Reforming the DisGrace Period

By Larry Seltzer  |  Posted 2008-01-10 Print this article Print

Another step has been taken on the long, plodding path to maybe addressing the problem of Domain Tasting. 

ICANN GNSO has been studying the problem of Domain Tasting for months now in their usual thorough manner. I wrote about the study several months ago and said I expected no prompt action. They have gotten to the point of issuing an initial report. This report discusses the input received by the GNSO during the study.

Domain tasting is the practice of scamming the AGP or "Add Grace Period," which is a five-day window after the registration or "Adding" of a domain. A registrar can allow a registrant to "undo" the registration in that time period.
The intent is to allow mistakes to be corrected, but tasters use the AGP to "monetize" the domains in that time period. If the returns on the domain are promising they can allow it to stand and add it to their domain portfolio. If not, they can delete the registration.

As the report notes "...domain tasting makes up the majority of domain transactions today..." (actually, it attributed this statement to the arguments of the BC or "Business and Commercial Users' Constituency," one of the interest groups providing input to the report. This is shocking in a way, but I've seen numbers before that imply it.) The BC also points out that Domain Tasting has succeeded in growing the overall domain market, and this too is a reasonable claim.

Domain tasters sometimes steal your whois domain lookup requests in order to get names to register. Click here to read more.

This added growth makes domain tasting in the interest of the registries, especially VeriSign. Even though the registries end up canceling many more domains than the register through domain tasting, their margin on actual registrations is so large that they can afford to eat many tasting transactions, the marginal cost of which is just about nothing to them, in order to get several dollars a year of registry fees for the occasional new domain.

The registries themselves or at least the registries for gTLDs—which are the TLDs like .com, .org, .and losers like .museum, anything that's not a country code—are another constituency, the RyC or gTLD Registry Constituency. They aren't opposing action, but they are urging that no stone be left unturned in the study of the matter before action is taken, and that action be as minimal and non-intrusive as possible. In other words, they're trying to stall so that they can milk whatever money they can out of domain tasting before the gravy train pulls into the station.

The IPC (Intellectual Property Interests Constituency) complains, as one would expect them to and as is obviously the case, that domain tasting facilitates typosquatting and other schemes to skirt the letter and spirit of intellectual property laws. They also point out, as I have many times in the past, that smaller companies and individuals whose interests are harmed in this way don't have the resources to mount a UDRP proceeding to protect their property. Thanks also to the IPC for pointing out that normal users are harmed by the proliferation of false hits in search engine results because of the large number of phony domains being used.

The ICANN ALAC (At Large Advisory Committee) also weighed in, unambiguously, against domain tasting. The ALAC's job is to advocate at ICANN for the interests of ordinary individual Internet users. ALAC is concerned about the confidence of users in the DNS with so many suspicious domains, and also for its long-term stability. I'm more impressed by their more general arguments that it's inappropriate and harmful and should be eliminated.

The NCUC, or Non-Commercial Users Constituency, which represents "civil society organizations," shares the concerns of many other constituencies, including the concern for trademark infringement. They seem to be put off by the fact that Domain Tasting is used largely to game the system, and suggest that a modest restocking fee would address the problem by ending the free ride. I've made the same suggestion for quite a while and pointed out that many registry agreements with ICANN allow the registries to impose this fee unilaterally, as PIR (Public Interest Registry), the registry for .ORG, has already begun to do.

Three years ago a prominent domain name was stolen, revealing huge flaws in the domain registration system. Click here to read more.

Finally, the ISPC, or Internet Service Providers and Connectivity Providers Constituency, complains about the support calls they get because of domain tasting and the extra strain it puts on their DNS servers.

In lieu of the restocking fee, many constituencies argued that perhaps the portion of a registration which goes to ICANN, 20 cents USD, should be retained even in the case of a delete. Twenty cents per domain would probably be enough to kill off the vast majority of tasting. Speculators would have to be more picky about names they register.

If this is an easy way to effect real change, then I'm for it, but I don't see any reason to believe this will happen quickly. In fact—and I hope I'm wrong about this—I think this time in 2009 we can expect the state of affairs to be much the same, although much further study will have been done. The ICANN fee retention idea, in the end, won't happen, because only ICANN makes money off of it. Some scheme will have to be devised that buys off the registries.

But how can anyone without a direct interest in the perpetuation of tasting argue against the removal of the Add Grace Period? Obviously it is rarely, if ever, used for its intended purpose; it exists to be abused, and ample evidence exists to demonstrate this.

Security Center Editor Larry Seltzer has worked in and written about the computer industry since 1983. More from Larry Seltzer
Larry Seltzer has been writing software for and English about computers ever since—,much to his own amazement—,he graduated from the University of Pennsylvania in 1983.

He was one of the authors of NPL and NPL-R, fourth-generation languages for microcomputers by the now-defunct DeskTop Software Corporation. (Larry is sad to find absolutely no hits on any of these +products on Google.) His work at Desktop Software included programming the UCSD p-System, a virtual machine-based operating system with portable binaries that pre-dated Java by more than 10 years.

For several years, he wrote corporate software for Mathematica Policy Research (they're still in business!) and Chase Econometrics (not so lucky) before being forcibly thrown into the consulting market. He bummed around the Philadelphia consulting and contract-programming scenes for a year or two before taking a job at NSTL (National Software Testing Labs) developing product tests and managing contract testing for the computer industry, governments and publication.

In 1991 Larry moved to Massachusetts to become Technical Director of PC Week Labs (now eWeek Labs). He moved within Ziff Davis to New York in 1994 to run testing at Windows Sources. In 1995, he became Technical Director for Internet product testing at PC Magazine and stayed there till 1998.

Since then, he has been writing for numerous other publications, including Fortune Small Business, Windows 2000 Magazine (now Windows and .NET Magazine), ZDNet and Sam Whitmore's Media Survey.

Submit a Comment

Loading Comments...
Manage your Newsletters: Login   Register My Newsletters

Rocket Fuel