Registrars not happy with VeriSign abuse plans

VeriSign has been talking quietly to domain name registrars about its newly revealed anti-abuse policies for several months, but some are still not happy about its plans for .com malware scans.
The company yesterday revealed a two-pronged attack on domain name abuse, designed to counteract a perception that .com is not as secure a space as it should be.
One prong, dealing with law enforcement requests to seize domains, I covered yesterday. It’s already received criticism from the Electronic Frontier Foundation and American Civil Liberties Union.
The other is an attempt to introduce automatic malware scanning into the .com, .net and .name spaces, rather like ICM Registry has said it will do with all .xxx domains.
Unlike the daily ICM/McAfee service, VeriSign’s free scans will be quarterly, but the company intends to also offer a paid-for upgrade that would search domains for malware more frequently.
On the face of it, it doesn’t seem like a bad idea.
But some registrars are worried about the fading line between registrars, which today “own” the customer relationship, and the registries, which for the most part are hidden away in the cloud.
Go Daddy director of network abuse Ben Butler, asked about both of yesterday’s VeriSign proposals, said in a statement that they have “some merit”, but sounded several notes of caution:

This is going to make all registrars responsible for remediation efforts and negative customer-service clean up. The registrar at this point becomes the “middle man,” dealing with customers whose livelihood is being negatively impacted. As mentioned in their report, the majority of sites infected with malware were not created by the “bad guys.”
While there is an appeal process mentioned, it could take some time to get issues resolved, potentially leaving a customer’s website down for an extended period.
This could also create a dangerous situation, allowing registries to gain further control over registrars’ operations – as registrars have the relationship with the registrant, the registrar should be responsible for enforcing policies and facilitating remediation.

It has also emerged that VeriSign unilaterally introduced the malware scanning service as a mandatory feature of .cc and .tv domains – which are not regulated by ICANN – earlier this year.
The changes appear to have been introduced without fanfare, but are clearly reflected in today’s .tv registration policies, which are likely to form the basis of the .com policies.
Some registrars weren’t happy about that either.
Six European registrars wrote to VeriSign last month to complain that they were “extremely displeased” with the way the scanning service was introduced. They told VeriSign:

These changes mark the beginning of a substantive shift in the roles of registries regarding the monitoring and controlling of content and may lead to an increase of responsibility and liability of registries and registrars for content hosted elsewhere. As domain name registrars, we hold the position that the responsibilities for hosted content and the registration of a domain name are substantially different, and this view has been upheld in European court decisions numerous times. In this case, Verisign is assuming an up-front responsibility that surpasses even the responsibilities of a web hoster, and therefore opens the door to added responsibilities and legal liability for any form of abuse.
…
In the end, the registrar community will have to face the registrant backlash and criticism, waste countless hours of support time to explain this policy to the registrants and again every time they notice downtimes or loss of performance. These changes are entirely for the benefit of Verisign, but the costs are delegated to the registrants, the registrars and the hosting service providers.

The registrars were concerned that scanning could cause hosting performance hits, but VeriSign says the quarterly scan uses a virtual browser and is roughly equivalent to a single user visit.
They were also worried that the scans, which would presumably ignore robots.txt prohibitions on spidering, would be “intrusive” enough to potentially violate European Union data privacy laws.
VeriSign now plans to give all registrars an opt-out, which could enable them to avoid this problem.
It looks like VeriSign’s plans to amend the Registry-Registrar Agreement are heading for ICANN-overseen talks, so registrars may just be digging into a negotiating position, of course.
But it’s clear that there is some unease in the industry about the blurring of the lines between registries and registrars, which is only likely to increase as new gTLDs are introduced.
In the era of new gTLDs, and the liberalization of ICANN’s vertical integration prohibitions, we’re likely to see more registries having hands-on relationships with customers.

