Martin Heller
Contributing Writer

Should Internet registrars be transparent? Let ICANN know!

analysis
Nov 5, 20083 mins

In light of continuing criminal activity on the Internet, Garth Bruen of Knujon makes a plea for public disclosure of Internet Registrar ownership and location

This letter is from Garth Bruen of Knujon. It was written to me, but consider it written to you as well.

We have before us rare opportunity to close a big Internet policy loophole. You may not be aware but Registrars (companies authorized to issue domain names) are not required to publicly disclose their ownership or location. It is my firm belief that this policy failure has helped criminals to get a foothold within the Internet infrastructure. To be specific, the standard contract given to Registrars, the Registrar Accreditation Agreement (RAA), has no provision mandating that location or ownership be disclosed to the public. In any other industry this would be intolerable. Internet users need to be aware of this and how it affects them.

KnujOn has at its own expense sent Dr. Robert Bruen to the ICANN Cairo meeting to push this issue and generally for more consumer advocacy. Please consider the following information: Registrars Estdomains’ and Namejuice have had convicted felons as CEOs. Registrar Dynamic Dolphin’s CEO has been sued successfully for spamming. The officers at the companies were completely unknown until researchers and journalists pushed the information out.

Also consider this: Dozens of Registrars located internationally are using “mail-drop” addresses and post office boxes in the United States and Canada as primary addresses. 70 Registrars were recently found to have no disclosed location whatsoever. Some Registrars still can’t be located but continue to operate. The Registrars in question were all sponsoring massive illicit pharmacy networks, including sites distributing Schedule 3 substances. I am recommending the addition of the following language or equivalent to the RAA:

“All Accredited Registrars must submit main office location, including country, to be publicly disclosed in an ICANN web directory. Post Office boxes, Incorporation addresses, and mail-forwarding locations will not be acceptable. Registrars must also provide for public display the name of the CEO or President. ICANN must be notified within 30 days of a location or presiding officer change.”

I have already sent my request for this change to ICANN staff and I am encouraging our members and the public to do the same using one of the methods listed here: https://www.knujon.com/news.html#11022008

It is clear that certain players within the community have set out to deceive consumers. These conditions do not promote stability or foster faith within the industry. Additionally, it seems somewhat hypocritical to require that registrants disclose accurate contact details in Whois but Registrars have escaped this requirement. Without public disclosure there cannot be true transparency, accountability or trust. I appreciate your support.

Sincerely, Garth
Martin Heller

Martin Heller is a contributing writer at InfoWorld. Formerly a web and Windows programming consultant, he developed databases, software, and websites from his office in Andover, Massachusetts, from 1986 to 2010. From 2010 to August of 2012, Martin was vice president of technology and education at Alpha Software. From March 2013 to January 2014, he was chairman of Tubifi, maker of a cloud-based video editor, having previously served as CEO.

Martin is the author or co-author of nearly a dozen PC software packages and half a dozen Web applications. He is also the author of several books on Windows programming. As a consultant, Martin has worked with companies of all sizes to design, develop, improve, and/or debug Windows, web, and database applications, and has performed strategic business consulting for high-tech corporations ranging from tiny to Fortune 100 and from local to multinational.

Martin’s specialties include programming languages C++, Python, C#, JavaScript, and SQL, and databases PostgreSQL, MySQL, Microsoft SQL Server, Oracle Database, Google Cloud Spanner, CockroachDB, MongoDB, Cassandra, and Couchbase. He writes about software development, data management, analytics, AI, and machine learning, contributing technology analyses, explainers, how-to articles, and hands-on reviews of software development tools, data platforms, AI models, machine learning libraries, and much more.

More from this author