Domain Empire

legal Red Alert: ICANN and Verisign Proposal Would Allow Any Government In The World To Seize Domain Names

Spaceship Spaceship
Watch
Impact
3,203
ICANN, the organization that regulates global domain name policy, and Verisign, the abusive monopolist that operates the .COM and .NET top-level domains, have quietly proposed enormous changes to global domain name policy in their recently published “Proposed Renewal of the Registry Agreement for .NET”, which is now open for public comment.

Either by design, or unintentionally, they’ve proposed allowing any government in the world to cancel, redirect, or transfer to their control applicable domain names! This is an outrageous and dangerous proposal that must be stopped. While this proposal is currently only for .NET domain names, presumably they would want to also apply it to other extensions like .COM as those contracts come up for renewal.

See the rest of the article on my blog at:

https://freespeech.com/2023/04/19/r...overnment-in-the-world-to-seize-domain-names/

It's important that folks submit public comments to oppose this major policy change, which would harm domain name owners.
 
35
•••
The views expressed on this page by users and staff are their own, not those of NamePros.
7
•••
I don't understand what they're trying to accomplish. Won't they just be deluged with bogus claims, even against big name organizations? How are legitimate small businesses supposed to defend themselves?
 
1
•••
I don't understand what they're trying to accomplish. Won't they just be deluged with bogus claims, even against big name organizations? How are legitimate small businesses supposed to defend themselves?

Exactly, it's so poorly thought out that I was shocked to see it when I read it over the weekend.

Maybe Verisign intentionally put it in there, to distract from the fact that they're still getting 10% annual price increases, hoping for a public outcry that then would result in the restoration of the existing agreement? That would be some 3D chess, but I don't think they want to suffer the goodwill loss for proposing such an idiotic thing.....if this is what they truly want, then it's a fight for the future of domain names.
 
0
•••
What you can expect from a Corporation that disguises itself as an Organization, but under the hood it is controlled by the same entities that creates artificial problems in the world so they can sell their solutions later.
Maybe they want to kill .NET extension who knows, this will cause less regs as a result in this TLD i m sure.
corporation edit.png
 
2
•••
I'm no legal expert and might be reading it wrong....The part I have highlighted in blue, does it mean it can be a non government agency? Anyone can take a domain holder to court to try and get the domain?

"to ensure compliance with applicable law, government rules or regulations, or pursuant to any legal order or subpoena of any government, administrative or governmental authority, or court of competent jurisdiction,”

The rest of it is geared to towards government intervention but that last part is not so clear to me? It does not say a government body going through the courts, just implies it - does that hold up legally or create a loop hole for individuals to exploit?

Edit: Bad enough if governments have this kind of power, let alone a load of scammers trying their luck....
 
Last edited:
2
•••
Nick: I focused on the government aspect, to keep my comment short, but the "court of competent jurisdiction" is open to interpretation (and abuse too).

e.g. let's suppose the registrar is GoDaddy (jurisdiction = Arizona, USA), and the registrant is based in Italy, and has a website on their domain name focused on Italy alone, and nowehere else.

Suppose company X in jurisdiction Y files a suit regarding the domain name in court Z.

Now, if Z is Arizona, GoDaddy might consider that a court of competent jurisdiction.

If Z is Italy, GoDaddy might also consider that a court of competent jurisdiction.

What if Z is Iran or North Korea? (where GoDaddy has no operations, and the registrant has nothing to do with Iran of North Korea) Presumably GoDaddy would disregard such an order.

It gets a lot more complicated, though, if Z ia a jurisdiction where GoDaddy does do business, say Canada., but where the registrant has no operations, and which the registrant targets in no manner.

I'd rather have my own registrar wrestling with that decision, than Verisign who has no direct contractual relationship with me, and who goes out of their way to say that I can't sue them for anything they do! I'm sure that if someone was to sue Verisign in Brazil or Canada, they'd argue "we have nothing to do with Brazil or Canada -- sue us in Virginia where we're based." But, instead of using that same logic for registrants, they'd capitulate and "follow orders" regardless of where they came from.

