ICANN says ODP will speed up new gTLDs in the long run

A time-consuming process to spec-out the next new gTLD application round before it is even formally approved will actually speed up the program over the long run, an ICANN veep has said.

The so-called Operational Design Phase is a bunch of planning, or issues such as cost and feasibility, that ICANN says it needs to do before the community’s policy recommendations can be put before the board of directors.

The board approved the ODP in September, giving the Org a $9 million budget and a 10-month deadline to complete the project, but the clock doesn’t start ticking until CEO Göran Marby formally starts the process.

Three months later, that still hasn’t happened. ICANN is still “organizing the resources needed and developing the roadmap for the work ahead”, according to a blog post from Karen Lentz, VP of policy research and stakeholder programs.

The Org is doing the preparation for the preparation for the preparation for the next round, in other words.

But Lentz says this will speed up the new gTLD program over the longer term.

We believe the ODP will actually streamline future work. It will have a positive impact on the duration of the implementation process by making the assumptions explicit, answering key questions, and considering how the recommendations on different topics work together in addition to providing a detailed timeline and visibility to the timing of implementation activities. If the Board approves the recommendations, the org and the Implementation Review team would be able to leverage a good amount of work already completed during the ODP. Future rounds would not be possible without the foundational work of an ODP. It’s important to note that without an ODP, this work would still be taking place, but without the structure and transparency that the ODP provides.

Another important consideration to note here is that we are not simply organizing only the next round. We are building a foundational structure for all of the work that the org, the community, and the Board will do over the coming years to continue to evolve the namespace along with the necessary procedures and tools. So the work from this ODP is not only for a single round — this is targeting a long-term plan and for multiple rounds.

If Marby were to start the ODP tomorrow, and ICANN managed to hit its deadline, October 2022 would be the absolute earliest the ICANN board would get the chance to approve the next round.

It’s possible, though not very likely given how intrinsic to ICANN’s mission the opening up of gTLD competition is, that the board could instead decide not to approve the next round.

After the next round gets the thumbs-up, there’s still a whole lot of extra work to do — the aforementioned Implementation Review, hiring contractors, a months-long marketing campaign — before companies would actually get to file their applications.

We’re still looking at 2024 at the earliest for that, in my view, but if there’s one thing we can rely on from ICANN, it’d delay.

Be the next “face” of dot-brands

The Brand Registry Group is seeking a new executive director, after incumbent Martin Sutton decided he’s to leave the group next year.

Sutton, who’s been in the role since 2015, said the BRG is looking for somebody to be the new “face of the dotBrand community”.

Arguably the group’s biggest issue right now is the next new gTLD application round, which still appears to be years away after a decade’s worth for navel-gazing by ICANN.

If BRG members are to be believed, a whole lot of companies that missed out on the 2012 round or have been founded since then are champing at the bit for the chance to get their own dot-brands.

It’s pretty clear from Sutton’s job posting that a long-time ICANN community member is being sought, and I can think of maybe two or three people who would make perfect candidates.

The BRG is not a formal ICANN structure, but it gets time on the agenda at ICANN meetings and has some political clout. Its members include the likes of Apple, Amazon, Fox, Honda and JP Morgan & Chase.

The executive director is its only full-time employee role.

ICANN takes the lamest swipe at Namecheap et al over blockchain domains

ICANN has come out swinging against blockchain domains and the registrars that sell them. And by “come out” I mean it’s published a blog post. And by “swinging” I mean “offered the weakest criticism imaginable”.

The post starts off well enough, observing that services marketed as “domain names” that are not automatically compatible with the global DNS are probably not a great purchase, because they don’t work like regular domains.

Using these alternatives requires something like a browser plug-in or to reconfigure your device to use a specialist DNS resolver network, the post notes, before concluding with a brief caveat emptor message.

All good stuff. ICANN has been opposed to alt-root domain efforts for at least 20 years, and the policy is even enshrined in so-called ICP-3, which nobody really talks about any more but appears to still be the law of ICANN Land.

So, which domain-alternatives is ICANN referring to here, and which registrars are selling them? The post states:

Name resolution systems outside the DNS have existed for a long time. One could mention the Sun Microsystem Network Information Service (NIS), the Digital Object Architecture (DOA), or even the Ethereum Name Service (ENS)…

With some ICANN-accredited registrars now selling NIS, DOA, or other similar domains alongside standard domain names, the potential for confusion among unsuspecting customers seems high.