ANA finds SEO more effective than Facebook

Advertisers are “beginning to question the effectiveness” of social media marketing, but they’re still mostly sold on the benefits of search engine optimization.
That’s according to a new study from the Association of National Advertisers, the results of which have just been published.
The ANA’s survey of 92 marketers gave SEO an “effectiveness rating” of 52%, the highest rating given to any of the six categories respondents were asked to comment on.
However, that represented a decline of three percentage points from a similar survey in 2009.
Social networking sites (presumably including Facebook, although names were not named) received an effectiveness rating of 28%, up from 17% two years ago, ANA reported.
SEO and social sites were used in marketing by 88% and 89% of respondents respectively.
ANA president Bob Liodice said in a press release:

While marketers have substantially increased their use of newer media platforms over the past few years, they are beginning to question the effectiveness of some of these vehicles. The ANA survey indicates a strong willingness by marketers to integrate innovative new approaches into their marketing mix; however, this enthusiasm is tempered by concerns regarding the return-on-investment of these emerging options.

While it’s all speculation at this point, SEO improvements are often pointed to as a potential (and I stress: potential) benefit of new dot-brand or category-killer top-level domains.
The ANA is the current opponent-in-chief of ICANN’s new gTLD program.

Corsica seeks new gTLD registry operator

The local government of the French island of Corsica is looking for contractors to apply for and manage a .corsica top-level domain.
The Executive Council of the Collectivité Territoriale de Corse issued an RFP in late September. The deadline for responses is October 17, a week from now.
The desired string appears to be the Anglicized .corsica, rather than the French .corse.
Corsica, situated in the Mediterranean, is one of France’s 22 official regions. According to Wikipedia, it has slightly more political power than its mainland counterparts.
Under ICANN’s new gTLD application rules, geographical strings need the approval of the relevant local government before they can be accepted.
I expect any .corsica application would need a letter of support or non-objection from the French national government as well as the Corsican executive, before it is approved.
(via Jean Guillon)

ICANN hunts for anti-cybersquatting database provider

ICANN is in the process of looking for an operator for the Trademark Clearinghouse that will play a crucial brand protection role in new top-level domains.
An RFI published last week says that ICANN is looking for an exclusive contractor, but that it may consider splitting the deal between two companies — one to provide trademark validation services and the other to manage the database.
The TMCH is basically a big database of validated trademarks that registrars/registries will have to integrate with. It will be an integral part of any new gTLD launch.
Registries are obliged by ICANN rules to hold a sunrise period and a Trademark Claims service when they go live, both of which leverage the clearinghouse’s services.
Rather than having to submit proof of trademark rights to each gTLD operator, brand owners will only have to be validated by the TMCH in order to be pre-validated by all gTLDs.
I estimate that the contract is worth a few million dollars a year, minimum.
If the ongoing .xxx sunrise period is any guide, we might be looking at a database of some 30,000 to 40,000 trademark registrations in the first year of the TMCH.
One potential TMCH provider currently charges $100 for the initial first-year validation and a recurring $70 for re-validation in subsequent years.
ICANN has not ruled out the successful TMCH provider selling add-on services too.
But the organization also seems to be at pains to ensure that the clearinghouse is not seen as another gouge on the trademark industry.
The RFI contains questions such as: “How can it be assured that you will not maximize your registrations at the expense of security, quality, and technical and operational excellence?”
The two providers that immediately spring to mind as RFI respondents are IProta and the Clearinghouse for Intellectual Property (CHIP).
Belgium-based CHIP arguably has the most institutional experience. It’s handled sunrise periods for Somalia’s .so, the .asia IDN sunrise, a few pseudo-gTLD initiatives from the likes of CentralNIC (de.com, us.org, etc), and is signed up to do the same for .sx.
Its chief architect, Bart Lieben of the law firm Crowell & Moring, is also well-known in the industry for his work on several sunrise period policies.
IProta is a newer company, founded in London this year by Jonathan Robinson, an industry veteran best known for co-founding corporate domain registrar Group NBT.
The company is currently managing the .xxx sunrise period, which is believed to be the highest-volume launch since .eu in late 2005.
“IPRota is very well positioned on the basis of our recent and past experience so I think we almost certainly will go ahead and respond,” Robinson confirmed to DI.
Domain name registries and registrars could conceivably also apply, based on their experience handling high-volume transactional databases and their familiarity with the EPP protocol.
ICANN sees the potential for conflicts of interest — its RFI anticipates that any already-contracted party applying to run the TMCH will have to impose a Chinese wall to reduce that risk.
The RFI is open for responses until November 25. ICANN intends to name its selected provider February 14, a month after it starts accepting new gTLD applications.
This is another reason, in my view, why submitting an application in January may not be the smartest move in the world.

