Vox Pop defends its favorite cybersquatter

The .sucks registry, Vox Populi has complained to ICANN about the fact that its biggest customer keeps losing cybersquatting cases.

In its submission to ICANN’s recently closed public comment period on UDRP reform, Vox Pop bemoans the fact that panels keep finding that Honey Salt, a shell company based in a tax haven, isn’t really engaging in non-commercial free speech.

Honey Salt was the registrant of thousands of .sucks domains, all matching famous trademarks, that redirected visitors to a wiki-style gripe site, populated with content scraped from third-parties, at Everything.sucks.

After a long series of lost UDRP cases, Honey Salt started allowing its domains to expire and zone files suggest only a couple hundred or so remain today.

Neither Honey Salt nor Everything.sucks responded to ICANN’s public comment period, which was seeking input on possible changes to UDRP.

But Vox Pop did on their behalf, complaining bitterly that “forum shopping and bias obstruct free speech” and citing mostly Honey Salt’s lost UDRP cases to evidence its arguments:

Despite 4(c)(iii) of the UDRP stating “noncommercial or fair use” is legitimate use of a domain name – numerous UDRP decisions contradict the Policy’s express recognition of fair use and free speech rights in favor of trademark owners. Several recent UDRP decisions have jeopardized free speech rights for all domain name registrants because of the lack of guidance from ICANN and/or a misapplication of free speech rights and/or bias as it relates to criticism sites.

Honey Salt had consistently argued, UDRP decisions show, that Everything.sucks was non-commercial free speech and as such was not cybersquatting under UDRP precedent and WIPO guidance.

But panels repeatedly pointed out that Everything.sucks was in fact commercial.

At first, the site hosted banners linking directly to sales landers for the domains in question — basically asking the brand owners or others to fork out hundreds or thousands of dollars to claim their matching domains.

When panelists got wise to that, the site started instead publishing the transfer authorization codes for the domains in question, so literally anyone could initiate a transfer and take ownership of the name without even asking Honey Salt’s permission — if they were willing to pay the transfer fee.

Everything.sucks and Honey Salt would not have benefited financially from these transfer fees, which often were thousands of dollars, but Vox Pop, and sometimes its registrar sister company Rebel, which sells .sucks names at cost, would.

Everything.sucks has removed the AuthCodes, but in the most-recent .sucks UDRP case Eutelsat v Honey Salt, the panel called the AuthCode scheme “little more than a ruse to generate registration fees in the thousands of dollars range”.

Vox Pop is now complaining to ICANN, I’m guessing with a straight face, that transfer fees are ICANN-mandated and therefore registrants cannot be blamed if registrars charge for transfers:

The panelist, in an unfounded grasp, used the ICANN-mandated transfer fee, charged by the registrar as rationale to find commercial use by the registrant and hence bad faith by the registrant. Other UDRP panels have similarly disingenuously blamed registrants for ICANN-mandated transfer and renewal fees imposed by registrars; panelists argue that the ICANN-mandated transfer is bad faith even though the registrant has no say or participation.

It’s an incredibly ballsy complaint by Vox Pop, given that it is Vox Pop, as the registry, that sets the price for transfers and renewals in .sucks, and that it is Vox Pop, as the Eutelsat panel noted, that has flagged many trademarks as “premium”-tier names that costs thousands of dollars to transfer and renew.

Vox also argues that it is possible for trademark-owners to “forum shop” between the various UDRP providers, in the hope of finding a panel more favorable to intellectual property interests over free speech rights.

It’s certainly not the only ICANN commenter to make this point, but it’s a pretty thin argument in the case of Honey Salt and .sucks.

Vox argues that WIPO repeatedly favors IP rights over free speech rights, and the outcome of Honey Salt’s UDRP cases may indicate why it holds that view.

Of the 20-odd UDRP cases Honey Salt has defended, most were filed with WIPO and all those filed with WIPO resulted in a complainant win. Three were filed with the National Arbitration Forum and three were filed with the Czech Arbitration Court.

The only case Honey Salt won on the merits was Miraplex v Honey Salt, one of the first cases, filed with the Czech Arbitration Court. That panel bought the defense that Everything.sucks was non-commercial free speech.

But one of the panelists in that case later sat on another Czech Arbitration Court case, Cargotec v Honey Salt, which decided in favor of the complaint. The same guy ruling two different ways on almost identical facts does not suggest panelist bias.

While at least one UDRP panel has suggested Honey Salt is just a front for the .sucks registry, Vox Populi has previously denied any connection exists.