You may be asking: what the heck (or, if you’re like me, fuck) are NIS and DOA domains, and which registrars are selling them?

Great questions.

NIS is an authentication protocol (a bit like LDAP) for Unix networks developed in 1985 (the same year the original DNS standard was finalized) by Sun Microsystems, a company that hasn’t existed in over a decade.

To the best of my knowledge they’ve never been marketed as an alternative to regular domain names. Nobody’s ever used them to address a publicly available web site. Nobody sells them.

DOA, also known as the Handle System, is a more recent idea, first implemented in 1994, before some of you were born. Handles are mostly numeric strings used to address digital objects such as documents. Libraries use them.

The main thing to know about Handles for the purposes of this article is that they’re specifically designed to convey no semantic information whatsoever. They’re not designed to look like domain names and they’re not used that way.

So how many registrars are selling NIS/DOA domains? I haven’t checked them all, but I’m going to go out on a pretty sturdy limb and guess the answer is “none”, which is a lot less than the “some” that ICANN asserts.

But ICANN also mentions the Ethereum Name Service, a much newer and sexier way of cybersquatting, based on the Ethereum cryptocurrency blockchain.

ENS allows people to buy .eth domain names (which do not function in the consensus DNS) for the Ethereum equivalent of about $5. As far as I can tell, you can only buy them through ens.domains, and no ICANN-accredited registrar is functionally capable of selling them.

The ICANN post also contains a brief mention of “Handshake”, and this appears to be what ICANN is actually worried about.

Handshake domains, also known as HNS, look like regular domain names and a handful of ICANN-accredited registrars are actually selling them.

Handshake is also based on blockchain technology, but unlike ENS it also allows people to create their own TLDs (which, again, do not function without special adaptations). Registrars including Namecheap, 101domain and EnCirca sell them.

It’s Namecheap’s storefront hover text, warning that HNS domains don’t work in the regular DNS, that ICANN appears to be paraphrasing in its blog post.

The registrar has a lengthy support article explaining some of the ways you can try to make a Handshake domain work, including an interactive comment thread in which a Namecheap employee suggests that DNS resolvers may choose to resolve HNS TLDs instead of conflicting TLDs that ICANN approves in future.

That’s the kind of thing that should worry ICANN, but it’s got a funny way of expressing that concern. Sun Microsystems? Digital Object Architecture? What’s the message here?

Twenty years ago, I interviewed an ICANN bigwig about New.net, one of the companies attempting to sell alt-root domains at the time. He told me bluntly the company was “breaking the internet” and “selling snake oil”, earning ICANN a snotty lawyer’s letter.

Today’s ICANN post was ostensibly authored by principal technologist Alain Durand, but I’m going to give him the benefit of the doubt and assume comms and legal took their knives to it before it was published.

While some things haven’t changed in the last two decades, others have.

Google to release another new gTLD next month

Google Registry is gearing up to unleash another gTLD from its stockpile of unreleased strings next month.

The gTLD is .day, one of over 100 that Google applied for in 2012 after a reported brainstorming session at the company.

According to its application:

The specialization goal of the proposed gTLD is to offer a new Internet environment that allows users to create and organize events that have or will occur on a particular day. The proposed gTLD will provide a single domain name hierarchy for Internet users globally to promote celebrations, such as a holi.day, wedding.day, or birth.day.

With that in mind, it’s difficult to see .day being a high-volume TLD along the lines of Google’s popular .app or .dev gTLDs.

While the company itself doesn’t seem to have addressed the launch publicly, it has given details to registrars and informed ICANN about its start-up dates.

It started a Qualified Launch Program program earlier this week. That’s where it gets to hand out a limited number of domains to hand-picked anchor tenants.

The sunrise period, restricted of course to trademarks, begins December 14 and ends January 24.

General availability starts January 25, according to registrars and ICANN records, with a seven-day Early Access Period during which domains can be purchased at daily-decreasing premium prices.

Full regular-price general availability begins February 1.

CentralNic takes over a dead dot-brand

CentralNic has become the latest company to pounce on a dot-brand gTLD that was on its way to the dustbin of history.

The ICANN contract for .case was transferred to a London company called Helium TLDs, a CentralNic subsidiary, last week.

That company was previously called FANS TLD, and was the vehicle CentralNic used to acquire .fans from Asiamix Digital in 2018 before later passing it on to Hong Kong-based ZDNS International.

I believe something similar is happening here.

