Domain privacy

Domain privacy (often called Whois privacy) is a service offered by a number of domain name registrars. A user buys privacy from the company, who in turn replaces the user's information in the WHOIS with the information of a forwarding service (for email and sometimes postal mail, it is done by a proxy server).

Level of anonymity
  • Personal information is typically collected by these registrars to provide the service. Some registrars take little persuasion to release the so-called 'private' information to the world, requiring only a phone request or a cease and desist letter.[1][2][3]
  • Others, however, handle privacy with more precaution, using measures including hosting domain names offshore and accepting cryptocurrencies for payment so that the registrar has no knowledge of the domain name owner's personal information (which would otherwise be transmitted with credit card transactions). It is debatable whether or not this practice is at odds with the domain registration requirement of the Internet Corporation for Assigned Names and Numbers (ICANN).

Privacy by default

Note that some top-level domains have privacy caveats:

  • .al: No information about the owner is disclosed.
  • .at, .co.at, .or.at: Since May 21, 2010, contact data (defined as phone number, fax number, e-mail address) is hidden by the registrar and must be explicitly made public.[4]
  • .ca: Since June 10, 2008, the Canadian Internet Registration Authority no longer posts registration details of individuals associated with .ca domains.
  • .de: Since May 25, 2018, the German Internet Registration Authority denic put extensive changes into force for the Whois Lookup Service. With a few exceptions, third parties can no longer access domain ownership data.[5]
  • .eu: If the registrant is a natural person, only the e-mail address is shown in the public whois records unless specified otherwise.[6]
  • .fi: Individual persons' data is not published (changed in 2019), but for companies, associations, etc., data is published.
  • .fr: By default, individual domain name holders benefit from the restricted publishing of their personal data in the AFNIC public Whois.[7]
  • .gr: No information about the owner is disclosed.
  • .is: May hide address and phone number.
  • .nl: Since January 12, 2010, registrant postal addresses are no longer publicly available.[8][9]
  • .ovh: Contact data is hidden by the registrar and must be explicitly made public.
  • .uk: Nominet, the guardian of UK domain namespace, provide domain privacy tools on their extensions (.co.uk, .me.uk etc.), providing that the registrant is not trading from the domain name.[10] While the home address of the registrant can be hidden, the full name cannot.

Privacy forbidden
  • .us: In March 2005, the National Telecommunications and Information Administration (NTIA) said that owners of .us domains will not have the option of keeping their information private, and that it must be made public.
  • .in: Registrants for Indian domain names may not use any proxy or privacy services provided by registrars.[11]
  • .li and .ch: According to the General Terms & Conditions of SWITCH, the Swiss registry for .ch and .li domains,[12], "... SWITCH is legally obliged to publish ... [the] full name of the holder of the domain name concerned [and the] postal address of the place of residence of the holder ..."
  • .it Italian domain names can not keep information private for law.

Implications

The Internet Corporation for Assigned Names and Numbers (ICANN) broadly requires the mailing address, phone number, and e-mail address of those owning or administrating a domain name to be made publicly available through the "WHOIS" directories. However, that policy may enable spammers, direct marketers, identity thieves, or other attackers to use the directory to acquire personal information about those people. Although ICANN has been working to change WHOIS to enable greater privacy, there is a lack of consensus among major stakeholders as to what type of change should be made.[13] However, with the offer of private registration from many registrars, some of the risk has been mitigated, enabling those spammers, direct marketers, identity thieves, and other cyber-criminals to hide behind anonymous domain registrations to make it difficult or impossible for victims to identify those responsible.

Litigation

With "private registration", the service can be the legal owner of the domain. This has occasionally resulted in legal problems. Ownership of a domain name is given by the organization name of the owner contact in the domain's WHOIS record. There are typically four contact positions in a domain's WHOIS record: owner, administrator, billing, and technical. Some registrars will not shield the owner organization name in order to protect the ownership of the domain name.

Ownership of domains held by a privacy service was also an issue in the RegisterFly case, in which a registrar effectively ceased operations and then went bankrupt. Customers encountered serious difficulties in regaining control of the domains involved.[14] ICANN has since remedied that situation by requiring all accredited registrars to maintain their customers' contact data in escrow. In the event a registrar loses its accreditation, gTLD domains along with the escrowed contact data will be transferred to another accredited registrar.

There have been several lawsuits against Namecheap, Inc. for its role as owner/registrant.[15] and also in Silverstein v. Alivemax, et al. Los Angeles Superior Court Case Number BC480994 although this case was dismissed in May of 2014. [16] Silverstein is well known for his anti-spam and email privacy campaigning, most notably in the case of William Silverstein v Keynetics, Inc., No. 17-15176 (9th Cir. 2018) - decided in March 2018. [17]

gollark: Just name them "blue", "lime green", "cobalt blue", etc.
gollark: Somewhat?
gollark: What is the problem? If so, explain how I can solve this issue in my project.
gollark: What about my arbitrary color roles idea?
gollark: ·······..

See also

References
  1. "Private domains not so private?". CNET News.com. 2005-08-15. Retrieved 2016-02-03.
  2. Thomas Roessler (2003-04-15). "More on Domains By Proxy".
  3. Wendy Seltzer (2003-04-11). "proxy fight [Domains-by-proxy update]". Archived from the original on 2008-06-05. Retrieved 2008-06-16.
  4. nic.at GmbH (2010-05-21). "Change of nic.at Whois policy". Archived from the original on 2014-06-06. Retrieved 2014-05-05.
  5. https://www.denic.de/en/whats-new/press-releases/article/denic-putting-extensive-changes-into-force-for-de-whois-lookup-service-as-of-25-may-2018/
  6. EURid. ".eu domain name WHOIS policy". Retrieved 2016-04-29.
  7. AFNIC. "AFNIC Data publication and access policy". Retrieved 2017-06-26.
  8. Van Miltenburg, Olaf (12 January 2010). "SIDN anonimiseert whois-gegevens" [SIDN anonymizes whois data]. Tweakers (in Dutch). Retrieved 4 September 2014.
  9. "SIDN implements Whois changes from 12 January 2010". SIDN. 1 January 2010. Archived from the original on 29 January 2010. Retrieved 4 September 2014.
  10. Nominet. "Nominet WHOIS Opt Out".
  11. Registry.in. "Terms and Conditions for registrants" (PDF).
  12. nic.ch. "General Terms & Conditions of SWITCH".
  13. "The Privacy Conundrum in Domain Registration". Act Now Domains. Retrieved 26 March 2013.
  14. "Anger and fear as domain firm slowly implodes". Computer Business Review. February 21, 2007. Retrieved December 11, 2013.
  15. http://randazza.files.wordpress.com/2009/05/solid-host-v-namecheap.pdf
  16. "Case Summary - Online Services - LA Court". www.lacourt.org. Retrieved 2018-08-13.
  17. "Silverstein v Keynetics, Inc". Retrieved 2018-08-13.
This article is issued from Wikipedia. The text is licensed under Creative Commons - Attribution - Sharealike. Additional terms may apply for the media files.