Slashdot Mirror
Verisign Sending Deceptive Domain Renewal Mail?
General_Corto writes: "Declan McCullagh's PoliTech list just forwarded a message detailing how Verisign is sending letters to people who own domains through other registrars, attempting to make them change registrar on renewal. Looking at the letter it is very unclear that you are signing up with a different registrar. Sneaky games are being played."
Yep, taken from the Verisign homepage:
;-)
" Trust is the foundation of every human relationship "
They probably forgot the *: Only applies when you owe us money
This strikes me as a similar, albeit different, tactic to what is known as "slamming" in the phone industry. It was once a common scam for the shadier long distance providers to change your carrier without your permission or consent; the practice was (I believe) outlawed in the 1996 Telcommunications Act (correct me if I'm wrong). This is slightly different because they are just being deceptive about gaining consent, but it does seem similar. Wonder if Congress will step in on this type of practice as well?
Not sure that's the best idea, but it will probably take Washington 10 years to notice this anyway and by then there won't be any players but Verisign left anyway.
I registered several through GoDaddy, by far the best one I have ever used, and Godaddy sent me a "warning" notice that Verisign is sending out these deceptive messages, and suggesting we write to icann about them...
rooooar
I really can't think of a good technical reason that I need to see the expiration date and other information off of the whois servers. Only information I really care about is the DNS servers and the admin/technical contact.
They should make the whois servers not give this information so other companies can use it as their own personal sales list.
Things like this are exactly why I no longer use Verisign/NetSol as my registrar. However, unfortunately this not their only dirty trick.
Aside from this, which is very similar to long-distance carrier slamming, Verisign also has a nasty habit of holding onto domains/not allowing customers to transfer their own domains. I know several people who were forced to wait for MONTHS for Verisign to finally go ahead and transfer their domains to another registrar, and that was only after repeated calls to them. Verisign's own transfer process was completely ignored, in the hopes of squeezing another $35 out of the billing contact.
Verisign also uses deceptive overbilling; if you register a domain with them for a year, come renewal time, they will send you a renewal bill for $70 or more! Of course, only in the very fine print do they tell you that it's $35 a year, so they are trying to make you renew for 2+ years. Yes, you can select 1 year, but they should not default to 2 years unless you previously paid for 2 years. It is very carefully worded to make it look like you actually owe them $70+.
Lastly, they make it ridiculously tough to modify your own contact information for a domain. I had a domain which was registered in my name, and with an email address that was now expired. So, you have to fax them a paper requesting a change of email address. Fine, no problem there. However, I had to send them nine faxes before it got changed. I would call to followup the fax, and they would repeatedly claim that it was never received. It took over 3 1/2 months for me to get an email address changed on a domain contact!! Of course, if you sign up for their expensive premium services, it only takes a day; glad to know where regular customers stand with Verisign.
I recommend that anyone who does use them to switch elsewhere. A company like Verisign/NetSol does not deserve our business.
I own a house. For those of you not fortunate enough to understand what that means, consider your average junkmail that you receive now in your rental house, apartment, whatever. Multiply that by roughly 15.
This letter may be somewhat deceptive. So is every other friggin' piece of mail in my mailbox right now. Most people do the same thing with all such letters--they throw them out. But, like always, there is a sucker born every minute who will just plop down the credit card number and send the thing in. That's the ropes, folks.
When I looked at the letter, I saw Verisign's name immediately. I also noticed that you are signing for "renewal and transfer authorization", not just renewal. Sure, this might not say explicitly that you're going to change registrars... but there's a heck of a lot of fine print near the bottom that I can't read. My guess is that everything is spelled out there very clearly--to the person who cares to read it anyways.
Sorry folks, that's life. There's enough stupid people in the world who fall for things like this to make it economically worthwhile. Maybe next time get mad at the people dumb enough to sign things without reading--cause it's really their fault in the end.
Long, cute, or funny Sigs are just another form of over compensation, used by geeks, nerdz, etc.
If you look at the image of the letter you will see that they blocked out the address, but not the postnet barcode.
To my eyes the POSTNET barcode looks like this to me : (where t represents a tall bar and s a short one)
t ttsss sstst sstts stsst tssst ssstt ssstt sstst ststs sstst ststs tssts t
This decodes into 0 2 3 4 7 1 1 2 5 2 5 8.
which is ZIP+4+2: 02347-1125-25 Checksum 8
The way the POSTNET checksum value is given by (10-((Summation of all digits) Mod 10)). The total of our digits 02347112525 = 32... (10-(32 mod 10)) = 8. The checksum is valid and our decoding is probably successful.
Next step... head to the usps website to find that 02347 is in Lakeville, MA. Mind you, a ZIP+4+2 code in most cases is a unique address. However, the USPS is not going to make this easy for us.
Lets try our friend Google instead... searching for 02347-1125 give us the personal web site of Steve Douillette.
But how can we be sure that this is the letter Mr. Douillette recieved and diligently forwarded to godaddy to warn other customers? I wonder where Steve registered his domain name steve-d.com.
If you want to be anonymous, please be careful with what you post online.
The solicitation must bear on its face either the disclaimer required by 39 USC 3001(d)(2)(A) or the notice: THIS IS NOT A BILL. THIS IS A SOLICITATION. YOU ARE UNDER NO OBLIGATION TO PAY THE AMOUNT STATED ABOVE UNLESS YOU ACCEPT THIS OFFER. The statutory disclaimer or the alternative notice must be displayed in conspicuous boldface capital letters of a color prominently contrasting with the background against which it appears, including all other print on the face of the solicitation and that are at least as large, bold, and conspicuous as any other print on the face of the solicitation but not smaller than 30-point type (see Exhibit 1.2).
The notice or disclaimer required by this section must be displayed conspicuously apart from other print on the page immediately below each portion of the solicitation that reasonably could be construed to specify a monetary amount due and payable by the recipient. It must not be preceded, followed, or surrounded by words, symbols, or other matter that reduces its conspicuousness or that introduces, modifies, qualifies, or explains the required text, such as "Legal Notice Required by Law."
If you get a solicitation that looks like a bill, and you don't see those disclaimers in huge type, contact the U.S. Postal Inspection Service.