- NA-Discuss - lists.icann.org

Re: [NA-Discuss] Cheat sheet for WHOIS Accuracy Session at 11AM in 311/312
by Garth Bruen at KnujOn June 23, 2010

June 23, 2010

I welcome you comments via lists etc... > -------- Original Message -------- > Subject: Re: [NA-Discuss] Cheat sheet for WHOIS Accuracy Session at > 11AM in 311/312 > From: Wendy Seltzer <wendy(a)seltzer.com> > Date: Wed, June 23, 2010 4:46 am > To: gbruen(a)knujon.com > Cc: NA Discuss <na-discuss(a)atlarge-lists.icann.org> > > > Too bad the session conflicts with the ongoing open GNSO Council > meeting. I'd dispute the relevance of some of these measures to ICANN, > and would argue that in many cases, no action is warranted. > > --Wendy > > On 06/23/2010 04:30 AM, gbruen(a)knujon.com wrote: > > Folks, > > > > We are proving this "Cliffs Notes" version of our WHOIS data from our Registrar audit (http://www.knujon.com/knujon_audit0610.pdf) for today's WHOIS Accuracy Session at 11AM in 311/312 > > > > For Web-based WHOIS access: > > 11 Registrars have "look up" service instead of WHOIS > > 8 have clearly non-working engines or direct the visitor to some other WHOIS service > > A Technology Co(Namesystem.com) is manipulating it's own WHOIS record, returns: "Sorry Domain does not exist", and since we've published our report they pulled their port 43 offline completely. Note, this was ONLY for their domain name, all other queries worked. > > > > For Port-43 WHOIS Access > > 30 Registrars have bad, inconsistent service > > 55 would not reveal their WHOIS address > > 6 gave us inaccurate data or the email to them was rejected. One Registrar, Domain Factory, said they were not a Registrar > > > > For Bulk Access (RAA 3.3.6) > > Namescout and Network Solutions refused to offer the service > > eNom, Dotster, and Moniker did not respond to our request for information and price for bulk download > > > > Registrars are restoring or maintaining domains beyond the 45 day period of being inaccurate. > > > > 10 Registrars have false WHOIS for their own website domains > > -- > Wendy Seltzer -- wendy(a)seltzer.org > Fellow, Silicon Flatirons Center at University of Colorado Law School > Fellow, Berkman Center for Internet & Society at Harvard University > http://cyber.law.harvard.edu/seltzer.html > http://www.chillingeffects.org/ > https://www.torproject.org/

1 0

Results of today's Port 43 Test
by Garth Bruen at KnujOn June 22, 2010

June 22, 2010

Hello, Following up on this morning's discussion in the ALAC session on compliance. Below is a list of Port 43 WHOIS failures. Some in the list are recently defunct and I will have to remove them permanently. Others are actually unknown WHOIS locations, because as we discussed in the report the Registrars would not tell us; these are listed as failure. Now, we have no way of knowing for sure, but there is a slight improvement since we released the report. 3 Registrar Port 43's that failed in a test exactly one week ago all passed today. I haven't forgotten about the knujon whois util or address list for everyone, just been busy 21-domain.com FAIL 8hy.hk FAIL abansys.com FAIL agip.com FAIL antagus.de FAIL arcticnames.com FAIL aruba.it FAIL atxdomains.com FAIL austdomains.com FAIL bestbulkregister.com FAIL bhartiairtelservices.in FAIL brights.jp FAIL china.alibaba.com FAIL chinagov.cn FAIL chinaspringboard.com FAIL cronon.org FAIL cyberegistro.com FAIL DesktopDomainer.com FAIL df.eu FAIL digitrad.com FAIL direct.co.kr FAIL dnsexit.com FAIL Domaine.fr FAIL domainjamboree.com FAIL DomainLandrush.com FAIL domainname.at FAIL DomainRegistry.com FAIL domainregistry.de FAIL domains.coop FAIL domainspa.com FAIL domaintechnik.at FAIL drophhub.com FAIL francetelecom.com FAIL geewhizdomains.com FAIL globix.hu FAIL hectamedia.com FAIL hetzner.de FAIL hostnet.com FAIL hostway.com FAIL humeia.com FAIL idgenesis.com FAIL igempresas.com FAIL instra.com FAIL interdomain.es FAIL intermedia.net FAIL intra.com FAIL inwx.de FAIL is.co.za FAIL isimtescil.com FAIL iwelt.de FAIL key-systems.net FAIL komplex.net FAIL LCN.com FAIL livedoor.com FAIL lunarpages.com FAIL mailclub.fr FAIL marcaria.com FAIL MelbourneITDBS.com FAIL metapredict.com FAIL mindgenies.com FAIL namecheap.com FAIL Nameescape.com FAIL namefrog.com FAIL nameshield.net FAIL namesystem.com FAIL net.cn FAIL net4.in FAIL netregistry.com FAIL newgreatdomains.com FAIL portingxs.com FAIL purenic.co.jp FAIL riktad.com FAIL rntd.cn FAIL sedo.com FAIL SimplyNamed.com FAIL smartyhost.com.au FAIL spiritdomains.com FAIL sundancegrp.com FAIL sync.es FAIL tellus.com FAIL twt.it FAIL uk2group.com FAIL united-domains.de FAIL uol.com.br FAIL us.hooyoo.com FAIL verelink.com FAIL websitesource.com FAIL wudomains.com FAIL zzy.cn FAIL

