Latest news of the domain name industry

Recent Posts

9,000 people tell ICANN they don’t want .com price increases. Here’s what some of them said

Kevin Murphy, February 17, 2020, Domain Registries

The public have spoken: they don’t want Verisign to get the right to raise .com prices again.
ICANN’s public comment period on the amended .com contract closed on Friday, with just shy of 9,000 comments which appear to be overwhelmingly against price-raising powers.
Comments
Almost 2,000 of the comments have the same subject line, “Proposed Amendment 3 to the .COM Registry Agreement”, suggesting they were generated by the Internet Commerce Association’s semi-automated outrage tool.
It’s a lot, but it’s dwarfed by seemingly non-ICA submissions, which will make the opposition to the deal harder to ignore than with last year’s .org deal, where many of the 3,000 comments were written off as “akin to spam”.
.com’s wholesale fee has been frozen at $7.85 per year since 2012, but Verisign managed to persuade the Trump administration in 2018 to allow it to return to the old policy of being able to raise prices by 7% in four out of the contract’s six years.
After a year’s negotiation, ICANN agreed to incorporate that change into its Registry Agreement with Verisign. Some commentators, including the Registrars Stakeholder Group, are now saying that ICANN should put contracts out to comment BEFORE they are negotiated.
The RrSG said of price increases:

The RrSG is concerned that the proposed price increases are without sufficient justification or an analysis of its potentially substantial impact on the DNS. ICANN has not explained how increase domain name prices are in the public interest or how this furthers the security and stability of the DNS. The price increases appear only to benefit one company, which has the right to operate .com in perpetuity (and without a competitive bidding process). This is inconsistent with ICANN’s bottom-up multi-stakeholder model.

It’s also understandably pissed off that Verisign is to get the right to own its own registrar for the first time, which could shake up the retail domain market.
While the proposed contract does not allow the hypothetical Verisign registrar to sell .com domains, the registrars think they’ve spotted a loophole:

nothing in the amendment prevents Verisign from reselling .COM domains via another registrar. In theory, Verisign could resell .COM domain names at or below cost and still profit from the wholesale .COM price

Some registrars submitted separate comments that echoed the RrSG collective view.
GoDaddy commented that there should be an economic study on the potential impact of higher pricing on competition before any increases are allowed to go into effect, adding:

GoDaddy believes that ICANN has agreed to a framework for wholesale price increases in .COM that will negatively impact current and future registrants of .COM domain names, as well as the overall domain name industry, which is disproportionately dependent and impacted by changes in .COM pricing. We are further concerned that there is no effective competition to assist in establishing what is a reasonable price for .COM.

Namecheap, which has also been vocal in fighting .org price increases, noted that .com prices could go up by as much as 70% over the next decade, due to the compound impact of annual 7% rises, adding:

The .com registry is well-established, so due to gained efficiencies, the cost of .com domain names should remain static or go down. It is not clear how much registrars will pass these price increases along to consumers, but it is likely that most of this increase will be paid for by domain name registrants.

Drop-catch specialist TurnCommerce/NameBright called for .com to be put out for competitive bidding:

There is simply no legitimate argument that competition for registry contracts—especially the largest registry contract—is bad for the domain name system or for consumers. Without the prospect of competitive pressure, Verisign has no incentive to be efficient, innovative, and effective. In the time that Verisign has operated the registry, prices have increased, we believe innovation has stalled, while Verisign’s operating costs have apparently declined.

As far as I can tell, the Registries Stakeholder Group, of which Verisign is a member, did not submit a comment. But some other constituencies did.
The Business Constituency generally supports ICANN’s somewhat hands-off approach to price regulation, but it did complain that there should have been a public consultation before the bilateral contract talks began a year ago. It wrote:

The BC has no practical objection to price increases that average just 4.5% per year for businesses who register .COM domains. Some BC members are concerned that Verisign has not provided justification for increasing .COM prices, though we are not aware of any requirement for gTLD operators to provide such justification. And while some BC members would prefer that ICANN seek competitive bids to operate existing registries, the BC has generally supported presumptive renewal performance incentives in registry agreements.

If you’re picking up hints of internal BC dissent in that comment, it’s almost certainly because BC member Zak Muscovitch is also general counsel of the ICA and was one of several contributors to its drafting.
The only other formal GNSO stakeholder group to submit a comment appears to be the Intellectual Property Constituency, but it took no position on pricing.
The At-Large Advisory Committee, which according to its web site “acts on the interests of Internet users”, sent a borderline humorous “Valentine” to the ICANN board that does not mention pricing but does congratulate ICANN on securing a $20 million Verisign bung, which is earmarked for DNS security work.
Here’s a sample of 10 public comments I clicked on randomly:

I’m writing to express disappointment and concern regarding the recent ICANN changes made to their contract with Verisign. These changes potentially create a lot of harm and unnecessary expense to customers for years to come. Please take customers into consideration before going forward with this.