Anyhow, this is a very complex legal topic, and I'm not a lawyer, but I can definitely read what the proposed contract says. The proposed contract terms, in a few simple but sloppy sentences, completely ignore the complexity of the topic, and allow for government domination, all at the expense of registrants.
 
7
•••
and might be reading it wrong

...or pursuant to any [legal order or subpoena of any government, administrative or governmental authority, or court] of competent jurisdiction.

They simply might want to clarify that the qualifier "of competent jurisdiction" pertains to the preceding entities of similar type - i.e. a government, administrative or governmental authority or court. Because if push came to shove and ICANN and the registry actually went to arbitration over, say, the hyperventilated hypotheticals such as the Taliban, it is reasonably predictable that the arbitrator or a court would read it that way - even IF ICANN didn't (which, as a practical matter they do when they are approached by these sorts of compliance claims against registrars).

If a boat were sinking and someone said, "We need to rescue every man, woman, and child on that boat" you would not read it as saying "every man in the world", "every woman in the world" and then "every child on that boat". If you were a normal person, you would understand that "on that boat" refers to each of the preceding categories of "man, woman and child" and not just the last category.

Because, think about this for a sec... If the government of Jibip ordered the registry to do something, and the registry didn't do it, then the government of Jibip would get an order from a court in Jibip - which only has jurisdiction over matters in Jibip.

So, it might help to clarify that "of competent jurisdiction" refers to each item on the list of preceding entities of similar type, because there is utterly no doubt that is how it would be interpreted and applied in the context of enforcing that contract.

Another way of looking at it, if you were a judge interpreting this language is that it would be pretty stupid to read "of competent jurisdiction" to be limited only to courts, and not each of the other entities. Why would someone actually intend it to mean "You are subject to any administrative agency on the planet, but only courts of competent jurisdiction." It makes no sense to read it that way.
 
7
•••
1. The phrase "court of competent jurisdiction" is a common term at ICANN (and elsewhere). e.g.

In Google: site:icann.org "court of competent jurisdiction"

https://www.google.com/search?q=site:icann.org+"court+of+competent+jurisdiction"

(thousands of matches) Esp. in relation to the UDRP:

https://www.icann.org/resources/pages/policy-2012-02-25-en

Section 4(k): "Availability of Court Proceedings. The mandatory administrative proceeding requirements set forth in Paragraph 4 shall not prevent either you or the complainant from submitting the dispute to a court of competent jurisdiction for independent resolution before such mandatory administrative proceeding is commenced or after such proceeding is concluded. If an Administrative Panel decides that your domain name registration should be canceled or transferred, we will wait ten (10) business days (as observed in the location of our principal office) after we are informed by the applicable Provider of the Administrative Panel's decision before implementing that decision. "

(and millions of matches without the "site:icann.org" limiter, i.e.

https://www.google.com/search?q="court+of+competent+jurisdiction"

2.. When's the last time you heard ICANN talk of "government of competent jurisdiction"? It's nowhere to be found:

site:icann.org "government of competent jurisdiction"

https://www.google.com/search?q=site:icann.org+"government+of+competent+jurisdiction"

No results found for site:icann.org "government of competent jurisdiction".

Even without the site:icann.org limiter:

https://www.google.com/search?q="government+of+competent+jurisdiction"

there are only 9 matches in the entire web indexed by Google!

3. To interpret it the way Berryhill argues is the "intended" way, they could have phrased it as:

"or pursuant to any legal order or subpoena of any government, administrative or governmental
authority, or court, of competent jurisdiction"

(notice I added a "comma" after the word "court") instead of the way it actually appears:

"or pursuant to any legal order or subpoena of any government, administrative or governmental
authority, or court of competent jurisdiction"

But, they didn't. Readers should not have to debate how to interpret complex agreements. They shoud be written to avoid all ambiguity, so that there is certainty over what the contract actually means.

