McAfee calls for ICANN spam crackdown

The security company McAfee has claimed that ICANN needs to try harder in the fight against spam by cracking down on rogue registrars.
In a report released today, the company makes the bold assertion that ICANN “holds the trump card to the spam problem” and that it should step up its compliance efforts.

Although ICANN cannot stop spam itself and does not link spammers to the Internet, it does accredit the registrars that sell the domains that cybercriminals use to fill our inboxes with advertisements and malware

McAfee notes that ICANN has previously de-accredited spammer-friendly registrars such as the notorious EstDomains, but that it needs to do more.

ICANN needs to continue this trend against registrars that knowingly provide domain services to cybercriminals. The organization also needs to harden its policies that define under what circumstances an accreditation can be revoked, so that it can take quicker action against rogue registrars.

The claims come in a report entitled “Security Takes The Offensive”, available here.
The report does not lay all the blame for spam at ICANN’s door, of course. The author also goes after ISPs and the SMTP protocol itself.
The report does not point out that there are 250-odd TLDs over which ICANN has no registrar accreditation powers whatsoever.
Despite my best efforts with Google, I’ve been unable to find a single instance of McAfee publicly participating in ICANN policy-making, so I have to wonder how serious it is.
At least guys like KnuJon are not afraid to show up at meetings and stir things up a bit.

Governments want morality veto on new TLDs

ICANN’s Governmental Advisory Committee wants to be able to kill off new top-level domain applications on cultural and religious grounds.
The GAC has finally broken its radio silence on the “morality and public order” or “MOPO” issue that was such a hot topic at the Brussels meeting in June.
A letter to ICANN (pdf), sent by Canadian GAC chair Heather Dryden, leaves little room for doubt where the GAC stands.

The GAC firmly believes that the absence of any controversial strings in the current universe of top-level domains (TLDs) to date contributes directly to the security and stability of the domain name and addressing system (DNS) and the universal resolvability of the system.
As a matter of principle… the GAC believes that the object of stability, security, and universal resolvability must be preserved in the course of expanding the DNS with the addition of new top-level domains.

This is actually quite powerful stuff.
The GAC is basically saying that no new TLDs should be introduced that would be unacceptable to the lowest common denominator world government.
Think Uganda, asked to make a call on .gay.
Think about any oppressed ethnic group without a territory that wants to apply for its own TLD.
The GAC wants ICANN to create a process for governments and others to object to TLD applications on religious, cultural, linguistic, national and geographical grounds.
It could even result in .xxx being objected to, even though it’s technically part of the 2005 round of new TLDs – the GAC wants the objection process to apply to “all pending and future TLDs”.

.XXX to run the ICANN gauntlet yet again

Bring on the Christians!
The contract between ICANN and ICM Registry to run the .xxx adults-only top-level domain is to be submitted for an ICANN public comment period, again.
ICANN’s board resolved yesterday to publish the proposed registry agreement for comment for at least 30 days.
But it has not yet decided whether to refer the deal to its Governmental Advisory Committee, which remains ICM’s major potential pitfall on its route to the root.
As long as the public comment period kicks off quite soon, the ICANN board could be in a position to make that call at its weekend retreat, September 24.
The .xxx application has generated more public comment over the years than all other ICANN public comment periods combined.
Its last such period, earlier this year, saw thousands of comments, most of them filed in response to outreach by right-wing American Christian groups.
Objections are also regularly received from members of the Free Speech Coalition, a porn trade group.
I expect this forum will be no different. It will be interesting to see what tactics are rolled out this time, given previous failures.
Here’s the meat of the latest resolution:

RESOLVED (2010.08.05.21), upon receipt of ICM’s application documentation, ICANN Staff is authorized to post ICM’s supporting documents and proposed registry agreement for the .XXX sTLD for public comment for a period of no less than 30 days.
RESOLVED (2010.08.05.22), upon completion of public comment period, ICANN Staff shall provide the Board with a summary of the public comments and shall make a recommendation to the Board as to whether the proposed registry agreement for the .XXX sTLD is consistent with GAC advice.
RESOLVED (2010.08.05.23), once the Board has received the above public comment summary and recommendation from the ICANN Staff regarding the proposed registry agreement for the .XXX sTLD, the Board shall at its next possible meeting, consider this recommendation, and determine, consistent with the ICANN Bylaws, whether a GAC consultation shall be required.

