Dot-brands get another year to sign ICANN contract

ICANN has offered dot-brand gTLD applicants the ability to delay the signing of their Registry Agreements until July 29, 2015, nine months later than under the former process.
The extension was offered by ICANN after talks with the Brand Registry Group, whose members felt pressured by the old deadline.
All new gTLD applicants had previously been told they had nine months to sign the contract from the date they receive a so-called “Contracting Information Request” from ICANN.
For many applicants, those CIRs were sent out many months ago, leading to an October 29 deadline.
However, Specification 13 of the contract, which allows dot-brands to opt out of things like sunrise periods and equal treatment of registrars, was not finalized by ICANN until May 14 this year.
Only a minuscule number of dot-brands eligible to sign contracts — which is pretty much all of them — have so far opted to do so.
Bearing the Spec 13 delay in mind, ICANN is now offering would-be dot-brands the July 2015 deadline instead, as long as they show “good faith” by responding to their CIR by September 1.
What this means is that dot-brands might not be hitting the internet for another year.
For non-branded gTLD registries — some of whom hope the big brands’ adoption and marketing will help the visibility of new gTLDs in general — this may be disappointing.

IPO warns about premium loopholes in new gTLD trademark protection

It seems like it’s been an age since we last heard the intellectual property lobby pushing for stronger rights protection mechanisms in new gTLDs, but they’re back just in time for the first launches.
The Intellectual Property Owners Association has written to ICANN this week to warn about loopholes in the standard new gTLD Registry Agreement related to premium name reservations that the IPO said “will adversely affect trademark rights holders”.
The letter (pdf) makes reference to two specific parts of the contract.
Specification 5 enables registries to reserve up to 100 names “necessary for the operation or promotion of the TLD” in section 3.2 and an unlimited number of names in section 3.3.
Section 3.3 is vague enough that I’m aware of new gTLD applicants that still don’t know whether it allows them to reserve an unlimited number of “premium” names or not.
However, most new gTLD registries I’ve talked to appear to be convinced that it does. DotKiwi’s recently announced premium plan seems to be taking advantage of 3.3.
The IPO is worried that massive lists of premium names will wind up containing lots of strings matching trademarks, which will prevent mark holders from defensively registering during Sunrise.
Worse, the IPO said it could lead to registries milking trademark owners for huge fees to register their “premium” marks. It said:

such reservations would invite the abuse of protected marks. For instance, Registry Operators may reserve the marks of protected brands to leverage premium sales. Further, Registry Operators may use this ability to release names to market competitors of the brand owners.

The counter argument, of course, is that owners of spurious trademarks on generic terms could game Sunrise periods to get their hands of potentially valuable domain names (cf. the .eu sunrise)
The IPO wants ICANN to expand the Trademark Clearinghouse to send Trademark Claims notices to new gTLD registries when they reserve a name matching a listed trademark.
It also wants a new dispute procedure that mark owners could use to get names released from reserved status. It would be like UDRP, but modified to allow for registries to reserve dictionary words related to their gTLD strings, the IPO said.
If my sense of the mood of ICANN’s leadership during last month’s Buenos Aires meeting is anything to go by, I can’t see these last-minute requests for changes to RPMs getting much traction, but you never know.

On day one, Donuts in breach of new gTLD contract

Ooops! Donuts accidentally broke the terms of its first new gTLD Registry Agreement last night, just hours after its first string, .游戏, was delegated to the DNS root.
If you’ve been following the name collisions debate closely, you’ll recall that all new gTLD registries are banned from activating any second-level domains for 120 days after they sign their contracts:

Registry Operator shall not activate any names in the DNS zone for the Registry TLD (except for “NIC”) until at least 120 calendar days after the effective date of this agreement.

For the first four gTLDs to go live, that clock doesn’t stop ticking until November 12.
And yet, last night, Donuts activated donuts.游戏, apparently in violation of its new contractual obligations with ICANN.
The name was live and resolving for at least an hour. Donuts pulled it after we asked a company executive whether it might be a breach of contract.
I don’t think it’s a big deal, and I doubt ICANN needs to take any action.
Chalk it down to the understandable ebullience that naturally accompanies finally getting delegated to the root after such a long and painful evaluation process.
The 120-day rule was also a late amendment to Specification 6 of the RA, added by ICANN just seven days before .游戏 was delegated and over three months after Donuts signed the original contract.
It’s designed to address the potential for collisions between second-level domains in new gTLDs and names used on internal networks that already have working SSL certificates.
The no-activation window was chosen to match the 120-day period that the CA/Browser Forum gives its certificate authority members to revoke clashing certificates.
It seems unlikely donuts.游戏 will have caused any security issues during the brief period it was alive.

