GAC gives ICANN a way out on IGO acronyms

The ICANN Governmental Advisory Committee has reiterated its call for the protection of intergovernmental organization acronyms in the new gTLD program, but seems to have given ICANN a way to avoid a nasty confrontation.
In its official Communique from the just-concluded meeting in Buenos Aires, Argentina, the GAC provided the following advice concerning IGOs:

The GAC, together with IGOs, remains committed to continuing the dialogue with NGPC [ICANN’s New gTLD Program Committee] on finalising the modalities for permanent protection of IGO acronyms at the second level, by putting in place a mechanism which would:
1. provide for a permanent system of notifications to both the potential registrant and the relevant IGO as to a possible conflict if a potential registrant seeks to register a domain name matching the acronym of that IGO;
2. allow the IGO a timely opportunity to effectively prevent potential misuse and confusion;
3. allow for a final and binding determination by an independent third party in order to resolve any disagreement between an IGO and a potential registrant; and
4. be at no cost or of a nominal cost only to the IGO.

This seems to be a departure from the GAC’s its Durban Communique, in which it had demanded “preventative” measures be put in place to stop third parties registering IGO acronyms.
As we reported earlier this week, the GNSO Council unanimously approved a resolution telling ICANN to remove IGO acronyms from existing block-lists, something the GAC had been demanding.
Now, it seems that ICANN has been given a relatively simple and less confrontational way of accepting the GAC’s watered-down advice.
The Trademark Claims alerts service and Uniform Rapid Suspension dispute resolution process combined would, by my reading, tick all four of the GAC’s boxes.
IGO acronyms do not currently qualify for either, because they’re not trademarks, but if ICANN can figure out a way to allow these strings into the Trademark Clearinghouse, it can probably give the GAC what it wants.
In my view, such a move wouldn’t trample on anyone else’s rights, it would not represent the kind of overkill the GAC originally wanted, nor would it be in conflict with the GNSO’s consensus resolution (which seems to envisage a future in which these acronyms get TMCH protection).
ICANN may have avoided the sticky situation I pondered earlier this week.

ICANN in a sticky spot as GNSO overrules GAC on block-lists

ICANN may have to decide which of its babies it loves the most — the GNSO or the GAC — after receiving conflicting marching orders on a controversial rights protection issue.
Essentially, the GAC has previously told ICANN to protect a bunch of acronyms representing international organizations — and ICANN did — but the GNSO today told ICANN to un-protect them.
The GNSO Council this afternoon passed a resolution to the effect that the acronyms of IGOs and international non-governmental organizations (INGOs) should not be blocked in new gTLDs.
This conflicts directly with the Governmental Advisory Committee’s longstanding advice, which states that IGOs should have their names and acronyms reserved in all new gTLDs.
The Council’s resolution was passed unanimously, enjoying the support of registries, registrars, non-commercial users, intellectual property interests… everyone.
It came at the end of a Policy Development Process that kicked off in 2011 after the GAC demanded that the International Olympic Committee and Red Cross/Red Crescent should have their names protected.
The PDP working group’s remit was later expanded to address new demands from the GAC, along with a UN-led coalition of IGOs, to also protect IGO and INGO names and acronyms.
The outcome of the PDP, which had most of its recommendations approved by the GNSO Council today, was to give the GAC most of what it wanted — but not everything.
The exact matches of the full IOC, RC/RC, IGO and INGO names should now become permanently ineligible for delegation as gTLDs. The same strings will also be eligible for the Trademark Claims service at the second level.
But, crucially, the GNSO Council has voted to not protect the acronyms of these organizations. Part of the lengthy resolution — apparently the longest the Council ever voted on — reads:

At the Top Level, Acronyms of the RCRC, IOC, IGOs and INGOs under consideration in this PDP shall not be considered as “Strings Ineligible for Delegation”; and
At the Second level, Acronyms of the RCRC, IOC, IGOs and INGO under consideration in this PDP shall not be withheld from registration. For the current round of New gTLDs, the temporary protections extended to the acronyms subject to this recommendation shall be removed from the Reserved Names List in Specification 5 of the New gTLD Registry Agreement.