1 0

Re: [NA-Discuss] ICANN Registrar Audit
by Garth Bruen at KnujOn June 21, 2010

June 21, 2010

"This independent audit of ICANN Registrar adherence and compliance to the Registrar Accreditation Agreement has revealed that162 Registrars may be in breach of their contracts for various reasons. The reasons are not trivial, they range from blocking and manipulating WHOIS access to falsifying applications to knowingly facilitating criminal traffic. This report takes a deep look at the relationships between registration fraud, DNS manipulation, spam, compliance failure and the growing trade in illicit drugs online. We also offer recommendations to correct these problems." > -------- Original Message -------- > Subject: Re: [NA-Discuss] ICANN Registrar Audit > From: Dharma Dailey <dharma(a)ethoswireless.com> > Date: Mon, June 21, 2010 1:48 pm > To: Garth Bruen at KnujOn <gbruen(a)knujon.com> > Cc: alac-announce(a)atlarge-lists.icann.org, > na-discuss(a)atlarge-lists.icann.org > > > Garth, > > This is really something. Do you have an executive summary to point > to or circulate? > > > > On Jun 21, 2010, at 1:52 AM, Garth Bruen at KnujOn wrote: > > > Hello all, > > > > I would like to invite you to review the results of our comprehensive > > audit of the gTLD Registrars as it relates to non-compliance and > > illicit > > activity: http://www.knujon.com/knujon_audit0610.pdf > > > > Since January KnujOn has been conducing its own review of Registrar > > contractual compliance and our findings are shocking. Among them: > > > > 162 Registrars may be in breach of the RAA, several of them seriously > > so > > > > As stated in our recent release, Who is Blocking WHOIS? > > http://www.circleid.com/posts/who_is_blocking_whois, over 80 > > Registrars > > are blocking, hiding or just providing poor WHOIS access > > > > Several Registrars have bad WHOIS for their own websites > > > > We've caught Registrars flat-out refusing services they're contracted > > to perform > > > > Several Registrars have not posted required customer policies on their > > websites > > > > There are a dozen or so terminated Registrars still selling gTLD and > > claiming ICANN accreditation > > > > As you may be aware, the Registrars have developed tools that help > > trademark infringement. We link these cases to criminal activity as > > well. > > > > And much more. > > > > -Garth > > > > > > ------------------------------------- > > What is the Doomsday Book? http://knujon.com/doomsday > > > > Garth Bruen > > gbruen(a)knujon.com > > http://www.knujon.com > > http://www.linkedin.com/pub/4/149/724 > > Linkedin Group: http://www.linkedin.com/groups?gid=1870205 > > Blog: http://www.circleid.com/members/3296/ > > Twitter: @Knujon > > > > > > > > ------ > > NA-Discuss mailing list > > NA-Discuss(a)atlarge-lists.icann.org > > http://atlarge-lists.icann.org/mailman/listinfo/na-discuss_atlarge-lists.ic… > > > > Visit the NARALO online at http://www.naralo.org > > ------