.jobs gets its landrush windfall

Is .jobs the newest generic top-level domain?
ICANN has approved changes to Employ Media’s .jobs registry contract, meaning the company is now free to start auctioning off premium generic .jobs domain names to the highest bidder.
The decision paves the way for the company to implement its deal with the DirectEmployers Association, under which the DEA plans to use thousands of geo.jobs and industry.jobs domains as portals to a massive free jobs board.
Currently, .jobs domains are only available in the format companyname.jobs, and there have been only about 15,000 registrations. The new contract removes that restriction.
Under the changes, whatever domains are left after the DEA takes its chunk could be auctioned, and then .jobs could be opened up to essentially any registration.
The .jobs contract still restricts who can register domains, however, to so-called Qualified Applicants.
That’s defined like this (my emphasis):

A qualified applicant (“Qualified Applicant”) is a person who is (a) a member of SHRM; or (b) engaged in human resource management practices that meet any of the following criteria: (i) possess salaried‐level human resource management experience; (ii) are certified by the Human Resource Certification Institute; or (iii) are supportive of the SHRM Code of Ethical and Professional Standards in Human Resource Management, as amended from time to time (the “Code”).

Looks like a check-out check-box to me.
ICANN’s resolution was made over the strong objections of many jobs web sites and the International Association of Employment Web Sites.

Palestine gets its own Arabic domain names

ICANN has awarded five more non-ASCII top-level domains under its internationalized domain name fast-track process for country-code TLD managers.
Palestine, Tunisia and Jordan will all shortly receive delegations for Arabic-script versions of their existing ccTLDs. They join previous recipients including Saudi Arabia and Egypt.
Palestine gets فلسطين, Tunisia gets تونس and Jordan gets الاردن.
These apparently translate as “Falasteen”, “Tunis” and “al-Ordan”, respectively, and are presumably more useful to Arabic speakers than .ps, .tn and .jo.
Because they’re all Arabic, the dots appear to the right of the TLD, rather than the left.
The Occupied Palestinian Territory is, of course, a fringe case when it comes to ccTLDs.
But long ago, IANA made it a matter of policy that it would make no decision about which country or territory deserves its own ccTLD.
If it’s on the ISO 3166-1 list, which is overseen by the UN, it’s in. Palestine was added to that list in 1999, and was awarded .ps by ICANN/IANA in 2000.
The .ps registry is sponsored by the Palestinian National Authority’s telecoms ministry.
ICANN has also resolved to delegate Thailand the IDN ccTLD .ไทย and Sri Lanka both .ලංකා and .இலங்கை.
Interestingly, these two TLDs were approved as part of yesterday’s board meeting’s consent agenda.
The three Arabic names were approved separately, preceded by this:

RESOLVED (2010.08.05.13), the Board IANA Committee is directed, in coordination with ICANN’s CEO, to create improvements to the processes and new guidelines for implementation of the IDN ccTLD Fast Track process.

