South American nations open fire on ICANN for 'illegal' sale of .amazon
theregister.co.uk
theregister.co.uk
Whether or not you agree with their decision, this whole saga fails to inspire confidence in their processes and long-term neutrality.
A particularly concerning quote:
"Those PICs were published months later but ICANN went out of its way to make sure they weren’t noticed: it published them on a sub-site that requires people to register to access information, instead of using its normal public comment process, and it made no public announcement about the publication, despite promising to do so."
"But the plans were on display..."
"On display? I eventually had to go down to the cellar to find them."
"That's the display department."
"With a torch."
"Ah, well the lights had probably gone."
"So had the stairs."
"But look, you found the notice, didn't you?"
"Yes," said Arthur, "yes I did. It was on display in the bottom of a locked filing cabinet stuck in a disused lavatory with a sign on the door saying Beware of the Leopard."
No individual entity -- person, place or corporation -- needs a TLD. They're TLDs, they're for giant collections of people, places and things.
But once ICANN says, "Hey, would you like to buy <.YOURCOMPANY>? It'd be a shame if someone else did.", most any company is going to say, "Goddammit, fine", and then once you've spent the money on it, you might as well start using it, with store.YOURCOMPANY and about.YOURCOMPANY and mail.YOURCOMPANY, and now the conventions of hierarchical domains and the very notion of URLs is meaningless.
I do blame all of us webdevs for getting cutesy with with making the TLD part of your company/domain name.
Subdomains off barclays.co.uk are also not great, because cookies can be shared up to the domain level (intentionally or accidentally), and you don't want any risk of your potentially less secure marketing websites being compromised through CRSF or something and leaking access to sensitive login cookies on the actual bank's website.
So the best solution here really is to get and use the .barclays TLD. That way, there's no possible cookie/session-sharing security exploits since every website is truly a different domain, and only Barclays itself can register .barclays domains so customers can have trust when they see a .barclays domain that it is actually the bank they're dealing with. Additionally, there's fun security things you can do at the TLD level, like globally applying HSTS preloading, that Barclays isn't doing (but should be) and that we are.
And as for open TLDs, the existing generic namespaces like .com are heavily mined out and it's very expensive to acquire a decent domain name in them. So having all these other alternatives available now makes it much easier to get a decent domain for a reasonable cost, which is good for users (and bad for domainers, who I have no sympathy for). For example, I managed to pick up cyde.dev at the base registration cost, which I'll be putting some real content on at some point in the future. I think that's a pretty darn good, short, domain-specific domain name, and much better than anything I could've gotten on .com. cyde.com, by contrast, was registered way back in 2002, 4 years before I ended up going with my second choice of cydeweys.com. But I like cyde.dev better, so I'll be migrating stuff over to it.
Full disclosure, I run .dev (but not .barclays!).
It's interesting how you count organizational complexity, incompetence and (minor) technological shortcomings as a reason to create a whole new TLD.
It's convenient for the brand, but not a good reason to pollute the global namespace, especially as it sets the expectation that every organization worth something should have one.
> the existing generic namespaces like .com are heavily mined out
True, and the proper solution is to clear some up. The name authorities need some shaking up. Squatting should be made illegal/against terms and actually prosecuted/applied. Registering domains by 100s or even 100'000s you should not get discounts - you should get unaffordable price hikes. On ccTLDs maybe people could get a few free domains and then have to pay for everything extra?
What does that even mean though? In what way is the global namespace being "polluted"? Adding more TLDs doesn't affect the existing ones. It's not adding scale problems that DNS can't handle. This seems to be a subjective concern; some people don't like that there are more valid TLDs now than there used to be. That's not pollution though.
> Squatting should be made illegal/against terms and actually prosecuted/applied.
Be very careful about asking for increased enforcement. It's a great way for the authorities to abuse their newfound power. Most people involved in this field do not remotely want more of this.
Also, domains are gonna have to cost $100s/year to fund all of this increased enforcement. How do you even define squatting? How do you prosecute it? This isn't remotely workable.
> Registering domains by 100s or even 100'000s you should not get discounts - you should get unaffordable price hikes.
How? TLD registries typically no longer even know the identity of the registrants. This would leave enforcement up to the registrars. How does a registrar solve the problem of people using multiple accounts to register domains? How do you solve the global problem that there are thousands of accredited registrars, and that people could register domains through many different ones? Without massive centralization, this is not a remotely workable solution, and massive centralization would be a "cure" much worse than the disease.
> On ccTLDs maybe people could get a few free domains
Free, or even low cost, domains are guaranteed to lead to abuse. Also, how do you individually allocate free domains to people?