Samsung signs the first dot-brand gTLD contract

Samsung has become the first company to sign a Registry Agreement for a dot-brand gTLD.
As of yesterday, the electronics giant is now officially contracted with ICANN to run .삼성, its name in its native Korean.
It’s surprising that Samsung would be the first; while its application has priority number 18, its application also makes it pretty obvious it’s a primarily defensive move, reading:

The new gTLD proposed by SAMSUNG SDS has purpose in protecting online brand of SAMSUNG Group including SAMSUNG by defending abusive registration by third parties and further raising global awareness by domain usage utilizing company name.

The contract has not yet been published in full — expect that over the next few days — so it’s not yet clear whether Samsung has managed to negotiate any special dot-brand-specific amendments.
The base Registry Agreement contains lots of obligations, such as Sunrise periods, that really aren’t applicable to single-registrant spaces.
I understand the new Brand Registry Group is currently trying to negotiate a baseline set of dot-brand amendments with ICANN, so it’s possible that Samsung has jumped the gun by signing so soon.
But it could also mean that .삼성 will be the first-ever dot-brand TLD to go live on the internet, which is likely to benefit from substantial media coverage compared to subsequent delegations.
ICANN has signed 48 new gTLD contracts since July, way behind its originally target of 40 per week.
.삼성 will have its back-end registry managed by .kr ccTLD operator KISA.

ICANN to publish new gTLD contract changes

ICANN has decided to start publishing red-lined versions of its new gTLD Registry Agreements, so applicants can see what special terms ICANN is willing to accept.
It’s a reversal of its previous position, and follows complaints from applicants and back-end providers.
So far ICANN has signed almost 50 new gTLD contracts, all of which have been published, but it’s not easy to compare them all to the baseline Registry Agreement found in the Applicant Guidebook.
By publishing versions with the changes highlighted, applicants will be able to go into contract negotiations with a better idea of how far ICANN is willing to bend.
ICANN said today:

Upon further consideration, ICANN has concluded that publishing redlined versions of Registry Agreements would be helpful to the entire ICANN community, and would also support ICANN’s efforts to provide operational transparency.

It added that so far there have been no substantial changes in the contracts it’s signed, apart from gTLD-specific Public Interest Commitments and approved Registry Services.
It will start publishing the redlines next month.

Three gTLD contracts to be renewed next week

ICANN is set to belatedly renew the .info, .org and .biz Registry Agreements next week, according to the just published agenda of its board of directors’ next meeting.
The .info and .biz contracts expired last year, while .org’s expired in April. All three were extended while ICANN and the registries — Afilias, Neustar and PIR — figured out how much of the new gTLD Registry Agreement to incorporate into the renewed deals.
They wound up agreeing to, among other things, mandating the use of the 2013 Registrar Accreditation Agreement in all three gTLDs, but only on the condition that Verisign agrees to the same terms for .com and .net.
The three contracts didn’t go far enough for some, such as the Intellectual Property Constituency, which wants new gTLD rights protection mechanisms such as Uniform Rapid Suspension to be added.
The approval of the three renewals is on the consent agenda for the ICANN board’s August 22 meeting, so it seems unlikely that there will be any huge changes to the previously published draft contracts.
Also on the agenda for next week are the redelegations of the ccTLDs for Botswana (.bw) and Portugal (.pt).