1 0

ICANN Registrar Audit
by Garth Bruen at KnujOn June 21, 2010

June 21, 2010

Hello all, I would like to invite you to review the results of our comprehensive audit of the gTLD Registrars as it relates to non-compliance and illicit activity: http://www.knujon.com/knujon_audit0610.pdf Since January KnujOn has been conducing its own review of Registrar contractual compliance and our findings are shocking. Among them: 162 Registrars may be in breach of the RAA, several of them seriously so As stated in our recent release, Who is Blocking WHOIS? http://www.circleid.com/posts/who_is_blocking_whois, over 80 Registrars are blocking, hiding or just providing poor WHOIS access Several Registrars have bad WHOIS for their own websites We've caught Registrars flat-out refusing services they're contracted to perform Several Registrars have not posted required customer policies on their websites There are a dozen or so terminated Registrars still selling gTLD and claiming ICANN accreditation As you may be aware, the Registrars have developed tools that help trademark infringement. We link these cases to criminal activity as well. And much more. -Garth ------------------------------------- What is the Doomsday Book? http://knujon.com/doomsday Garth Bruen gbruen(a)knujon.com http://www.knujon.com http://www.linkedin.com/pub/4/149/724 Linkedin Group: http://www.linkedin.com/groups?gid=1870205 Blog: http://www.circleid.com/members/3296/ Twitter: @Knujon

2 1

At-Large View on ICANN Accountability and Transparency
by ICANN At-Large Staff June 16, 2010

June 16, 2010

Dear All, ALAC Chair Cheryl Langdon-Orr, who is also a member of the Accountability and Transparency Review Team (ATRT) is asking for your input to this discussion. Under the following URL you can find background information on the ATRT as well as an “issues”/”suggestions” box where you can directly add your thoughts on the ATRT: https://st.icann.org/alac/index.cgi?at_large_workspace_on_the_accountabilit… The ten initial questions which the ATRT recently submitted for community feedback are of particular input for this discussion. (see http://www.icann.org/en/reviews/affirmation/community-questions-18may10-en.…) Your input will be a vital contribution to the At-Large working lunch on ICANN’s Accountability and Transparency Review in Brussels on Sunday. Thank you ! -- Regards, Heidi Ullrich, Matthias Langenegger, Seth Greene, Gisella Gruber-White, Marilyn Vernon, Kristina Nordström ICANN At-Large Staff email: staff[at]atlarge.icann.org website: www.atlarge.icann.org

1 0

At-Large View on ICANN's FY11 Budget
by ICANN At-Large Staff June 16, 2010

June 16, 2010

Dear All, This is to remind you about the At-Large meeting with ICANN CFO Kevin Wilson during the Brussels meeting. The meeting with Kevin will provide a unique opportunity for At-Large to raise issues of concerns with regards to ICANN budget for fiscal year 11. To prepare this discussion, we created a community workspace on the Draft Budget for Financial Year 2011. Please add your questions, thoughts and comments on the draft budget directly in the comment box under: https://st.icann.org/alac/index.cgi?workspace_on_fy11_operating_plan_and_bu… You will also find additional information about the draft budget for 2011 as well as links to previous statements and discussions on this workspace. -- Regards, Heidi Ullrich, Matthias Langenegger, Seth Greene, Gisella Gruber-White, Marilyn Vernon, Kristina Nordström ICANN At-Large Staff email: staff[at]atlarge.icann.org website: www.atlarge.icann.org

1 0

Summary Minutes NARALO Teleconference 14 June 2010
by ICANN At-Large Staff June 15, 2010