BITS may apply for six financial gTLDs

BITS, the technology policy wing of the Financial Services Roundtable, may apply to ICANN for as many as six financially-focused new top-level domains.
The organization is pondering bids for .bank, .banking, .insure, .insurance, .invest and .investment, according to Craig Schwartz, who’s heading the project as general manager for registry programs.
(UPDATE: To clarify, these are the six strings BITS is considering. It does not expect to apply for all six. Three is a more likely number.)
Schwartz, until recently ICANN’s chief gTLD registry liaison, told DI that the application(s) will be filed by a yet-to-be-formed LLC, which will have the FSR and the American Bankers Association as its founding members.
It will be a community-designated bid, which means the company may be able to avoid an ICANN auction in the event that its chosen gTLD strings are contested by other applicants.
“We’ve looked at the scoring, and while it may not come into play at all we do believe we can meet the requisite score [for a successful Community Priority Evaluation],” Schwartz said. “But we’re certainly mindful of what’s happening in the space, there’s always the possibility of contention.”
There’s no relationship between BITS and CORE, the Council of European Registrars, which is apparently looking into applying for its own set of financially-oriented gTLDs, Schwartz said.
It’s not a big-money commercial play, but the new venture would be structured as a for-profit entity, he said.
“It’s relatively analogous to what’s happened in the .coop space, where after 10 years they have only about 7,000 registrations,” Schwartz said.
It sounds like pricing might be in the $100+ range. Smaller financial institutions lacking the resources to apply for their own .brand gTLDs would be a likely target customer base.
Interestingly, .bank may begin life as a business-to-business play, used primarily for secure inter-bank transactions, before it becomes a consumer-facing proposition, Schwartz said.
He added that it would likely partner with a small number of ICANN-accredited registrars – those that are able to meet its security requirements – to get the domains into the hands of banks.
VeriSign has already signed up to provide the secure back-end registry services for the bid.

Win $5,000 for your new gTLD idea

Afilias is offering $5,000 for the best idea about what to do with a new generic top-level domain.
The company has kicked off a competition today designed to stimulate interest in ICANN’s new gTLD program.
It said in a press release this evening:

With this contest, Afilias is looking for unique new TLD ideas, whether that domain is a “dot Brand” (for a company) or a “dot Niche” (for a concept or community) or a “dot City” domain. The goal is to discover ideas for “right of the dot” domains that cannot be done today with any of the existing domains, like .com or .net.

Basically, you send in your best new gTLD idea – not just a string, but an innovative way to use it – and you stand a chance of winning prizes of $5,000, $3,000 or $1,500.
The contest web page can be found here. The rules are here.
According to the press release, I’ve agreed to be on the judging panel, apparently as the latest stage of my ongoing campaign of utterly shameless self-promotion.
The other judges are former ICANN president Paul Twomey, Matthew Quint of the Center on Global Brand Leadership and David Rogers of BRITE, both at Columbia Business School, as well as Afilias’ CTO and CMO, Ram Mohan and Roland LaPlante.
I’m not sure what to expect, but it strikes me that if you have a halfway decent idea for a new gTLD – and you don’t actually plan to apply for it – you may not have much to lose by entering.
Afilias is accepting submissions until October 17, just two weeks from now, and the winners will be announced October 24.