Please don’t increase .com prices. As a small business owner we feel every price increase in our family business. We want to be able to keep the domain name that we have spent years building as our small business home on the web.

I’m here to tell you to stop this proposed price increase. You are being greedy. 40% price hikes with no caps in sight are ridiculous, stop it. I’m tired of getting ripped off by big secretive corporations and sleazy government agencies, and now this includes YOU!. We aren’t going to just put up with it, I, and a lot of others are here to fight! We demand to know
what you are doing with the money you propose to reap from us, aside from lining your pockets! Proveme wrong, give the internet community the clarity it deserves, and now demands!

This is a disgrace and not right.

I disagree with the changes that this amendment (3) will make to the domain registry system. I believe that this increase of fees will stifle innovation and takes the web further towards privatization and big money.
I know that I would not have taken as many opportunities or risks if prices were significantly higher and domains were a larger cost of business.
I urge you to reconsider these changes and reject this amendment.

I am writing in opposition to the proposed Verisign deal with respect to .com domains. I believe the current arrangement should be kept and strict price controls from ICANN should be preserved for .com domains. Verisign has no business exerting control or influence over ICANN, and the deal as proposed will be bad for consumers and anyone who holds a .com domain.
Please do not proceed with the proposed changes.

Please stop trying to fuck up the internet. It has been excessively adapted to suit capitalism. I think many more than just me have had enough. Stop being a shady ass business.

I do not agree with the extraordinary increase in prices for .com domains that appears to be a direct response to a bribe paid by Verisign company to the board of ICANN.
We live in perilous times, where democracy is threatened in every side by the resurgence of corruption, cronyism, and the far right.
You appear to be allowing the backbone of the internet become corrupted by greed, which would horrify the founding fathers of this essential technology.
Show some integrity and don’t give in to the basest of your natures.

I am a registrant of more .com domain names. I am against the proposed price increase to .COM domains. Verisign is merely your manager of the .COM Registry – it has no business dictating the price. ICANN is supposed to govern the domain name system in the public interest.

Thanks first for your hard work.
Please keep prices as they are and avoid this change that could have dire consequences for the entire internet as other less democratic countries will start soon offering alternative domains to .com. Furthermore, any increase will cause difficulties for us who are part of the third world.

If you’ve got more time on your hands than I have, you can peruse all 9,000 comments at your leisure over here. If you find anything good, please do drop a link in the comments.
Some poor bastard at ICANN now has the job of going through and summarizing all of them into ICANN’s official comment report, which has a March 6 deadline.

ICA will help you support .com price increases (but doesn’t want you to)

Kevin Murphy, February 10, 2020, Domain Registries

The Internet Commerce Association has released a new version of its semi-automated commenting tool, making it a bit easier for domainers and others to complain to ICANN about the proposed .com price increases.
Surprisingly, the tool will also help you file a comment in support of Verisign’s 7%-a-year price-raising powers, though obviously ICA would prefer you do not.
The tool is based on the one ICA launched last year when Public Interest Registry was due to get its .org price caps lifted by ICANN, but ICA general counsel Zak Muscovitch says that it’s been refined following feedback.
It allows users to identify what kind of registrant they are (domainer, end user, or just concerned netizen) and select from several options to create pre-written comments that reflect their own views. They can also enter their own free text before hitting submit.
One of the options is “I support the proposed price increase which allows for a 31% price increase through 2024”, but I can’t imagine anyone apart from Verisign staff and shareholders checking that particular box.
The .org version of the tool caused a bit of a stir last year after ICANN’s Ombudsman compared submissions made through it to “spam”. He caught some flak for that.
Muscovitch tells DI that it’s not just domainers using the service. Some registrars are directly contacting their customers to encourage them to submit comments, he said, so the views of “the public at large” are being reflected.
At the time of publication about 350 comments have been submitted, more than half of which appear to have originated via the ICA tool.
The public comment period closes February 14.
If you don’t fancy using the ICA tool, submitting a comment directly to ICANN doesn’t appear to be particularly difficult. You simply go here, click the “Submit Comment” button, and ICANN will open up your mail client’s compose window with the appropriate address pre-populated.
Perhaps predictably, I remain skeptical that this kind of thing will have any impact on ICANN’s decision to approve a contract it spent a year negotiating.
But it can’t hurt, right? After all, the reason Verisign only gets to raise prices in four out of six years is because so many people complained about the much more expansive proposed powers back in 2006, and ICANN is still reeling from the outrage over .org…