ICANN picks recipient of $1 million Ukraine aid

ICANN has decided to donate $1 million to the Emergency Telecommunications Cluster, an international organization that helps people stay connected during times of crisis.

The donation was announced at ICANN 73 in early March, not long after Russia’s invasion of Ukraine, and ICANN has spent the last six weeks picking a recipient and doing its due diligence. For ICANN, that’s basically warp speed.

The ETC is one of 11 “clusters”, overseen by the UN’s Inter-Agency Standing Committee, which provide relief during humanitarian crises. Other clusters help with food, medicine, and so on.

Its partners include UN agencies, other governmental bodies, charities, and private companies such as Cisco and Iridium.

The ETC has been on the ground in Ukraine since March 3, preparing to provide emergency communications and strengthen infrastructure against cyber-attacks, though its latest report notes that Ukraine’s infrastructure is holding up pretty well so far.

ICANN CEO Göran Marby said in a statement:

This is an initiative for which we have no precedent; it is a first for ICANN. I am proud of the org for the drive and commitment to quickly identify the best path and organization to efficiently deliver meaningful support. The ETC’s vision of “a world where safe and local access to reliable communications is always available” is well aligned with our mission to ensure the stable and secure operation of the Internet’s unique identifier systems.

ICANN’s board has approved an ongoing program of similar donations, not just for Ukraine.

More friction over closed generics

ICANN’s Generic Names Supporting Organization and Governmental Advisory Committee seem to be headed to bilateral talks on the thorny issue of whether “closed generic” gTLDs should be allowed, but not without discontent.

The GNSO’s Non-Commercial Stakeholder Group last week opposed these talks, suggesting that the GAC is trying to acquire more policy-making power and take a second bite at the apple on a issue it has already advised on.

The NCSG wrote (pdf) to the GNSO Council last Thursday to oppose GAC talks, which are being encouraged by ICANN management and board.

Closed generics are dictionary-word gTLDs that do not match the registry’s trademarks but which nevertheless act as though they are a dot-brand, where only the registry may register domains.

There aren’t any right now, because ICANN, acting in 2014 in response to 2013 GAC advice, retroactively banned them from the 2012 application round, even though they were initially permitted.

It’s such a divisive issue that the GNSO working group (known as SubPro) that made the policy recommendations for the next round was, I believe uniquely, unable to come up with a even a fudged recommendation.

The GAC is sticking to its view that closed generics are potentially harmful, and since the GNSO couldn’t make its mind up, ICANN has suggested an informal dialogue between the two parties, to encourage a solution both deem acceptable that could then be thrown back at the GNSO for formal ratification.

The NCSG objected to this idea because it appears, NCSG said, that a new policy process is being created that increases the GAC’s powers to intervene in policy-making when it sees something it doesn’t like.

But the constituency appeared to stand alone during a GNSO Council meeting last Thursday, where the prevailing opinion seemed to be that dialogue is always a good thing and it would be bad optics to refuse to talk.

The Council has formed a small team of four to decide whether to talk to the GAC, which is in favor of the move.

ICANN’s Covid-19 waiver formally appealed

Two reliably regular ICANN meeting attendees have formally asked the Org to change the legal waiver it’s asking everyone to sign if they want to show up in The Hague for ICANN 74 this June.

Michele Neylon of registrar Blacknight Solutions and Eberhard Lisse of .na ccTLD registry Namibian Network Information Center filed an emergency Request for Reconsideration with ICANN last week.

They call the waiver, which absolves ICANN from liability if participants catch Covid-19 even through ICANN’s own gross negligence “unduly broad” and “unreasonable” and “unduly wide and harsh”.

They can’t ask their staff to sign such an all-encompassing waiver, they say.

ICANN’s Board Accountability Mechanisms Committee has already rejected the RfR, saying it doesn’t meet the timing requirements for an emergency request. It will consider it as a regular request in due course, it said.

As expected, ICANN also seems to have fixed the bug I spotted last week that allowed hybrid attendees to register without signing the waiver.

GoDaddy and XYZ sign away rights after UNR’s crypto gambit

ICANN has started asking registries to formally sign away ownership rights to their gTLDs when they acquire them from other registries.

GoDaddy and XYZ.com both had to agree that they don’t “own” their newly acquired strings before ICANN would agree to transfer them from portfolio UNR, which auctioned off its 23 gTLD contracts a year ago.