4. Even if ICANN and Verisign revised the text in such a manner that it's:

- any government of competent jurisdiction
- any administrative authority of competent jurisdiction
- any governmental authority of competent jurisdiction
- any court of competent jurisdiction

This would still be a very dangerous and problematic proposal, since under this proposal it's Verisign (the registry operator) that would make the determination as to whether it's a competent jurisdiction, rather than the relevant registrar.

And it would indeed be very "stupid" to suggest that Verisign (or a registry operator) would make the identical determination as registrars in all cases. Indeed, if registrars and Verisign would always make the same determination, then you don't need to add this language to the registry agreement! The only reason you would actually put this into the agreement is because you know that there are times when they would make different determinations!

As we saw in the example of India, the registrars refused (and were blocked). Does anyone actually think that a registry operator would stick their neck out for a non-client, if faced with blocks in an entire country? Leaving it to the discretion of a registry is unacceptable. Their decision calculus will be entirely different than that of a registrar, who might not do any business at all in the country that wishes to block them.

5. This is a major policy shift, under both interpretations, that should be debated within the GNSO, so all affected stakeholders can weigh in, rather than being negotiated bilaterally by ICANN staff and Verisign. They literally added text that affects the relationship between registrars and registrants --- did registrars or registrants participate in that negotiation? No, they didn't.
 
14
•••
5
•••
why do u make sensation of someting inconsequential to 99.9999999999% of us.
 
0
•••
Even under Berryhill's interpretation, governments of competent jurisdiction (a term that no one actually uses!), but let's say the USA, would no longer need to get court orders.

As I'm sure most people are aware, courts are important safeguards against overreach and tyranny of governments. Even when the FBI and other agencies have sought seizures of domains, they've gone through the courts first.

From a Democrat's point of view, courts protect against the tyranny of Republican governments like Trump or the State of Texas. From a Republican's point of view, courts would protect against the tyranny of Biden or the State of California.
 
Last edited:
6
•••
Whether or not someone can find the exact phrase one wants in Google is irrelevant to the context here.

The clause would come up in a situation in which ICANN were to seek enforcement of the contract through the arbitration provisions.

At that point, then an arbitrator is going to have to decide which of these things is true:

1. ICANN intended the registry to comply with demands made by the national weather service of Lesotho, but not the Supreme Court of Brazil, or

2. The overall intention of the clause is that the registry needs to comply with "applicable" laws and the processes of various authorities having appropriate jurisdiction, since we seem to be eliding the preceding appearance of the word "applicable".

As to the "OMG! A court order is not necessary!", there are a variety of matters within the enforcement jurisdiction of various law enforcement agencies and administrative agencies.

For example, not long ago, I filed a complaint with the Washington State Office of the Insurance Commissioner because Epik, a company in Washington, was selling insurance without a license. As a company doing business in Washington, Epik is under the jurisdiction of that agency of the State of Washington insofar as they advertise the sale of insurance. The Washington insurance commissioner began an administrative investigation and ultimately obtained a consent order under which Epik paid a fine and had to stop selling insurance:

https://domainnamewire.com/wp-content/7678.pdf

Screenshot 2023-04-20 at 7.57.25 AM.png



Now, if you look at that document, you will see it is not a "court order". It is, however, a lawful order which issued in the course of an administrative proceeding within the jurisdiction and authority of the State of Washington Office of Insurance Commissioner.

It is an administrative order issued to a Washington business selling insurance in Washington, which is in the jurisdictional scope of the Washington State Commissioner of Insurance.

It is worth pointing out that there are two components to "jurisdiction". The first is (a) whether the authority extends to the physical location of the persons or activities involved, called "personal jurisdiction", and (b) whether the subject matter of the action is within the scope of the authority involved, called "subject matter jurisdiction".

But, yes, there are a lot of authorities, other than courts, which can take actions within the scope of their subject matter jurisdiction concerning persons or activities within their physical range.

Another relatable example would be taxation. In the United States, for example, the national tax authority can do a number of things, such as seizing property or funds to satisfy tax debts, without a court order. Quite a few administrative agencies, at both the federal and state level in the US, have delegated authority to perform what are essentially adjudicative functions. In addition to that, they have the ability to issue records requests through administrative subpoenas, etc..