New gTLD registry contract approved, but applicants left hanging by GAC advice

ICANN has approved the standard registry contract for new gTLD registries after many months of controversy.
But its New gTLD Program Committee has also decided to put hundreds more applications on hold, pending talks with the Governmental Advisory Committee about its recent objections.
The new Registry Agreement is the baseline contract for all new gTLD applicants. While some negotiation on detail is possible, ICANN expects most applicants to sign it as is.
Its approval by the NGPC yesterday — just a couple of days later than recently predicted by ICANN officials — means the first contracts with applicants could very well be signed this month.
The big changes include the mandatory “Public Interest Commitments” for abuse scanning and Whois verification that we reported on last month, and the freeze on closed generics.
But a preliminary reading of today’s document suggests that the other changes made since the previous version, published for comment by ICANN in April, are relatively minor.
There have been no big concessions to single-registrant gTLD applicants, such as dot-brands, and ICANN admitted that it may have to revise the RA in future depending on how those discussions pan out.
In its resolution, the NGPC said:

ICANN is currently considering alternative provisions for inclusion in the Registry Agreement for .brand and closed registries, and is working with members of the community to identify appropriate alternative provisions. Following this effort, alternative provisions may be included in the Registry Agreement.

But many companies that have already passed through Initial Evaluation now have little to worry about in their path to signing a contract with ICANN and proceeding to delegation.
“New gTLDs are now on the home stretch,” NGPC member Chris Disspain said in a press release “This new Registry Agreement means we’ve cleared one of the last hurdles for those gTLD applicants who are approved and eagerly nearing that point where their names will go online.”
Hundreds more, however, are still in limbo.
The NGPC also decided yesterday to put a hold on all “Category 1” applications singled out for advice in the Governmental Advisory Committee’s Beijing communique.
That’s a big list, comprising hundreds of applications that GAC members had concerns about.
The NGPC resolved: “the NGPC directs staff to defer moving forward with the contracting process for applicants who have applied for TLD strings listed in the GAC’s Category 1 Safeguard Advice, pending a dialogue with the GAC.”
That dialogue is expected to kick off in Durban a little over a week from now, so the affected applicants may not find themselves on hold for too long.
Negotiations, however, are likely to be tricky. As the NGPC’s resolution notes, most people believe the Beijing communique was “untimely, ill-conceived, overbroad, and too vague to implement”.
Or, as I put it, stupid.
By the GAC’s own admission, its list of strings is “non-exhaustive”, so if the delay turns out to have a meaningful impact on affected applicants, expect all hell to break loose.

ICANN offers to split the cost of GAC “safeguards” with new gTLD registries

All new gTLD applicants will have to abide by stricter rules on security and Whois accuracy under government-mandated changes to their contracts approved by the ICANN board.
At least one of the new obligations is likely to laden new gTLDs registries with additional ongoing costs. In another case, ICANN appears ready to shoulder the financial burden instead.
The changes are coming as a result of ICANN’s New gTLD Program Committee, which on on Tuesday voted to adopt six more pieces of the Governmental Advisory Committee’s advice from March.
This chunk of advice, which deals exclusively with security-related issues, was found in the GAC’s Beijing communique (pdf) under the heading “Safeguards Applicable to all New gTLDs”.
Here’s what ICANN has decided to do about it.
Mandatory Whois checks
The GAC wanted all registries to conduct mandatory checks of Whois data at least twice a year, notifying registrars about any “inaccurate or incomplete records” found.
Many new gTLD applicants already offered to do something similar in their applications.
But ICANN, in response to the GAC advice, has volunteered to do these checks itself. The NGPC said:

ICANN is concluding its development of a WHOIS tool that gives it the ability to check false, incomplete or inaccurate WHOIS data
…
Given these ongoing activities, ICANN (instead of Registry Operators) is well positioned to implement the GAC’s advice that checks identifying registrations in a gTLD with deliberately false, inaccurate or incomplete WHOIS data be conducted at least twice a year. To achieve this, ICANN will perform a periodic sampling of WHOIS data across registries in an effort to identify potentially inaccurate records.

While the resolution is light on detail, it appears that new gTLD registries may well be taken out of the loop completely, with ICANN notifying their registrars instead about inaccurate Whois records.
It’s not the first time ICANN has offered to shoulder potentially costly burdens that would otherwise encumber registry operators. It doesn’t get nearly enough credit from new gTLD applicants for this.
Contractually banning abuse
The GAC wanted new gTLD registrants contractually forbidden from doing bad stuff like phishing, pharming, operating botnets, distributing malware and from infringing intellectual property rights.
These obligations should be passed to the registrants by the registries via their contracts with registrars, the GAC said.
ICANN’s NGPC has agreed with this bit of advice entirely. The base new gTLD Registry Agreement is therefore going to be amended to include a new mandatory Public Interest Commitment reading:

Registry Operator will include a provision in its Registry-Registrar Agreement that requires Registrars to include in their Registration Agreements a provision prohibiting Registered Name Holders from distributing malware, abusively operating botnets, phishing, piracy, trademark or copyright infringement, fraudulent or deceptive practices, counterfeiting or otherwise engaging in activity contrary to applicable law, and providing (consistent with applicable law and any related procedures) consequences for such activities including suspension of the domain name.