GoDaddy bought .photo and .blackfriday for undisclosed sums in the auction, it emerged last week. XYZ bought 10 others and newcomer Dot Hip Hop bought .hiphop.

All three transfers were signed off March 10 (though GoDaddy’s were inexplicably not published by ICANN until last Thursday, when much of Christendom was winding down for a long weekend) and all three contain this new language:

The Parties hereby acknowledge that, notwithstanding anything to the contrary in any marketing or auction materials, documentation or communications issued by Assignor or any other agreements between the Parties or otherwise, nothing in the Registry Agreement(s) or in any other agreements between Assignor and Assignee have established or granted to Assignor any property or ownership rights or interest in or to the TLDs or the letters, words, symbols or other characters making up the TLDs’ strings and that Assignee is not being granted any property or ownership rights or interest in or to the TLDs or the letters, words, symbols or other characters making up the TLDs’ strings.

The Parties represent that they understand the scope of ICANN’s Consent, which: (A) does not grant Assignee any actual or purported property or ownership rights or interest in or two the TLDs or the letters, words, symbols or other characters making up the TLDs’s strings; (B) is solely binding and applicable to the assignment of rights and obligations pursuant to the Registry Agreement(s); (C) solely relates to the operation of the TLDs in the Domain Name System as specified in the applicable Registry Agreement(s); and (D) does not convey any rights to the letters, words or symbols making up the TLD string for use outside the Domain Name System.

The TL;DR of this? Registries don’t “own” their gTLDs, ICANN just allows them to use the strings.

The new language is in there because UNR’s auction had offered, as a bonus, ownership of matching non-fungible token “domains” on the blockchain-based alt-root Ethereum Name Service.

Alt-roots arguably present an existential threat to ICANN and a risk to the interoperability of the internet, so ICANN delayed authorization of its approvals for many months while it tried to figure out the legalities.

Dot Hip Hop, for one, has said it couldn’t care less about the Ethereum NFT, and has had it deleted.

Separately, the .ruhr contract has been transferred from regiodot to fellow German geo-TLD operator DotSaarland, a subsidiary of London-based CentralNic, which announced the acquisition in February.

This assignment agreement was signed March 31 — after GoDaddy’s and XYZ’s — and does not include the new ownership waiver language, suggesting that it’s unique to UNR’s auction winners.

However, the friction between blockchain alt-roots is likely to be an issue when the next new gTLD application round opens.

It’s being said that a great many “TLDs” are being registered on various blockchains specifically in order to interfere with matching ICANN applications, and that blockchain fans are attempting to delay the next round to give their own projects more time to take root.

GoDaddy’s two acquisitions bring the total known outcomes of UNR’s auctions to 13 out of 23 gTLDs. At least four more are being processed by ICANN, according to a now month-old statement.

ICANN picks 28 registries for abuse audit

ICANN has kicked off its annual compliance audit, and this time it’s focused on registries rather than registrars.

It’s picked 28 gTLDs based on whether they’ve not been fully audited before, whether they have more than 100 domains, and whether they show up a lot in abuse blocklists (excluding spam blocklists).

Only one gTLD per registry has been picked, which might be why the number is lower than previous audit rounds.

The audit will entail sending a questionnaire to each registry to ask how they are complying with each of their commitments under the Registry Agreement.

Registries have already been told if they’ve been picked. ICANN hopes to have it all wrapped up in the third quarter.

TMCH turning off some brand-blocking services

The Trademark Clearinghouse is closing down two of its brand protection services after apparently failing to attract and retain registry partners.

The company announced recently that TREx, its Trademark Registry Exchange, will shut down after its customers’ existing subscriptions expire, saying:

The communication that we receive from our agents, resellers, clients and other registries that we have reached out to around improving the product shows that there is currently little appetite for such a service.

TMCH said it may revive the service after the new round of new gTLDs happens.

TREx was a service similar to Donuts’ Domain Protected Marks List and others, whereby trademark owners can block their brands across a multitude of TLDs for a substantial discount on the cost of defensive registrations.

But the TMCH offering was not restricted to one registry’s portfolio. Rather, it consolidated TLDs from multiple smaller operators, including at least one ccTLD — .de — into one service.

It seems to have peaked at 43 TLDs, but lost three when XYZ.com pulled out a couple years ago.

Its biggest partner was MMX, which sold its 22 gTLDs to GoDaddy Registry last year. I’d be very surprised if this consolidation was not a big factor in the decision to wind down TREx.

