This article recently caught my eye: ICANN Head Visiting China After 'dot-China' Request. It is a report of ICANN CEO Rod Beckstrom’s visit to China, which comes on the heels of the country's application to ICANN for the use of domain names that end in "dot-China," with “China” appearing in Chinese script. IDG News Service reports that this application highlights questions about China’s Web censorship.
Why does Beckstrom get to represent U.S. and other nations' interests on a matter that has such economic and national security implications? Unfortunately, Congress gave ICANN the legal mandate to act in this matter, even if Congress didn't realize the extent of that grant at the time. And it seems like a dangerous amount of power for the head of an organization that has vested business interest in selling as many domain names as possible. Public interests are not being represented- just the interests of those with a financial stake in selling domains are being represented.
At the ICANN meeting in Seoul, the ICANN board decided to push back the roll out of new gTLDs to at least after the second quarter of this year. A few weeks later, ICANN opened up a public comment period soliciting feedback on the possibility of creating a type of pre-application program where parties could express their interest in applying for new gTLDs. In December the Corporation released a draft model for the “Expression of Interest” (EOI), the proposed gTLD pre-registration period, and accepted comments on the draft through the end of January. As proposed, the EOI requires interested parties to indicate their intentions to apply for new gTLDs and pay a fee of $55,000. Additionally, only those parties who participate in the EOI will be eligible to officially apply for new gTLDs in the first round.
According to ICANN, the motivating factor behind developing the EOI program is to measure demand for new gTLDs. But there’s one big problem – because participation in the EOI is required in order to apply in the first round of gTLDs, the demand measured by the EOI will be artificially inflated by those parties who are unsure of whether or not they really want a new gTLD but don’t want to be locked out of the first round just in case. (There is a whole host of other problems with the EOI as well, including the fact that it would be introduced before the gTLD Applicant Guidebook is even close to being finished.)
Another problem is the “demand” ICANN and others refer to is confusing. Any EOI results would not signal Internet user demand, but demand among groups that are seeking to possess top level domains either for private use (a company’s .BRAND) or to sell domain names to the public (a gTLD entrepreneur of any kind that wants to sell sunrise and live registrations to businesses and the general public). If an intended purpose of introducing new gTLDs is to offer the public more choices, isn’t the public’s demand for those choices the real “demand” that ICANN should be measuring?
I was reminded of this issue when I received a periodic newsletter from one of the corporate-facing domain registrars. The newsletter mentioned the EOI as a means of measuring “demand for new gTLDs.” First off, as I just said, it clearly is not an effectual means of measuring meaningful demand. But as I read it, I started thinking about how much it behooves domain registration companies, as well as ICANN, to say that the EOI is measuring demand. If the so-called “demand” is high enough (and who will determine if it’s high enough? That’s right, ICANN), then ICANN will be justified in pushing forward with the rollout of new gTLDs without determining if Internet users really want them.
On January 29, the Coalition Against Domain Name Abuse (CADNA), which FairWinds helped found and runs, hosted a policy forum here in Washington, D.C. The forum focused on emerging challenges for the Internet community in 2010, specifically the future of ICANN under the Affirmation of Commitments (AOC) and potential reform to the Anti-Cybersquatting Consumer Protection Act. Attendees heard from two panels regarding these issues, which featured brand owners, online policy experts and Congressional staff members. The keynote address was given by Senator Stephen Urquhart (R-UT 29th District), the Chairman of the Utah State Senate Transportation and Public Utilities and Technology Committee. Urquhart recently introduced the E-Commerce Integrity Act to the Utah state legislature. This bill is designed to make the state of Utah more business-friendly by creating greater deterrents to prevent cybersquatting: firstly, the bill raises the damages that can be levied on a cybersquatter, and secondly, it holds affiliates of domain name registrants liable if it is found that they benefit from cybersquatting behavior.
In addition to Sen. Urquhart, representatives of Jay Rockefeller (D-WV), Chairman of the Senate Commerce, Science, and Transportation Committee; and Patrick Leahy (D-VT), Chairman of the Senate Judiciary Committee spoke on the panels. Cybersquatting is an issue that hits close to home for the Senators they work for: PatrickLeahy.com and JohnDRockefeller.com both point to pay-per-click (PPC) sites. (JayRockefeller.com, however, does lead to the Senator’s Web site.) SteveUrquhart.com also leads to a PPC site.
When discussing the problem of cybersquatting, much of the attention often gets focused on businesses and infringements on brands and trademarks. However, individuals like politicians and celebrities are also frequently the victims of squatting and other malicious conduct online. It’s great to know that Senator Urquhart and Congressional staff members understand this issue, and we’re happy to have them involved in efforts to create a safe, stable and flourishing Internet.