The list of reserved names in Spec 5, which all new gTLD registries must block from launch, can be found here. The GNSO has basically told ICANN to remove the acronyms from it.
This means hundreds of strings like “who” and “idea” (which would have been reserved for the World Health Organization and the Institute for Development and Electoral Assistance respectively) should now become available to new gTLD registries to sell or otherwise allocate.
I say “should”, because the Council’s resolution still needs to be approved by the ICANN board before it becomes a full Consensus Policy, and to do so the board will have to reject (or reinterpret) the GAC’s advice.
The GAC, as of its last formal Communique, seemed to be of the opinion that it was going to receive all the protections that it asked for.
It has told ICANN for the last year that “IGOs are in an objectively different category to other rights holders” and that “their identifiers (both their names and their acronyms) need preventative protection”
It said in its advice from the Durban meeting (pdf) three months ago:

The GAC understands that the ICANN Board, further to its previous assurances, is prepared to fully implement GAC advice; an outstanding matter to be finalized is the practical and effective implementation of the permanent preventative protection of IGO acronyms at the second level.

The key word here seems to be “preventative”. Under the resolution passed by the GNSO Council today, IGO acronyms would be allowed to enter the Trademark Clearinghouse and participate in the Trademark Claims service, but Claims does not prevent anyone from registering a matching domain.
It’s looking like the ICANN board is going to have to make a call — does it accept the GAC advice, or does it accept the unanimous consensus position of the GNSO?
Given that much of ICANN 48 here in Buenos Aires this week has been a saccharine love-in for the “multistakeholder process”, it’s difficult to imagine a scenario in which the GNSO Council does not win out.

These are the top 50 name collisions

Having spent the last 36 hours crunching ICANN’s lists of almost 10 million new gTLD name collisions, the DI PRO collisions database is back online, and we can start reporting some interesting facts.
First, while we reported yesterday that 1,318 new gTLD applicants will be asked to block a total of 9.8 million unique domain names, the number of distinct second-level strings involved is somewhat smaller.
It’s 6,806,050, according to our calculations, still a bewilderingly high number.
The most commonly blocked string, as expected, is “www”. It’s on the block-lists for 1,195 gTLDs, over 90% of the total.
Second is “2010”. I currently have no explanation for this, but I’m wondering if it’s an artifact of the years of Day In The Life data upon which ICANN based its lists.
Protocol-related strings such as “wpad” and “isatap” also rank highly, as do strings matching popular TLDs such as “com”, “org”, “uk” and “de”. Single-character strings are also very popular.
The brand with the most blocks (free trademark protection?) is unsurprisingly Google.
The string “google” appears as an exact match on 930 gTLDs’ lists. It appears as a substring of 1,235 additional blocked strings, such as “google-toolbar” and “googlemaps”.
Facebook, Yahoo, Gmail, YouTube and Hotmail also feature in the top 100 blocked brands.
DI PRO subscribers can search for strings that interest them, discovering how many and which gTLDs they’re blocked in, using the database.
Here’s a table of the top 50 blocked strings.
[table id=22 /]

GACmail? Belgium denies .spa gTLD shakedown

The Belgian government has denied claims that the city of Spa tried to shake down new gTLD applicants for money in exchange for not objecting to their .spa applications.
The Belgian Governmental Advisory Committee representative said this afternoon that Belgium was “extremely unhappy” that the “disrespectful allusions” got an airing during a meeting with the ICANN board.
He was responding directly to a question asked during a Sunday session by ICANN director Chris Disspain, who, to be fair, didn’t name either the government or the gTLD. He had said:

I understand there is at least one application, possibly more, where a government or part a government is negotiating with the applicant in respect to receive a financial benefit from the applicant. I’m concerned about that and I wondered if the GAC had a view as to whether such matters were appropriate.