Some domain commentators are perfectly aware that administrative agencies such as the FTC can take investigatory and regulatory action within the scope of the statutes allowing them to do so:

Screenshot 2023-04-20 at 8.47.41 AM.png



Now, the way that agencies like the FTC work is that they are empowered by law to issue demands - administrative subpoenas - for various sorts of business records during the course of an investigation. Failure to comply with records requests issued in that way can result in penalties, the same as with tax investigations, etc..

One recent example would be the action taken by the US Federal Trade Commission in relation to a "lead generation" network run by a company associated with the .xyz registry. That was an administrative agency action which, eventually, resulted in a permanent injunction.

It is worth discussing that one in detail because, clearly, some people don't understand how administrative agencies have law enforcement powers outside of court actions.

The interesting part of that administrative agency action happened long before anything was filed in court. Take a look at the court docket here:

https://www.courtlistener.com/docket/61690720/federal-trade-commission-v-itmedia-solutions-llc/

You'll notice that the court action starts here on January 5:

Screenshot 2023-04-20 at 8.16.07 AM.png


The court action ends in a stipulated settlement here on January 10:

Screenshot 2023-04-20 at 8.16.43 AM.png


I guess there are some people who look at that, and think that the matter began and ended in five days later with a 20 page stipulated judgment.

No, that's not at all what happened.

If you dig into the details of the complaint, it is obvious that it is based on records obtained during an agency investigation for quite a long time leading up to filing the complaint. What actually happens when the FTC undertakes an investigation is that they have the authority to require US companies to provide them with relevant business records. Upon finding a violation, the FTC will then work out with the defendant what kind of outcome will address the alleged unlawful activity. In this instance, it is obvious that they negotiated a settlement and then filed the complaint with the court, quickly filed by the stipulated judgment worked out in advance, in order to give the settlement the continuing future power of a court order.

But none of the preliminary administrative subpoenas and other investigatory powers of the FTC involved a "court order". The entire process leading up to the court action involved the use of administrative subpoenas and other investigatory powers of the FTC with which US businesses must comply.

The TLDR on the FTC/XYZ thing is that if you want the FTC to "crack down on anti-competitive behavior" then you have to recognize that the way the FTC works is by first requiring businesses to comply with the FTC's investigatory mechanisms - which do not require "court orders". Likewise, the FTC can take administrative enforcement actions that, while appealable, also do not require court orders.

But you can't have it both ways.

Another well-known example was back in 2007 when the US Department of the Treasury ordered Enom to take down a number of domain names that were engaged in commerce involving Cuba:

https://domaininvesting.com/cuba-related-websites-shutdown-domains-taken/

In this morning’s New York Times, there’s an article about an English travel agent who owned several Cuba-related domain names which were shut down by his registrar eNom, due to their listing on the US Treasury Department’s Office of Foreign Assets Control (OFAC). While owning and operating these websites on his own soil is legal, since they were being managed by eNom, a US-based domain registrar, eNom had to take possession of the domain names and essentially put the owner out of business.

How can that happen without a "court order"? Simple. The US Treasury Office of Foreign Assets Control (OFAC) is delegated the authority to enforce certain economic sanctions imposed by the US Congress. These include sanctions involving Cuba which are peculiar to the United States. The OFAC office has the independent power to investigate and identify businesses violating those sanctions and to place those businesses on a list of entities with whom US businesses are forbidden to engage in trade without a license. So, the mere designation of these domain names by this administrative agency - again with no court order at all - required Enom to disable those domain names.

So, it's a little odd, on the one hand, (a) to regularly call for administrative agencies like the USDOJ and FTC to exercise their legal investigatory and enforcement powers in order to obtain records and information from businesses for the purpose of investigating whether to bring a court action, and then turn around and (b) argue that law enforcement agencies should not be able to exercise those powers absent court orders, or to behave as if that is something alarmingly new or unusual.

