From 9 to 12 June, the Internet community came together in Prague, Czech Republic, to discuss current processes and developments for guaranteeing the Internet at the ICANN Policy Forum. For the ‘Child Protection and Children's Rights in the Digital World’ project of the Digital Opportunities Foundation, the meeting focussed on further preventing and combating abuse of the domain name system (DNS), potential decisions on agreements for handling urgent requests via the registration data request service (RDRS) as well as developing and implementing a human rights impact assessment procedure, in addition to exchanging ideas with representatives of stakeholder groups.
The Governmental Advisory Committee (GAC) received a detailed report on the development of the abuse of the domain name system. It became clear that phishing attacks and corresponding domains have approximately tripled over the past five years. In the past 12 months alone, over 1.5 million domains have been reported that are intended to entice users to transmit personal data or download malware, for example. The analysing companies assume that this causes financial damage of around EUR 15,700 per minute. It is striking that such domains are often registered where - in addition to other factors - the costs are comparatively low and the identity of the person registering is not verified. Against this background, it is obvious to draw conclusions as to how this abuse can be prevented.
Consultative organisations therefore suggested to the members of the Governmental Advisory Committee that - in addition to other measures - they should work towards verifying the identity of persons registering and screening domain names that appear to be malicious. Both measures are also key when it comes to the prevention and prosecution of sexual abuse against children online and the dissemination of corresponding imagery. According to ICANN's regulations, such criminal behaviour is not considered abuse of the domain name system. Nevertheless, these measures can make an important contribution to protecting children in the digital environment and facilitating criminal prosecution.
With regard to the current status of discussions on how to deal with urgent requests as part of the registration data request service (RDRS), it was reported that a processing and disclosure period of 24 hours is currently being discussed. However, no agreement has been reached on this, as there are still reservations regarding the deadline. Nevertheless, the current state of discussions represents progress, as the registry services have so far spoken out in favour of a processing time of up to three working days. However, the Government Advisory Committee (GAC) does not consider this to be appropriate in order to be able to react adequately in the course of preventing damage to life or critical infrastructure.
In this context, the discourse on the implementation of a human rights impact assessment of ICANN's regulations is also central when the interests and rights of those involved and affected are considered from different perspectives. Decisions must be made that take into account existing claims to protection of registry data and equally guarantee the protection of, for example, children who are at acute risk of sexualised violence. To this end, it may be necessary to disclose the relevant registry data and thus open up opportunities for law enforcement agencies to take action. The fact that this process is being conducted in the ICANN bodies can be seen as a positive signal and the recognition of responsibility beyond technical processes and infrastructures. Nevertheless, the discourse shows that a quick agreement and introduction of such a mechanism is not to be expected.