After ICANN and the National Telecommunications and Information Administration (NTIA) signed the Affirmation of Commitments (AOC), Rep. Henry A. Waxman, Chairman of the House Energy and Commerce Committee, and Rep. Rick Boucher, Chairman of the Communications, Technology, and the Internet Subcommittee spoke out in support of the agreement. Rep. Boucher praised the AOC’s ability to ensure accountability and transparency within ICANN.
Back in June, Rep. Boucher’s committee held a hearing at which the then-CEO of ICANN, Paul Twomey, testified. A pressing issue at that time was the amount of accountability ICANN had, not only to the government but to all of its shareholders. There was a consensus among committee members that ICANN needed to be more transparent in its processes and more accountable to the general public. Later this summer, in August, Rep. Boucher and Rep. Waxman, along with other members of the Energy and Commerce Committee, wrote a letter to Secretary Gary Locke of the DOC calling for an extension of the Joint Project Agreement (JPA) in some form, as well as permanent ties between ICANN and the U.S. government.
So it would appear that the mission has been accomplished. ICANN and the U.S. government are now linked through the new AOC. There’s just one problem – the AOC doesn’t provide the level of accountability that these Congressmen have called for, never mind the level ICANN needs as an organization. The AOC creates a number of panels that will periodically review ICANN, and the U.S. government only holds a seat on one of them. Yes, it is a positive thing that ICANN is still tied to the U.S. government through this agreement, but ICANN is no more accountable than it was under the JPA.
In reality, the AOC simply does not include the accountability mechanisms that they had been pushing for. It is unlikely that this agreement will solve the problems that have existed within ICANN, and there is a chance that those problems will actually get worse. ICANN cannot fall off Congress’s radar, because there is still work to be done. I hope the AOC is not just a way to check the ICANN issue off their list and check out of the matter without doing more of the important work that needs to be done.
Several outlets, such as the Economist and the Sydney Morning Herald are running articles on the upcoming expiration of the Joint Project Agreement (JPA) between ICANN and the U.S. Department of Commerce. While we have discussed this issue many times before, the articles mention a new development: an agreement between the U.S. and ICANN called an “affirmation of commitments.” Despite being a mere four pages in length, the document gives ICANN complete autonomy in managing its own activities, setting up oversight panels that include representatives of foreign governments to conduct regular reviews of ICANN’s work in four areas. Those areas are competition among generic domain names; handling data on registrants; security of the network and transparency; and accountability and the public interest. The agreement passes some of the authority the U.S. government has held over ICANN over to the broader Internet community, namely businesses, individual users and other governments.
The JPA is set to expire on September 30, and it is still unclear whether or not it will be renewed. It will be interesting to see what plays out in the upcoming days, and what the “affirmation of commitments” document says.
The House Judiciary Committee’s Subcommittee on Courts and Competition Policy held a hearing yesterday on the potential rollout of new TLDs and how such a rollout would affect competition. At start of the hearing, House Judiciary Committee Chairman Conyers made a very good point—this is not a hearing that Congress should have had to pull together. As Steve DelBianco (Executive Director at NetChoice and a witness at the hearing) pointed out, if ICANN was working properly, there would be no need for Congressional intervention. Unfortunately, ICANN is broken and needs to be fixed if there is to be hope for a safe, stable and flourishing Internet in the future.
Just how broken is ICANN? Check out CADNA’s Top Ten list of things wrong with the organization. The Coalition has gotten positive feedback on this evaluation thus far- what are your thoughts?
Network World recently ran an article about how “cyber-criminals are plundering domain-name registrars around the world” while registrars such as Go Daddy fight a round-the-clock battle to fend them off.
Cybersquatting is rampant in the domain name space, and the truth is that even if all registrars were conscientious about pursuing infringers, the fight against cybersquatting would still be a never-ending battle. To make things worse, there are registrars out there that do in fact ignore the domain name abuse that is occurring and some even collude with cybersquatters to get a cut of the deal. While these bad-actor registrars certainly enable or cause abuse in the domain name space, ultimately it’s the structure and regulation of the domain name space that is at fault—if the proper transparency, accountability and safeguards were in place, we would not be in quite the mess we’re in now.