June 15, 2010

Dear All, The summary minutes and action items from yesterday’s conference call have been posted under: https://st.icann.org/naralo/index.cgi?14_june_2010 The summary minutes are also attached below. -- Regards, Heidi Ullrich, Matthias Langenegger, Seth Greene, Gisella Gruber-White, Marilyn Vernon, Kristina Nordström ICANN At-Large Staff email: staff[at]atlarge.icann.org website: www.atlarge.icann.org Present: Annalisa Rice, Beau Brendler, Alan Greenberg, Darlene Thompson, Matthias, Joly MacFie, Gareth Shearman, Garth Bruen, Seth Reiss, Alan Skuce, Eduardo Diaz Standing Issues: 1. Roll Call (2 minutes) 2. Review of Summary Minutes 10 May 2010 <https://st.icann.org/naralo/index.cgi?summary_minutes_10_may_2010> and Action Items 10 May 2010 <https://st.icann.org/naralo/index.cgi?action_items_10_may_2010> (5 minutes) - Adopted - Brochure has gone to the printers 3. Open Public Consultations (5 minutes) a. At-Large Policy Advice Development Schedule b. ALAC Statements are being prepared for the following consultations: * RSSAC Review – Draft Working Group Report (ends 5 June 10) * Draft FY11 Operating Plan and Budget (ends 25 June 10) * Questions to the Community on Accountability and Transparency within ICANN (ends 1 July10) * DNS-CERT Operational Requirements & Collaboration Analysis Workshop (ends 2 July 10) * Meetings for the Next Decade, Stage One (ends 5 July 10) Honolulu Location for next North American meeting – the Honolulu Tourist Board has done everything they can do to get themselves considered. Usually ICANN puts out RFPs for locations for meetings several years in advance. Due to on-going discussion as to what types of meetings we should be having, ICANN delayed the process for the 2011 meetings. So, at this point there is no call out and we have a meeting up-coming fairly quickly and we have no idea where it is. * Registrar Accreditation Agreement (RAA) Subsection 3.7.7.3 (ends July 9) (The ALAC will work on a draft statement on this consultation in Brussels. All regional representatives are asked to come to Brussels prepared to work on the statement) - Beau is taking the lead on this. Proposed Agenda Items 4. Presentation and Discussion on latest Whois Report (Garth)(10 mins) See Presentation of KnujOn study on registrar compliance <https://st.icann.org/data/workspaces/naralo/attachments/14_june_2010:201006…> (PPT) Garth gave a presenation on the KnujOn study on registrar compliance. Beau: Thank you. To me this sounds like a realistic depiction of the registrar situation. However, what we get from ICANN's compliance department sounds different. Alan: until about a year ago ICANN did basically nothing on compliance. I have never heard compliance say that they are actively ensuring compliance. I am shocked about the results of the KnujOn study, but not surprised. Gareth: David Giza gave a presentation in Mexico where he assured that ICANN will take compliance more serious. Joly: maybe we should submit an ALAC statement on this Garth: I will send out a document before the study is released, probably Friday. Beau: I will volunteer on that 5. Update on the ALS Survey 2010 (Darlene)(10 mins) The global ALS Survey closed 24 May. a. ALS Survey Analysis Working Group - Next Steps Background information: Presenation Results NARALO <https://st.icann.org/data/workspaces/naralo/attachments/14_june_2010:201006…> (PPT) Survey Stats Questions on the ALS Survey ALS Survey Schedule At Large Board Member – Any process carried out by RALOs in selecting a board member must be squeaky clean in the way of process and be auditable. We need a 50% quorum. We are barely getting that now for surveys and such. Beau will follow up with ALSs that are inactive. 6. Brussels Meeting Activities (Evan, Beau, Alan, Gareth)(10 mins) a. At-Large Meeting Agendas and Remote Participation Information i. Click here for the schedule of At-Large Meetings in Brussels 7. Update on the At-Large Board Selection process (Annalisa, Myles)(5 minutes) a. Activities of the Board Candidate Evaluation Committee (BCEC) Click here for the BCEC Workspace Annalisa: They are just ready to put out the call for SOIs. The idea was to get that out before the Brussels meeting. If anybody in NARALO is interested, they need to put their names forward. b. Next Steps 8. Update on Draft FY11 Operating Plan and Budget (Gareth)(5 mins) See Community Call on Draft FY11 Operating Plan and Budget 10 June 2010 (with Kevin Wilson) Gareth: The Budget Committee seems to be making some small progress but its slow. They are still fighting to have more regional meetings in the North American meeting. We have progressed from the days when we were told to never mind about the budget process to now having a say in it. 9. Recent and Upcoming Activities of ALAC (Alan, Beau, Gareth) (10 mins) 10. Recent/Upcoming activities of NARALO members (all)(5 mins) 11. Any other Business (5 mins) Individual Member Issue – We need to discuss this further. First we need to determine who our individual ALS members are. Darlene will do that. Darlene and Alan will then draft an e-mail to them to figure out their status. Turnover at ICANN – Doug Brent, Nick and Keiran are all gone. Is this a single thing or several separate issues? Alan feels that they are separate issues. This can be further discussed in Brussels. Meeting Adjourned: 4:03 pm

