Featured Blogs

Which Domains Stand the Strongest Against Phishing Attacks?

The latest Anti-Phishing Working Group (APWG) Global Phishing Survey, which analyzed over 100,000 phishing attacks in the first half of 2014, examines the progress that top level domains (TLDs) are making in responding to phishing attacks that use their TLDs. The report finds the .INFO domain has the lowest average phishing uptimes as compared to other TLDs, such as .COM and .NET. more

Top-Level Domains for Addressing by Physical Context

This article proposes the reservation of a special use TLD to allow a more convenient addressing of devices by general physical location or context. ...As wireless networking and devices become more common there may be a need for a convenient way to address hosts by physical location or context, especially when the users themselves are using mobile or wearable devices. more

Effects of ICANN’s Legal Presence in the US, Under California Legislation

Excerpts from the recent address of the President and CEO of ICANN to the Working Group for Internet Governance (WGIG). "ICANN's establishment in California is a consequence of history. Jon Postel, the long standing coordinator of the IANA functions was based at the University of Southern California. Jon was designated ICANN's first Chief Technology Officer but was preempted from taking the position due to his untimely death. The legal instrument available in California to establish such a public benefit function, including its multi-stakeholder expression, is a not-for-profit, public benefit corporation..." more

Paid Peering: Issues and Misunderstandings

Recently I was asked for my opinion on Google paying France Telecom (FT) to deliver traffic into FT's network, i.e. Google paying to peer with FT. I wasn't aware Google pays FT. I don't even know if it's true. But I do know this is a topic fraught with misunderstandings. Also, if there is a "problem" here, the problem is one of competition (or lack thereof) in portions of the French broadband access market. It is not a problem that can be or should be fixed by "network neutrality" regulations or legislation. more

Risk vs Benefit: The Impact of Shorter 90-Day SSL Certificate Life Cycles

In today's digital age, securing your website and ensuring your users' safety has never been more critical. Secure sockets layer (SSL) certificates are the go-to solution for securing websites by encrypting the data transmitted between web servers and browsers. Historically, SSL digital certificates could be valid for years, after which they had to be renewed or replaced.  more

The Fragile Network

One of the more persistent founding myths around the internet is that it was designed to be able to withstand a nuclear war, built by the US military to ensure that even after the bombs had fallen there would still be communications between surviving military bases. It isn't true, of course. The early days of the ARPANET, the research network that predated today's internet, were dominated by the desire of computer scientists to find ways to share time on expensive mainframe computers rather than visions of Armageddon. Yet the story survives... more

De Facto Rules a Boon to Rogue Players

In Ian Flemming's Thunderball M sends 007 to the Bahamas on a hunch that SPECTRE is hiding something there. Well, it's been our hunch for a while that the Bahamas "office" for the Registrar Internet.BS does not exist. Now we have confirmation of such. It has been documented in an explosive undercover expose by LegitScript that Internet.BS address as stated could not be verified, could not accept mail, and that the business itself could not actually be found in the Bahamas. more

CircleID’s Top 10 Posts of 2015

Once again it is time for CircleID's annual roundup of top ten most popular posts featured during the past year (based on overall readership). Congratulations to all the 2015 participants and best wishes in the new year. more

First Four Registry Agreements Signed for New TLDs

The first four new Top Level Domains (TLDs) have signed contracts with ICANN, known as Registry Agreements, to allow the applicants to operate new TLDs on the Internet. This is a historic event and marks the first of many new Registry Agreements which will be signed over the coming months as prospective new TLD operators complete the Initial Evaluation phase, pre-delegation testing, and finally sign Registry agreements. more

2013 Domain Name Year in Review

Well folks, it's that time of year again. It's time for our countdown of the top 10 biggest domain stories for 2013. And while my predictions from last year were accurate, in that we did see a record number of registry and registrar breaches, I had no idea that this year's biggest story would even appear on the list. So with that said, let's get started. more

Open letter to US House Subcommittee for Oversight Hearing on gTLDs

This is an open letter to the United States House Subcommittee on Intellectual Property and the Internet regarding the Oversight Hearing on new Top-Level Domains to be held on Wednesday 4 May. The intention of the open letter is to highlight the imbalance of intellectual property interests on the panel and to ensure the Subcommittee is presented with some balanced facts and benefits of the new Top-Level Domain program. more

Short Domain Names Threatened by Proposed Policy on IGO Dispute Resolution Procedure

ICANN staff has published a draft report on dispute resolution procedures for IGO (inter-governmental organization) domain names. This proposal has deep flaws and should be rejected by the community, as it does not have the balance and protection of registrant rights present in the existing UDRP. Initially, the proposed policy would apply to new Top-Level Domains (TLDs), but via a Policy Development Process (PDP) it could be extended to existing TLDs. more

WLS Deemed Illegal by Registrar Coalition

ICANN's announcement of a "Special Meeting of the Board", to be held on February 18, 2004, includes a number of topics in its "Proposed Agenda" including: "WLS Negotiations with VeriSign". In reaction to this particular item related to WLS, Newman & Newman, the law firm representing an ad hoc coalition of ICANN-accredited domain name registrars, has sent a letter to Dr. Paul Twomey, President and CEO of ICANN expressing... more

UDRP Does Not Apply To Bad Faith Domain Name Renewals: Part I

The purpose of the Uniform Dispute Resolution Policy, known as the UDRP (hereafter the "Policy"), is to determine disputes relating to the registration or acquisition of domain names in bad faith. To succeed in a UDRP action (i.e. to obtain cancellation or transfer of the disputed domain name) it is necessary for the party bringing the complaint (the complainant) to show that (i) the disputed domain name is identical with or confusingly similar to a trademark or service mark in which the complainant has rights; (ii) the domain name holder (known as the respondent) has no right or legitimate interest in respect of the domain name; and (iii) the domain name was registered and is being used in bad faith. Each of the aforesaid three elements must be proved by the complainant to warrant relief.
 more

Vendor Selection Matters in the Domain Registrar Ecosystem

Domain name abuse is one of the most dangerous and under-regulated issues in digital business security today. Many of the largest companies in the world still lack basic domain security protocols, making them prime targets for bad actors. An attack on a domain can lead to the redirection of a company's website, domain spoofing, domain and domain name system (DNS) hijacking attacks, phishing attacks, network breaches, and business email compromise (BEC). more