ICANN 83: governments concerned about cybercrime

GAC advice on bulk registrations

On the final day of the meeting, 12 June, the GAC published an advisory document proposing extensive restrictions on bulk domain name registrations. The problem of domain names being registered in large numbers for spamming, phishing and botnets is not new. Over an extensive period, a series of reports by InterIsle and others have emphasised that the availability of cheap domain names for bulk registration enables cybercriminals to spread their risks at minimal cost. TLDs such as .top and .pro – both launched in 2012 – are regularly cited as examples in that context. Those extensions are up to 20 times more likely to host phishing sites than, say, .com.

Impact on new gTLD applications

Although most of the problems linked to bulk registrations play out on the current TLD landscape, the GAC advisory document focuses on restrictions it wants to see applied in the upcoming window. In other words, the application process is being used as a lever for the realisation of wider aims. The most far-reaching proposal involves mandatory pre-approval for applications with a significant bulk registration risk. The GAC does not specify what criteria it would like to see applied in that context.

Strong, but not unexpected advice

Within the domain name industry, the GAC’s recommendations come as no surprise. Through the GAC, governments have repeatedly expressed concerns about DNS abuses such as phishing, spamming and anonymous registrations for malicious purposes. Nevertheless, the level of concern seen at the meeting was notable. For example, the US delegate made it clear on the first day that his government was opposed to most of the new gTLD applications because of concerns about abuse.

Follow-up ahead of Muscat

Although the GAC’s advice could have far-reaching implications, there is still time to address the governments’ concerns. The GAC itself is aiming to discuss the practical follow-up no later than the end of October, at the ICANN meeting in Muscat. That should still allow enough time for any necessary amendments to be incorporated into the final version of the Applicant Guidebook. Given that the governments’ concerns relate mainly to the existing domain name landscape, it’s also possible that the GAC’s recommendations are translated into general policy rules applicable to existing registries and registrars.

GeoTLDs and brand TLDs seemingly unaffected

The recent developments are of concern mainly to would-be applicants for generic extensions whose business models are based on high registration volumes. Anyone interested in an extension for a city, region or brand is less likely to be affected. GeoTLDs and brand TLDs generally have policies and pricing structures that make them unattractive for bulk registrations. They are therefore of less concern to the GAC.

SIDN Labs advises GAC on post-quantum cryptography

At ICANN 83, SIDN Labs' Director Cristian Hesselman spoke to the GAC about post-quantum cryptography. The session was organised in light of the increasing urgency of proofing DNSSEC and other internet security mechanisms against a future in which quantum technologies undermine traditional security protocols. It was chaired by Marco Hogewoning, the Dutch government’s representative on the GAC, who is also the committee’s Vice-Chair. Another member of the Dutch internet community, NLnet Labs’ Maarten Aertsen, contributed to the session as well.

More information

Interested in learning more about the topics covered at ICANN 83? Recordings of the sessions in Prague are now available for public viewing. They provide valuable insights into the opportunities and challenges associated with the upcoming new gTLD application window. Thinking of applying for your own gTLD? Want to know more about how the process works? Visit www.sidn.nl/rsp