FTC slams new gTLDs but waffles over .sucks legality

The US Federal Trade Commission has made some strong criticisms of the new gTLD program but has refused to answer the question of whether .sucks is behaving illegally.
In a letter to ICANN today (pdf), FTC chair Edith Ramirez took the opportunity to ask for a bunch of changes to the program.
But she declined to reply to ICANN’s original question, which was: are Vox Populi’s launch policies and pricing illegal?
Ramirez said she “cannot comment on the existence of any pending investigations” but said “the FTC will monitor the activities of registries and other actors in this arena” and “will take action in appropriate cases”.
She goes on to make three “recommendations” about new gTLDs in general.
She wants ICANN to “encourage the best practice” of all domain registrants to prominently identify themselves on their web sites, so that consumers are not confused.
This will never happen.
Ramirez then says rights protection mechanisms should be strengthened to prevent companies like Vox Pop violating the “spirit” of the RPMs by charging such high prices.
Finally, she echoes the advice of the Governmental Advisory Committee in asking for gTLDs representing regulated industries to have much more stringent registration requirements.
ICANN is of course under no obligation to take these recommendations as anything other than the comments of a single community member.
It’s good news for .sucks — without a determination of illegal behavior ICANN presumably has no reason to act against it.
It remains to be seen what the Canadian regulator, which ICANN also contacted for guidance, will say.
UPDATE: ICANN has just released the following statement from general counsel John Jeffrey:

We want to thank Chairwoman Ramirez for her response and for the FTC’s active interest in ICANN.
We greatly appreciate the Chairwoman’s stated understanding and appreciation of the importance of the concerns ICANN had conveyed regarding the .SUCKS gTLD rollout, as well as the broader set of consumer protection issues relating to the new gTLD program that the FTC has restated in the Chairwoman’s letter.
The FTC’s comments on consumer protection issues throughout the new gTLD program have been an important part of the dialogue of the ICANN community relating to these topics.

ICANN fingers perps in new gTLD breach

A small number of new gTLD registries and/or applicants deliberately exploited ICANN’s new gTLD portal to obtain information on competitors.
That’s my take on ICANN’s latest update about the exploitation of an error in its portal that laid confidential financial and technical data bare for two years.
ICANN said last night:

Based on the information that ICANN has collected to date our investigation leads us to believe that over 60 searches, resulting in the unauthorized access of more than 200 records, were conducted using a limited set of user credentials.
The remaining user credentials, representing the majority of users who viewed data, were either used to:
Access information pertaining to another user through mere inadvertence and the users do not appear to have acted intentionally to obtain such information. Access information pertaining to another user through mere inadvertence and the users do not appear to have acted intentionally to obtain such information. These users have all confirmed that they either did not use or were not aware of having access to the information. Also, they have all confirmed that they will not use any such information for any purpose or convey it to any third party; or
Access information of an organization with which they were affiliated. At the time of the access, they may not have been designated by that organization as an authorized user to access the information.

We can infer from this that the 60 searches, exposing 200 records, were carried out deliberately.
I asked ICANN to put a number on “limited set of user credentials” but it declined.
The breach resulted from a misconfiguration in the portal that allowed new gTLD applicants to view attachments to applications that were not their own.
ICANN knows who exploited the bug — inadvertently or otherwise — and it has told the companies whose data was exposed, but it’s not yet public.
The information may come out in future, as ICANN says the investigation is not yet over.
Was your data exposed? Do you know who accessed it? You know what to do.

NameVault terminated by ICANN

NameVault, a registrar that once had over 75,000 domains under management, has been terminated by ICANN over multiple alleged contract breaches.
ICANN told (pdf) the Canadian company this week that its right to sell gTLD domain names will come to an end June 17.
The breaches primarily relate to its failure to provide records relating to the domain stronglikebull.com and its failure to provide ICANN with a working phone number.
NameVault belonged to domain investor Adam Matuzich, but I hear he may have sold it off to an Indian outfit several months ago (that may have been a surprise to ICANN too).
Back in 2011, it had over 75,000 names on its books. Today, it has fewer than 1,000.
The decline seems to be largely due to the departure of fellow domain investor Mike Berkens, who started taking his portfolio to Hexonet a few years ago.
ICANN will now ask other registrars if they want to take over NameVault’s domains.
It’s the fourth registrar to lose its accreditation this year.

