October 17, 2006

Spamhaus case could test ICANN

Attempts by U.S. courts to exert control over ICANN could be bad for the Internet

Internet experts are worried that a U.S. court decision against anti-spam black-lister Spamhaus Project Ltd. could trigger a "constitutional crisis" for the Internet.

Last month, the U.S. District Court for the Northern District of Illinois ruled against the antispam project in a lawsuit brought by e-mail marketer E360Insight LLC. The court ordered Spamhaus to remove the company from its database of spammers and to pay US$11.7 million in damages, but Spamhaus initially ignored the ruling, saying that the U.S. court had no jurisdiction over the U.K.-based project.

On Friday E360Insight issued a proposed order calling on both the Spamhaus.org domain name registrar, Tucows Inc., and the Internet Corporation for Assigned Names and Numbers (ICANN) to pull the project's domain name, a move that would shut down the Spamhaus Web site.

Though the order is only proposed, and does not have the force of law, observers worry that any attempt by U.S. courts to exert control over ICANN could be bad for the Internet.

ICANN, in Marina del Rey, California, has already come under fire for lacking transparency and being U.S.-centric.

"It's a delicate time for ICANN right now," said David McGuire, director of communications with the Center for Democracy and Technology (CDT), a public interest group focused on Internet issues. "If a court were to order ICANN to remove a domain name, we think that would be a bad precedent because making ICANN a tool of the U.S. legal system in matters such as these would sidetrack ICANN from its very important duties."

The CDT has issued a statement on the case.

McGuire believes that companies in e360's position should go to U.K. courts to ask them to enforce the U.S. court's judgement, or, failing that, approach the domain registrar.

ICANN has agreed that only registrars can suspend individual domain names. It believes that there is no way it could enforce the proposed court order. But as the organization responsible for the Internet's top-level domains, ICANN does have the authority to accredit registrars like Tucows, based in Toronto. ICANN's statement on the proposed order can be found here.

Princeton University's Edward Felten believes that it is possible that ICANN could be forced to comply with this type of court order.

"Suppose a U.S. court ordered ICANN to yank a prominent .com name belonging to a non-U.S. company," wrote Felten, the director of Princeton's Center for Information Technology Policy, in a blog posting. "ICANN could fight but being based in the US it would probably have to comply in the end." 

"Such a decision, if seen as unfair outside the U.S., could trigger a sort of constitutional crisis for the Net," he added. "The result wouldn’t be pretty."

Tucows, for its part, says that it has been asked to remove domain names in the past. But Vice President of Marketing Ken Schafer declined to comment on whether his company planned to comply with the proposed order. "Nobody's asked us to do anything," he said. "Right now it's just statements flying around."

Spamhaus says that the ruling shows how U.S. courts can be "bamboozled" by spammers and that it plans to appeal the court ruling "in order to stamp out further attempts by spammers to abuse the U.S. court system in this way." Representatives from the organization were not immediately available to comment for this story. The Spamhaus statement on this matter can be found here.


This article reflects corrections that have been added since its original filing date of October 12, 2006.




 

Close

On Twitter now

Security

Powered by Twitter

On Twitter now

White Paper

D2D Virtual Tape Library Replication Primer

This whitepaper explains the terminology and concepts behind Data Replication technologies and establishes some sizing rules through worked examples. Learn the new paradigm in disaster tolerance—protect data anywhere.

Download now »

White Paper

An Alternative to Virtualization for Datacenter Cost Savings

Server virtualization is a popular option for dealing with mounting datacenter costs. Another equally promising approach is the use of an Application Delivery Controller. Citrix NetScaler provides a low-cost way for organizations to reduce their server count and accrue cost savings from a reduction in space, cooling, power and personnel.

Download now »

White Paper

Why Your Firewall, VPN, and IEEE 802.11i Aren't Enough to Protect Your Network

The emergence of WLANs has created a new breed of security threats to enterprise networks.

Included in HP ProCurve WLAN solutions is security technology that alleviates threats from WLANs through:
* Monitoring wireless activity inside and out of the enterprise
* Classifying WLAN transmissions into harmful and harmless
* Preventing transmissions that pose a security threat to the enterprise network
* Locating participating devices for physical remediation

Download now »

White Paper

Bringing the Edge to the Data Center

Effectively address data protection challenges, implementing solutions that help store and protect business–critical data while cutting costs and improving efficiency and reliability.

Download now »

Sign up to receive Security Resource Alerts

Subscribe to the Security Central Newsletter

Stay informed of the latest security threats and fixes.

White paper

Log Management: How to Develop the Right Strategy for Business and Compliance

This white paper provides guidance on how to develop a strategic approach to managing and monitoring logs, a key function required for compliance with many regulatory mandates and a critical defense against security threats.

Download now! »

White paper

The Essential Series: Security Information Management

Learn about the processes and technologies that support security information management (SIM) operations, as well as the business case for SIM. The series examines different options for implementing SIM and gives you evaluation criteria for selecting the best option for your organization.

Download now! »

White paper

Aberdeen: Choosing and Consuming Managed Security Services

Learn the strategies, actions, and capabilities that Best-in-Class organizations employ and technologies they choose to obtain superior performance against various security performance metrics. This report provides guidelines for identifying which security solutions to consume as a MSS and defines best practices for choosing and managing MSSPs.

Download now! »
©1994-2009 Infoworld, Inc.