First video of ICANN’s new gTLDs outreach

Here’s what I believe is the first publicly available video from ICANN’s ongoing new top-level domains marketing road-trip, which kicked off earlier this month.
CEO Rod Beckstrom, along with a small entourage of ICANN staffers, attended a breakfast panel discussion of new gTLDs at the London offices of PR company Edelman on September 20.
Also on the panel, moderated by Edelman’s Jonathan Hargreaves, were: Lesley Cowley, CEO of .uk registry Nominet; Lorna Gradden, director of brand-focused registrar Com Laude; and me.
There were roughly 75 people in the audience, which I’ve heard is somewhat more than showed up to similar ICANN panels in Berlin and Paris later in the week.
I know from conversations after the camera stopped rolling that a decent number of attendees were from outside the domain name industry – potential applicants – but the questions you’ll hear on the video pretty much all come from those with a closer interest in the new gTLD program.
As I’ve been reporting, ICANN is taking a softly-softly approach to outreach, saying it’s trying to “educate not advocate”, which is also evident in this video.
My main takeaway – and the story I would have written had I been in the audience taking notes rather than on the panel not – is that some of the recommendations of the JAS working group on new gTLD developing-world applicant support appear to be stillborn.
In the meantime, here’s all 68 minutes of the video.

Will URS really be as cheap as ICANN says?

I’m having a hard time believing that trademark holders will be able to enforce their rights in new top-level domains for just $300.
The Uniform Rapid Suspension policy (pdf) is one of the new systems ICANN is putting in place to deter cybersquatters from abusing trademarks in new gTLDs.
It’s very similar to the existing UDRP, but it’s quicker and it only deals with the suspension – not transfer – of infringing domain names.
No URS arbitration provider has yet been appointed, but ICANN’s Applicant Guidebook, which spells out the policy, currently estimates a price of $300 per single-domain filing.
At least twice during the newdomains.org conference in Munich this week I heard ICANN representatives quote a price between $300 and $500.
I’m wondering how realistic this is.
Typically, domain arbitration fees are split between the provider, which receives a third, and the panelist, who receives the remaining two thirds.
With a $300 fee, that’s $100 to the provider and $200 to the sole panelist – who must be an experienced trademark lawyer or similar – compared to a $500/$1,000 split with the UDRP.
My question is: how many trademark lawyers will get out of bed for $200?
The URS gives panelists between three and five days to come up with a decision, but I’m guessing that you’d be lucky, for $200, to buy three to five hours of a panelist’s time.
Even I charge more than $200 for half a day’s work.
The Rapid Evaluation Service recently introduced by ICM Registry, which serves essentially the same purpose as URS but for the .xxx gTLD, costs $1,300 in National Arbitration Forum fees.
Like URS, the RES is designed for a speedy turnaround – just three days for a preliminary evaluation – of clear-cut cybersquatting cases.
Like URS, complaints submitted using RES have a tight word-count limit, to minimize the amount of work panelists have to do.
With that in mind, it seems to me that a $300 fee for URS may be unrealistic. Even the $500 upper-end ICANN estimate may be optimistic.
It will be interesting to see if ICANN’s negotiating clout with likely URS providers is better than ICM’s and, more importantly, to see whether $200 is enough to buy consistent, reliable decisions from panelists.

AusRegistry wins .jewelers deal

GJB Partners, one of the few companies to recently announce a commercial new top-level domain bid, has selected AusRegistry International to provide the back-end registry for .jewelers.
It’s the first non-geographic TLD contract win AusRegistry has announced this year.
While it’s probably a small deal, it’s notable because one of GJB’s managing partners is George Bundy, CEO of BRS Media, the registry for .fm and a potential .radio applicant.
BRS is currently the only public reference customer for Espresso, the registry platform offered by Minds + Machines, an AusRegistry competitor.