The decision to include it as a Public Interest Commitment, rather than building it into the contract proper, is noteworthy.
PICs will be subject to a Public Interest Commitment Dispute Resolution Process (PICDRP) which allows basically anyone to file a complaint about a registry suspected of breaking its commitments.
ICANN would act as the enforcer of the ruling, rather than the complainant. Registries that lose PICDRP cases face consequences up to an including the termination of their contracts.
In theory, by including the GAC’s advice as a PIC, ICANN is handing a loaded gun to anyone who might want to shoot down a new gTLD registry in future.
However, the proposed PIC language seems to be worded in such a way that the registry would only have to include the anti-abuse provisions in its contract in order to be in compliance.
Right now, the way the PIC is worded, I can’t see a registry getting terminated or otherwise sanctioned due to a dispute about an instance of copyright infringement by a registrant, for example.
I don’t think there’s much else to get excited about here. Every registry or registrar worth a damn already prohibits its customers from doing bad stuff, if only to cover their own asses legally and keep their networks clean; ICANN merely wants to formalize these provisions in its chain of contracts.
Actually fighting abuse
The third through sixth pieces of GAC advice approved by ICANN this week are the ones that will almost certainly add to the cost of running a new gTLD registry.
The GAC wants registries to “periodically conduct a technical analysis to assess whether domains in its gTLD are being used to perpetrate security threats such as pharming, phishing, malware, and botnets.”
It also wants registries to keep records of what they find in these analyses, to maintain a complaints mechanism, and to shut down any domains found to be perpetrating abusive behavior.
ICANN has again gone the route of adding a new mandatory PIC to the base Registry Agreement. It reads:

Registry Operator will periodically conduct a technical analysis to assess whether domains in the TLD are being used to perpetrate security threats, such as pharming, phishing, malware, and botnets. Registry Operator will maintain statistical reports on the number of security threats identified and the actions taken as a result of the periodic security checks. Registry Operator will maintain these reports for the term of the Agreement unless a shorter period is required by law or approved by ICANN, and will provide them to ICANN upon request.

You’ll notice that the language is purposefully vague on how registries should carry out these checks.
ICANN said it will convene a task force or GNSO policy development process to figure out the precise details, enabling new gTLD applicants to enter into contracts as soon as possible.
It means, of course, that applicants could wind up signing contracts without being fully apprised of the cost implications. Fighting abuse costs money.
There are dozens of ways to scan TLDs for abusive behavior, but the most comprehensive ones are commercial services.
ICM Registry, for example, decided to pay Intel/McAfee millions of dollars — a dollar or two per domain, I believe — for it to run daily malware scans of the entire .xxx zone.
More recently, Directi’s .PW Registry chose to sign up to Architelos’ NameSentry service to monitor abuse in its newly relaunched ccTLD.
There’s going to be a fight about the implementation details, but one way or the other the PIC would make registries scan their zones for abuse.
What the PIC does not state, and where it may face queries from the GAC as a result, is what registries must do when they find abusive behavior in their gTLDs. There’s no mention of mandatory domain name suspension, for example.
But in an annex to Tuesday’s resolution, ICANN’s NGPC said the “consequences” part of the GAC advice would be addressed as part of the same future technical implementation discussions.
In summary, the NGPC wants registries to be contractually obliged to contractually oblige their registrars to contractually oblige their registrants to not do bad stuff, but there are not yet any obligations relating to the consequences, to registrants, of ignoring these rules.
This week’s resolutions are the second big batch of decisions ICANN has taken regarding the GAC’s Beijing communique.
Earlier this month, it accepted some of the GAC’s direct advice related to certain specific gTLDs it has a problem with, the RAA and intergovernmental organizations and pretended to accept other advice related to community objections.
The NGPC has yet to address the egregiously incompetent “Category 1” GAC advice, which was the subject of a public comment period.