I believe that any qualified arbitrator appointed to resolve a dispute under this clause is likely to understand what it is driving at, and that the proposed intention to give "any government agency" powers that are oddly constrained when it comes to a "court" is a pretty silly interpretation. Nonetheless, my very first words above are:

They simply might want to clarify that the qualifier "of competent jurisdiction" pertains to the preceding entities of similar type - i.e. a government, administrative or governmental authority or court.

So, sure, for people who don't understand that, yes, law enforcement and regulatory agencies can and do require people to do things - including businesses like a registry - without court orders. The Washington State Insurance Commissioner action against Epik, the investigatory phase of the FTC action against XYZ, and the enforcement of OFAC sanctions, are three well-known examples in the domain industry of a non-judicial actor being able to require registrars and registries to "do things" absent a court order to do those things.

It is not "new" and it is not unusual for non-court legal authorities having both personal and subject matter jurisdiction to require registrars and registries to comply with administrative subpoena's and agency enforcement actions without requiring a "court order" per se. Mr. Kirikos has, in fact, repeatedly called on US law enforcement agencies to do exactly those things.

In any event, it might be worthwhile to have some clarification around that language to prevent misunderstandings that would, as a practical matter, be unlikely to occur in the context of an actual enforcement matter.

If one really wants to dig into the mechanics of how this works, the India High Court has recently demanded that Tucows shut down certain domain names and comply with other orders. Tucows has not done so on the ground of jurisdiction. The Court has taken the odd interpretation that ICANN will require Tucows to comply with "any" court order, and the Court has indicated it will file a complaint with ICANN in order to have its orders enforced. So it is highly likely in the near future that we will see another practical example of this clause in action.
 
Last edited:
5
•••
1. You (Berryhill) focus on this hypothetical "arbitration" between ICANN and Verisign. Lost in this is the registrants (and registrars), who are not party to this proposed agreement (nor the current agreement), whose rights are being harmed.

2. Your examples are all US companies and US authorities. And the Verisign/FTC example did not involve seizing their domain, as my tweet made clear. My concern (under your interpretation of the proposed agreement) is the "competent jurisdiction" calculus employed by Verisign will be different than that determined by registrars.

3. If this is "not new", then why are they adding these new terms to the contract? Somebody wants more power to "do things" --- why? If they already can do these things, they wouldn't need to add these new terms to the proposed contract.

4. I literally already quoted the India High Court example in my blog post.

Indeed, there is an active dispute between various registrars and the government of India, because those registrars (including Tucows, Dynadot, NameCheap) insist that plaintiffs get US court orders to takedown various sites. Those registrars are even facing being blocked by ISPs in India, in order to protect the rights of registrants to due process in their own jurisdiction and national courts.

5. These changes add additional risk/uncertainty for registrants. These changes seek to reduce risk for Verisign. How are registrants being compensated for this? Nada!

6. I encourage anyone to try to find absolutely anything in this proposed contract that benefits either registrars or registrants, compared with the present contract. i.e. why should registrants or registrars support it, compared to the existing contract?
 
Last edited:
9
•••
Thanks for drawing our attention to this @GeorgeK .

Do we know if Verisign are on board with this? It would seem to create a headache for the registry, having to deal with potential claims from all sorts of governments and courts, if they can make a case for applicable, not to mention other agencies. At least for now, this would apply only to .net, and it would seem, if implemented, it would be a disadvantage to using a .net compared to other TLDs. Of course the huge concern is that this would later get written into other registry agreements.

-Bob
 
2
•••
1. You (Berryhill) focus on this hypothetical "arbitration" between ICANN and Verisign.

Yes. That is the enforcement mechanism of the contract you are excited about. So, yes, that is the context in which the clause becomes relevant. Contracts don't magically enforce themselves. When you interpret a contract, you have to take into account the likely opinion of the authority who will actually do so in an enforcement context.

In my opinion, the intent of the clause is reasonably clear, and could stand further clarification. I also reasonably believe that the intended interpreter of the contract - i.e. the arbitrator appointed to do so in the event of a dispute - would be unlikely to interpret it to empower the Djibouti National Weather Service to control the internet.

You are, of course, free to differ.
 
