Slashdot Mirror


ICANN Studies Secretive Domain Owners

alphadogg quotes from a Network World piece reporting on ICANN's study of the prevalence of proxy services that shield registrants' personal information from WHOIS queries. "Approximately 15% to 25% of domain names have been registered in a manner that limits the amount of personal information available to the public... according to the preliminary results of a report from ICANN... Domain owners who want to limit the amount of personal information available to the public generally use a privacy [proxy] service. ... [Proxy services] register domain names on behalf of registrants. The main objective of ICANN's study — which was based on a random sample of 2,400 domain names registered under .com, .net, .org, .biz, and .info — is to establish baseline information to inform the ICANN community on how common privacy and proxy services are." Spammers and other miscreants abuse the ability to register domains by proxy, in order to avoid being found; but ordinary users have a legitimate interest in keeping their personal information out of the hands of those same bad actors. What's the right balance?

12 of 101 comments (clear)

  1. In the event... by Anonymous Coward · · Score: 2, Insightful

    where someone's personal information needs to be found out, can't it be found out via a court order if a crime is suspected?

    1. Re:In the event... by sopssa · · Score: 2, Insightful

      where someone's personal information needs to be found out, can't it be found out via a court order if a crime is suspected?

      Yes and the privacy services almost always state this in terms of service too, as well as removing the service in case of spamming and so on.

      Spammers and others just use fakes names anyway, so privacy registration doesn't change anything regarding that, but providers better privacy for real people.

    2. Re:In the event... by supernova_hq · · Score: 2, Insightful

      Assuming everyone who registers a domain lives in the US....

  2. Re:Right balance? What .uk has by sopssa · · Score: 3, Insightful

    In my opinion better balance would be based on if the individual is a person or a company. I do not want my personal information like name, address, phone number and so on all over the internet. Even if the site contains ads on it.

    On the other hand having your company info available in whois is quite an non-matter, theres public records available already and it doesn't break any individuals privacy.

  3. I just want my e-mail protected by Blejdfist · · Score: 5, Insightful

    I have registered a few domains by proxy, but the only reason is to have my e-mail address hidden so those pesky spammers won't scrape it of the whois entry.

  4. Re:Right balance? What .uk has by sumdumass · · Score: 3, Insightful

    A lot of company domain names are registered to individuals inside the company for some reason. I've had to deal with that many times over the years when a former IT person is listed as the owner and is the only one capable of making changes to it. Anyways, I don't think there is anything that could stop that from happening on purpose. A reason you might want to do it on purpose might be in order to get around the public knowing your associated with several different sights praising your products or pretending to sell them because they're the best.

    I got a domain once for the purpose of protesting some things on a local level. The more popular the site became, the more annoying it was. I used fake information (this was before it became against the law to do so) but kept the admin Email and contact phone number to a legitimate line. I got threats and all kinds of crap including the phone ringing at 2 am because someone wanted to disagree with something. I ended up paying a company to list themselves as the owner. It's what stopped the calls and crap. I've since given the site away to some like minded people who use it to this day.

    I can see why someone would want their info hidden.

  5. Re:Don't hide. by Lincolnshire+Poacher · · Score: 3, Insightful

    > If you want a domain, you will have to stand that you are public.

    Says the poster whose profile reads:


    (email not shown publicly)

    My registrar proxies my personal information and forwards any legitimate queries. Every year I am required to re-validate my information. This ensures that I can be contacted regarding the domain and can respond appropriately. Why then does any third party require my street address and phone number?

  6. Re:Don't hide. by Anonymous Coward · · Score: 5, Insightful

    If you want a domain, you will have to stand that you are public.

    If you want to hide your personal information start a company and register the domain on the company.

    Why? I own a small site with a non-existant readership. I do little doodles and post them there ("webcomic" would be insulting to the people that actually write comics). It doesn't sell anything, is totally divorced from the real universe in both setting and characters, and exists purely for fun. If you want to get in touch there is an email address in the About page, or the WHOIS data will tell you who the web host is, and they'll pass it on to me. Adding personal info that the WHOIS requests like name, address and telephone number would add absolutely nothing to the website, and would just splash my personal data all over the web regardless of the fact that people can contact me without it anyway. If there was ever a legal situation where I refused to reveal my identity then the hosting company has all of that.

    To me, your suggestion is like saying *anyone* posting *anything* on the web should stand up publicly and reveal personal info. It's pointless, and just exposes personal data apparently for the hell of it. Would you fancy adding your name, address and telephone number to your Slashdot account?

  7. Re:Right balance? What .uk has by frisket · · Score: 3, Insightful

    I disagree. Leaving aside the squatters and ad-pumpers (I wish we could :-) the "ordinary user" should not be able to hide their identity. Hiding physical address details is an unfortunate but acceptable security restriction today; but hiding email, phone, and other contact data is just wrong. It's abused by thousands of companies to prevent people contacting them when their poxy products fail, or to hide their true ownership and identity. Registering a personal domain is one thing; registering a domain as a business should bring with it the responsibility to publish valid contact information and keep it up to date. It should be illegal for registrars to hide the identity of their business registrants.

  8. Re:Right balance? What .uk has by rtb61 · · Score: 2, Insightful

    I can't help it, Oh Noes it's a telephone book, run away, run away. Show juts one add and it is commercial and you are responsible for that add, you showed it, you profited by it and you are not entitled to hide from the consequences of it and, that includes emails from that domain that contain an add in any way shape or form. You want net privacy, easy, don't get a domain name.

    --
    Chaos - everything, everywhere, everywhen
  9. Re:Reasons not to use WHOIS "privacy" services by JimboFBX · · Score: 2, Insightful

    A domain registrar has no excuse for failing. All of their transactions are virtual, require no man power, and always bring in profit. Their overhead is renting out the cheapest building in town (or paying the mortgage on the home they live in) and paying a modest ISP fee that can easily be scaled with the amount of business they get.

  10. One rule for everyone - NO private info. by tomhudson · · Score: 2, Insightful

    Spammers hide their info. If you're running a legit domain, post your owner and admin contact info. It's part and parcel of running a domain, same as a license plate is part and parcel of driving a car, or your name, signature, bank address, and account number on any checks you write.

    This isn't a "why keep the info private if you have nothing to hide" issue - it's about transparency and holding people accountable - and not just spammers. The requirement for valid info would go a good ways towards reducing the amount of spam, which benefits everyone.

    Putting in valid contact info also means that a proxy can't hold your domain hostage if you want to transfer it. If it's worth nothing, there's no harm in putting in correct info, and if it's worth something, there's risk in putting in bogus info. Either way, it's one more party to go through, one more link in the chain that can screw up. Not worth the hassle to make your contact info private.