1 0

ALS Survey database
by Matthias Langenegger June 14, 2010

June 14, 2010

Hi Annalisa, The credentials to participate in the ALS Survey were sent to zaid(a)sfbayisoc.org. According to our record, Zaid is the main contact person at ISOC San Francisco. Please let us know in case this information needs to be changed. Best Regards, -- Matthias Langenegger Manager, At-Large Regional Affairs Internet Corporation for Assigned Names and Numbers (ICANN) Email: matthias.langenegger(a)icann.org Main Tel: +41 (79) 644 65 35 Fax: +41 (22) 594 85 44 Skype ID: matthiaslangenegger

1 0

REMINDER: NARALO Teleconference: Mon, 14 June 19:00 UTC
by ICANN At-Large Staff June 14, 2010

June 14, 2010

Dear All, The next NARALO teleconference is scheduled for Monday, 14 June 2010 at 1900 UTC. The agenda (to be updated) and call details can be found at: https://st.icann.org/naralo/index.cgi?14_june_2010 If you are unable to attend the call please send an email indicating your absence and we will note this information on the agenda. If you require a dial-out please contact At-Large staff at: staff(a)atlarge.icann.org. -- Regards, Heidi Ullrich, Matthias Langenegger, Seth Greene, Gisella Gruber-White, Marilyn Vernon, Kristina Nordström ICANN At-Large Staff email: staff(a)atlarge.icann.org website: www.atlarge.icann.org

1 0

Re: [NA-Discuss] [ALAC-Internal] RAA subsection 3.7.7.3, fraud and liability
by Alan Greenberg June 10, 2010

June 10, 2010

(I'm not sure why this message was , in part, directed at the ALAC Internal list since it is also sent to NA-Discuss, a very not-private list, but regardless...) Beau, As I read it, the answer is very clear and the draft advisory makes it clearer. OS Portfolio Holdings *IS* the registrant of record and has full liability unless they promptly point to someone else (with valid, usable contact information) that they have licensed the name to. Alan At 10/06/2010 02:34 PM, Beau Brendler wrote: >Regarding the draft advisory on RAA subsection 3.7.7.3 >[http://www.icann.org/en/compliance/reports/draft-advisory-raa-3773-14may10-…] >which is on the at-large agenda for discussion in Brussels, >specifically the statement: > >"the Registered Name Holder shall accept liability for harm caused >by the wrongful use of the registered name unless the Registered >Name Holder promptly identifies the licensee to a party that has >provided the Registered Name Holder with reasonable evidence of >actionable harm." > >Does this apply to subdomains? For instance, in >http://www.walletpop.com/blog/2010/06/02/three-charged-in-xp-antispyware-20… > >it's noted that bsa.safetydownload.com was a vector for serious >malware downloads that cost consumers around the world more than >$100 million. The domain is still up and functioning, though you >will probably have to turn off firewalls to access it, which I >wouldn't recommend. > >What is the chain of liability now and under 3.7.7.3? The >registrant, OS Portfolio Holdings, a domainer? The registrar, Bear >Trap Domains (which is/was ICANN accredited, but now appears to be >taken over by Oversee.net [http://www.oversee.net/] which also now >happens to own OS Portfolio? Is this a hijacked subdomain with no trail? > >_______________________________________________ >ALAC-Internal mailing list >ALAC-Internal(a)atlarge-lists.icann.org >http://atlarge-lists.icann.org/mailman/listinfo/alac-internal_atlarge-lists… > >ALAC Wiki: http://st.icann.org/alac >At-Large Website: http://atlarge.icann.org

2 2