New .org contract could make registrars sign up to 2013 RAA

Registrars risk losing their right to sell .org domain names unless they sign up to the new 2013 Registrar Accreditation Agreement.
The change is among several proposed to Public Interest Registry’s .org Registry Agreement with ICANN, which was published for public comment over the weekend.
Amendments to the .org RA, which came to the end of its six-year term in April, are very similar to those put forward for the .info and .biz contracts last month.
But .org is a far larger and more popular TLD, putting more pressure on more registrars to sign up to the 2013 RAA, with its new Whois verification and privacy service obligations.
For registrars on the 2009 and 2001 RAAs, the clock would start ticking the day that registrars representing two thirds of all .org registrations sign the 2013 RAA.
That threshold could be met in .org if the top eight or nine registrars make the switch.
PIR would then get 60 days to tell its remaining registrars that they have 270 days to move to the new RAA. Any registrar that failed to adopt it in that time would lose its right to sell .org domain names.
As with the .info and .biz contracts, the provisions related to the 2013 RAA would only kick in if Verisign asks for the same changes for its .com and .net agreements, which may never happen.
Other changes proposed for the .org contract include:

• Cross-ownership restrictions. PIR will be able to own a registrar under the new deal, lifting the long-standing ban on gTLD registries selling domains in their own TLD.
• Price increases. PIR will be able to raise its .org registry fee by 10% per year, from its current level of $8.25.
• Code of Conduct. PIR will have to abide by the same registry Code of Conduct as new gTLD operators, which contains provisions mainly related to equal registrar access.

The propose .org contract is open for public comment until August 12.

Unrest remains despite new new gTLD contract

ICANN has proposed big changes to how it will handle premium domain names, dot-brands, mergers and acquisitions and mandatory fees in new gTLDs.
It published a new version of the proposed Registry Agreement for new gTLD operators this morning, saying that it is the product of months of “negotiations” with applicants and registries.
But some applicants and back-end providers disagree with this characterization, saying that while some registries helped ICANN with the text they have no authority to speak for all applicants.
The agreement was posted for 42 days of public comment this morning. Before it is approved by the ICANN board of directors, no new gTLD applicants will be able to sign contracts and begin to go live.
There are several major changes compared to the version in the Applicant Guidebook.
Premium domains not dead after all
In what could prove to be the most significant and controversial changes, ICANN has given registries the ability to run Founders Programs and premium name schemes without interference from trademark owners.
New text in the contract will let them self-register up to 100 names “necessary for the operation or the promotion of the TLD” and release those names to third parties if they want.
This appears to be a way around the fear that mandatory Sunrise periods could thwart registries’ plans to sign up anchor tenants to the gTLDs, a crucial launch marketing tactic for many.
The new RA also appears to give broad powers to the registry to allocate premium domain names at will.

Registry Operator may withhold from registration or allocate to Registry Operator names (including their IDN variants, where applicable) at All Levels in accordance with Section 2.6 of the Agreement. Such names may not be activated in the DNS, but may be released for registration to another person or entity at Registry Operator’s discretion.

There does not appear to be a numerical limit on how many domains can be reserved in this way.
Hypothetically, this might allow a registry to reserve the entire dictionary (or dictionaries) at launch, preventing holders of trademarks on generic terms grabbing the matching names during Sunrise.
The still-draft Trademark Clearinghouse rules will also play a part here, but from the RA it looks like registries have just been handed a massively flexible reservation tool.
If my initial interpretation is correct, I expect the trademark lobby will have strong view here.
Concessions for dot-brands
New text in the agreement makes it clearer that ICANN has no plans to redelegate dot-brand gTLDs to third parties after the Registry Agreement expires or is terminated.
This means, for example, that if L’Oreal decides to stop using .loreal at some point in future, ICANN very probably won’t give .loreal to a competitor. The new text is:

(i) ICANN will take into consideration any intellectual property rights of Registry Operator (as communicated to ICANN by Registry Operator) in determining whether to transition operation of the TLD to a successor registry operator