.case was a dot-brand owned, but never used, by CNH Industrial, which Wikipedia tells me is an American-Dutch-British-Italian company that makes about $28 billion a year making and selling agricultural and construction machinery. Diggers and forklifts and such.

CNH also managed .caseih, .newholland, and .iveco for some of its other brands, but these contracts were terminated earlier in the year.

The company had also asked ICANN to cancel its .case agreement, but that seems to have attracted acquisitive registry operators, and the termination request was withdrawn as I noted in September.

While terminating a dot-brand can often be seen as a lack of confidence in the dot-brand concept, selling off the gTLD to a third party rules out reapplying for the same string in future and can be seen as an even deeper disdain.

Now, .case is in CentralNic’s hands. I believe it’s the first dot-brand the company has taken over.

Rival registries including Donuts, XYZ and ShortDot have also swept up unwanted dot-brand gTLDs, stripped them of their restrictions, and repurposed them as general-purpose or niche spaces.

.music goes live, plots 2022 launch

.music has become the latest new gTLD to join the internet, but it seems unlikely to hit the market before the 10th anniversary of the 2012 ICANN application period.

The TLD was added to the DNS root at the end of October, with the first domain, the obligatory nic.music, going live a few days later.

The registry, Cyprus-based DotMusic, said in a press release that it plans to launch the gTLD next year.

.music was one of the most heavily contested gTLDs from the 2012 application round, with eight total applicants.

It was one of two Community applications, which promised a more controlled, restricted namespace in exchange for a smoother ride through the ICANN approval and contention resolution processes.

But it failed to win its Community Priority Evaluation, leading to years of appeals and ICANN reviews.

The contention set was finally resolved in 2019, apparently via auction, with DotMusic prevailing against heavy-hitters including Amazon and Google.

But the victorious registry was slow out of the blocks after that, taking almost two years to negotiate its registry agreement with ICANN.

It’s still going to be a restricted-community space when it finally launches, which makes its success anything but assured, regardless of the unquestionable strength of its string.

Sadly, while DotMusic CEO Constantine Roussos looked every bit the part of the hip young rocker when the .music application was first filed, showing up everywhere in a sports car, cool haircut, and designer skinny jeans, today he lives in a senior-care home, drives a mobility scooter, and needs to be changed hourly.

Three ICANN directors wanted to go to Puerto Rico

The ICANN board of directors’ decision to scrap the in-person component of its next public meeting was not unanimous, it has emerged.

Three directors voted against the November 4 resolution, which said ICANN 73 would be ICANN’s seventh consecutive online-only gathering, according the a preliminary board report.

The plan for months was to have a “hybrid” meeting, with some face-to-face component at the convention center in San Juan, Puerto Rico, as an intermediate step towards post-pandemic normality.

But at the time of the vote travel restrictions in the US were such that getting to Puerto Rico was tough even for fellow Americans, so ICANN’s meetings team had not been able to do on-site preparation.

Nine directors voted to make 73 virtual, with four absent during the vote, the preliminary report states.

Five directors have taken their seats since the coronavirus pandemic began, and have therefore never officially met with their board colleagues in person.

It’s not the first time the board has been split on this matter. Last year, directors Ron Da Silva and Ihab Osman voted to return to face-to-face for the October 2020 Hamburg meeting.

Da Silva is no longer on the board, but there are at least two other directors among the current line-up on the same page.

The voting breakdown will not be revealed until the board approves the November 4 minutes, which could be months if history is any guide.

Virgin territory as GoDaddy pushes $30 million porn domain renewals

Brand owners big and small are in for a potential surprise December 1, as their 10-year-old .xxx domain blocks expire and registrars bill their customers to convert them into a new annually-renewing GoDaddy service.

GoDaddy confirmed to DI today that it will “auto-convert” the old Sunrise B blocks, first sold by ICM Registry in 2011, to its new AdultBlock service, which provides essentially the same functionality but across four TLDs rather than one.

Tony Kirsch, head of professional services at GoDaddy Registry, said:

Registrars have been contacting all the Sunrise B owners and advising them that as of December 1 they will be grandfathered and automatically converted into an AdultBlock service, but they have a choice to expire that or stop that happening prior to December 1.

And if it is that they don’t do that before December 1, we’ll still give them a grace period of at least 45 days. If that happens they can then, as you’d normally do, just turn around to the registrar and say “We don’t want that” and we will of course refund the money.