There was a time you could name your hosts server1.dev and server1.prod. These days, what am I supposed to use for internal server communication, lest it some day resolve to something on the internet or a trusted CA creates a valid certificate for it?
Domain names were organized in a relatively stable hierarchy, with a set of registries. The way TLD registrations are going, all organizations will want their TLD and we will end up with a single centralized tree of unnumerable registries.
You use to know what were the locally relevant domains. Now, is it <company>.co.ccTLD, <company>.ccTLD, or is it <company>.dev, or <company>.<company> or is it <company>.uno, ..gmbh, ..kaufen, ..kinder, or maybe <company>.wazoo, because why not? You get a link to or email from <your-ISP>.talk - is it legit, or a fake in a spamhaus registrar?
If you have a .bank, a .cafe, maybe a .shop, but you also do .trade, and .trading, and of course everyone wants to be .top ... of the hundreds of TLDs, are you supposed to register all that could apply and pay large sums for it, because people are going to type <company>.<whatever-i-think-it-is>?
If we create dozens(?) of new TLDs per year, noone will remember the difference between TLDs run by nigerian scammers and those run by respectable businesses.
So the only time it has ever been safe to name your hosts server1.dev is within the past year, now that .dev is actually live and you can use a real globally unique domain name that you actually own, thus preventing any of the possible issues that have been there all along.
And there aren't any TLDs run by Nigerian scammers. You may be underestimating the difficulty, cost, and technical know how of acquiring and running a TLD.
First problem with your suggestion - you don't own domains, you rent them. That can change, you have to pay, someone can forget to renew, etc. Though I agree, sometimes it is better to use proper registered domains.
When setting up limited scale server-to-server communication I really do not want to interact with DNS. It's all downside and no upside. Servers get names in a subdomain of a widely squatted invalid TLD, names with locally appropriate IPs go in a hosts file and I can be reasonably sure they get resolved to the proper IPs, or as a failure mode - none at all. With the occasional network layer security, it is important to get the IPs right.
If the need should arise, I can change the domain. I don't see how using a proper DNS name would be better instead of a clearly local one I can trust.
Maybe they should know? Why do they pester me every year about my contact details? I think they also say my registration can be voided if I use fake info.
If you need a bunch of LLCs to register thousands of domains, your expenses go way up.
Not all registries need to work the same way. It should be sufficient if some applicable ones are rinsed.
> How do you even define squatting? How do you prosecute it?
Registering domains for the purpose of selling at a higher price.
If you look at the top domain holders, I'm sure it would not be that difficult to prove in court what the purpose of all those domain registrations are.
Civil proceedings would probably be better, at least for smaller squatters. If you squat lots of domains, you get a chance of someone hyperactive suing you, or making complaints to the registrar.
How do you possibly know which domains were registered with that intent? That seems like it'd require mind reading. And who would be doing the enforcement? National governments? Good luck with that. Squatters would just operate out of the countries that don't care.
I own roughly a dozen domain names. Most aren't in use. I didn't register these with the intent of reselling them, but if someone contacted me offering me a thousand bucks for almost any of them I'd take that deal. I suspect most other people would too. Does that make us all squatters? Should we be arrested and prosecuted?
You go to a government site with your electronic national ID (some countries have those) and request 2-3 domains that are free. You only get to change a free domain 1x per year or maybe longer.
Doesn't apply to all countries, but how would that be worse than what we have now? Everyone could have email and websites on their own domains, probably even hosted for free - that's decentralization/freedom.
Administrative costs - additional domains can and should cost more. You can collect fees from companies that don't want to be reliant on that one guy, or just call it a day, give a domain for free to companies and call it administrative expenses. How much does it cost to run a ccTLD?
This is a case for a better structured web, not for giving up meaningful hierarchies altogether. It shouldn't be possible to register a .co.uk domain unless you are a company that is registered in the UK and can be sued. Ideally companies also shouldn't be allowed to use TLD not designated for them so barclays.awesome etc. is suspicious. A namespace like .bank.uk would be even more secure.
> Subdomains off barclays.co.uk are also not great, because cookies can be shared up to the domain level (intentionally or accidentally),
There is no reason we can't treat barclays.co.uk like a top level domain for some purposes, using a mechanism like the public suffix list.
> But I like cyde.dev better, so I'll be migrating stuff over to it.
So the new TLDs encourage people to migrate, thus changing URLs and frequently breaking them by not bothering with redirects.