Judgment day for .xxx and .jobs

ICANN’s board of directors will today meet to decide the fate of the .xxx and .jobs top-level domains.
ICM Registry will find out whether its contract to run .xxx will have to face a potentially lengthy review by ICANN’s notoriously slow-footed Governmental Advisory Committee.
Employ Media will find out whether it will be allowed to relax its registration rules to allow non-company-name .jobs domains.
If the board decides no further GAC intervention is needed, ICM will be on a fast track to having its TLD considered for delegation in Cartagena this December.
If Employ Media’s proposal is rejected, it faces more years in the wilderness of managing a registration base in the low tens of thousands.
I have a track record of lousy predictions, but I’m going to go out on a limb again and make a low-confidence prediction that both registries are going to get what they want.
I’m not sure if it’s been noted before, but there are some strong similarities between the two TLDs and their proposals.
In the case of .xxx, some of the main opponents of the domain have been the adult industry itself. With the .jobs liberalization, the loudest outcry has come from jobs boards.
Both are essentially cases of a registry proposing something that makes good business sense for itself, but which is not necessarily what a significant portion of its would-be constituents want.
In the case of ICM, lack of support from the porn business was what originally killed off the application (at least, that was the official line), a decision that ICANN was recently forced to reverse if not recant.
In the case of .jobs, ICANN’s recent summary and analysis of the well-attended public comment period, which the board will be given prior to voting, may be a telling.
Most of the opposition to the .jobs deal was organized by the International Association of Employment Web Sites, which itself sent a long letter spelling out precisely why it thinks the scheme is bogus.
Of the 2,600 words IAEWS submitted, ICANN’s summary and analysis document quotes just two sentences, one of which is this:

“Neither human resources professionals employed in corporate human resources (‘HR’) departments nor executive search/staffing firms [which are part of the .JOBS community] are eligible for membership in IAEWS.”

The quote is pulled from the introduction of the IAEWS letter, rather than the substance of its objection, and the text in square brackets is ICANN’s own insertion.
I can’t think of any reason that text is worth quoting other than in order to dilute the significance of the IAEWS’ arguments against the .jobs liberalization.
Indeed, the document uses more wordage to describe the nature of the IAEWS letter-writing campaign than it does the content of its letters, which can’t look good for the IAEWS.
Employ Media’s response to the IAEWS letter is quoted at greater length, particularly the bit where it compares its own plans to the new gTLD program.

While they claim that the addition of occupation, industry and geographical identifiers at the second level within the .JOBS sTLD will lead to increased confusion within the marketplace, it is hard to reconcile this argument to ICANN’s extensive public policy work and implementation plan in connection with the new gTLD process. The same fundamental economic basis for going forward with the whole new gTLD initiative also applies to this .JOBS RSEP request; these issues should not be re debated and should not delay or deny approval of the .JOBS RSEP request.

If you’re an ICANN board member, aware of how much of ICANN’s credibility is tied up with the new TLD program, can you really argue with that?
Of course, board and staff don’t always agree, so I may be way off the plot here, but it seems to me that .jobs is likely to very soon become a considerably more open namespace.

VeriSign may settle CFIT lawsuit

VeriSign’s chief executive has not ruled out settling its potentially damaging lawsuit with the Coalition For ICANN Transparency out of court.
During the company’s second quarter earnings call earlier this week, Mark McLaughlin was asked whether there was a way the lawsuit could be made to go away, settling investor nerves.
His response: “It is an option that could be pursued.”
CFIT, backed by Momentous.ca, claims that VeriSign’s .com and .net no-bid contracts with ICANN, including the price increases they allow, are anti-competitive.
If VeriSign loses the case, it could face the loss of its .com and .net monopolies, which makes me think it will certainly seek to settle the case before that becomes a risk.
VeriSign currently has to decide whether to request a review at the Supreme Court, or go to the District Court for trial. It has until October 7 to make its call.
Also during Monday’s earnings call, McLaughlin addressed the growth opportunities VeriSign is looking at, following its renewed focus on the domain name business.
Asked whether the introduction of new TLDs would affect .com and .net growth, McLaughlin said:

I think it’s positive… just related to .com and .net, with the introduction of new TLDs there’s an expectation it just brings more people to the market and we generally do better when more people show up to the market. And the second thing, we intend to participate in some of those ourselves, so we see growth opportunities for us.

He also confirmed again that VeriSign will seek to launch non-ASCII internationalized versions of its existing TLD base, which includes .com, .net, tv and .name.
As Andrew Allemann noted yesterday, he also declared the pay-per-click-based speculative registration market essentially “dead”.