This means that GoDaddy, which acquired .xxx and ICM from MMX earlier this year, is billing its .xxx registrar partners to convert and renew what could be as many as 81,000 Sunrise B blocks.

While the registry fee for AdultBlock has not been published, retail registrars I checked have priced the service at $370 to $400 per year, which we can probably assume is low-end pricing. Most .xxx domains are sold via the specialist brand-protection registrars like CSC and Markmonitor, which sometimes have more complex pricing.

So that’s something in the ballpark of $30 million worth of renewal invoices being sent out in the coming weeks, for something in many cases brand owners may have institutionally forgot about.

Kirsch said that AdultBlock was introduced by MMX about 18 months ago and that registrars have been preparing their customers for the Sunrise B expiration for some time.

Sunrise B was a program, unprecedented in the industry at the time, whereby trademark owners could pay a one-off fee — ICM charged its registrars about $160 wholesale — to have their brands removed from the available pool.

The domains exist in the .xxx zone file and resolve to a black page bearing the words “This domain has been reserved from registration”, but they’re not registered and usable like normal defensive or sunrise registrations would be.

Companies got to avoid not only the potential embarrassment of being porn-squatted, but also the hassle of having to explain to a tabloid reporter why they “owned” the .xxx domain in question.

The term of the Sunrise B block was 10 years. ICM told me at the time that this was because the company’s initial registry contract with ICANN only lasted for 10 years, so it was legally unable to sell longer-term blocks, but I’ve never been sure how much I buy that explanation.

Regardless, that 10 year period comes to an end in two weeks.

Because Sunrise B was unprecedented, this first renewal phase is also unprecedented. We’re in virgin territory (pun, of course, very much intended) here.

Will we see the industry’s first public “block junk drop”?

There are a number of reasons to believe trademark owners, assuming they don’t just blindly pay their registrar’s invoices, would choose to allow their blocks to expire or to ask for a refund after the fact.

First, the price has gone up — a lot.

While ICM charged $160 for a 10-year Sunrise B block (maybe marked up by registrars to a few hundred bucks) brand owners can expect to pay something like $3,000 retail for a single string blocked for 10 years.

But buyers do get a bit more bang for their buck. Unlike Sunrise B, AdultBlock also blocks the trademark in three additional GoDaddy-owned TLDs — .porn, .sex and .adult — as standard.

Kirsch said he expects buyers to see a 40% to 50% saving compared to the cost of defensively registering each domain individually.

Second, the appetite for defensive registrations has waned over the past 10 years, with trademark owners employing more nuanced approaches to brand protection, largely due to the flood of new gTLDs since 2013.

When .adult, .sex and .porn launched, without the possibility of Sunrise B blocks, they got about 2,000 regular sunrise registrations each. And that’s extraordinarily high — for most new gTLDs a couple hundred was a good turnout.

Third, the .xxx launch attracted a whole lot of controversy and overreaction, and the .xxx zone file today contains a lot of Sunrise B crap.

When I scrolled a little through the zone, cherry-picking silly-looking blocks in 2019, I found these examples:

100percentwholewheatthatkidslovetoeat.xxx, 101waystoleaveagameshow.xxx, 1firstnationalmergersandacquisitions.xxx, 1stchoiceliquorsuperstore.xxx, 2bupushingalltherightbuttons.xxx, 247claimsservicethesupportyouneed30minutesguaranteed.xxx, 3pathpowerdeliverysystembypioneermagneticsinc.xxx

Is it worth $400 a year to block the trademark “100 Percent Whole Wheat That Kids Love To Eat”? Is there any real danger of a cybersquatter going after that particular brand (apart from the fact that I’ve now written about it twice)?

Kirsch said a “small percentage” of Sunrise B owners have already said they don’t want to convert, but given that the rest will auto-convert, and that the registrars are doing all the customer-facing stuff, the company has limited visibility into likely uptake.

Brian King, director of policy at MarkMonitor, told us: “We generally encourage our clients to consider blocks. They can be cost effective and a lot of times clients would rather have their brand be unavailable without having to register in TLDs where they don’t want to own domain registrations for any number of reasons.”

One reason brand owners may want to consider converting to AdultBlock — it’s rumored that GoDaddy will be relaxing its eligibility criteria for .xxx next year, removing the requirement for registrants to have a nexus to the porn industry.

It’s always been kind of a bullshit rule, basically a hack to allow ICM to run a “sponsored” TLD under ICANN’s rules from the 2003 application round, but doing away with it would potentially make it easier for cybersquatters to get their hands on .xxx domains.