That's literally what .ltd.uk is for, and no-one cares about it
Also keep in mind that domain names are treated as property in most jurisdictions. You cannot take away someone's foobar.co.uk domain just because you want to retroactively change policies. It's not even possible from a legal standpoint.
Considering that the vast majority of links die within a few years, that isn't even possible.
> Also keep in mind that domain names are treated as property in most jurisdictions.
That's a policy that can easily be changed.
Just checked google for a word earlier this morning that was free and balked at how stupid this TLD land grab is, unless you own or manage one.
Economically speaking, an auction is the best way to fairly and efficiently allocate scarce resources.
Just because an auction means that people cant buy up every domain doesnt help anyone at the end of the system - it just ensures that domain name registrars capture the "value" instead of the scammers, the end user still gets a shitty deal.
So yeah, its stupid, and the system has only been fixed enough to keep getting itself paid.
Clothing.com is definitely something several people/businesses want, certainly, and having an actual auction for a good multiple users want isn't nefarious, its the "as the domain registrar to prevent middle men from capturing the value I will automatically do it instead" that is.
If you want to make it less so, offer some service to stop ripping off individuals who want to buy one domain - is there possibly of abuse there? sure? but whose making all the money here?
There's no one bidding (except in an abstract sense of wanting to own it all) on the domains I am talking about - they are free to register at any time as long as you can pony up the cash.
As for everything else you're proposing, I'm not sure I understand how it'd work. How do you "stop ripping off individuals who want to buy one domain"? If .web launches tomorrow and a thousand people want clothing.web, how do you allocate it without holding an auction? If you do a lottery, how do you know that each entrant is a bona fide person and not a ticket box stuffer? I'm not seeing workable solutions being proposed here.
On the domains you were talking about, there was an auction when the TLD launched, and those names just weren't taken during said auction. Plenty of others were.
The main issue is not the really scarce ones. As you've said:
> some domainer would've bought it milliseconds after launch, along with thousands of other speculative domains..
This is misallocation, which is an entirely different issue, and a more pressing one. And yes, I would put those guys to jail, as long as it was done fairly - their squatting may be worse than stealing.
Never mind that Barclays provides more services than just banking, so a lot of their existing websites aren't suitable for .bank, and now you're gonna have their Web presence scattered to the winds across various TLDs.
The 'nobody needs' standard? That is what and how we think of things? Does anyone 'need' beer or football or 100,000 other things?
In a market system if you have money and if you have made money you can use that money to do things and buy things. It's not up to someone else (you, me or comments on HN) to determine that what we want to buy that we can legitimately buy is 'needed' or not.
Football is of ZERO interest or need to me. But I do recognize that others get pleasure from watching it.
> They're TLDs, they're for giant collections of people, places and things.
According to who exactly?
"The domain system is a tree-structured global name space that has a few top level domains… While the initial domain name "ARPA" arises from the history of the development of this system and environment, in the future most of the top level names will be very general categories like "government", "education", or "commercial". The motivation is to provide an organization name that is free of undesirable semantics."
After much discussion ICANN and parties decided to allow companies to own tld's. And they did.
The DNS is an obvious natural monopoly.
I would say it's either no one or everyone — I personally wouldn't mind if we could all get a tld and link that to a personal public IPv6 range and simple enough software to administer it. I think we should all be entitled to get that over internet, it belongs to all of us as a system.
ICANNs rent seeking scheme sucks, but beyond the rent seeking this is hardly a big deal.
But I think the point they raised is still very good.
Regardless, I think you might be reading way too much into things.
>ACTO insisted on a face-to-face meeting and Marby duly got on a plane to Brasilia. He was in his hotel room in Brazil’s capital when he was told the meeting had been cancelled due to the political situation in Venezuela.
In the end the ACTO folks didn’t even care enough to meet with the ICANN CEO who had traveled all the way to Brasilia to meet them.
I can’t buy the Venezuela excuse, surely the ACTO gtld experts are not the same people who deal with Venezuela.
It was the foreign minister of Brazil who canceled the meeting, citing the tensions with Venezuela as the reason for cancelation. [0]
[0] https://veja.abril.com.br/blog/radar/chanceler-cancela-reuni...
This seems to solidly prove that they never gave a shit about the gTLD.
Waiting for the ICANN CEO to fly over there before announcing this was just a fundamentally shitty move, it’s not like the tensions with Venezuela were a brand new thing. These people are clearly just assholes.
That doesn't make any sense. ACTO disputed .amazon's proposal as soon as it was made available, in 2012. It's been 7 years, circumstances and governments have changed. At the time there were no tensions with Venezuela, in 2019 there were tensions. How does that prove anything about the gTLD?