ICANN says “no impact” from TMCH downtime

The 10-hour outage in the Trademark Clearinghouse’s key database had no impact on domain registrations, ICANN says.
We reported earlier this week that the TMCH’s Trademark Database had been offline for much of last Friday, for reasons unknown.
We’d heard concerns from some users that the downtime may have allowed registrants to register domain names matching trademarks without triggering Trademark Claims notices.
But that worry may have been unfounded. ICANN told DI:

The issue occurred when two nodes spontaneously restarted. The cause of this restart is still under investigation. Although both nodes came back up, several services such as the network interface, TSA Service IP and the SSH daemon did not. All TMDB Services except the CNIS service were unavailable during the outage. From a domain registration point of view there should have been no impact.

CNIS is the Claim Notice Information Service, which provides registrars with Trademark Claims notice data.

Chehade quits as ICANN CEO

ICANN president and CEO Fadi Chehade will step down from the post March 2016, he said in the last hour.
The shock news means he will have served just three and a half years in the top job by the time he leaves. He started September 14, 2012.
It sounds like he might already has a new job lined up. (UPDATE: He’s told AFP that he does, and the identity of his employer will be disclosed later this year.)
He’s told ICANN he intends “to move into a new career in the private sector (outside the Domain Name Industry)”, according to a press release.
Chehade will probably leave just about the same time as the transition of the IANA functions from US government oversight is finalized, assuming ICANN misses the target date of September 2015 and gets a six-month extension.
Here’s the full text of the press release:

The Internet Corporation for Assigned Names and Numbers (ICANN) today announced that President and CEO Fadi Chehadé has informed the Board he will be concluding his tenure in March 2016 to move into a new career in the private sector (outside the Domain Name Industry).
At the request of the Board, Chehadé will be available to work closely with ICANN after March 2016 to support the transition to a new leader, as well as to advise the Board on any issue they require including the implementation of the IANA Stewardship Transition from the US Government to ICANN and the technical operating community.
“I want to thank Fadi for his strong commitment,” said Dr. Stephen Crocker, Chair of the Board of Directors. I am very confident that with Fadi’s continued leadership and ICANN’s very experienced management team who have the breadth to ensure that ICANN continues to manage its key responsibilities effectively, that the organization’s work will proceed smoothly.”
“I am deeply committed to working with the Board, our staff, and our community to continue ICANN’s mission as we still have much to accomplish,” said Chehadé. “During the remaining 10 months of my tenure, it’s business-as-usual. My priority remains to continue strengthening ICANN’s operations and services to the global community.”

Personally, I think this is going to be horrible for continuity at ICANN. Chehade is a vision guy who had set out long-term goals for the organization that I don’t think he’ll be able to wrap up in his remaining 10 months.
What do you think?

Concern over mystery TMCH outage

The Trademark Clearinghouse is investigating the causes and impact of an outage that is believed to have hit its primary database for 10 hours last Friday.
Some in the intellectual property community are concerned that the downtime may have allowed people to register domain names without receiving Trademark Claims notices.
The downtime was confirmed as unscheduled by the TMCH on a mailing list, but requests for more information sent its way today were deflected to ICANN.
An ICANN spokesperson said that the outage is being analyzed right now, which will take a couple of days.
The problem affected the IBM-administered Trademark Database, which registrars query to determine whether they need to serve up a Claims notice when a customer tries to register a domain that matches a trademark.
I gather that registries are supposed to reject registration attempts if they cannot get a definitive answer from the TMDB, but some are concerned that that may not have been the case during the downtime.
Over 145,000 Claims notices have been sent to trademark owners since the TMCH came online over a year ago.
(UPDATE: This story was edited May 21 to clarify that it is the TMCH conducting the investigation, rather than ICANN.)

