Conversation

Notices

1. Embed this notice
   BrianKrebs (briankrebs@infosec.exchange)'s status on Thursday, 07-Dec-2023 02:39:37 JST BrianKrebs

   More than five years after domain name registrars started redacting personal data from all public domain registration records, the non-profit organization overseeing the domain industry has introduced a centralized online service designed to make it easier for researchers, law enforcement and others to request the information directly from registrars.

   https://krebsonsecurity.com/2023/12/icann-launches-service-to-help-with-whois-lookups/

   • Embed this notice
     Sean King (seanking@kazv.moe)'s status on Thursday, 07-Dec-2023 02:39:35 JST Sean King

     in reply to
     @briankrebs Oh boy, oh boy! Something that definitively can't be used by any malicious actors.
     Haelwenn /элвэн/ :triskell: likes this.
   • Embed this notice
     BrianKrebs (briankrebs@infosec.exchange)'s status on Thursday, 07-Dec-2023 02:40:38 JST BrianKrebs

     in reply to

     Also added a list of registrars that are participating so far in this pilot program. There's only about 50 or so right now, but some of the big ones are included, such as Godaddy, eNom, Namecheap, Gandi, Network Solutions. I was surprised to see Porkbun participating, considering how much abuse comes through their platform.

     Haelwenn /элвэн/ :triskell: likes this.
   • Embed this notice
     BrianKrebs (briankrebs@infosec.exchange)'s status on Thursday, 07-Dec-2023 02:40:39 JST BrianKrebs

     in reply to

     Just added this bit to the end of the story, which was news to me until a few minutes ago:

     Regardless of whether the RDRS succeeds or fails, there is another European law that takes effect in 2024 which is likely to place additional pressure on registrars to respond to legitimate WHOIS data requests. The new Network and Information Security Directive (NIS2), which EU member states have until October 2024 to implement, requires registrars to keep much more accurate WHOIS records, and to respond within as little as 24 hours to WHOIS data requests tied everything from phishing, malware and spam to copyright and brand enforcement.

   • Embed this notice
     Haelwenn /элвэн/ :triskell: (lanodan@queer.hacktivis.me)'s status on Thursday, 07-Dec-2023 02:48:04 JST Haelwenn /элвэн/ :triskell:

     in reply to

     • Sean King
     @seanking @briankrebs At least it seems like ccTLDs are currently excluded, and those are the TLDs that ought to be used more frequently.
   • Embed this notice
     Sean King (seanking@kazv.moe)'s status on Thursday, 07-Dec-2023 02:58:43 JST Sean King

     in reply to

     • Haelwenn /элвэн/ :triskell:
     @lanodan @briankrebs I should've looked into that when I was initially was getting my own domains. But regardless, I made a major mistake by trusting an inept domain registrar like Epik.
     Haelwenn /элвэн/ :triskell: likes this.