Ethos’ .org pricing promise may be misleading

Kevin Murphy, February 10, 2020, Domain Registries

The more Ethos Capital protests that its plans for .org pricing are not as bad as its critics think, the less I believe it.
Since November, the would-be buyer of Public Interest Registry has being publicly committing to maintain what it calls PIR’s “historic practices” related to pricing.
PIR, under its last ICANN contract, was allowed to raise prices by up to 10% per year, but it did not always exercise that right. In fact, the wholesale price of .org has been fixed at $9.93 since August 2016.
Ethos has described its price increase plans in a very specific, consistent way. In November it said:

Our plan is to live within the spirit of historic practice when it comes to pricing, which means, potentially, annual price increases of up to 10 percent on average — which today would equate to approximately $1 per year.

Last month, chief purpose officer Nora Abusitta-Ouri wrote:

We committed to limiting any potential increase in the price of a .ORG domain registration to no more than 10% per year on average

Last week, she wrote:

Ethos has committed to limiting any potential increase in the price of a .ORG domain registration to no more than 10% per year on average

Over the weekend, she added:

we are not saying that we will raise prices 10% every year — our commitment is that any price increase would not exceed 10% per year on average, if at all.

Clearly, the talking point has been copy-pasted a few times, and it always includes the words “10% per year on average”.
On average.
What does that mean? What are we averaging out here? It can’t be across the .org customer base, as registries aren’t allowed to vary pricing by registrant, so we must be talking about time. PIR has a 10-year contract with ICANN, so we must be talking about prices going up no more than 10% per year “on average” over the next decade.
If PIR, under Ethos’ stewardship, decides to raise prices by exactly 10% every year starting in 2020, the wholesale cost of a .org domain will be $25.76 by 2029, a 159% increase on today’s rate.
Assuming for the sake of this thought experiment that .org stays flat at 10 million registrations (it’s actually a little more today, but it’s declining), Ethos would be looking at a $258 million-a-year business by 2029, up from today’s $99 million.
Over the course of the 10-year contract, .org would be worth a cumulative $1.74 billion in reg revenue, up from the $993 million it would see without price increases.
But Ethos is only promising that price increases will be no more than 10% per year on average, remember, and it’s even hinted that there could be some years with no increases at all.
I noted in November that this commitment could see Ethos raise prices in excess of 10% early on, then freeze them so the increase averages back down to 10% over time.
It would of course make the most sense to front-load the price increases, to maximize the return.
At one extreme, Ethos could raise the price to $25.76 a year immediately, then lock the price down until 2029. That would make .org a $258 million-a-year business overnight, and making the cumulative 10-year revenue around the $2.58 billion mark.
Or, it could raise prices by 20% in alternate years, adding up to $1.77 billion in total top-line and a price to registrants of $24.71 by 2028.
There’s an infinity of variations on these strategies, and Ethos’ modeling is certainly more complex than the envelope upon which I just jotted these simplified figures down, but it’s pretty clear that while the company may well stick to the letter of its promises, it gets its best returns if it raises prices hard and early.
The more I read “on average” repeated in Ethos’ literature, the more convinced I become that this is exactly what it has in mind.

