Group to seek .io TLD takeover after OECD human rights ruling

A group composed of displaced Chagossians will ask ICANN to redelegate the increasingly popular .io top-level domain, according to the group’s lawyer.

The move, still in its very early stages, follows a recent ruling under the OECD Guidelines for Multinational Enterprises on Responsible Business Conduct, which mildly chastised the current registry, Identity Digital.

“The next move is domain reassignment,” lawyer Jonathan Levy, who brought the OECD complaint on behalf of the Chagos Refugees Group UK, told us. The proposed beneficiary would be “a group composed of Chagossians” he said.

.io is the ccTLD for the archipelago currently known as the British Indian Ocean Territory. It’s one of those Postel-era “Just Some Guy” developing-world delegations that pre-date ICANN.

But BIOT is a controversial territory. Originally the Chagos Archipelago, the few thousand original inhabitants were forced out by the UK government in the 1970s so the US military could build a base on Diego Garcia, the largest island.

Most of the surviving Chagossians and their descendants live in Mauritius, but have been fighting for their right to return for decades. In 2019, the UN ruled the UK’s current administration of BIOT is unlawful.

In recent years, since .io became popular, the ccTLD has become part of the fight.

The original and technically still-current registry for .io is a UK company called Internet Computer Bureau. ICB was acquired by Afilias in 2017 for $70 million. Afilias was subsequently acquired by Donuts, which is now called Identity Digital.

Corporate accounts filed by ICB name its ultimate owner as Beignet DTLD Holdings of Delaware, which appears to be a part of $2.21 billion private equity firm Ethos Capital, Identity Digital’s owner, which is co-managed by former ICANN CEO Fadi Chehadé.

None of these companies have a connection to BIOT beyond paying a local company called Sure (Diego Garcia) Limited for a mail-forwarding service. The only people believed to reside in the territory at all are US and UK military and contractors.

Levy, on behalf of the Chagossian refugees and a group of victims of cryptocurrency scams operated from .io domains, filed a complaint with the Ireland National Contact Point for the OECD Guidelines for Multinational Enterprises on Responsible Business Conduct — basically a mediation service operated by the Irish government — seeking a share of the money from .io sales and/or redelegation.

According to its most-recent public accounts, ICB had turnover of £16.4 million ($19.8 million) in 2021, up from £12.8 million ($15.5 million) in 2020, but also had absolutely horrible gross margins for a registry with only one employee.

The company had cost of sales of £15.8 million and a gross margin of 3.58%. It pays no ICANN fees and the UK government receives no cut beyond the regular corporate tax ICB pays (about £26,000 in 2021).

The OECD’s Guidelines are voluntary guidelines that countries sign up to that are meant to guide how multinational companies behave with regards human rights and so on. Enforcement seems to be relatively toothless, with national NCPs only having the power to “recommend” actions.

In fact, Afilias declined to participate in mediation and appears to have received only a mild finger-wagging in the Irish NCP’s decision (pdf), which was published in September. One of its recommendations reads:

The NCP recommends that in cases in which a product, including a digital asset, is associated with long-running disputes regarding human rights, multinational enterprises should be able to demonstrate that they have carried out human rights due diligence

Levy thinks the NCP’s decision is a big deal, saying it means the OECD has validated the Chagossians’ concerns. Coupled with the UN sanction on the UK related to BIOT, he reckons it could play in their favor in a future redelegation request.

.io domain owners shouldn’t be too worried right now, however. Redelegation takes a very long time even when the losing party agrees, and it doesn’t tend to happen without the consent of the incumbent.

“Crimes against humanity” claims against Afilias

Donuts subsidiary Afilias has been accused of participating in “crimes against humanity” and imperialist “apartheid”, due to its management of the contested .io ccTLD.

A London-based lawyer has filed a complaint with the Organization for Economic Cooperation and Development, seeking either the redelegation of .io or a big chunk of its profits.

