Safe Netting

So many of the problems we are experiencing on the Internet (spam, phishing, counterfeit product traffic, malware distribution, network intrusions, online fraud, etc.) are enabled by secrecy within the service provider community, specifically among certain Registrars. Right now, you can help do something about it.

We call these bad  guys “Rogue Registrars” because loopholes in the certification process has allowed them to mask their identity and hide while they perpetrate illegal activities. This makes them “untouchable” and unaccountable.

You Can Help

The regulatory requirements for Registrars is governed by ICANN with a contract known as the Registrar Accreditation Agreement (RAA). To be an official registrar, and sell or provide domain names and IP addresses to the public, the entity must abide by this RAA. (For an easy-to-understand description of how the process works, see the end of this article.)

Currently, the RAA is being re-written. It is YOUR duty as an Internet user and consumer to take this opportunity to voice your distaste for online crime — and to urge ICANN to close the loopholes that allow organized crime to exploit the Internet.

In order to assist ICANN in its stated goal of transparency and accountability, SafeNetting and other anti-cybercrime organizations like SpamCop, Knujon and HostExploit are proposing a modification to the Registrar Accreditation Agreement (RAA). Consumer and public support will raise a voice against criminal activities on the web.

Let your voice be heard

The RAA is being re-written at this very moment. YOU as an Internet user and consumer have an opportunity close a huge loophole that allows an unaccountable atmosphere to fester.  They are accepting and considering suggestions and opinions from the public for their decision-making process.We believe the following language (or equivalent) MUST added to the RAA, in order to END the proliferation of rogue registrars:

“All Accredited Registrars must submit main office location, including country, to be publicly disclosed in ICANN web directory. Post Office boxes, Incorporation addresses, and mail-forwarding locations will not be acceptable. Registrars must also provide for public display the name of CEO or President. ICANN must be notified within 30 days of a location or presiding officer change.”

If you believe internet crime is wrong, and wish to support this proposal, please write a brief and polite email as an Internet user to policy-staff@icann.org

Express your concern about the lack of public Registrar disclosure and request that the new version of the RAA include a section requiring owner and location disclosure. You may use the suggested language above, your own version, or simply a personal statement of concern over the issue. If you are uncomfortable with contacting ICANN directly, you can forward your comments to KnujOn at: contact@knujon.com and your statement will be included, anonymously, in a letter from KnujOn.

Suggested Letter:

To: policy-staff@icann.org
Subject: Ending Registrar Secrecy in RAA

Dear ICANN RAA Consultation Staff,
I am writing to you to request a change in the Registrar Accreditation Agreement that will improve transparency and accountability.It has come to my attention as an Internet user that there is no requirement in the standard Registrar contract to that requires public disclosure of Registrar ownership or location.I am concerned that this loophole in the agreement opens the door to fraud, secrecy and consumer abuse. Please consider adding the following language or equivalent to the RAA:

All Accredited Registrars must submit main office location, including country, to be publicly disclosed in ICANN web directory. Post Office boxes, Incorporation addresses, and mail-forwarding locations will not be acceptable. Registrars must also provide for public display the name of CEO or President. ICANN must be notified within 30 days of a location or presiding officer change.”

Without public disclosure there cannot be true transparency, accountability or trust. I appreciate your consideration.

Sincerely,
YOUR NAME

You may also send these comments to the RAA Working Group here: raa-wg@atlarge-lists.icann.org OR submit comments through the ICANN contact form: http://www.icann.org/cgi/contact OR paper letters may be sent to: Internet Corporation for Assigned Names and Numbers (ICANN), 4676 Admiralty Way, Suite 330, Marina del Rey, CA 90292-6601.

Please take a stand against internet crime, forgery and corruption. Sending this letter will help make the Internet a better service to us all.

Thank you.

BACKGROUND

What makes the internet work? The large network known as the “Internet” is actually composed of a number of smaller networks all connected through a numbering system known as the Domain Name System. (learn more)

Who is in charge? An organization known as the Internet Corporation for Assigned Names and Numbers, or “ICANN”, headquartered in California, is responsible for the Internet Protocol (IP) and address space allocation, protocol, among other tasks. In short, they administrate registrars who allow people to obtain internet addresses.

Who are registrars? ICANN authorizes organizations to ’sell’ or provide domain names to the public. If you want to get a domain name (URL) for a web site, then you must purchase it through one of these official registrars. (learn more)

What can go wrong?

Here are just a few of the evil activities that have recently been uncovered:

KnujOn recently found 70 Registrars with no disclosed location whatsoever. Some Registrars can’t be located but continue to operate. (“Rogue Registrars”)

Dozens of Registrars located internationally are using “mail-drop” addresses and post office boxes in the United States and Canada as primary addresses.

More than half of all the accredited Registrars are owned by only 4 companies but use a variety of different business names which make the market appear more diverse than it is.

EstDomains pretends to be in U.S. but is really in Estonia. Their CEO is revealed to be a convicted felon.

Registrar Dynamic Dolphin’s CEO was revealed to be Scott Richter, long-time self-professed spammer who has been successfully sued for spamming.

Thanks again for reading, and for helping