I’d also be surprised if we don’t see a DPML-like service from GoDaddy before long. It already operates AdultBlock on its four porn-themed gTLDs.

The news follows the announcement late last year that TMCH will also close down its BrandPulse service, which notified clients when domains similar to their brands were registered in any TLD, when its existing subscriptions expire.

Both services leveraged TMCH’s contractual relationship with ICANN, under which it provides functions supporting mandatory rights protection mechanisms under the new gTLD program rules, but neither are ICANN-mandated services.

Bye-bye Alice’s Registry

One of ICANN’s oldest accredited registrars has had its contract terminated for non-payment of fees and other alleged breaches.

Alice’s Registry, which has been around since 1999, has been told it’s no longer allowed to sell gTLD domains and that whatever remains of its managed domains will be transferred to another registrar.

The termination comes at the end of more than two years of ICANN’s Compliance department pursuing AR for not paying its accreditation fees, not operating a working Whois service, not implementing RDAP, and not showing its company is in good standing.

The registrar’s web site hasn’t been working in many months, and until its accreditation was suspended last October it had not responded to ICANN’s calls and emails.

Its responses to Compliance since then did not help its case, so ICANN made the decision to terminate.

.kids goes live, plans to launch this year

The long-anticipated .kids top-level domain has its first live site, and the registry has announced plans to start selling domains towards the end of the year.

The contractually mandated nic.kids is now resolving, leading to the registry web site of the DotKids Foundation.

Hong Kong-based DotKids, which has close ties to DotAsia and ICANN director Edmon Chung, said the plan is to start a sunrise period in the third quarter and go to general availability in the fourth quarter this year.

There’s also going to be a special registration period for children’s rights groups and a Q3 “Pioneer Program” for early adopters.

The idea behind the gTLD is to provide a space where all content is considered suitable for under-18s, though the exact policing policies have yet to be written. DotKids is using the UN definition of a child.

It will be a tough balancing act. My fifteen-year-old nephew isn’t happy with content that doesn’t involve the laser-beam dismemberment of tentacled beasts, but a decade ago was content to watch Peppa Pig on a loop for hours a day.

DotKids won the rights to .kids, somehow beating rival applicants Amazon and Google, in 2019. It signed a very strange Registry Agreement with ICANN last year.

Previous attempts at creating child-friendly domains have proven unsuccessful.

In the US, there was a government-mandated .kids.us brought in 20 years ago, aimed at under-13s, but it was a spectacular failure, attracting just a handful of registrations. It was killed off in 2012.

Russian speakers have their own equivalent gTLD .дети, a word that has taken on more sinister overtones in recent weeks, but that currently has only about 800 names under management.

DotKids has its work cut out to make .kids a commercial success, but it is a non-profit and it was the only new gTLD applicant to have most of its ICANN fees waived under the Applicant Support Program.

ICANN suggests its Covid waiver may be worthless

The controversial legal waiver ICANN is insisting you agree to before attending its next public meeting may not be worth the pixels it’s written with, judging by the Org’s latest statement on the matter.

In an updated FAQ, posted in response to a complaint from Blacknight, ICANN now states:

Attending an ICANN meeting remains a risk-based analysis for each attendee, recognizing that sometimes things can and do go wrong. A liability waiver helps enshrine that ICANN’s funds should not be used to defend ICANN against items for which ICANN itself should not be held liable. Protecting ICANN in this way helps support ICANN’s continued ability to serve its mission.

But it denies that the waiver is as all-encompassing as some fear:

There will be times, of course, where ICANN might not perform to an expected best practice, and that might be the cause of injury or damage to an attendee. Those claims against ICANN are not waived.

This apparently contradicts the waiver itself, which continues to say:

I knowingly and freely assume all risks related to illness and infectious diseases, including but not limited to COVID-19, even if arising from the negligence or fault of ICANN.

It also continues to require you to sign away your rights to sue, and your kids’ rights to sue, even if you die of Covid-19 due to ICANN’s “gross negligence”.

There may be a way to avoid the waiver.

Based on my experience, it appears that the waiver is presented in the registration path if you click the box indicating that you will be attending in-person, but if you ALSO check the box saying you’ll be attending remotely then the waiver does not appear.

So if you’re planning on attending in a hybrid fashion, perhaps in-person for only a day or two and on Zoom for the balance, ICANN doesn’t need you to waive your rights.

I expect this is a glitch in how the web form is configured that will probably be fixed not too long after I publish this article.

ICANN 74 will take place in The Hague, and Zoom, in June.