Notes from day one of the Munich new gTLDs conference

The newdomains.org conference on new top-level domains kicked off here in Munich today, the first major show in Europe dedicated to new gTLDs.
The city is the grasp of Oktoberfest at the moment – the drunk tourist contingent is high, and it seems like every fifth person you pass on the street is in traditional local costume.
Hairy knees and lederhosen are the order of the day for the men. For the ladies: tight, low-cut biermädchen bodices and flowing skirts in earthy colors. Cleavage as far as the eye can see.
Munich feels, to this cultural Luddite at least, like it’s ready to dissolve into a bawdy, soft-core 1970s Bavarian sex comedy at any moment.
Thankfully, inside the stylish Sofitel Munich Bayerpost hotel the attire is strictly business-casual.
Turnout for newdomains.org appears to be good — maybe a couple hundred people — and there are plenty of faces beyond the “usual suspects”, thanks probably to the number of locals in attendance.
Today kicked off with a keynote from new ICANN chair Steve Crocker.
Allotted 30 minutes, he whizzed through his presentation on “New gTLDs: Innovation and Protection” in about 20, covering many of the same bases, I’m told by attendees, as he did at the INTA trademark conference in Washington DC last week.
“These new TLDs are a springboard for innovation,” he said. “But this must not happen at the expense of brand holders.”
At a press conference later, I got the distinct impression – and it is only my impression – that Crocker is rather more enthusiastic about the program than ICANN’s current softly-softly approach to new gTLDs outreach allows him to express.
The party line from ICANN for the last few weeks has been one of “awareness, not advocacy”, which Crocker toed loyally today.
This may be sensible – it should not be seen to encourage the world and his dog to apply for a new gTLD – but the end result is that the naysayers have managed to successfully frame the issue, which is reflected in the largely negative questions that are usually asked.
The conference is split into two streams, one aimed at newbies, the other at people in more advanced stages of planning their new gTLD bids. I’ve been mainly sitting in on the latter.
In the morning, Roland LaPlante from Afilias presented some really good data and charts showing domain registration trends in the new gTLDs that have been introduced over the last 10 years – both ICANN-approved gTLDs and ccTLDs such as .eu and .me.
If there was one big takeaway from that session, it was that the first and second-year renewal dates are crucial if you want to build a sustainable gTLD. Every TLD dips around that mark.
LaPlante also revealed that, in a first-quarter 2011 survey, 18.7% of .info addresses hosted unique, dedicated web sites. About 65% were inactive or redirected to other TLDs.
While this seems like a small amount, given the size of .info it actually works out to a couple of million people/businesses using a non-.com gTLD as their main home on the web. Any TLD, I think, would be happy to have so many actual users.
The main letdown in the Afilias data, I thought, was the absence of any mention of the success of .co.
Fair enough, .co is only a year old and its numbers are not fully public, but the cynic in me notes that its exclusion probably will have made Afilias’ back-end figures shape up against rival Neustar’s rather better than they would have otherwise.
In the afternoon, I moderated a panel on registration strategies in the world of new gTLDs, featuring Monte Cahn and Mike Berkens of Right Of The Dot and Tim Schumacher of Sedo.
But first, I caught the tail-end of a presentation about internet policy from PIR’s CEO Brian Cute, who seems to be worried about the growing problem of governments using domain takedown notices as a means of law enforcement.
Schumacher kicked off our session with a presentation on his thoughts about new gTLD pricing, in which he compared four categories of company you might find on the stockmarket to four equivalent categories of domain names.
Essentially, he concluded that new gTLDs are going to be split between “junk” – the gTLD equivalent of www.a-junk-site.ws – and “brands” – comparable to vodka.com.
He said the new gTLD boom will mean “Some new business. No real change.” in terms of pricing and said a small number of “disruptive” new registries could help the industry.
We then launched into a discussion of registries’ premium name strategies – how to balance the allocation of premiums between founders programs, landrush auctions and registry reservations.
Unsurprisingly, you couldn’t slide a cigarette paper between Cahn and Berkens, but I think there was probably some disagreement on the panel about the relative importance of the role of domain investors in promoting a new gTLD.
Berkens said that high-profile domainers are “market-makers”, helping set the valuation expectations, whereas Schumacher (and to a lesser extent some of my questions) put a greater emphasis on the need for end user adoption and development.
It’s difficult to judge the success of a panel you’re sitting on, but I will admit that we shamefully overlooked the issue of IDNs until the closing moments, which was entirely my fault.
I finished the day at the “Ask the Experts” session in the newbie channel, on the basis that I’ve listened to enough panels on new gTLDs in the last two years to know that the value, for me, is in the questions.
Sadly, possibly due to attendees flagging at the end of the day, there weren’t many questions from the floor, leaving professional moderator Melinda Crane to pick up the slack.
One session unlikely to have that problem tomorrow is a two-man panel on the Applicant Guidebook comprising ICANN’s Kurt Pritz and Olof Nordling.
Today, these two ICANN experts been sitting on the front row of many sessions, enabling panelists to deflect tricky audience questions about the application process to them.
I don’t think there will be any shortage of questions during their session tomorrow.