It’s a shitty, childish excuse for the refusal to participate in the process. Internal disputes within the ACTO were enough for them to drop the whole thing, if they cared they could’ve proceeded despite the fact that Venezuela is a member of the ACTO.
But they also couldn’t be bothered to inform the other participants about this fact until it was way too late...
And yeah, what SpicyLemonZest said.
This is very much “just another news” to the people living there. You’ve got your dates all mixed up. By Feb 2019 this was not even news https://www.theguardian.com/us-news/2018/jul/04/trump-sugges...
Finally, the stated reason for cancellation was that the Brazilian FM did not want to sit in the same table with the Venezuelans. Not any interesting new developments regarding Venezuela.
Not even close to being true. I have actually dealt with the US Government and have gotten explicit permission from them for something very similar. Official letter from the appropriate agency 'not restricted by anything feel free to use'.
> Just another example of how unjust and unequal in general the administration of domain names is.
Typical internet furor over what you read that others say who are not properly informed about a topic.
Nothing 'unjust' the process took years and years not exactly a back room deal.
- a joint steering committee (ACTO and Amazon) for .amazon, giving ACTO countries the right to veto domains;
- delegation of second-level domains to ACTO countries;
- commitment from Amazon not to register domains that have significance to the region.
I haven't seen any news that suggest they were trying to extract money out of Amazon. It was Amazon that was flaunting money at ACTO.
[0] https://www.icann.org/en/system/files/correspondence/zaluar-..., http://www.itamaraty.gov.br/pt-BR/notas-a-imprensa/20312-sol...
A pretty stupid argument if you ask me.
https://www.icann.org/resources/agreement/amazon-2019-12-19-...
I would like to actually see the discussions leading to this agreement.
The ideal version of ICANN is to be the "UN of the Internet", but its recent actions make it sustainable that there are too many commercial motives involved.
new gTLDs are out of the bag. I'd say they need some regulation, the thousand percent price increases isn't fair to consumers, but it's hard to put that cat back in the bag and get rid of them. Might need a neglected pool where registry operators simply bid to handle them, you know registration volume and price. They don't get any crazy fees to operate the neglected pool.
It’s not like Spain has a .es and a .sp or the US has a .us and the .eu tld.
If Amazon the company didn’t exist or it was called “the warehouse” these countries would give a rat’s ass about the .amazon gtld.
Regardless, English is the lingua franca of the Internet and that's the reason why geographical terms in English matter.
On the one hand, I get that domains and TLDs are important aspects of branding, people care about making sure terms are tied to the most salient endpoints.
On the other hand... isn't this whole system a bit like some guy in a basement writing a list of words next to various numbers? Then we all just decided to tell our machines to listen to that guy?
It feels weird to me to be angry at the phone book I chose to use.
And if all popular indexing methods are subject to public debate, we end up in strange places.
We might single out ICANN as special, more important, but given how many people go through search to land on websites, rather than typing domains directly, in some ways ICANN is just pushing one index in a crowded field. In some ways Google is more ICANN than ICANN. Google's top level results for amazon (and java and cheddar etc.) aren't places.
If we don't really like how some guy maps symbols to symbols, maybe we should just make your own map that we do like better? If it is better, promote it, maybe it catches on. Namecoin and Tor basically do this, though they're limited to certain use cases. Some alternate DNS resolvers block/re-map known malicious sites. ICANN isn't forcing us to care about any of its decisions.
I don't know, I have enormous uncertainty here, and "hey just abandon a core feature of the internet" is definitely too glib given how unsure I am about all this.
But still, it's just an arbitrarily filled map. It feels really weird to me to be angry at a random lookup table. Maybe just walk away from it instead.
EDIT: larkeith's top level comment also ends up at ICANN replacement, with far more sympathy and less bewilderment along the way, I respect that a lot.
EDIT 2: Brevity. Still failed but trying.
Most of the time it seems like the things people are angry about, politically, involve who gets to be the gatekeeper for things. That seems to me more or less equivalent to who gets to own and maintain certain lookup tables.
Having control of something like that isn't about the physical book or something you have, it's about the relationships you have with all the people "who matter" that use your lookup table.
I wonder how many of recent efforts on DNS alternatives was motivated by the perspective to profit off of new names gold rush. Some even got VC funding IIRC.
It is appealing to view the web like physical land and seeing this as a border dispute but it only goes so far. If the (non-existent, hypothetical) website is discoverable on search engines and the URL is published by the government's it works just as well
I loathe to defend Amazon and ICANN of all the fucking things, but come on now. There are plenty of reasons to shit on these two, but not this nonsense. 'Illegal', lmao.