Obama, Apple, cancer and Taylor Swift’s cat top lists of most searched-for .sucks domains

You’ve got to hand it to .sucks registry Vox Populi.
The pricing may be “exploitative” and “predatory”, as the intellectual property community believes, but damn if the the company doesn’t know how to generate headlines.
Vox Pop has just added a new ticker stream to its web site, fingering the 50 most sucky celebrities, politicians, companies, social ills and abstract concepts.
The lists have been compiled from “more than a million” searches for .sucks domains that Vox Pop has seen pass through its system, according to CEO and veteran PR man John Berard.
For some reason, TayloySwiftsCat.sucks is the most searched-for in the “Personalities” category.
I’m guessing this relates to a meme that has yet to reach my isolated, middle-aged, non-country-music-loving corner of the world.
Whatever the cat did to earn this ire, it’s presumably equivalent to what Barack Obama, Apple, cancer and just life generally has done to searchers on the .sucks web site.
Here are the lists of most-searched-for terms, as it stands on the .sucks web site right now.
Top Personalities:

• 1. TaylorSwiftsCat
• 2. JustinBeiber
• 3. KevinSpacey
• 4. Oprah
• 5. KimKardashian
• 6. KayneWest
• 7. GuyFieri
• 8. TomBrady
• 9. DonaldTrump
• 10. OneDirection

Catch Phrases:

• 1. Life
• 2. YourMomma
• 3. This
• 4. Everyone
• 5. MyJob
• 6. MyLife
• 7. Reality
• 8. YouKnowWhat
• 9. Who
• 10. College

Causes:

• 1. Cancer
• 2. Technology
• 3. Obesity
• 4. Racism
• 5. Depression
• 6. Meat
• 7. AIDS
• 8. Hate
• 9. Poverty
• 10. Government

Companies:

• 1. Apple
• 2. Google
• 3. Microsoft
• 4. Facebook
• 5. Comcast
• 6. Walmart
• 7. CocaCola
• 8. McDonalds
• 9. Sony
• 10. Amazon

Politicians:

• 1. Obama
• 2. Hillary
• 3. TedCruz
• 4. RandPaul
• 5. StephenHarper
• 6. Putin
• 7. JebBush
• 8. TonyAbbott
• 9. DavidCameron
• 10. Democrats

Make no mistake, this is a headline-generating exercise by Vox Pop.
It comes as .sucks hits 10 days left on the clock for its $1,999+-a-pop sunrise period.
The company got a shed-load of mainstream media publicity when celebrities, starting with Kevin Spacey, started registering their names in .sucks several weeks ago.
It’s looking to get more headlines now, from lazy journalists and bloggers.
This is one of the first, for which I can only apologize.

Barclays confirms move away from .com to new gTLD

Barclays has become one of the first major companies to explicitly confirm it will dump traditional gTLDs and ccTLDs in favor of its new dot-brands.
The $25 billion-a-year bank said it will “transfer its online assets to proprietary domain names — .barclays and .barclaycard — away from the traditional location-specific .com and .co.uk web addresses.”
The transition is a “long-term” play, but it’s started already, with “non-transactional” parts of its web site already using the two new gTLDs.
Basically, we’ve entered the brochureware phase of the dot-brand evolution.
home.barclays already mirrors barclays.com — both are simultaneously live right now — but the online banking service remains at barclays.co.uk.
In a May 11 press release that seems to have slipped under everyone’s radar last week, Barclays chief security officer Troels Oerting, until a few months ago cyber-crime chief at Europol, said:

The launch of the .barclays and .barclaycard domain names creates a simplified online user experience, making it crystal clear to our customers that they are engaging with a genuine Barclays site.
This clarity, along with the advantages of controlling our own online environment, enables us to provide an even more secure service, which we know is of utmost importance to our customers, and ultimately serves to increase trust and confidence in Barclays’ online entities.

