Task force report looks at accuracy of Whois data
Computerworld - It's a question that continues to plague the Internet Corporation for Assigned Names and Numbers (ICANN), domain name registrars, the U.S. Congress and myriad federal agencies: How best to ensure the accuracy of Whois data?
And it doesn't look as though there will be an answer anytime soon.
Last week, the Domain Name Supporting Organization's (DNSO) Whois Task Force issued a report offering policy recommendations to ensure the accuracy of information contained in the Whois database, the directory that lists names and contact information of people who register domain names. The DNSO advises ICANN, the Marina Del Rey, Calif.-based organization that oversees the Internet's addressing system, on policy issues related to the domain name system.
Although the report addresses how best to rapidly correct data determined to be inaccurate after a complaint is lodged, it doesn't address proactive measures that could be used to screen out incorrect data during the registration process.
That issue, according to Marilyn Cade, co-chair of the task force, is something that needs to be addressed, given the growth of "spoofed" Web sites that have been used to try and defraud people online.
Despite repeated prodding by federal officials, who say successfully fighting fraud on the Internet depends on the accuracy of the Whois database's registration information, most registrars haven't hit on a way to ensure that the information provided by a registrant is accurate.
Registering a domain name is currently done on the honor system -- a registrant only needs to fill out an online form, and a domain name is automatically reserved for him. As such, the process is ideal for cybersquatters or other scammers looking to defraud businesses or consumers.
While ICANN requires registrants to provide accurate contact data, it doesn't force registrars to verify contact details at the time of registration. (Such a policy may be developed by ICANN in the future.)
ICANN Vice President Louis Touton said there is no feasible way right now to ensure the accuracy of Whois data on the front end.
Thomas D'Alleva, a spokesman for Baltimore-based BulkRegister.com Inc., implied that registrars shouldn't be held accountable for checking the accuracy of data provided by people who register domain names.
"We're like a department of motor vehicles," he said. "If you give false information to a DMV, they'll still give you a driver's license even though the information is false."
In a Sept 22 conference call between registrars and members of the Whois Task Force, Tim Ruiz, project manager at GoDaddy Software Inc., a Scottsdale, Ariz.-based registrar, said,



- Excel 2010 Cheat Sheet
- Register for this Computerworld Insider Cheat Sheet and gain access to hundreds of premium content articles, guides, product reviews and more.
- Streamline Compliance and Increase ROI
- Streamline, simplify, and automate compliance related activities; especially those that impact multiple business units. This white paper from NetIQ, outlines solutions that will...
- Protecting Point of Sale Systems from Targeted Attack
- If you are responsible for protecting retail systems, download this case study to learn how this retailer eliminated the threat of malware on...
- From the Frontline - Preventing APT
- Is your company's network secure? Are your endpoints and servers secured? Before you answer, read this case study on a US Military Command...
- Stop Hackers Before They Attack
- Hacktivism, Identify Theft, Financial Gain, Cyber War - regardless of motivation, stopping today's hackers requires a new proactive approach to protecting endpoints. Learn...
- The four rules of complete web protection
- As an IT manager you've always known the web is a dangerous place. But with infections growing and the demands on your time... All Cybercrime and Hacking White Papers
- WikiLeaks: How am I Affected?
- The latest WikiLeaks episode has raised questions about how organizations and governments protect their sensitive information. While this incident was isolated, it has...
- Optimizing Networks for the Cloud
- Join guest speaker, Rohit Mehra, IDC Director of Enterprise Communications Infrastructure, to explore current trends, discuss best practices for optimizing Data Center and...
- Apps QuickStart Series Part 2: Designing and Deploying SQL Server on VMware vSphere
- Download this webcast to learn about the design considerations for virtualizing SQL workloads, performance and scalability information and high-availability options, as well as...
- Apps QuickStart Series Part 1: Designing and Deploying Exchange 2010 on VMware vSphere
- Download this webcast to learn the virtual hardware design considerations for Exchange 2010, deployment using the building block approach, options for high-availability and...
- Customer Spotlight: How IPC The Hospitalist Company Implemented Oracle on VMware
- Have you been looking to hear about customer's experiences with the new VMware vCenter Site Recovery Manager product? View this webcast to learn... All Cybercrime and Hacking Webcasts