Hacking claims resurface as .hotel losers force ICANN to lawyer up again

Kevin Murphy, February 7, 2020, Domain Policy

The fight over .hotel has been escalated, with four unsuccessful applicants for the gTLD whacking ICANN with a second Independent Review Process appeal.
The complaint resurrects old claims that a former lead on the successful application, now belonging to Afilias, stole trade secrets from competing applicants via a glitched ICANN web site.
It also revives allegations that ICANN improperly colluded with the consultant hired to carry out reviews of “community” applications and then whitewashed an “independent” investigation into the same.
The four companies filing the complaint are new gTLD portfolio applicants MMX (Minds + Machines), Radix, Fegistry, and Domain Venture Partners (what we used to call Famous Four).
The IRP was filed November 18 and published by ICANN December 16, but I did not spot it until more recently. Sorry.
There’s a lot of back-story to the complaint, and it’s been a few years since I got into any depth on this topic, so I’m going to get into a loooong, repetitive, soporific, borderline unreadable recap here.
This post could quite easily be subtitled “How ICANN takes a decade to decide a gTLD’s fate”.
There were seven applicants for .hotel back in 2012, but only one of them purported to represent the “hotel community”. That applicant, HOTEL Top Level Domain, was mostly owned by Afilias.
HTLD had managed to get letters of support from a large number of hotel chains and trade groups, to create a semblance of a community that could help it win a Community Priority Evaluation, enabling it to skip to the finish line and avoid a potentially costly auction against its rival applicants.
CPEs were carried out by the Economist Intelligence Unit, an independent ICANN contractor.
Surprisingly to some (including yours truly), back in 2014 it actually managed to win its CPE, scoring 15 out of the 16 available points, surpassing the 14-point winning threshold and consigning its competing bidders’ applications to the scrap heap.
There would be no auction, and no redistribution of wealth between applicants that customarily follows a new gTLD auction.
Naturally, the remaining applicants were not happy about this, and started to fight back.
The first port of call was a Request for Reconsideration, which all six losers filed jointly in June 2014. It accused the EIU of failing to follow proper procedure when it evaluated the HTLD community application.
That RfR was rejected by ICANN, so a request for information under ICANN’s Documentary Information Disclosure Policy followed. The losing applicants reckoned the EIU evaluator had screwed up, perhaps due to poor training, and they wanted to see all the communications between ICANN and the EIU panel.
The DIDP was also rejected by ICANN on commercial confidentiality grounds, so the group of six filed another RfR, asking for the DIDP to be reconsidered.
Guess what? That got rejected too.
So the applicants then filed an IRP case, known as Despegar v ICANN, in March 2015. Despegar is one of the .hotel applicants, and the only one that directly plays in the hotel reservation space already.
The IRP claimed that ICANN shirked its duties by failing to properly oversee and verify the work of the EIU, failing to ensure the CPE criteria were being consistently applied between contention sets, and failing in its transparency obligations by failing to hand over information related to the CPE process.
While this IRP was in its very early stages, it emerged that one of HTLD’s principals and owners, Dirk Krischenowski, had accessed confidential information about the other applicants via an ICANN web site.
ICANN had misconfigured its applicant portal in such a way that any user could very access any attachment on any application belonging to any applicant. This meant sensitive corporate information, such as worst-case-scenario financial planning, was easily viewable via a simple search for over a year.
Krischenowski appears to have been the only person to have noticed this glitch and used it in earnest. ICANN told applicants in May 2015 that he had carried out 60 searches and accessed 200 records using the glitch.
Krischenowski has always denied any wrongdoing and told DI in 2016 that he had always “relied on the proper functioning of ICANN’s technical infrastructure while working with ICANN’s CSC portal.”
The applicants filed another DIDP, but no additional information about the data glitch was forthcoming.
When the first IRP concluded, in February 2016, ICANN prevailed, but the three-person IRP panel expressed concern that neither the EIU nor ICANN had any process in place to ensure that community evaluations carried out by different evaluators were consistently applying the CPE rules.
The IRP panel also expressed concern about the “very serious issues” raised by the ICANN portal glitch and Krischenowski’s data access.
But the loss of the IRP did not stop the six losing applicants from ploughing on. Their lawyer wrote to ICANN in March 2016 to denounce Krischenowski’s actions as “criminal acts” amounting to “HTLD stealing trade secrets of competing applicants”, and as such HTLD’s application for .hotel should be thrown out.
