RE: [gnso-ff-pdp-may08] Question for Registrars - What kinds of solutions scare you?

["Mike Rodenbaugh" <icann@xxxxxxxxxxxxxx>]

For reference, here is the Accelerated Suspension Process that Paul
mentions.  It is a work in progress between the APWG and various other
stakeholders and potential participants.  All comments welcome.

Thanks,
Mike R.

-----Original Message-----
From: owner-gnso-ff-pdp-may08@xxxxxxxxx [mailto:] On Behalf Of Diaz, Paul
Sent: Thursday, July 31, 2008 1:11 PM
To: Marc Perkel; gnso-ff-pdp-May08@xxxxxxxxx
Subject: RE: [gnso-ff-pdp-may08] Question for Registrars - What kinds of
solutions scare you?


At Network Solutions, many domain names that are tagged by outside
sources as part of a fastflux scheme are already being taken down for
credit card abuse (i.e. attempted payment with a stolen card).  Other
tagged names are reviewed for any violations of our Acceptable Use
Policy; there's usually something amiss that we can cite.

Liability is obviously a significant concern.  We try our best to screen
out potential false positives as we don't want to punish a registrant
who has been victimized by a criminal scheme.  Suspicious names are put
on Registrar Hold status: this takes the domain out of the zone file,
but allows us to quickly reinstate it if an error was made.  Once we're
sure about the case, the name is deleted.

Network Solutions' anti-fraud team works hard to keep the bad debt ratio
very low.  We continually revise our proprietary processes to weed out
fraudulent activity on our network.  We applaud the efforts by the FF WG
to better identify fastflux activity, and will use these insights to
further improve our internal processes.  With that said, we will need to
carefully consider the implications of any WG proposals that might add
new operational or process requirements (e.g. migrate/mirror WHOIS data
to a DNS-based system, significantly reform the WDPRS, etc.).  We
believe that this WG should not attempt to exceed its mandate by
addressing issues that are beyond its scope.


-----Original Message-----
From: owner-gnso-ff-pdp-may08@xxxxxxxxx
[mailto:owner-gnso-ff-pdp-may08@xxxxxxxxx] On Behalf Of Marc Perkel
Sent: Friday, July 25, 2008 12:22 PM
To: gnso-ff-pdp-May08@xxxxxxxxx
Subject: [gnso-ff-pdp-may08] Question for Registrars - What kinds of
solutions scare you?


I'd like to get back some feedback from registrars about your role and 
the burdens you face as a registrar in regards to dealing with criminals

and fraud in general. What kind of a burden does it place on you? What 
are you forced to do to deal with abuse?

What I'm wondering is - what kinds of solutions fall in the "please 
don't make us do that" category?

If you could have your way, what would make your life as a registrar
better?

What kinds of restrictions/liabilities affect you that relates to this 
problem. (As in being sued for shutting down the wrong domain.)

What is the policy for shutting down domains now? What kind of 
threshholds are involved in determining that a domain has committed 
enough sins to be killed?

And - other things registrars want to say to the rest of us to help us 
understand your needs in dealing with this issue?