News for hackers. Stuff that matters.
Re:Sunsetting Whois by vekatimest on Sunday March 16, 2025 @09:11PM (#43384213)
To be replaced with a system providing a standardized method to give law enforcement easier "secure access" to your redacted personal information.
Re:Sunsetting Whois by wmf on Sunday March 16, 2025 @09:38PM (#43384366)
We have ownership records for real estate for a reason. Domains need some level of accountability.
Re:Sunsetting Whois by idle_zealot on Sunday March 16, 2025 @09:48PM (#43384424)
I'm not sure this follows. You're allowed to publish, say, a book or pamphlet without signing it with your legal name and address. So is a website more like a book, or a building?
Re:Sunsetting Whois by callc on Sunday March 16, 2025 @10:43PM (#43384701)
Somewhere in the middle IMO. If the domain name is desirable it looks more like a building, because people generally care about who owns the land when it is not getting put to good use.

Websites are more like books when they have a domain no else else cares about.

Re:Sunsetting Whois by idle_zealot on Sunday March 16, 2025 @10:52PM (#43384747)
So, maybe require official ID/address/contact info for any domain over a certain price? Or for all domains under a certain character count, maybe, which could vary for TLD.
Re:Sunsetting Whois by CydeWeys on Sunday March 16, 2025 @11:31PM (#43384929)
How do you determine the value of a domain name? Also there's nothing particularly valuable for most short domain name strings except on .com. It's generic words that tend to be valuable, not a short random string.
Re:Sunsetting Whois by greyface- on Sunday March 16, 2025 @09:44PM (#43384403)
Domains point to IPs, and IPs already have subpoenable ownership records at RIRs. In the real estate metaphor: we have property ownership records, but we don't have records of every rental tenancy.
Re:Sunsetting Whois by IncRnd on Sunday March 16, 2025 @11:17PM (#43384860)
That's not true. Those are registration records NOT ownership records. People do not purchase ip address or domains. They register them for temporary use.
Re:Sunsetting Whois by greyface- on Sunday March 16, 2025 @11:30PM (#43384926)
For non-legacy allocations, point taken (but my original comment still stands if you replace "ownership" with "registration"). For legacy allocations, it's more complicated.

See: Are IP Address Allocations Property? (2014) https://www.ethanheilman.com/x/19/index.html

Re:Sunsetting Whois by RIMR on Sunday March 16, 2025 @09:51PM (#43384447)
Re:Sunsetting Whois by greyface- on Sunday March 16, 2025 @09:57PM (#43384482)
This article is not inconsistent with my comment. The court rejected a subpoena against the ISP for the identity of the user of the IP, not against the RIR for the identity of the owner of the IP. This is like the court rejecting a subpoena against the landlord for their tenant's identity.
Re:Sunsetting Whois by longtailofsighs on Sunday March 16, 2025 @10:26PM (#43384613)
ICANN accredited domain registrars (so any registrar selling generic TLDs like .org, .com, .design etc) have contractual obligations related to technical abuses like phishing, malware, and botnets, insofar as they intersect with a domain name.

Content/expression related harms are outside of ICANNs bylaws and any obligations related to what a domain points at are not from ICANN, but from the laws in the jurisdiction in which the registrar operates. This is generally good. There is no global standard for acceptable limits on expression, with the possible exception of CSAM which is illegal everywhere.

Requiring domain registrars to arbitrate what content should be accessible via the DNS is perilous.

Re:Sunsetting Whois by imoreno on Sunday March 16, 2025 @11:36PM (#43384956)
No they don't.
Re:Sunsetting Whois by imoreno on Sunday March 16, 2025 @11:36PM (#43384954)
"Only law enforcement" is still better than "everyone".
Re:Sunsetting Whois by kelnos on Monday March 17, 2025 @01:57AM (#43385552)
I disagree. Law enforcement already abuses many data sources they have private access to, and use asymmetric information to their advantage.
Re:Sunsetting Whois by dawnerd on Sunday March 16, 2025 @09:27PM (#43384309)
Wait, people use real information?
Re:Sunsetting Whois by riffic on Sunday March 16, 2025 @09:30PM (#43384327)
that's grounds for cancellation of a domain sooooo.....
Re:Sunsetting Whois by kelnos on Monday March 17, 2025 @01:55AM (#43385541)
I do. The terms of the domain registration say that providing incorrect information can result in revocation of the registration. Not really worth the risk, IMO, for any domain I actually care about.
Re:Sunsetting Whois by Aachen on Monday March 17, 2025 @08:37AM (#43387862)
Not just that, but also if the registrar turns out to be fraudulent or someone convinces your registrar to transfer the domain (scam the support team), or they get your account password and transfer the domain that way (data leak elsewhere, password reset with a sim swap, you name it)... there are so many ways you can have "technical difficulties", but in the end: you're the one with an ID card that has your name on it. You can take the TLD to court and have them give you back the domain that was legally purchased in your name

Except if it's not in your name

So yep, as you say: make this decision (fake or real information) knowing the risks involved in not legally owning it