Last edited:
2
•••
Thanks for drawing our attention to this @GeorgeK .

Do we know if Verisign are on board with this? It would seem to create a headache for the registry, having to deal with potential claims from all sorts of governments and courts, if they can make a case for applicable, not to mention other agencies. At least for now, this would apply only to .net, and it would seem, if implemented, it would be a disadvantage to using a .net compared to other TLDs. Of course the huge concern is that this would later get written into other registry agreements.

-Bob

Verisign negotiated the proposed agreement. I'm sure their lawyers reviewed every single word and punctuation mark in that document very carefully.

Recall, Verisign was one of the supporters of the .biz/info/org contracts which would have allowed for tiered pricing!

https://circleid.com/posts/icann_tiered_pricing_tld_biz_info_org_domain
https://forum.icann.org/lists/biz-tld-agreement/msg00106.html

Their intepretation is careful, and geared towards protecting and advancing their interests, at the expense of registrars and registrants.

Remember when some folks were arguing that my interpretation about that was wrong? I stand by my two decade history of finding these changes that have unintended (or perhaps "indended", depending on your point of view) harmful consequences for registrants.

Go read pages 4-5 of:

https://freespeech.com/wp-content/uploads/2023/01/LEAP-comments-IGO-ePDP-2023-FINAL-20230130.pdf

to see where my interpretation of things was on the mark.
 
8
•••
So it is highly likely in the near future that we will see another practical example of this clause in action.
Hi

thank you very much for taking the time, to explain and clarify, in plain language...how some of the various jurisdiction's work.

insightful reading!

imo...
 
4
•••
GeorgeK
I see in your photo on freespeech web that text with blue say more about piracy related rather than what you mention in your post, about abortions and other things, if this new rules is to fight with malware and piracy then there is nothing to worry, let those who do it be accountable for that, the web is full of piracy even Google shows results of it.
If they mean even websites that are against abortions or far right websites etc, then where is the text that say it clearly in the PDF file?
 
Last edited:
0
•••
Yes. That is the enforcement mechanism of the contract you are excited about. So, yes, that is the context in which the clause becomes relevant. Contracts don't magically enforce themselves. When you interpret a contract, you have to take into account the likely opinion of the authority who will actually do so in an enforcement context.

In my opinion, the intent of the clause is reasonably clear, and could stand further clarification. I also reasonably believe that the intended interpreter of the contract - i.e. the arbitrator appointed to do so in the event of a dispute - would be unlikely to interpret it to empower the Djibouti National Weather Service to control the internet.

You are, of course, free to differ.

As I noted in my actual #1 (which wasn't quoted in full in your post):

"Lost in this is the registrants (and registrars), who are not party to this proposed agreement (nor the current agreement), whose rights are being harmed."

How an arbitrator would interpret it is irrelevant to the registrant, since they're not the ones who are able to even initiate such an arbitration, as they're not party to the proposed (or current) agreement.

Here's a potential solution: Make registrars and registrants able to hold Verisign and/or ICANN directly liable. And make governments/etc. indemnify Verisign for seizing the domain, damages, etc. when they give "orders". The harmed parties can sue Verisign. If Verisign loses, Verisign can then use that indemnity from governments for their "relief".

Perhaps then Verisign will be reluctant to follow the orders of the Djibouti National Weather Service blindly, if they suspect that the Djibouti National Weather Service doesn't have the resources to indemnify them in full.....

A make work project for lawyers! Which lawyers are going to object to that? :xf.wink:
 
Last edited:
5
•••
GeorgeK
I see in your photo on freespeech web that text with blue say more about piracy related rather than what you mention in your post, about abortions and other things, if this new rules is to fight with malware and piracy then there is nothing to worry, let those who do it be accountable for that, the web is full of piracy even Google shows results of it.
If they mean even websites that are against abortions or far right websites etc, then where is the text that say it clearly in the PDF file?

