Iranian passport.
“I have checked this with ICANN’s general counsel and they have tried an external counsel with expertise in immigration,” Ranjbar told DI. “Their advice was that I might be able to travel but they were not sure. As you know the situation is really fluid and things change real fast.”
“After checking with the airline and looking at similar cases, I decided not to even try, because I did not want to risk deportation or being detained in the US,” he said.
Ranjbar was born in Iran but holds dual Dutch-Iranian citizenship.
He said he will participate remotely in the board retreat, likely until with 3am each day.
“However, the work of ICANN board is no different than any other board, it is mostly free exchange of ideas and discussing and challenging positions, outside of the formal setting of the meetings, that’s how you get a feel on your other colleagues positions and will be informed enough about their positions which will enable you to support or oppose with proper grounds and arguments,” he said. “I will miss that critical part.”
Non-Commercial Users Constituency chair Farzaneh Badiei is also affected. She’s Iranian, but recently relocated to the US on an academic visa.
She told NCUC members that she’s effectively stuck there, unable to attend an intersessional meeting in Iceland or ICANN’s March meeting in Denmark, for fear of not being allowed to return.
“I have been advised to take precautionary measures in light of the current draft executive order that might not allow current visa holders re-entry to the United States,” she said.
ICANN is still evaluating the situation.
“We are still trying to fully understand the potential impact of the President’s Executive Order on our community, Board and staff travelers. We want to ensure ICANN’s continued accessibility and openness,” a spokesperson said on Sunday.
ICANN does have Iranian-born staffers, but I’m not aware that any have reported travel problems as a result of the Trump move.
The travel ban has drawn fire from other related organizations.
Internet Society CEO Kathy Brown wrote that she was “deeply troubled” by the ban, adding:

Not only will the purported bans place an unwarranted burden on people in our organization, it is an anathema to the Internet Society whose values rest firmly on a commitment to an open, globally connected community dedicated to the open, global Internet. We are encouraged by the countries who have rejected the U.S. action this weekend and by the human rights organizations that have stood in solidarity with countless refugees and travelers who were so abruptly halted in entering the U.S.

The chairs of the IETF, IAOC and IAB indicated in a joint statement that they may reconsider holding future meetings in the US:

the recent action by the United States government to bar entry by individuals from specific nations raises concerns for us—not only because upcoming IETF meetings are currently scheduled to take place in the U.S., but also because the action raises uncertainty about the ability of U.S.-based IETF participants to travel to and return from IETF meetings held outside the United States….
Our next meeting is planned for Chicago, and we believe it is too late to change that venue. We recognize, however, that we may have to review our other planned meeting locations when the situation becomes clearer. We are already reviewing what to do as far as location for the next open North American meeting slot.

Meanwhile, the Internet Governance Project’s Milton Mueller blogged:

This has significant implications for Internet governance. Coordination and policy making for a global medium based on cooperation and voluntary standards requires open transnational institutions. Participation in those institutions requires the ability to freely travel. The United States can no longer be considered the leader, either politically or ideologically, of an open global Internet if its own society is mired in protective barriers… What a stroke of good fortune that the prior administration succeeded in freeing ICANN from the U.S. government in its waning months.

The travel ban is said to be “temporary”, lasting just 90 days, but some fear it may evolve into a permanent fixture of US policy.

GNSO faces off with governments over IGO cybersquatting

A defiant ICANN working group looking at cybersquatting rules for intergovernmental organizations is sticking to its guns in an ongoing face-off with the Governmental Advisory Committee.
In a report published for public comment this week, the GNSO working group recommended that IGOs should be given the right to use the UDRP and URS rights protection mechanisms, despite not being trademark owners.
But the recommendations conflict with the advice of the GAC, which wants ICANN to create entirely new mechanisms to deal with IGO rights.
I explored a lot of the back story of this argument in two posts a few months ago, which I will not rehash here.
The latest development is the publication of the proposed initial report of the GNSO IGO-INGO Access to Curative Rights Protection Mechanisms Initial Report (pdf) for comment.
The WG was tasked with deciding whether changes should be made to UDRP and URS to help protect the names and acronyms of IGOs and INGOs (international non-governmental organizations).
For INGOs, including the special cases of the International Olympic Committee and the Red Cross/Red Crescent, it decided no changes and no new mechanisms are required, concluding:

Many INGOs already have, and do, enforce their trademark rights. There is no perceivable barrier to other INGOs obtaining trademark rights in their names and/or acronyms and subsequently utilizing those rights as the basis for standing in the existing dispute resolution procedures (DRPs) created and offered by ICANN as a faster and lower cost alternative to litigation. For UDRP and URS purposes they have the same standing as any other private party.