It’s probably not rigid enough language to satisfy some lawyers’ wishes, but I think it does enough to convey the spirit of ICANN’s intentions.
ICANN is of course mainly concerned that dead gTLDs don’t leave registrants with dead domain names, but if there are no registrants I can’t imagine why it would want to redelegate.
Lower fees for registries
Newly added text in the RA specifies that registries must pay ICANN a $5,000 one-off fee (per TLD) to use the new Trademark Clearinghouse, plus with $0.25 per domain that uses its services.
Domains registered under Sunrise periods or which trigger Trademark Claims alerts would incur this one-time fee, which appears to have been reduced from the $0.30 previously discussed.
These fees will actually be passed on to the Trademark Clearinghouse operators (Deloitte and IBM), for which ICANN has agreed to manage billing in order to keep costs down.
In addition, the RA now clarifies that the registry operator’s regular fixed fees to ICANN of $6,250 a quarter only kick in from the date that the gTLD hits the DNS root, not the date of contract signing. That could save registries up to a year’s worth of fees, if they’re late to delegation.
M&A approvals
There are also changes to the way ICANN plans to approve of mergers and acquisitions among registries.
First, it will be much easier for the contract to be passed around within a corporate holding group. The RA now states:

Registry Operator may assign this Agreement without the consent of ICANN directly to a wholly-owned subsidiary of Registry Operator, or, if Registry Operator is a wholly-owned subsidiary, to its direct parent or to another wholly-owned subsidiary of its direct parent, upon such subsidiary’s or parent’s, as applicable, express assumption of the terms and conditions of this Agreement

This change would seem to enable portfolio applicants that have applied for many gTLDs each under separate shell company names (Donuts, for example) to consolidate their contracts under a single parent.
What I don’t think it does is allow for contention set resolution based on joint ventures (which are obviously not “wholly owned”), such as what Uniregistry and Top Level Domain Holdings announced they had agreed to yesterday.
The new RA also states that ICANN must approve subcontracting deals the registry inks for any of the five “critical functions” (EPP, DNS, DNSSEC, Whois and escrow).
Unilateral amendments are gone
The controversial “unilateral right to amend” that ICANN wanted to grant itself — essentially an emergency power to change the contract almost at whim and over the objections of registries — is gone.
It’s been replaced with a convoluted series of procures almost identical to those found in the proposed final version of the 2013 Registrar Accreditation Agreement currently open for comment.
Registries would get the ability to punt the changes to a GNSO Policy Development Process, submit alternative amendments, take ICANN to arbitration or request exemptions, under the new rules.
While the new provisions still give ICANN the ability to force through unpopular changes under certain circumstances, a lot more engagement by registries is envisaged so “unilateral” is probably not a good word to use any more.
So is the deal final or not?
ICANN said in a blog post: “The proposed agreement is the result of several months of negotiations, formal community feedback, and meetings with various stakeholders and communities.”
It added:

We have come a long way since February 2013 when we posted a proposed Revised New gTLD Registry Agreement for public comment. A new and highly spirited sense of mutual trust has catapulted us into a fresh atmosphere of collaboration, which in turn has led to a consistently more productive environment. The spirit of teamwork, productive dialogue and partnership that has underpinned this negotiation process is tremendously heartwarming, as it has allowed us to bring to fruition a robust contractual framework for the New gTLD Program.

But some are worried that ICANN seems to be portraying the RA as equivalent to the Registrar Accreditation Agreement, which was subject to 18 months of talks with a negotiating team representing registrars.
The registries’ Registry Agreement Negotiating Team (RA-NT), on the other hand, was formed less than three weeks ago during ICANN’s meeting in Beijing, and did not have the authority to speak for all applicants.
The RA-NT said in a statement published by ICANN:

The RA-NT agreed to review the new gTLD Registry Agreement with ICANN staff in an effort to minimize some of the more controversial aspects of the Agreement for applicants as a whole. While participants reflected a variety of perspectives, the team did not “represent” or have any authority to “speak for” new gTLD applicants generally, or any group of applicants.

ARI Registry Services CEO Adrian Kinderis told DI:

My fears (and frustrations) come from the fact that ICANN staff have made it sound like they have reached the same point in the process. “It is done”. It most certainly isn’t “done”. They need to understand that the negotiation is actually still very much active and all of the community should feel like their opinions and feedback will be considered in the development of the “final draft”.

The draft RA is now open for public comment until June 11.
That would give ICANN about a month to synthesize all the comments, make any changes, and put the deal to its board of directors for approval during the meeting in Durban, South Africa, this July.