This is precisely what advocates of dot-brands pitched as the benefits of the new gTLD program.
While many applicants stated similar plans in their gTLD applications, I think there’s been a degree of skepticism about whether they would follow through.
Barclays’ moves are happening faster than I expected — the .barclays gTLD was delegated in January — showing a degree of enthusiasm.
The charitable Australian Cancer Research Foundation in February launched sites under its .cancerresearch (not technically a dot-brand), while Hong Kong conglomerate CITIC Group has already experimented with a shift from .com to .citic.
In related news, the non-branded .bank gTLD opened for its sunrise period today.

URS coming to .travel under big contract changes

The .travel gTLD, which was approved 10 years ago, will have to support the Uniform Rapid Suspension service, one of several significant changes proposed for its ICANN contract.
I believe it’s the first legacy gTLD to agree to use URS, which gives trademark owners a way to remove domain names that infringe their marks that is quicker and cheaper than UDRP.
Tralliance, the registry, saw its .travel Registry Agreement expire earlier this month. It’s been extended and the proposed new version, based on the New gTLD Registry Agreement, is now open for public comment.
While the adoption of URS may not have much of a direct impact — .travel is a restricted TLD with fewer than 20,000 names under management — it sets an interesting precedent.
IP interests have a keen interest in having URS cover more than just 2012-round gTLDs. They want it to cover .com, .org, .net and the rest too.
Domain investors, meanwhile, are usually cautious about any changes that tilt the balance of power in favor of big brands.
When .biz, .org and .info came up for renewal in 2013, the Intellectual Property Constituency filed comments asking for URS to be implemented in the new contracts, but the request was not heard.
I’m aware of two ccTLDs — .pw and .us — that voluntarily adopted URS in their zones.
Other changes include a requirement for all .travel registrars, with the exception of those already selling .travel domains, to be signatories of the stricter 2013 Registrar Accreditation Agreement.
That’s something Afilias and Neustar only agreed to put in their .info and .biz contracts if Verisign agrees to the same provisions for .com and .net.
The fees Tralliance pays ICANN have also changed.
It currently pays $10,000 in fixed fees every year and $2 per billable transaction. I estimate this works out at something like $40,000 to $50,000 a year.
The proposed new contract has the same fees as 2012-round new gTLDs — a $25,000 fixed fee and $0.25 per transaction. The transaction fee only kicks in after 50,000 names, however, and that’s volume .travel hasn’t seen in over five years.
Tralliance will probably save itself thousands under the new deal.
The contract public comment forum can be found here.

.sucks explains Sunrise Premium name change

Vox Populi Registry abandonment of the .sucks “Sunrise Premium” brand in favor of a new “Market Premium” service is just a renaming, designed to reduce confusion among trademark owners, according to the company.
As we reported Sunday, all mentions of Sunrise Premium — a list of .sucks domains that will always carry a recommended $2,499 a year fee — have been expunged from the Vox Pop web site.
They were replaced with references to Market Premium, which appeared to carry all the characteristics of Sunrise Premium albeit under a new name.
Now, CEO John Berard has confirmed to DI that the program has not changed.
Rather, the new name is an effort to distance it from the regular sunrise period, which is linked to the Trademark Clearinghouse.
The decision was made following last week’s International Trademark Association conference, Berard said:

It was an insight gained from talking to people at INTA15. The intellectual property people there asked us so many times about the sunrise premium list of names that we realized we had allowed a mis-perception to take hold. This is no and never has been a relationship between that list and the TradeMark ClearingHouse. It was surprising how many people thought we had access to the TMCH (we don’t) and merely cut-and-pasted its names.
That is why we renamed it. Now called Market Premium and more clearly presented as a set of names that over time have been viewed as valuable (because they have been registered before). Names on this list will carry a suggested price of $2,499 (yes, the same as was suggested in Sunrise). Given the list is of names that the market has decided has value, it is likely it will contain trademarks.

The change may also be an attempt to head off a contractual squabble with ICANN.
Last Friday, the ICANN Business Constituency told ICANN management that if the Sunrise Premium list had been populated by names drawn from the TMCH, that would have been a breach of the .sucks Registry Agreement.