Again, to the best of my knowledge, Krischenowski has never been charged with, let alone convicted of, any criminal act.
Afilias wrote to ICANN not many weeks later, April 2016, to say that it had bought out Krischenowski’s 48.8% stake in HTLD and that he was no longer involved in the company or its .hotel application.
And ICANN’s board of directors decided in August 2016 that Krischenowski may well have accessed documents he was not supposed to, but that it would have happened after the .hotel CPE had been concluded, so there was no real advantage to HTLD.
A second, parallel battle against ICANN by an unrelated new gTLD applicant had been unfolding over the same period.
A company called Dot Registry had failed in its CPE efforts for the strings .llc, .llp and .inc, and in 2014 had filed its own IRP against ICANN, claiming that the EIU had “bungled” the community evaluations, applying “inconsistent” scoring criteria and “harassing” its supporters.
In July 2016, almost two years later, the IRP panel in that case ruled that Dot Registry had prevailed, and launched a withering attack on the transparency and fairness of the ICANN process.
The panel found that, far from being independent, the EIU had actually incorporated notes from ICANN staff into its CPE evaluations during drafting.
It was as a result of this IRP decision, and the ICANN board’s decision that Krischenowski’s actions could not have benefited HTLD, that the losing .hotel applicants filed yet another RfR.
This one lasted two and a half years before being resolved, because in the meantime ICANN launched a review of the CPE process.
It hired a company called FTI Consulting to dig through EIU and ICANN documentation, including thousands of emails that passed between the two, to see if there was any evidence of impropriety. It covered .hotel, .music, .gay and other gTLD contention sets, all of which were put on hold while FTI did its work.
FTI eventually concluded, at the end of 2017, that there was “no evidence that ICANN organization had any undue influence on the CPE reports or engaged in any impropriety in the CPE process”, which affected applicants promptly dismissed as a “whitewash”.
They began lobbying for more information, unsuccessfully, and hit ICANN with yet another RfR in April 2018. Guess what? That one was rejected too.
The .hotel applicants then entered into a Cooperative Engagement Process — basically pre-IRP talks — from October 2018 to November 2019, before this latest IRP was filed.
It’s tempting to characterize it as a bit of a fishing expedition, albeit not a baseless one — any allegations of ICANN’s wrongdoing pertaining the .hotel CPE are dwarfed by the applicants’ outraged claims that ICANN appears to be covering up both its interactions with the EIU and its probe of the Krischenowski incident, partly out of embarrassment.
The claimants want ICANN to be forced to hand over documentation refused them on previous occasions, relating to: “ICANN subversion of the .HOTEL CPE and first IRP (Despegar), ICANN subversion of FTI’s CPE Process Review, ICANN subversion of investigation into HTLD theft of trade secrets, and ICANN allowing a domain registry conglomerate to takeover the ‘community-based’ applicant HTLD.”
“The falsely ‘independent’ CPE processes were in fact subverted by ICANN in violation of Bylaws, HTLD stole trade secrets from at least one competing applicant, and Afilias is not a representative of the purported community,” the IRP states.
“HTLD’s application should be denied, or at least its purported Community Priority relinquished, as a consequence not only for HTLD’s spying on its competitors’ secret information, but also because HTLD is no longer the same company that applied for the .HOTEL TLD. It is now just a registry conglomerate with no ties to the purported, contrived ‘Community’ that it claims entitled to serve,” it goes on.
ICANN is yet to file its response to the complaint.
Whether the IRP will be successful is anyone’s guess, but what’s beyond doubt is that if it runs its course it’s going to add at least a year, probably closer to two, to the delay that .hotel has been languishing under since the applications were filed in 2012.
Potentially lengthening the duration of the case is the claimants’ demand that ICANN “appoint and train” a “Standing Panel” of at least seven IRP panelists from which each three-person IRP panel would be selected.
The standing panel is something that’s been talked about in ICANN’s bylaws for at least six or seven years, but ICANN has never quite got around to creating it.
ICANN pinged the community for comments on how it should go about creating this panel last year, but doesn’t seemed to have provided a progress report for the last nine months.
The .hotel applicants do not appear to be in any hurry to get this issue resolved. The goal is clearly to force the contention set to auction, which presumably could happen at Afilias’ unilateral whim. Time-to-market is only a relevant consideration for the winner.
With .hotel, and Afilias’ lawsuit attempting to block the .web sale to Verisign, the last round of new gTLD program, it seems, is going to take at least a decade from beginning to end.

