Thanks for the detailed info. Can you give your input regarding the latest ICANN law on IGO immunity? Once it's passed, can UN.org (or other IGOs) immediately seize UN.com (or other respective acronym coms), and if so, would there be any recourse for the com holders?
Okay, so, here's the problem - Can IGO's have their initials abused by phishing, impersonation, etc.? Yes they can.
I'll give you a concrete example. The EU Intellectual Property Office runs a great multi-office trademark document search system called TMVIEW. I used this database every day in my practice:
https://www.tmdn.org/tmview/welcome#/tmview
Because I'm as lazy as the next guy, I was habitually navigating to that site by typing "tmview" in a combined URL/search bar in my browser and just clicking on the first thing that came up, because it was usually the first thing that came up.
The folks who own or had owned TMVIEW.com put up a fake copy of the EUIPO TMVIEW welcome page with its search bar. Not paying attention, it was very easy not to notice that one was at tmview.com instead of tmdn.org. If you typed in a search, it would then forward you to the EUIPO site, which would generate a search error. Again, you wouldn't really notice, re-do your search, and proceed. But the domain owner was collecting valuable commercial intelligence by knowing what IP's (traceable to law firms or companies) were searching what potential marks in the TMVIEW database. Imagine what you'd do with that data.
So, this is a problem that IGO's have. The problem with the UDRP is that in order to file a complaint, the complainant has to agree to be sued in the jurisdiction of either the registrar or the registrant (the UDRP "Mutual Jurisdiction"). Many treaty organizations have what amounts to diplomatic immunity - they can't be sued in courts.
That kind of thing happens all of the time in law. One notable example is the young man who was killed by a drunk-driving spouse of a US diplomat in the UK. So this whole thing about "IGO's can do whatever!" is a subspecies of the reason why drivers in Washington DC with diplomatic plates can park where they want and drive however they want with no consequences. The larger picture in which this particular thing happens is not "new" in any sense.
So, they want to be able to use the UDRP, but without having to admit to judicial jurisdiction.
As I have demonstrated in this thread, with the statistics above, domain registrants actually
WIN the overwhelming majority of three-letter domain cases, to just use this as an example. I have not done a statistical rundown on those losing cases. For example, ado.com was one that was challenged in court and reversed.
But the fact of the matter is that if you are using a US based registrar and don't have upwards of $20k in your pocket for starters, you aren't going to be litigating your bad UDRP decision in the first place. Just serving process on a foreign defendant in a US court is going to cost you anywhere from $2500 to $5000 and that's before you even move forward on much.
So, first, there is a problem that could stand to be addressed, since people do take advantage of domain names which are confusingly similar to IGO designations for bad purposes. Simply saying "too bad" to that is not a good plan.
But, no, there is no proposal by which IGO's can have your domain name free for the asking. If that's what they were after, there would not be a proposal to use the UDRP in the first place. Now, sure, if you are one of those people who think the UDRP is an orgy of unfairly grabbing names, then, yep, that's what this is.
I haven't looked at the current proposal in detail because, quite frankly, I've wasted a lot of my personal time on ICANN policy over the last 20 years on behalf of people who really don't know or care and at significant personal sacrifice, and often to see other people claim credit for a few modest things I was able to accomplish.
But, by the same token, the IGO wouldn't have any recourse in court either. Take France.com for example.
If the government of France was limited to using the UDRP, and couldn't pursue a court case, they'd lose - hands down. Every country that has tried to UDRP a country name has lost. But, they didn't do that. They pursued a French court case, and thus far two US courts have ratified the outcome of enforcing that French court decision here in the US.
So, the France.com situation stands this whole "hair on fire" thing about IGO UDRP's on its head, really. It would have been vastly preferable for that case to have been a UDRP all-or-nothing decision, because the right result would have been readily reached, and that would be the end of it.
Are there bad UDRP decisions? You betcha. So far this year I have not only won every case I have defended, but only ONE of them wasn't an RDNH on top. Bad decisions attract a lot of attention, and deservedly so, but they are not representative of the run of cases.
There are, however, also bad court decisions. Not only are bad court decisions bad, but they are orders of magnitude more expensive and can include claims for monetary damages against the domain registrant.
One to watch is the Empower.com case, in which thus far there has been a motion to dismiss and in which the reply to the motion to dismiss was filed yesterday. Absolute howler of an unjust case, and would be a sure loser in the UDRP, which is why they didn't file a UDRP, but are going to drag the domain registrant through civil litigation to try to steal his senior domain name.
So, I'm kind of "meh" on the outrage over it. Litigation is a not a game for the faint of heart or the light of wallet in the first place, so for the overwhelming majority of Namepros readers or domainers generally, it's entirely an academic question whether they could or could not litigate a UDRP outcome on an IGO name, because it's not as if they could afford to litigate a UDRP outcome anyway.
Whatever they decide, there are so many situations in which a legitimate domain registrant does not take a UDRP seriously, and does not put the effort/work/resources/whatever into defending it. Then, if they can afford it, they have to spend a ****-ton of money litigating it if they can afford to do so.
So, that's what the IGO thing is about, to the extent I've bothered to look at it. They're going to do what they're going to do, and the folks who work (and some of whom actually get paid) to make these things "less bad" are doing fine without my input.