In this case though it seems like the most common use for a .amazon domain would be to scam Amazon customers. Tourism could easily go under a .com. That'd be a good reason to assign it to Amazon. It'd be in the interests of people regardless of the company.
Imagine I start a company today called "America" (I'm in the UK). My business is wildly successful and grows to the point of being a global unicorn that can afford gTLDs. Should ICANN allow me to own .america? A lot of people would argue I shouldn't..
"amazon": thought of as either the rainforest/river or the company.
I really dunno what does the world population think of that though (no one knows really).
I think of tall female warriors
"The name 'Amazon' is said to arise from a battle Francisco de Orellana fought with a tribe of Tapuyas. The women of the tribe fought alongside the men, as was the custom among the tribe. Orellana derived the name Amazonas from the mythical Amazons of Asia described by Herodotus (see The Histories [4.110-116]) and Diodorus in Greek legends"
Quick edit: Ah wait, I think I see what you're doing with that phrase. It's shorthand for "The Amazon culture" or "Amazon depictions" or something, but it still comes off as strange-sounding to me.
So, sure, it sounds "strange", but it's not new, and people use it when they want to make a generalization with a tone of authority. Probably one might expect to get away with it when talking about an abstract concept or archetype that exists independently of actual people.
Also, maybe someone should make a modest proposal to Bezos to rename the company "Orellana".
Can we not trademark English words, since we aren't English?
The fact that they sold the TLD to the the company is a little sketchy, but the idea that South America has an inherent trademark on anything "Amazon" is ridiculous.
This seems like an entirely separate argument.
Domains like .earth and .country are privately owned, nobody cares. http://data.iana.org/TLD/tlds-alpha-by-domain.txt
Also, most of the outrage I'm aware of over the commercial use of California by non-Americans is because some people name things "California" and then don't sell them in the US.
https://www.adventure-journal.com/2019/08/its-absurd-the-new...
Balkanization would send an important message to ICANN.
So Amazon.com, Inc then? The only party who applied for the .amazon gTLD.
Morocco banned Google Maps after they displayed a border with Western Sahara. Now if one requests a Google map of Morocco from within .ma, they get a version without the border.
No, not like that. The East India Company had independent military power. ICANN does not.
Good luck calling your next venture Amazon then.
What this shows is that Amazon now effectively owns the word Amazon, stripping countries where the largest river in the world flows, of the rightful use of the term.
It absolutely does not. Nobody is going to stop calling the Amazon Rainforest or the Amazon River the Amazon. Nobody is going to prevent the countries who have the Amazon within their borders from promoting the Amazon abroad. The only thing that changes is, well, nothing. Because the countries involved clearly had no intention to apply for the .amazon gTLD until AMZN did. So they lose nothing.
99% of the time when I search "apple", I do, in fact, want searches related to the company. Now that I think about it, I've never searched for apple (as in the fruit) casually.
(I mean, ads still show the computer, but I'm assuming no one is doing brand-building ads online for the fruit.)
In general, when I search for something that could be ambiguous (and everything is) I want a sample of each possible cluster or meaning. But today, Google (and others follow their lead) is determined to give you the answer, and also certain that nobody reads beyond the first few hits. It's not helpful to say "give right results and not wrong ones" because a fanatical devotion to that "idea" is what got us into a dysfunctional situation.
https://icis.corp.delaware.gov/Ecorp/EntitySearch/NameSearch...
The point of the GP is that there are many companies called "Amazon" or some variation thereof, registered in Delaware alone. Clearly AMZN does not own the word "Amazon".
But it's not stupid that individuals who've thrived economically beyond reason can now own almost anything and we keep making excuses to allow them to?
There's the problem. The name exists, so somebody owns it.
Who has more right to it? The countries with a big river with that name running through it, or the ecommerce startup from really not that long ago?
Why would Amazonian nations care about Amazon.com? It’s a company called amazon on a commercial TLD. They aren’t even commercial entities.
As a TLD it offers a much more broad use.
Especially if he got rich by exploiting workers (through low wages and bad working conditions, like wearing diapers) and exploiting state regulations (through tax evasion).
Access to clean, drinkable water is a human right, btw.
That seems to suggest, if that causality is correct, that if Amazon weren't an American company, Brazil wouldn't have had any objection. So it's just a naked attempt to use a private company headquartered in a nation another nation is mad at for political horse trading and ICANN made the right decision.