The case with IGOs is different, because using UDRP and URS requires complainants to agree that the panel’s decisions can be challenge in court, and IGOs by their nature have a special legal status that allows them to claim jurisdictional immunity.
The WG recommends that these groups should be allowed access to UDRP and URS if they have protection under Article 6ter of the Paris Convention, a longstanding international intellectual property treaty.
This rule would actually extend UDRP and URS to hundreds more IGO names and acronyms than the GAC has requested protection for, which is just a few hundred. WIPO’s 6ter database by contrast currently lists 925 names and 399 abbreviations.
To deal with the jurisdictional immunity problem, the WG report recommends that IGOs should be allowed to file cybersquatting complaints via a third-party “assignee, agent or licensee”.
It further recommends that if an IGO manages to persuade a court it has special jurisdictional immunity, having been sued by a UDRP-losing registrant, that the UDRP decision be either disregarded or sent back to the arbitration for another decision.
The recommendations with regard IGOs are in conflict with the recommendations (pdf) of the so-called “small group” — a collection of governments, IGOs, INGOs and ICANN directors that worked quietly and controversially in parallel with the WG to come up with alternative solutions.
The small group wants ICANN to create separate but “functionally equivalent” copies of the UDRP and URS to deal with cybersquatting on IGO name and acronyms.
These copied processes would be free for IGOs to use and, to account for the immunity issue, would not be founded in trademark law.
The WG recommendations are now open for public comment and are expected to be the subject of some debate at the March ICANN meeting in Copenhagen.

ICANN joins anti-phishing group board

ICANN’s VP of security has joined the board of directors of the Anti-Phishing Working Group.
Dave Piscitello is one of three new APWG board members, arriving as the group expands its board from two people to five.
APWG said the expansion “is recognition of the growing complexity and scale of Internet crime today and the challenges in responding to this global threat.”
In a press release, it noted that targeted phishing attacks are said to be the root cause of the data thefts that may or may not have influenced the US presidential election last year.
The other two new directors are Brad Wardman of PayPal and Pat Cain of The Cooper Cain Group, a security consulting firm (a different bloke to the similarly named Pat Kane of Verisign).
APWG is an independent, public-private coalition that collects and publishes data about phishing attack trends and advice for how to defend against them.
Part of this work entails tracking how many domain names are involved in phishing, and in which TLDs.
The APWG board also includes chair David Jevans of Proofpoint and secretary-general Peter Cassidy.

Trump nominee open to retaking ICANN oversight role

The incoming head of the US Department of Commerce has indicated that it is unlikely he’ll try to reestablish the US government’s unique oversight of ICANN, at least in the short term.
But at his confirmation hearing in Congress yesterday, Trump nominee for secretary of commerce Wilbur Ross said he’d be open to ideas about how the US could increase its power over ICANN.
He was responding to a question from Ted Cruz, the Texas senator who made halting the IANA transition one of his key concerns last year.
Cruz, framing the question in such a way as to suggest ICANN is now in the hands of an intergovernmental consortium (which it is not) asked Ross whether he was committed to preventing censorious regimes using ICANN to hinder Americans’ freedom of speech.

Ross replied:

As such a big market and really as the inventors of the Internet, I’m a little surprised that we seem to be essentially voiceless in the governance of that activity. That strikes me as an intellectually incorrect solution. But I’m not aware of what it is that we actually can do right now to deal with that. If it exists, if some realistic alternative comes up, I’d be very interested.

His response also mischaracterizes the power balance post-transition.
The US is not “essentially voiceless”. Rather, it has the same voice as every other government as a member of the Governmental Advisory Committee.
Its role is arguably still a lot more powerful than other nations, given that ICANN is now bylaws-bound to remain headquartered in California and under US jurisdiction.
As head of Commerce, Ross will have authority over the National Telecommunications and Information Administration, the agency most directly responsible for dealing with ICANN and domain name issues in general.
NTIA itself will to the best of my knowledge still be headed by assistant secretary Larry Strickling, who handled the IANA transition from the US government side. (UPDATE: this may not be correct)
Ross, 79, is a billionaire investor who made most of his estimated $2.5 billion fortune restructuring bankrupt companies in the coal and steel industries.

DCA files for ANOTHER .africa injunction

DotConnectAfrica is continuing its legal attempt to prevent the .africa gTLD from being delegated to a competitor supported by African governments.
The recalcitrant applicant has filed for another temporary restraining order and preliminary injunction that would prevent ICANN handing .africa to the successful applicant, ZA Central Registry, according to ZACR.
DCA’s last application for an injunction was refused by a California judge in December, but last week it renewed its efforts to stymie the long-delayed geo.
ZACR said on its web site yesterday:

On January 4, 2017, DCA filed an ex parte (emergency) temporary restraining order (“TRO”) asking the Court to prevent ICANN from delegating .Africa to ZACR. The Court denied DCA’s ex parte request for a TRO on the grounds that there was no exigency that required an immediate ruling. The Court further clarified that the prior order denying DCA’s preliminary injunction motion was based upon all arguments submitted by ICANN and DCA (thereby rejecting DCA’s contention in its ex parte papers that the ruling did not include ZACR’s arguments). However, the Court agreed to consider DCA’s new arguments as grounds for a new motion for a preliminary injunction. DCA was given until January 6, 2017 to file its motion. ICANN and ZACR shall file opposition papers by January 18, 2017. DCA will then be given an opportunity to file a reply.