The complaint was filed on behalf of Crypto Currency Resolution Trust (CCRT), representing people allegedly ripped off by cryptocurrency scams on .io domains, and the Chagos Refugees Group UK (CRG UK).

The latter group represents some of the people forcibly deported from the Chagos Islands in the 1970s, when the British government evicted the entire native population to make way for a US military base on Diego Garcia, the largest island.

The islands were renamed the British Indian Ocean Territory and, in the early days of the DNS, became eligible for the ccTLD .io

The TLD was delegated by IANA to Paul Kane’s London-based outfit Internet Computer Bureau in 1997, in the pre-ICANN days when such decisions were made without very much oversight.

ICB was quietly bought by Afilias for $70 million in 2017, as I broke the following year.

In 2019, the International Court of Justice ruled that the UK’s continued administration of BIOT is unlawful, and that the territory should be returned to the Chagossians, but the current Conservative UK government has shown no indication that it plans to abide by that ruling.

The lawyer for the Chagossians, Jonathan Levy, now claims in his OECD complaint that for Afilias to continue to run .io — which he reckons brings in over €10 million a year — amounts to a human rights abuse in violation of OECD guidelines.

The complaint states:

The British military occupation of the Chagos Archipelago has been severe and resulted in the Chagossians wandering the globe as a displaced people deported from their homeland in a forcible exile reminiscent of British tactics also used on Irish home rule advocates in the 19th Century. It is just simply an outrage that an Irish multinational company is deliberately complicit in crimes against humanity and apartheid on behalf of one of last vestiges of British imperialism and apartheid.

While Levy recognizes on his blog that Afilias has been acquired by US-based Donuts, only Afilias and its subsidiaries in the UK and Ireland are named as respondents.

In a second prong of the attack, Levy claims that Afilias is somehow complicit in cryptocurrency frauds carried out using .io domains.

Blaming a registry for the actions of its registrants is pretty tenuous. Imagine if Verisign got blamed for every nefarious action carried out with a .com domain — there would not be enough lawyers in the world to handle that workload.

But Levy reckons .io is a special case because BIOT lacks law enforcement and because Afilias promotes .io as the best TLD for tech companies “knowing full well” it is often used for crypto fraud. The complaint reads:

Complaina[n]ts submit that while other general purpose domains like GLTD .com may have as much or even more crypto fraud, ccTLD .io is an exception because it represents a political entity with no permanent population and no companies law and no law enforcement. Consequently, unlike ccTLD .com or .net where US authorities may seize websites; .io criminals have little to fear as BIOT has no civil police force nor financial intelligence unit. ICB has promoted ccTLD .io to the tech community knowing full well it will be misused by a significant criminal element specializing in crypto assets.

This still feels pretty tenuous to me. You cannot evade the long arm of the law simply by registering on offshore domain.

Still, Levy’s asking for restitution in the form of a percentage of the ICB acquisition price, ongoing and backdated royalties from the sale of .io domains and, failing that, redelegation of the ccTLD to the Chagossian people.

While I think the notion of Donuts/Afilias actively abusing human rights is pretty weak, there’s no denying it’s the beneficiary of an historical wrong. Imagine how many credibility points it could earn by voluntarily negotiating a profit-share with the displaced Chagossians.

.tech gTLD startups “raise $2 billion”