While nobody would talk on the record, asking around the ICANN 48 meeting here in Buenos Aires it became clear that Disspain was referring to Belgium and .spa.
It was not clear whether he was referring to Donuts or to Asia Spa and Wellness Promotion Council, which have both applied for the string.
The string “spa” was not protected by ICANN’s rules on geographic names, but the GAC in April advised ICANN not to approve the applications until governments had more time to reach a decision.
My inference from Disspain’s question was that Belgium was planning to press for a GAC objection to .spa unless its city got paid, which could be perceived as an abuse of power.
Nobody from the GAC answered the question on Sunday, but Belgium today denied that anything inappropriate was going on, saying Disspain’s assertion was “factually incorrect”.
There is a contract between Spa and an applicant, he confirmed, but he said that “no money will flow to the city of Spa”.
“A very small part of the profits of the registry will go to the community served by .spa,” he said.
This side-deal does not appear to be a public document, but the Belgian rep said that it has been circulated to GAC members for transparency purposes.
There are several applicants whose strings appeared on ICANN’s protected geo names list that have been required to get letters of non-objection from various countries.
Tata Group, for example, needed permission from Morocco for .tata, while TUI had to go to Burkina Faso for .tui. Both are the names of provinces in those countries.
It’s not publicly known how these letters of non-objection were obtained, and whether any financial benefit accrued to the government as a result.

Seven more Donuts gTLDs delegated

Donuts had seven new gTLDs added to the DNS root zone today.
The strings are: .diamonds, .tips, .photography, .directory, .kitchen, .enterprises and .today.
The nic.tld domains in each are already resolving, redirecting users to Donuts’ official site at donuts.co.
There are now 31 live new gTLDs, 26 of which belong to Donuts subsidiaries.

.wow has more collisions than any other new gTLD

Amazon, Google or Demand Media are going to have to block over 200,000 strings in .wow, which all three have applied for, due to the risk of name collisions.
That’s tens of thousands of names greater than any other applied-for gTLD string.
Here’s the top 20 gTLDs, ranked by the number of collisions:
[table id=21 /]
The average new gTLD string has 7,346 potential collisions, according to our preliminary analysis of the lists ICANN published for 1,318 strings this morning.
As blogged earlier, 9.8 million unique domain names are to be blocked in total.
Seventeen gTLDs seem to have been provided with empty lists, so will not have to block any domains in order to proceed to delegation with ICANN.

ICANN blocks almost 10 million new gTLD domains

ICANN has asked new gTLD registry operators to block a total of 9.8 million domain names, due to the perceived risk of damage from name collisions.
To put it another way, Verisign has managed to take close to 10 million domain names off the market.
ICANN today delivered second-level domain block-lists for 1,327 new gTLDs. Combined, the number of unique blocked domains is just over 9.8 million, according to DI’s preliminary analysis.
Some of the lists relate to gTLDs that will not be approved because they’re in mutually exclusive contention sets with other strings (for example, .unicorn and .unicom).
Twenty-five unfortunate gTLD applicants did not receive lists, because ICANN said they do not qualify for the block-list-based “Alternate Path to Delegation”.
We’re currently crunching the numbers and will have more information later today, with a bit of luck.

Demystifying DITL Data [Guest Post]

With all the talk recently about DNS Namespace Collisions, the heretofore relatively obscure Day In The Life (“DITL”) datasets maintained by the DNS-OARC have been getting a lot of attention.
While these datasets are well known to researchers, I’d like to take the opportunity to provide some background and talk a little about how these datasets are being used to research the DNS Namespace Collision issue.
The Domain Name System Operations Analysis and Research Center (“DNS-OARC”) began working with the root server operators to collect data in 2006. The effort was coined “Day In The Life of the Internet (DITL).”
Root server participation in the DITL collection is voluntary and the number of contributing operators has steadily increased; in 2010, all of the 13 root server letters participated. DITL data collection occurs on an annual basis and covers approximately 50 contiguous hours.
DNS-OARC’s DITL datasets are attractive for researching the DNS Namespace Collision issue because:

• DITL contains data from multiple root operators;
• The robust annual sampling methodology (with samples dating back to 2006) allows trending; and
• It’s available to all DNS-OARC Members.