The court is scheduled to hear arguments for and against the injunction January 31, ZACR said.
In the meantime, .africa remains in limbo.

ICANN retires Affirmation of Commitments with US gov

ICANN has terminated its last formal oversight link with the US government.
Late last week, ICANN chair Steve Crocker and Larry Strickling, assistant secretary at the US National Telecommunications and Information Administration mutually agreed to retire the seven-year-old Affirmation of Commitments.
The AoC, negotiated during the tail end of Paul Twomey’s leadership of ICANN and signed by successor Rod Beckstrom, laid out ICANN’s responsibilities to the US government and, to a lesser extent, vice versa.
It included, for example, ICANN’s commitments to openness and transparency, its promise to remain headquartered in California, and its agreement to ongoing reviews of the impact of its actions.
Ongoing projects such as the Competition and Consumer Trust Review originate in the AoC.
The rationale for concluding the deal now is that most of significant provisions of the AoC have been grandfathered into ICANN’s revised bylaws and other foundational documents following the IANA transition, which concluded in October.
Reviews such as the CCT and the lock on its California HQ are now in the bylaws and elsewhere, ICANN said in a blog post.
It’s worth mentioning that the US gets a new administration led by Donald Trump in a little over a week, so it probably made sense to get the AoC out of the way now, lest the new president do something insane with it.
The letters from Crocker and Strickling terminating the deal can be read together here (pdf).

Termination on the .orientexpress

The dot-brand .orientexpress has derailed. That’s a train pun, expect more.
The gTLD operator has become the latest to signal (like a railway signal) to ICANN that it no longer wishes to run its dot-brand, this week asking for a contract cancellation (like a train cancellation).
Despite having left the station (like a train station) in February 2015, it only ever registered its mandatory nic.orientexpress domain, and that doesn’t even resolve any more, according to DI PRO tracking (like a train track).
While the Orient Express brand is familiar to many due to the famous Agatha Christie murder mystery novel, it’s been applied to multiple train companies and journeys over the years.
The gTLD was originally applied for, unopposed, in 2012 by Orient-Express Hotels. However, that company renamed itself to Belmond in 2014.
Belmond still runs a luxury train route bearing the Orient Express name, but apparently its devotion to the brand has run out of steam (like a steam train) and its gTLD was no longer just the ticket (like a train ticket).
It’s the 20th dot-brand to change its mind about owning a gTLD after its ICANN Registry Agreement was already signed.
According to DI PRO stats, almost 100 dot-brands are actively using their domains currently, so it’s not as if the concept has been a complete train wreck (like a train train wreck).

ICA worried ICANN will force URS on .net

The Internet Commerce Association has called for a “moratorium” on the Uniform Rapid Suspension policy being added to legacy gTLD contracts, months before Verisign’s .net contract is up for renewal.
In a blog post, ICA counsel Phil Corwin accused ICANN staff of making policy by the back door by compelling pre-2012 registries to adopt URS, despite a lack of ICANN community consensus policy.
In the last few years the registries for .jobs, .travel, .cat, .pro, .xxx and most recently .mobi have agreed to adopt many aspects of the 2012 Registry Agreement, which includes the URS, often in exchange for lower ICANN fees.
Corwin wrote:

the real test of [ICANN’s Global Domains Division’s] illicit strategy of incremental de facto policymaking will come later this year, when the .Net RA comes up for renewal. We have no idea whether Verisign will be seeking any substantial revisions to that RA that would provide GDD staff with substantial leverage to impose URS, nor do we know whether Verisign would be amenable to that tradeoff.

The .net RA is due to expire July 1 this year.
Verisign pays ICANN $0.75 for each .net domain registration, renewal and transfer. If that were to be reduced to the 2012 standard of $0.25, it would save Verisign at least $7.5 million a year.
The URS provides brand owners with a way to suspend trademark-infringing domains in clear-cut cases. It’s based on UDRP but is faster and cheaper and does not allow the brand owner to seize ownership of the domains.
ICA represents large domain speculators, most of which have their investments tied up in .com and .net domains. It’s complained about the addition of URS to other gTLDs but the complaints have largely fallen on deaf ears.
ICANN has said that it does not force URS on anyone, but that it takes the base new gTLD program RA as its starting point for bilateral negotiations with registries whose contracts are up for renewal.