Bad Taste: Another Way ICANN Blew Domain Registration

Opinion: Speculators have learned to abuse the Grace Period in registration to engage in "Domain Tasting." Whether it's good for registrars or not, regular people lose out.

ICANN is widely disliked, all over the world in fact, for a variety of reasons. Now another ICANN blunder has come to light, and it is exacerbating the takeover of the domain registration process by sleazy speculators.

My big gripe with ICANN is that the only rights they seem concerned about protecting in the domain registration process are those of trademark holders.

I don't have a problem with protecting those rights, it's just that they should also make some provision for the rights of domain name owners and make some token effort to protect the system against domain name speculators.

eWEEK.com Special Report: Internet Security

"Domain Tasting" is the latest unintended outcome from that lack of care. It all begins with a feature called "Create Grace Period," mandated by ICANN for global registries such as .com (managed by Verisign), .org (managed by PIR), and so on.

This is a five-day period in which a registrar may delete a just-registered domain and get a refund of the registry fee.

Speculators have figured out how to use this feature to register domains, publish them with many advertising links, and then evaluate which are promising enough to keep.

The trick is to find the ones that users are likely to hit through a typo, at which point they will see the ads.

This practice has led to a federal cyber-squatting lawsuit by Neiman Marcus and Bergdorf Goodman against domain name registrar Dotster.

I'm not surprised. When I wrote about Dotster's involvement with the theft of the panix.com domain name, I noted that they had such professional names as killbush.com and hairyarmpits.net for sale on their home page.

They are probably named as the target in the lawsuit, as opposed to the actual owner of the domain because the domains are registered privately. The suit also accuses Dotster of responsibility for the situation simply for ignoring the close resemblance to the trademarks (such as nehmanmarcus.com).

While I'm leery of Dotster and other players in the domain industry who have grown fat off of this and other abuses of the domain registration process, it's also true that registrars can't do much about Domain Tasting, since Create Grace Period is mandated by ICANN.

Of course, all sorts of rules are also mandated by ICANN and widely broken by speculators, such as the requirement to use only accurate information in the contact fields.

Whenever I write on this subject, I get a few e-mails from speculators who fancy themselves the equivalent of real estate developers. They flatter themselves.

Domain speculators, even to the extent that they don't infringe on other people's trademarks, exploit a hole in the registration process at little or no cost, remove large numbers of domains from the open market and add no value to them.

This can't be in the public interest, and it's up to ICANN to take measures to alleviate the situation.

eWEEK.com Special Report: Cyber-Crime

Create Grace Period, at least as implemented, is obviously a big mistake and needs to be corrected quickly.

There may be some middle ground, such as a smaller registry fee for withdrawn names, but I'm beginning to wonder.

In the past, I've criticized ICANN and Verisign for the growth of registry fees; maybe the answer is higher registry fees and, with them, higher domain name costs. That might put a monkey wrench in the economics of domain speculation.

Security Center Editor Larry Seltzer has worked in and written about the computer industry since 1983. He can be reached at larryseltzer@ziffdavis.com.

Click here for an archive of Larry Seltzer's columns.

PointerCheck out eWEEK.com's Security Center for the latest security news, reviews and analysis. And for insights on security coverage around the Web, take a look at eWEEK.com Security Center Editor Larry Seltzer's Weblog.



Comment on this article
Be the first to comment on this article.
Upcoming eSeminars

Data Protection Virtual Tradeshow
Cameron Crotty 50x50

Available On-Demand
Join Cameron Crotty and experts as they explore best practices and solutions needed to maintain a secure flow of data.
Available On-Demand
Security 2.0: Controlling Complexity
with Cameron Crotty. Sponsored by Symantec
Available On-Demand
Backup Exec 11d - The Gold Standard in Windows Data Recovery
with Frank Derfler. Sponsored by Symantec
Advertisement