Comment by vekatimest

2 years ago

To be replaced with a system providing a standardized method to give law enforcement easier "secure access" to your redacted personal information.

Wait, people use real information?

  • I do. The terms of the domain registration say that providing incorrect information can result in revocation of the registration. Not really worth the risk, IMO, for any domain I actually care about.

    • Not just that, but also if the registrar turns out to be fraudulent or someone convinces your registrar to transfer the domain (scam the support team), or they get your account password and transfer the domain that way (data leak elsewhere, password reset with a sim swap, you name it)... there are so many ways you can have "technical difficulties", but in the end: you're the one with an ID card that has your name on it. You can take the TLD to court and have them give you back the domain that was legally purchased in your name

      Except if it's not in your name

      So yep, as you say: make this decision (fake or real information) knowing the risks involved in not legally owning it

We have ownership records for real estate for a reason. Domains need some level of accountability.

  • I'm not sure this follows. You're allowed to publish, say, a book or pamphlet without signing it with your legal name and address. So is a website more like a book, or a building?

    • Somewhere in the middle IMO. If the domain name is desirable it looks more like a building, because people generally care about who owns the land when it is not getting put to good use.

      Websites are more like books when they have a domain no else else cares about.

      2 replies →

  • Domains point to IPs, and IPs already have subpoenable ownership records at RIRs. In the real estate metaphor: we have property ownership records, but we don't have records of every rental tenancy.

  • ICANN accredited domain registrars (so any registrar selling generic TLDs like .org, .com, .design etc) have contractual obligations related to technical abuses like phishing, malware, and botnets, insofar as they intersect with a domain name.

    Content/expression related harms are outside of ICANNs bylaws and any obligations related to what a domain points at are not from ICANN, but from the laws in the jurisdiction in which the registrar operates. This is generally good. There is no global standard for acceptable limits on expression, with the possible exception of CSAM which is illegal everywhere.

    Requiring domain registrars to arbitrate what content should be accessible via the DNS is perilous.

"Only law enforcement" is still better than "everyone".

  • I disagree. Law enforcement already abuses many data sources they have private access to, and use asymmetric information to their advantage.