The article touches on this fact—that domain name abuse exists as a result of the structure of the domain name space. ScanSafe researcher Mary Landesman points out that while the domain name system was not intentionally designed to allow for domain name abuse, its structure provides loopholes and opportunities for cybersquatters. She also rightly points out that effective reform is needed; although while she claims that reforming the domain name registration process “would strike at the heart of Internet crime,” the system needs to be reformed at a much more fundamental level. That fundamental level is ICANN. As the regulatory body of the Internet, ICANN needs to be reformed in such a way that makes the organization better able to respond to issues of safety and stability within the domain name space and less beholden to contracted parties that focus on policies that will help them generate revenue from domains.
It is no surprise that brand owners have registered countless domain names that they don’t need. Over the past few years, ICANN approved and released TLDs such as .EU, .INFO, and others. Since there was a lack of real data, brand owners did the only thing they could, which was to register names defensively because of the threat of what might happen. When .ASIA was released, we saw the number of registrations from brand owners begin to drop – likely a result of being fed up with registrar/registry profit driven domain policies.
The problem is that these prior new TLDs have rightly caused brand owners to be suspect of new launches. After so many sunrise periods that hyped the need for defensive domain name registrations, now it's like the boy who cried wolf- many launches are largely ignored. However, every now and again an important TLD change occurs that does necessitate action by brand owners. One example of that is .CM.
This landscape of the .CM TLD was just recently formed. When FairWinds published a “Perspectives” on .CM cybersquatting back in 2006, the Cameroonian government was running the .CM registry. At that time, there were only 200 domain names registered to .CM and all other names ending in .CM resolved to a PPC site. NETCOM.cm Sari took over control of the registry in 2009 and opened registration of domains in .CM. Trademark owners were allowed to apply for their corresponding domains during a one-month sunrise period between June 14 and July 15 of 2009. Sunrise periods allow those with valid trademarks to register their domain name for a hefty sum before all domains become available to the general public. As of August 1, 2009, .CM domains can be registered on a first come, first serve basis regardless of trademark rights.
Because .CM, the ccTLD for Cameroon, is a very common typo error of .COM, its recent launch of unrestricted domain names opened up a new front on the war against cybersquatters. As with typosquatting of domain name roots (as in “comcasft.com” for “comcast.com”), this form of typosquatting also involves third parties registering domains containing brand names with the intent of profiting off of users’ typing errors.
In light of this change, we conducted a study to examine the actual response to .CM’s change. We drew on the data used for a forthcoming study on general typosquatting to examine this phenomenon. We began with Quantcast’s list of the most highly trafficked domain names, and from that list, we selected the top 250 that ended in .COM and whose root contained more than six characters. That initial number expanded to 255 in order to include possible hyphenated versions (i.e., wal-mart.com and walmart.com). Along with these 255, we included typo variations that receive high volumes of traffic and then checked to see whether each of these domains had been registered in the .CM extension. A total of 183 had been registered in .CM; 121 domains contained the target root and the remaining 62 were typo variations of those targets.
Out of the 183 domains, an astounding 97 percent are owned by a third party—only 6 domain names are owned by the target company.
Of those owned by the target company, only 4 resolve to the target site, while one displays search results and the last does not resolve. In total, 97 of the domains owned by a third party lead to pay-per-click sites, meaning cybersquatters are directly profiting off 55% of those domains.
Another interesting tidbit was found in four domains that led to sites for competing brands. Staples.cm resolves to OfficeDepot.com, Travelocity.cm resolves to Expedia.com, Walgreens.cm resolves to DrugStore.com and Walmart.cm resolves to eBay.com. None of these four domains are owned by the competitor, but rather by third parties. While cybersquatters are not profiting directly from these sites, they are still causing damage to the brands in question and potentially depriving them of sales.
When ICANN approved new TLDs in the past and registries held sunrise periods for brand owners, many brands rushed out to buy domain names in TLDs like .PRO and .INFO only to realize later that they held very little value for their business. Although .CM has opened to the public, the registration rates among brand owners remain low. This may be a result of brand owners being skeptical of the value of a .CM domain name. Some may be failing to realize how different this new TLD is—after all, it is common for Internet users to accidentally type .CM in place of .COM. Others may be distrustful of a new registry sunrise period given that ICANN’s policy of allowing registries to operate however they want has essentially resulted in brand domain names being held for ransom by the registry in the form of sunrise periods. In the case of .CM though, brand owners must learn that even if they have no intention of doing business in Cameroon, owning key names in that extension is critical because users are typing them into the browser bar accidently.
What I take from this situation is that while we are all growing incredibly frustrated with the name space and ICANN policies, we need to be diligent in our review of each change. It is usually best to be conservative with launches, but there are cases – like .CM – where a more aggressive and targeted strategy is warranted.