ICANN refuses to release more info on .org deal

Kevin Murphy, February 7, 2020, Domain Policy

ICANN has denied a request from one of its overseers to release more information about the acquisition of .org manager Public Interest Registry.
General counsel John Jeffrey has written to the Address Supporting Organization to say that its request for records is over-broad and exceeds the ASO’s authority.
The ASO had asked for:

any ICANN records which pertain to or provide relevant insight to the process by which ICANN will consider (and potentially approve) the assignment of the .org Registry Agreement, including the process by which input from the affected community will be obtained prior to ICANN’s consideration and potential approval of the assignment.

The ASO is one of the five Decisional Participants that make up the Empowered Community — the body that has technically overseen ICANN since formal ties with the US government were severed a few years ago.
If these terms are unfamiliar, I did a deep-dive on its request a month ago.
One of its powers is to make an Inspection Request, demanding ICANN hand over documentation, but Jeffrey states that such requests are limited to ICANN’s financials and the minutes of its board of directors’ meetings.
There’s no information related to the .org acquisition in its books or minutes, so there’s nothing to hand over, Jeffrey says. Anything else the ASO wants, it’s not allowed to have under the bylaws, the letter (pdf) says.
Despite the ASO’s role in the Empowered Community, it appears that its powers to request information are in many ways inferior to the standard Documentary Information Disclosure Policy, which is open to all.
Jeffrey invited the ASO to narrow its request and re-file it.