More information on the DITL collection is available on DNS-OARC’s site at https://www.dns-oarc.net/oarc/data/ditl.
Terabytes and terabytes of data
The data consists of the raw network “packets” destined for each root server. Contained within the network packets are the DNS queries. The raw data consists of many terabytes of compressed network capture files and processing the raw data is very time-consuming and resource-intensive.
[table id=20 /]
While several researchers have looked at DITL datasets over the years, the current collisions-oriented research started with Roy Hooper of Demand Media. Roy created a process to iterate through this data and convert it into intermediate forms that are much more usable for researching the proposed new TLDs.
We started with his process and continued working with it; our code is available on GitHub for others to review.
Finding needles in DITL haystacks
The first problem faced by researchers interested in new TLDs is isolating the relatively few queries of interest among many terabytes of traffic that are not of interest.
Each root operator contributes several hundred – or several thousand – files full of captured packets in time-sequential order. These packets contain every DNS query reaching the root that requests information about DNS names falling within delegated and undelegated TLDs.
The first step is to search these packets for DNS queries involving the TLDs of interest. The result is one file per TLD containing all queries from all roots involving that TLD. If the input packet is considered a “horizontal” slice of root DNS traffic, then this intermediary work product is a “vertical” slice per TLD.
These intermediary files are much more manageable, ranging from just a few records to 3 GB. To support additional investigation and debugging, the intermediary files that JAS produces are fully “traceable” such that a record in the intermediary file can be traced back to the source raw network packet.
The DITL data contain quite a bit of noise, primarily DNS traffic that was not actually destined for the root. Our process filters the data by destination IP address so that the only remaining data is that which was originally destined for the root name servers.
JAS has made these intermediary per-TLD files available to DNS-OARC members for further analysis.
Then what?
The intermediary files are comparatively small and easy to parse, opening the door to more elaborate research. For example, JAS has written various “second passes” that classify queries, separate queries that use valid syntax at the second level from those that don’t, detect “randomness,” fit regular expressions to the queries, and more.
We have also checked to confirm that second level queries that look like Punycode IDNs (start with ‘xn--‘) are valid Punycode. It is interesting to note the tremendous volume of erroneous, technically invalid, and/or nonsensical DNS queries that make it to the root.
Also of interest is that the datasets are dominated by query strings that appear random and/or machine-generated.
Google’s Chrome browser generates three random 10-character queries upon startup in an effort to detect network properties. Those “Chrome 10” queries together with a relatively small number of other common patterns comprise a significant proportion of the entire dataset.
Research is being done in order to better understand the source of these machine-generated queries.
More technical details and information on running the process is available on the DNS-OARC web site.
—
This is a guest post written by Kevin White, VP Technology, JAS Global Advisors LLC. JAS is currently authoring a “Name Collision Occurrence Management Framework” for the new gTLD program under contract with ICANN.

Only two new gTLD bids in Initial Evaluation

Initial Evaluation on the first round of new gTLD applications is almost done, with only two bids now remaining in that stage of the program.
ICANN last night published the delayed IE results for PricewaterhouseCooper’s .pwc and the Better Business Bureau’s .bbb, both of which were passes.
The only two applications remaining in IE are Kosher Marketing Assets’ .kosher and Google’s .search.
The latter is believed to be hung up on technical changes it has made to its bid, to remove the plan to make .search a “dotless” gTLD, which ICANN has banned on stability grounds.
Eight applications are currently in Extended Evaluation, having failed to achieve passing scores during IE.

Kleinwächter joins ICANN board

Internet governance expert Wolfgang Kleinwächter has joined ICANN’s board of directors with immediate effect.
Kleinwächter is the emergency replacement for Judith Vazquez, who quit with no explanation last month. He’ll carry out Vazquez’s duties until her term was due to end, a year from now.
He’s a rare insider appointment from the Nominating Committee, which regularly looks outside of ICANN for its board expertise.
He has been involved with ICANN since almost the beginning, and currently sits on the GNSO Council (a term due to expire this week) as a representative of the Non-Commercial Users Constituency.
He’s a German national and currently employed by the University of Aarhus, Denmark, where he teaches on the subjection of internet policy and regulation.
He also has experience in UN-related policy projects such as the World Summit on the Information Society and the Internet Governance Forum.