Tech startups using domain names in the .tech gTLD have raised $2 billion in venture capital financing over the last two years, according to Radix.
The registry looked at startups listed on Crunchbase as of June and found 650 companies using .tech domains. Of these, 170 of them had raised $2 billion in funding.
About 250 TLDs are in use by Crunchbase-listed startups, according to Radix.
According to a list provided by the company, funding amounts range from a modest $50,000 (obtained by the likes of the VR firm at virtualspaces.tech) to $620 million (obtained by the self-driving car company at aurora.tech).
Not every company on the list is still in business (if name resolution is any guide), and some of the .tech names bounce visitors to longer .com domains.
Meanwhile, domainer Morgan Linton has done a bit of similar research and discovered that 43% of the “top pick” startups appearing at Disrupt, the conference that like Crunchbase is owned by TechCrunch, are not using .com domains.
It’s a smaller sample size, but according to Linton, 18% of them use .io names. Most of the non-coms are on ccTLDs, in fact. The only new gTLD on his list is Google’s .app.
Disrupt made headlines in the domain world in 2010 when it launched its first conference web site on a .co domain, to coincide with the international launch of Colombia’s ccTLD by .CO Internet.
But that marketing deal lapsed after a year. Disrupt is back on techcrunch.com and disrupt.co is back in registry hands as a “premium” reserved name.
.co still appears on Linton’s list, however, so the initial partnership may still be bearing fruit.

Future of .io domains has become party-political issue in the UK

The future of the Chagos Islands and therefore the longevity of .io domain names may well depend on which party holds the reins of power in the UK.
The current Conservative government under Theresa May has this month rejected an international court ruling calling for the British Indian Ocean Territory — currently the official name of the archipelago — to be wound down and the lands returned to the exiled Chagossians.
But the leader of the official opposition, Jeremy Corbyn, has reportedly slammed the government’s position and said Labour is “committed to respecting the advisory opinion in full, so as to ensure that Chagossians are able to return to their homes”.
In February, the International Court of Justice ruled that the UK had kept control of the islands unlawfully when Mauritius, which had the prior claim, gained its independence in 1968.
The couple thousand natives were kicked out of the country a few years later to make way for a US naval base, and have been living in Mauritius and the Seychelles with no ability to return ever since.
Were the UK to follow the ICJ ruling, it would quite possibly mean the end of BIOT as the name of the islands and therefore the demise of its two-letter country code, IO, and therefore the eventual retirement of the popular .io domain name.
.io, which is believed to have around 270,000 domains, is run by London-based Internet Computer Bureau Ltd, which Afilias bought for $70 million two years ago.
It’s popular with tech startups as a kind of domain hack for “input/output”.
Now that the UK government has officially come out against the ICJ ruling, and Labour has supported it, it appears the future of the Chagossians and .io registrants alike will depend rather on who is occupying 10 Downing Street in future.

UN ruling may put .io domains at risk

The future of .io domains may have been cast into doubt, following a ruling from the UN’s highest court.
The International Court of Justice this afternoon ruled (pdf) by a 13-1 majority that “the United Kingdom is under an obligation to bring to an end its administration of the Chagos Archipelago as rapidly as possible”.
The Chagos Archipelago is a cluster of islands that the UK calls the British Indian Ocean Territory.
It was originally part of Mauritius, but was retained by the UK shortly before Mauritius gained independence in 1968, so a strategic US military base could be built on Diego Garcia, one of the islands.
The native Chagossians were all forcibly relocated to Mauritius and the Seychelles over the next several years. Today, most everyone who lives there are British or American military.
But the ICJ ruled today, after decades of Mauritian outrage, that “the process of decolonization of Mauritius was not lawfully completed when that country acceded to independence in 1968, following the separation of the Chagos Archipelago”.
So BIOT, if the UK government follows the ruling, may cease to exist in the not-too-distant future.
BIOT’s ccTLD is .io, which has become popular with tech startups over the last few years and has over 270,000 domains.
It’s run by London-based Internet Computer Bureau Ltd, which Afilias bought for $70 million almost two years ago.
Could it soon become a ccTLD without a territory, leaving it open to retirement and removal from the DNS root?
It’s not impossible, but I’ll freely admit that I’m getting into heavy, early speculation here.
There are a lot of moving parts to consider, and at time of writing the UK government has not even stated how it will respond to the non-binding ICJ ruling.
Should the UK abide by the ruling and wind down BIOT, its IO reservation on the ISO 3166-1 alpha-2 list could then be removed by the International Standards Organisation.
That would mean .io no longer fits the ICANN criteria for being a ccTLD, leaving it subject to forced retirement.
Retired TLDs are removed from the DNS root, meaning all the second-level domains under them stop working, obviously.
It’s not entirely clear how this would happen. ICANN’s Country Code Names Supporting Organization has not finished work on its policy for the retirement of ccTLDs.
TLDs are certainly not retired overnight, without the chance of an orderly winding-down.
Judging by the current state of ccNSO discussions, it appears that ccTLDs could in future be retired with or without the consent of their registry, with a five-to-10-year clock starting from the string’s removal from the ISO 3166-1 list.
Under existing ICANN procedures, I’m aware of at least two ccTLDs that have been retired in recent years.
Timor-Leste was given .tl a few years after it rebranded from Portuguese Timor, and .tp was removed from the DNS a decade later. It took five years for .an to be retired after the Netherlands Antilles’ split into several distinct territories in 2010.
But there are also weird hangers-on, such as the Soviet Union’s .su, which has an “exceptional reservation” on the ISO list and is still active (and inexplicably popular) as a ccTLD.
As I say, I’m in heavy speculative territory when it comes to .io, but it strikes me that not many registrants will consider when buying their names that the territory their TLD represents may one day simple poof out of existence at the stroke of a pen.
Afilias declined to comment for this article.