Possibly the strangest new gTLD acquisition yet

Kevin Murphy, February 5, 2020, Domain Registries

The company running .icu has taken over a similar-sounding but ugly dot-brand from a Chinese games company.
ShortDot took over the ICANN registry agreement for .cyou from a Chinese games company in November, recently updated ICANN records show.
The seller is Beijing Gamease Age Digital Technology Co, which makes massively multiplayer online games targeted at the Chinese market.
The company is branded as Changyou.com and CYOU is its Nasdaq ticker symbol. The .cyou gTLD was not technically a dot-brand under ICANN rules.
Changyou signed its registry agreement with ICANN five years ago, but never registered any .cyou domains.
The decision to dump .cyou is no doubt related to the fact that Changyou is currently in the process of being reacquired and delisted by Sohu, its majority owner and former parent. The domain presumably soon will have no meaning for the company, even defensively.
It’s such a clumsy, otherwise meaningless string, that surely there was one one potential home for it: the .icu registry. Just as .icu can be read as “I see you”, .cyou can be read as “see you”.
ShortDot has had an inexplicable success with .icu in the last 12 months, during which it has become the industry volume leader in new gTLD sales. Today’s zone files show over SIX MILLION domains have been registered. That’s up from about 400,000 a year ago.
Most of its sales are coming via Chinese registrars, which are selling .icu names for under a dollar for the first year. It has yet to see its first junk drop.
If SpamHaus statistics are any guide, the buyers are largely domainers, rather than spammers. SpamHaus says .icu has under a 2% “badness” rating.
So, while .cyou would look like utter rubbish to any other registry, if ShortDot can bundle it with .icu, perhaps persuading a portion of its registrants to double-up, it may be worth a bit of money.
The registry expects to launch its new acquisition in June.
It’s the second branded gTLD ShortDot has acquired and repurposed after .bond, which used to belong to a university of the same name.

California .org probe — existential crisis or blessed relief for ICANN?

Kevin Murphy, February 5, 2020, Domain Policy

Does the California attorney general’s probe into ICANN’s relationship with the .org registry represent an existential crisis for ICANN, or could it be better seen as a great opportunity to palm off responsibility to a higher power?
It was recently revealed that AG Xavier Becerra is looking into ICANN’s actions related to not only the proposed acquisition of Public Interest Registry by Ethos Capital, but also the removal of price caps from the .org registry contract.
The AG’s office says it wants to “to analyze the impact to the nonprofit community, including to ICANN, of this proposed transfer”.
Because ICANN is a California-based non-profit, the AG says he has the power to levy penalties or revoke ICANN’s corporate registration.
Becerra’s office sent ICANN a list of 35 searching questions (pdf) related to both deals on January 23, demanding a response by February 7.
While many of the questions demand documentation already in the public domain, published on ICANN’s web site, Becerra also wants to get his hands on redacted portions of PIR’s communications with ICANN, as well as all emails between ICANN, Ethos, PIR and the Internet Society, which currently owns PIR.
At the very least, the investigation complicates ICANN’s own probe of the acquisition. ICANN has to approve transfers of control of gTLD registries, and it’s currently poring over documentation provided by PIR detailing the structure of the deal.
It’s already delayed approval once, saying last month (pdf) that it expected to give a yay or nay to PIR by February 17.
Following the AG’s letter, ICANN asked PIR (pdf) to extend that deadline to April 20, to allow it time to deal with the new concerns.
It emerged yesterday that PIR has told ICANN to get (partially) stuffed (pdf), allowing an extension only to February 29, saying further delay “is neither necessary nor warranted at this time”.
But PIR did give its reluctant consent to ICANN disclosing previously confidential information to the AG, despite taking issue with ICANN’s opinion that AG letters are arguably equivalent to subpoenas, so it was under a legal obligation to do so.
It’s not entirely clear what could come of this predicament.
PIR says that while ICANN is able to approve or decline changes of control, it has no authority under the .org Registry Agreement to deny PIR changing its legal status from non-profit to for-profit entity.
And while California no doubt has jurisdiction over ICANN, PIR is based in Pennsylvania, so it would be up to Becerra’s counterpart in that state (a fellow Democrat, as it happens) to attempt to obstruct PIR’s planned conversion.
If that were to happen, it would interfere with Ethos’ somewhat convoluted acquisition plan.
Some of the AG’s 35 questions are pretty basic, stuff like “describe in detail the authority ICANN has to regulate, license, and/or oversee the domain name system” and “provide an explanation of ICANN’s authority to regulate the registration fees charged for .org domains”.
That’s either coming from a place of ignorance, or from somebody who’s deliberately questioning ICANN’s very existence as the central coordinating body of the DNS.
That would be frightening indeed.
But at the same time, this intervention from a governmental body may come as a relief to ICANN.
ICANN doesn’t like making difficult decisions when it comes to the big legal questions, or indeed anything with the potential to be controversial and ergo litigation bait.
Take, for example, its ongoing pleas to European data protection authorities to fix its GDPR problem, or its longstanding deferment to US competition authorities when it comes to issues such as the price of a .com domain and the introduction of new registry services, or its outsourcing to expert third parties of almost every potential wedge issue to be found the new gTLD program.
An opinion on .org one way or the other from the California AG could provide a lovely smokescreen for ICANN to approve or reject the .org deal without actually taking responsibility for the decision, a prospect I suspect would we well-received by the Org.
Whether it will actually receive this blessing is an open question.