CSC told customers in a recent webinar that the rules are likely to be changed next year, increasing the risk of cybersquatting.

There’s some circumstantial evidence to suggest that CSC might be on to something — pretty much every “sponsored” gTLD from the same 2003 application round as .xxx has relaxed their reg rules to some extent, sometimes when their contracts come up for renewal and ICANN tries to normalize them with the text of the standard 2012-round agreement.

And GoDaddy’s .xxx contract with ICANN is being renegotiated right now. It was due to expire in March, but it was extended in February until December 15, a little under a month from now. We may soon see ICANN open up the new text for public comment.

Kirsch, who’s not part of the negotiations, could not confirm that the eligibility relaxation is going to happen or that it’s something GoDaddy is pushing for.

If it were to happen, it wouldn’t be for some time, and it wouldn’t necessarily impact on the December 1 deadline for Sunrise B conversions, which is going to be interesting to watch in its own right.

“There are registrations that are protecting people’s trademarks that are expiring and our primary objective here is to ensure that that protection continues, and that’s what we’ll do,” GoDaddy’s Kirsch said.

“If we just let them expire, it would create a lot of opportunity for brand infringement. Faced with that choice, our primary objective is to protect trademark owners,” he said.

ICANN abandons face-to-face plan for Puerto Rico

ICANN has canceled its plans for a “hybrid” ICANN 73, saying this morning that the meeting will go ahead as an online-only virtual meeting.

Its board of directors yesterday voted to abandon efforts to have a face-to-face component in Puerto Rico as originally planned, as I predicted a few days ago.

"Impact of COVID-19 on ICANN73". That's the same language ICANN board uses in its agenda items when it's planning for no face-to-face component. Just saying. https://t.co/TZc7lExu7N

— Kevin Murphy (@DomainIncite) November 3, 2021

ICANN of course said it’s because of the coronavirus pandemic, and more particularly the associated travel restrictions and the lack of access to vaccines in some parts of the world from which its community members hail.

The US Centers for Disease Control currently rates Puerto Rico as its second-highest risk level, meaning ICANN’s meetings staff have been unable to travel there to do on-site planning. ICANN said:

While there has been progress that might make it feasible to plan for and convene a meeting in San Juan, Puerto Rico in March 2022, the current risks and uncertainties remain too high to proceed with an in-person meeting or with an in-person component.

Its board resolution stated:

Between the global inequity in vaccine availability across the world, continuing restrictions on persons from many countries or territories being allowed to enter the U.S., and backlogs in visa processing for those who are able to enter the U.S., ICANN org cannot estimate with any confidence the ability for attendees outside of the U.S. to attend ICANN73.

So 73 will be Zoom again. The time zone will remain UTC-4, Puerto Rico local time, which should make it less problematic for Europeans to attend.

The dates are still slated for March 5 to March 10 next year, but it seems likely that we’ll be looking at a March 7 kick-off, as March 5 is a Saturday and people don’t like working weekends if not somewhere they can also work on their tans.

ICANN said it “affirmed its intent” to attempt the hybrid model again for the mid-year ICANN 74 meeting, which is due to take place in The Hague, Netherlands, next June.

It’s bad news for ICANN participation, which has been declining in the new era of virtual meetings, but good news for its bank account. Virtual meetings cost a few million dollars less than in-person ones.

ICANN teases prices for private Whois lookups

ICANN has started to put some flesh on the bones of the forthcoming (?) SSAD system for accessing private Whois records, including teasing some baseline pricing.

During a session at ICANN 72 last week, staffers said responses to recent requests for information put the cost of having an identity verified as an SSAD user at about $10 to $20.

Those are vendor wholesale prices, however, covering the cost of looking at a government-issue ID and making sure it’s legit, and do not include the extra administration and cost-recovery charges that ICANN plans to place on top.

The verification fee would have to be renewed every two years under ICANN’s proposal, though the verification vendors are apparently pushing for annual renewals.

The fee also would not include the likely per-query charge that users will have to pay to request the true personal data behind a redacted Whois record.

It’s not currently anticipated that any money would flow to registrars, CEO Göran Marby said.

SSAD, the Standardized System for Access and Disclosure, is currently undergoing Operational Design Phase work in ICANN, with monthly webinar updates for the community.

ICANN expects to reveal more pricing details on the December webinar, staffers said.