Afilias bought .io for $70 million

Did you know Afilias owns .io? I didn’t, but it paid $70 million for the popular alternative TLD 18 months ago.
A recently published financial statement in Ireland shows that the company spent $70.17 million cash — a 10x revenue multiple — for 100% of Internet Computer Bureau Ltd in April 2017.
ICB runs .io, .ac and .sh, the ccTLDs for the British Indian Ocean Territories (.io), Ascension Island (.ac), and Saint Helena, Ascension and Tristan Da Cunha (.sh).
Afilias has never publicly announced the deal, and I haven’t seen it reported elsewhere, so I thought it was worth blogging up here.
At the time, the deal was characterized to registrars as a back-end contract win.
But it seems that Afilias actually purchased the back-end provider, then migrated (not as smoothly as it usually does) the TLDs over to its own infrastructure.
That would have opened up .io to all the registrars already plugged in to Afilias’ TLDs, potentially greatly increasing its reach.
But it’s probably not just the back-end Afilias has acquired.
Would a registry service provider spend 10 times annual revenue on a ccTLD back-end contractor, unless it had a damn good reason to believe that it would be able to at least recoup its investment, either through a long-term contract or some other mechanism?
It’s quite possible Afilias actually bought the .io ccTLD Manager.
The ccTLD Manager listed by ICANN in the IANA database is “IO Top Level Domain Registry”, but “c/o Sure (Diego Garcia) Limited”. That changed a week or so ago from “IO Top Level Domain Registry, Cable & Wireless”
Sure is the arm of telecommunications firm Cable & Wireless that provides internet access to remote islands in various parts of the world.
I don’t know what “IO Top Level Domain Registry” is.
Afilias tells me confidentiality arrangements are in place.
.io has proven popular as a TLD for technology startup companies that couldn’t get the .com they wanted.
Across its small portfolio, ICB was a $6.9 million business last year, but .io, with a reported 270,000 domains, must account for the large majority of that.
Due to the timing of the deal, ICB contributed $5.3 million to Afilias’ top line and was the main reason its revenue grew last year, its 2017 accounts reveal.
In 2017, Afilias saw revenue grow from $106.7 million to $113.6 million. Profit before tax was down slightly, from $38.6 million to $36 million
Again, that was due largely to ICB, which contributed $1.4 million of red ink to the bottom line.
Afilias is a private company, by the way, which is why these numbers all refer to 2017. It’s the final full year of it being based in Ireland, before its move to the US for tax reasons.
The disclosure also reveals that Afilias took a 45% stake in Dot Global, manager of the .global gTLD registry, in December 2017.
Dot Global had revenue of $1.9 million and a $320,000 loss last year, the report states.
doMEn, the Montenegro ccTLD (.me) operator in which Afilias has a 36.85% share, made a profit of $2.59 million on revenue of $7.39 million, it says. Both of those numbers were down slightly on 2016.
Afilias also says in the filing that it expects revenue to be down in 2018, due to the renegotiation of back-end contracts. I gather the contract with Public Interest Registry, which reportedly could cost about $10 million a year, is the main problem.
Given the accounts were signed off in May this year, it seems that this decline is expected despite the lucrative .au ccTLD contract, which Afilias signed at the end of 2017.