Last week I wrote a post about the lawlessness that pervades the Internet, focusing on the scamming and other illegal activities that take place in the online marketplace. What I didn’t mention are the things that can be done to help put a stop to cybercrime, not just in online buying and selling, but in all online activities. So I wanted to follow up by discussing four areas in which changes, if implemented, would decrease the level of crime online and make the Internet a safer environment for all users.
The first change that needs to be made is to ICANN, the body that coordinates the domain name system and is charged with the day-to-day governance of the Internet. The way ICANN currently operates is inherently flawed – the everyday Internet users and businesses who are most affected by its policies have the smallest voice within ICANN. ICANN must incorporate the needs of these important groups of stakeholders into its decision making process and unwind the ties to commercial parties that have mired ICANN’s legitimacy in clear conflict of interest issues. Doing so will undoubtedly lead ICANN to address and eventually fix many of the problems that Internet users face.
The second change needs to come in the form of new and updated laws to punish online offenders. In many instances, people fall victim to malicious activities on the Internet, but have no means of pursuing justice because there are not laws in place that cover the infractions. Last year, a woman who eventually became know as the “MySpace Mom” harassed a 13-year-old girl through the social networking site, ultimately leading the girl to commit suicide. Because there were no laws that prohibited such actions, the woman was eventually acquitted of all charges brought against her. The severity of the case galvanized certain US states to create anti-cyberbullying laws. Missouri was among these states and became the first state to formally charge someone with felony cyberbullying just last week. Just as we have laws in the “real” world, there must be laws in the online world to prohibit malicious and harmful actions.
Members of the private sector, especially businesses, are prone to infringements on their brands and trademarks in the form of cybersquatting (and its various permutations) and other activities. To fix these problems, businesses must be aware of the options for recourse that are available and how to make the most of them. They must know which responses are best at resolving which problems. Finally, they must exercise their private rights of action to protect their businesses and prevent future infringements. With better legal remedies in place, private companies must be willing to “go all the way,” make examples of the bad actors, and be prepared to do it again and again and again. Too many of the phishers, counterfeiters, spammers and other criminals believe they are untouchable.
The final change that needs to occur is within governments. Cybercrime must become a higher priority for governments because, as recent events have demonstrated, cyber attacks can be highly detrimental to a country’s online infrastructure. Governments should target the high-profile criminals at the top of the cybercrime chain just as they would seek out the head of any crime ring. An example of this is the recent federal prosecution of a hacking and identity theft scam that stole more than 130 million credit and debit card numbers.
Each of these changes are integral to improving the state of the Internet overall. The sooner the necessary adjustments are made in each of these areas, the sooner the Internet will become a more hospitable environment for all users.
The Daily Green’s Living Green blog ran a story over the weekend about the proposed .eco gTLD and the various groups who are vying for control over it. On one side are Al Gore, the Sierra Club and Dot Eco. On the other are the Canadian Environmental group Big Room (former Soviet leader Mikhail Gorbachev is tied indirectly to the organization), WWF International and Green Cross. Each group is planning to donate a portion of the registration fees it will receive as operator of the gTLD to green programs and causes. Brian Clark Howard, the author of the post, questions the need for .eco – and all other new gTLDs for that matter. He contends that a separate gTLD could marginalize the green movement by taking it out of the mainstream, both in terms of Internet addresses and the global conversation. He writes, “I don't see why green sites need their own identifier and separate domain, when we should be reaching as many people as possible.”
Howard raises an interesting issue in his post: the potential fragmentation of the Internet that an unlimited number of new gTLDs could cause. Until now, I’ve focused on the issue of Internet fragmentation from a purely practical perspective – that new gTLDs will alter the way consumers search for content on the Web and will likely make their experience less fluid and more complicated, at least during the initial adoption period. But there are also the potential social ramifications that gTLDs could have. Howard fears that having a separate identifier will remove the green movement from the mainstream. Right now there is dialogue in a common space; could new TLDs actually work to isolate people?
This post resonated with me more than other pieces I’ve read about new gTLDs because Howard is not a domain name expert, but an average Internet user. He mentions his appreciation for the order and organization of the current system of 21 gTLDs. Ultimately, it is people like Howard who are going to be most affected by the change to the Internet structure. One of the application requirements for new gTLDs is that they must provide a benefit to a particular community. Howard embodies the target audience for .eco, and he’s clearly not buying into it.
At this point, it seems inevitable that ICANN will move forward with the rollout of new gTLDs. This is not an entirely bad thing. But ICANN and future gTLD operators need to remember to listen to end users like Howard, because they are the ones who are most affected by the changes to the Internet.