New UDRP provider headed by “ace cyber lawyer”

A new Indian group appears to have applied to become ICANN’s fifth approved UDRP provider.
The New Delhi-based Indian Technology Mediation & Arbitration Center is headed by ICANN veteran Pavan Duggal, who describes himself as “India’s ace cyber lawyer”.
ITMAC has 18 wannabe panelists listed on its web site, some of whom are said to have previously mediated domain name disputes for the World Intellectual Property Organization and Asian Domain Name Dispute Resolution Centre.
The outfit says it will be able to mediate disputes in a dozen or so Indian languages, as well as English, and would be able to handle internationalized domain names.
The base price for a single-domain, single-panelist case would be INR 106,000, roughly $2,279 at today’s exchange rates.
That’s actually almost quite a lot more expensive than WIPO, say, which charges $1,500 for an equivalent service. Quite surprising really – one lakh goes a lot further in India than in the US.
ICANN’s board of directors has the item “Receipt and Posting for Public Comment of the Application to be a New UDRP Provider” on the agenda for its meeting next Thursday.
(Via Managing Internet IP)

.XXX domain contract could get approved next Thursday

The application for the porn-only .xxx top-level domain is on the just-published agenda for ICANN’s board meeting next Thursday.
The line item reads merely “ICM Registry Application for .XXX sTLD”, but I’m told that ICM and ICANN staff have already negotiated a new contract that the board will be asked to consider.
If the board gives it the nod, it would keep the .xxx TLD on track for possible delegation at ICANN’s Cartagena meeting in early December, meaning sales could begin as early as the first quarter 2011.
According to last month’s Brussels resolution, the board has to first decide whether the contract complies with previous Governmental Advisory Committee advice, or whether new advice is required.
If ICM jumps that hurdle, the contract will be published for public comment (fun fun fun) for three weeks to a month, before returning to the board for a vote on delegation.
Also on the agenda for the August 5 board meeting is the issue of whether to give Employ Media the right to liberalize its .jobs TLD and start accepting generic domain registrations.
In the HR industry, the .jobs debate has been just as loud as the .xxx controversy was in the porn business. Some companies think the changes would be unfair on existing jobs sites.
There are a few other intriguing items on next Thursday’s agenda.
The board will discuss the “International Dimension of ICANN”, “Data & Consumer Protection” and “UDRP Status Briefing”, all of which strike me as rather enigmatic, among other topics.
The UDRP item may refer to the ongoing debate about whether ICANN needs to have contractual relations with its UDRP providers.

Browser makers brush me off on DNSSEC support

A couple of weeks back, I emailed PR folk at Microsoft, Mozilla, Google and Opera, asking if they had any plans to provide native support for DNSSEC in their browsers.
As DNS uber-hacker Dan Kaminsky and ICANN president Rod Beckstrom have been proselytizing this week at the Black Hat conference, support at the application layer is the next step if DNSSEC is to quickly gain widespread traction.
The idea is that one day the ability to validate DNSSEC messages will be supported by browsers in much the same way as SSL certificates are today, maybe by showing the user a green address bar.
CZ.NIC has already created a DNSSEC validator plugin for Firefox that does precisely that, but as far as I can tell there’s no native support for the standard in any browser.
These are the responses I received:

Mozilla: “Our team is heads down right now with Firefox 4 beta releases so unfortunately, I am not going to be able to get you an answer.”

Microsoft: “At this stage, we’re focusing on the Internet Explorer 9 Platform Preview releases. The platform preview is a developer and designer scoped release of Internet Explorer 9, and is not feature complete, we will have more to share about Internet Explorer 9 in the future.”
Google: No reply.
Opera: No reply.

In 11 years of journalism, Apple’s PR team has never replied to any request for information or comment from me, so I didn’t bother even trying this time around.
But the responses from the other four tell us one of two things:

• Browser makers haven’t started thinking about DNSSEC yet.

Or…

• Their PR people were just trying to brush me off.

I sincerely hope it’s the former, otherwise this blog post has no value whatsoever.