Start-ups protest “the dark side of .io”

Two technology start-up companies that use .io domain name are to campaign on behalf of the exiled natives of the islands represented by the ccTLD.
As you’re no doubt aware, in recent years .io became a popular TLD among young tech firms squeezed out of .com by the lack of decent available names.
It could be understood to mean “input/output”, but the ccTLD actually represents the British Indian Ocean Territory, an archipelago in the Indian Ocean with a storied past.
It’s managed by UK-based Internet Computer Bureau, which runs several obscure overseas ccTLDs.
Over the last year or so, there’s been increasing awareness among .io registrants of BIOT’s recent history, which isn’t great.
The biggest island in the territory is Diego Garcia. In the 1960s, about 1,800 people — known as Chagossians — lived there.
But they were all forced to leave by the UK government in the early 1970s as part of a move to lease essentially the entire island to the US military.
This was at the height of the Cold War, when the US believed the islands were strategically important.
According to the UK Chagos Support Association, the exile was carried out covertly and many of those kicked off the islands were forced to live in “utmost poverty” in nearby Mauritius.
Now, Diego Garcia is populated by about 3,000 military personnel, mostly Americans, who staff the air and naval bases that were established following the Chagossians’ exile.
But the US lease is due to expire next year, so those backing the Chagossian cause reckon they’ve got an unprecedented opportunity to get the UK government to let them return.
You can read about the campaign here.
How does this all relate to domain names?
Two .io-using start-ups — Seats.io and BigBoards.io — said late last week that they have pledged their support to the cause.
In a press release, Seats.io’s “Chief Everything Officer” Ben Verbeken said the company will soon launch a web site at thedarksideof.io, “where companies can pledge to match the cost of registering their .io domain name with a donation to a Chagossian group or charity.”
.io names currently cost about $100 for the first year and about $50 a year thereafter.
Verbeken said: “When we learned about the Chagossian people’s story, we had two choices. We could give up our domain name and change the name of our business. But we would just be running away from the problem. So we decided to accept our social responsibility and actually help the Chagossian people a bit.”
The domain thedarksideof.io currently leads to a placeholder.
You can read more of the political back-story at The Guardian

ICANN names $25m gTLD objector

French international law expert Alain Pellet has been appointed Independent Objector for the first round of ICANN’s new generic top-level domain program.
Pellet has worked as a law professor at University Paris Ouest, Nanterre-La Défense since 1990, according to his 26-page resume (pdf).
He’s also represented governments at the International Court of Justice and chaired the International Law Commission of the United Nations.
With an expected 2,000-plus new gTLD applications, Pellet will command a budget of around $25 million, funded by application fees, over the three years the first round is expected to take.
Even with so many applications, I’m struggling to imagine scenarios in which so much money would be required.
The IO’s job is to object to new gTLD applications “in the best interests of global internet users”.
Pellet’s team will be limited to the Community Objection and Limited Public Interest Objection mechanisms outlined in the program’s Applicant Guidebook.
The IO is there to object when opposition to a gTLD has been raised but no formal objection has been filed by, for example, an affected community.
That the IO exists is an excellent reason to file comments on applications you’re opposed to – if no complaints are received via the public comment process, Pellet will be unable to object.