You're looking at 2.7(b)(i). Scroll down to 2.7(b)(ii)(5) which is what I focused on in that article, which is wide open for abuse/shenanigans:

Section 2.7(b)(i) is new and problematic on its own (and I’ll analyze that in more detail in a future blog post – there are other things wrong with this proposed agreement, but I’m starting off with the worst aspect). However, carefully examine the new text in Section 2.7(b)(ii) on page 148 of the redline document.

It would allow Verisign, via the new text in 2.7(b)(ii)(5), to:....
 
Last edited:
2
•••
@jberryhill "In my opinion, the intent of the clause is reasonably clear, and could stand further clarification." -- --- With millions in legal expenses, Verisign just happened to cut corners to make the text shorter? Extremely unlikely.


I ask this with respect: How is it reasonably clear; When let's say hypothetically in country Y, they decide to create the "internet arbitration court committee of country Y", and put incompetent people in power that throw suits right and left without proper judgements or knowledge of laws just to try to grab valuable domains. All of a sudden it's potentially a "competent" entity making a claim if the registrar or registrant have a footprint there?

Don't you think there should be a barometer of what constitutes as "competent" ? Some type of internationally recognized certification?
 
Last edited:
6
•••
Here's a potential solution: Make registrars and registrants able to hold Verisign and/or ICANN directly liable. And make governments/etc. indemnify Verisign for seizing the domain, damages, etc. when they give "orders". The harmed parties can sue Verisign. If Verisign loses, Verisign can then use that indemnity from governments for their "relief".

Perhaps then Verisign will be reluctant to follow the orders of the Djibouti National Weather Service blindly, if they suspect that the Djibouti National Weather Service doesn't have the resources to indemnify them in full.....
:xf.wink:

P.S. This topic of indemnification comes up repeatedly in the Transfers Working Group, in relation to reversing transfers of (allegedly) stolen domains, etc.

Fact is, someone has to be accountable/responsible when injustices occur and registrants are harmed. Increasing the potential for those injustices/harms to registrants, and immunizing ICANN/registries/Verisign/governments from being held accountable is a step in the wrong direction.

If the Djibouti National Weather Services wants one of my domains, my expectation would be that Tucows/OpenSRS (my registrar in Toronto) would tell them to go to an Ontario, Canada court for an order.

I have no expectation that Verisign, in their sole discretion, would always come to the same decision as Tucows/OpenSRS. If India threatens to block all of .com/net via their ISPs, for Verisign ignoring an order from India, Verisign would likely capitulate. If instead Verisign has no power at all, and is compelled to say "Contact Tucows", Tucows (and other registrars) have shown they'll stand up for registrants. [it helps that Tucows/OpenSRS uses a reseller model, so at best only their Indian resellers might be affected by a block; savvy registrants can always bypass blocks via a VPN].

In other words, making Verisign a single point of failure does nothing to increase the stabiiity and security of the domain name system. They shouldn't have this power that is in the proposed agreement --- they should instead just tell governments to contact the appropriate registrar with their "orders".
 
9
•••
All of a sudden it's potentially a "competent" entity

That's not the meaning of the word "competent" in this context.

https://dictionary.cambridge.org/us/example/english/competent-jurisdiction

Screenshot 2023-04-20 at 10.41.14 AM.png



When we refer to a court or other official organization has having "competent jurisdiction" the word "competent" merely means that the jurisdiction of the court or other organization is effective upon the person, place and subject matter against which that authority is being exercised. It does not mean "competent" in the sense that they know that they are doing.
 
2
•••
As I noted on Twitter:


I've updated my blog post (see update #2 at the bottom)

https://freespeech.com/2023/04/19/red-alert-icann-and-verisign-proposal-would-allow-any-government-in-the-world-to-seize-domain-names/

to confirm that the offending text was sneaked into the .com agreement, and that I was reminded that I had warned about this in 2020 when it was being proposed!

See points #11 and #12 at:

https://mm.icann.org/pipermail/comments-com-amendment-3-03jan20/2020q1/008781.html

Given more folks are now aware of the problematic text, it should be removed from .com (and not allowed in .net).
 
2
•••
  • The sidebar remains visible by scrolling at a speed relative to the page’s height.
Back