As Cancun looms, ICANN bans China travel because of Coronavirus

Kevin Murphy, February 5, 2020, Domain Policy

ICANN has banned its staff from travelling to China because of Coronavirus.
The organization said at the weekend that it has implemented the ban, which includes connecting flights of “an abundance of caution”. The ban includes the mainland as well as Hong Kong and Macau.
The move matches travel bans imposed on staff by other multi-national technology outfits, and comes as countries including the US place precautionary restrictions on flights from China.
ICANN has in the recent past changed the venues of public meetings twice due to worries about the unrelated Zika virus, but it has no meetings lined up in China any time soon.
Next month, the community will meet in Cancun, Mexico. According to the European Centre for Disease Control, there are currently no reported cases of the disease in that country.
There are usually plenty of Chinese nationals at ICANN meetings, of course, which could put ICANN in a tricky ethical/practical position as 67 draws closer, depending on how the global spread of the disease progresses.
ICANN said: “As of now, we fully intend to move forward with ICANN67 in Cancún, Mexico.”
The ECDC says there have been 20,626 confirmed cases of the virus since it was identified in December, almost all in China, and 427 deaths, all Chinese.

Is the .co rebid biased toward Afilias? Yeah, kinda

Kevin Murphy, January 17, 2020, Domain Registries

The Colombian government has come under fire for opening up the .co registry contract for rebid in a way that seems predetermined to pick Afilias as the winner, displacing its fierce rival Neustar.
As I blogged in November, Colombia thinks it might be able to secure a better registry deal, so it plans to shortly open .co up to competitive proposals.
A company called .CO Internet, acquired by Neustar for $109 million in 2014, has been running the ccTLD for the last decade. There are currently around 2.3 million .co domains under management, according to Colombia.
With the renewal deadline looming, the government’s technology ministry, MinTIC, published an eyebrow-raising request for proposals last month.
What’s surprising about the RFP is that some of the four main technical performance criteria listed are so stringent that probably only two companies in the industry qualify — Verisign and Afilias, and so far Verisign has not been involved in the RFP process.
The companies that have been engaging with the government to date are Afilias, Neustar/.CO, Nominet, CentralNic and Donuts.
First, MinTIC wants a registry that’s had at least two million domains under management across its portfolio continuously for two years. All five registries qualify there.
Second, it wants a registry that’s been involved in the migration of a TLD of at least one million names, either as the gaining or losing back-end.
That immediately narrows the pack to just two of the five aforementioned registries — Neustar and Afilias.
Verisign would also qualify, if it’s in the bidding, but I suspect it’s not. Taking over .co would look like a “buy it to kill it” strategy, which would be horrible optics for the Colombian government.
There have only ever been three migrations over one million names, to my knowledge: the Verisign->Afilias .org transition of 2003, the Neustar->Afilias .au move of 2018, and last year’s Afilias->Neustar .in handover.
CentralNic, Nominet and Donuts have all moved numerous TLDs between back-ends, but with much smaller per-TLD domain volumes.
Third — and here’s the kicker — the successful .co bidder will have to show that it processes on average 25 million registry transactions — defined as “billable EPP (write) transactions, as well as all EPP search (read) transactions” — per day. (All of the RFP quotes in this post have been machine-translated from Spanish by Google and run by a few generous Spanish speakers for verification.)
The RFP is not entirely clear on what exact data points it’s looking at here, but my take is that qualifying transactions include, at an absolute minimum, attempts to create a domain, renew a domain, transfer a domain and check whether a domain is registered.
The vast majority of such transactions are in the check and create functions, and I believe a great deal of that activity relates to drop-catching, where registries are flooded with add requests for just-deleted domains.
Whichever way you split it, 25 million a day is a ludicrously high number. Literally only .com, which sees 2.3 billion checks and 1.5 billion adds per month, sees that kind of action.
According to Neustar, which actually runs .co, it only sees 6.4 million transactions per day on average. The requirement to handle 25 million a day is “exaggerated, unjustified and discriminatory” against Neustar, Neustar told MinTIC.
But the RFP allows for the bidding registries to spread their 25-million-a-day quota across all of the TLDs they manage, and this MAY sneak Afilias over the line.
I say MAY in big letters because I don’t believe the numbers that Afilias (and probably other registries too) reports to ICANN every month are reliable.
If you add up the reported, qualifying EPP transactions for September in Afilias’ top four legacy gTLDs — .org, .info, .mobi and .pro — you get to over 25 million per day.
But those same records show that, for example, .mobi, .pro and .info had exactly the same number of EPP availability checks that month — 215,988,497 each.
This is clearly bad data.
I reported on this issue last May, when ICANN’s Security and Stability Advisory Committee informed ICANN that major registries were providing “not reliable” or possibly “fabricated” data about port 43 Whois queries.
Afilias, which was one of the apparent offenders, told me at the time that it was addressing the issue with ICANN, but it does not yet appear to have fully fixed its reporting to enable TLD-by-TLD breakdowns of its registry activity.
It is of course quite possible, even very likely, that Afilias has on average more than 25 million qualifying EPP transactions per day, but how’s it going to prove that to the Colombian government when the numbers it reports under contract to ICANN are clearly unreliable?
It’s a little harder to determine whether Neustar would qualify under the 25-million transaction rule, because some of its largest zones are ccTLDs — .co, .in and .us — that do not publicly report this kind of data. Its comments to the RFP suggest it would not.
Numbers aside, I’ll note that there’s very probably an inherent bias towards legacy gTLD operators like Afilias and against relative newcomers such as CentralNic if you’re counting EPP transactions. As I noted above, a lot of these transactions are coming from drop-catch activity, which is more prevalent on larger, older TLDs where there are more dropping domains that are more likely to have existing backlinks and traffic.
The fourth technical requirement in the Colombian RFP that looks a bit fishy is the requirement that the new registry must have channel relationships with at least 10 of the largest 25 registrars, as listed by a web site called domainstate.com.
I can’t say I’ve looked at domainstate.com very often, if at all, but a quick look at its numbers for September strongly suggests to me that it does not count post-2012 new gTLD registrations in its registrar league table. One registrar with almost four million domains under management doesn’t even show up on the list. This arguably could give an advantage to a registry that plays strongly in legacy gTLDs.
That said, it’s probably an academic point — I don’t think any of the bidders for the .co contract would have difficulty showing that they have 10 of the top 25 registrars on board, whichever way you calculate that league table.
Cumulatively, these four technical hurdles have led some to suggest that Afilias has somehow steered MinTIC towards creating an RFP only it could win.
Apart from what I’ve discussed here, I’ve no evidence that is the case, and Afilias has not yet responded to my request for comment today.
Luckily for the bidding registries, the Columbian RFP has not yet been finalized. Comments submitted by the bidders and others are apparently going to be taken on board, so the barriers to entry for respondents could be lowered before bids are finally accepted.
MinTIC posted an update last night that extends the period that the RFP could run, and the transition period should Neustar lose the contract. A handover, should one happen at all, could now happen as late as February next year.

Amazon governments vow revenge for “illegal and unjust” ICANN decision on .amazon

Kevin Murphy, January 17, 2020, Domain Policy

The eight nations of the Amazon Cooperation Treaty Organization are unhappy that ICANN is giving .amazon to Amazon the retailer and have vowed to spread the word that ICANN has acted “illegally”.
ACTO secretary general Alexandra Moreira has written (pdf) to ICANN CEO Göran Marby to say: “We consider this decision an illegal and unjust expropriation of our culture, tradition, history and image before the world.”
She said that ACTO is now “committed to disseminating news of this situation to all relevant groups”, adding:

the international community should be aware of the very real consequences or ramifications (be it economic, environmental, cultural or related to questions of sovereignty) of granting exclusive access to the domain “.Amazon” to a single company.

The delegation of .amazon to Amazon the company, “jeopardizes the continued well-being of the societies that live there”, she wrote, with no elaboration.
Amazon was last month told it could have the gTLD after a years-long battle with ACTO and the ICANN Governmental Advisory Committee, which had advised ICANN by consensus to reject the .amazon application.
That consensus broke last year when the US government basically said enough was enough and refused to continue back the eight South American governments’ plight.
Under the terms of Amazon’s contract, it has to protect hundreds of culturally sensitive second-level domains of ACTO’s choosing, and to give each of its members a single domain that they can use to promote their portion of the Amazonian region.
ACTO had wanted more, basically demanding joint ownership of .amazon, which Amazon refused.
It remains to be seen whether ACTO’s reaction will be limited to harsh language, or whether its members will actively try to disrupt ICANN activities. The next GAC-ICANN face-to-face, set for Cancun in March, could be interesting viewing.