<story><title>As Deadly as a DDoS: ICANN Unleashes the Whois Accuracy Program</title><url>http://blog.easydns.org/2014/01/21/icann-unleashes-deadliest-ddos-attack-vector-of-2014/?</url></story><parent_chain><item><author>akerl_</author><text>The title is pretty much linkbait.&lt;p&gt;If you change registrar-level things about your domain, they&amp;#x27;re now required to confirm your contact info with you. This isn&amp;#x27;t a &amp;quot;DDoS&amp;quot;, or &amp;quot;deadly&amp;quot;, or any of that nonsense: it&amp;#x27;s a new strategy to ensure whois data stays updated.&lt;p&gt;Whether or not it&amp;#x27;s an &lt;i&gt;effective&lt;/i&gt; strategy for keeping whois data accurate is another debate (I don&amp;#x27;t think it is), but talking about it like some malicious act is pointless.</text></item></parent_chain><comment><author>hobs</author><text>I agree that the title is linkbait, but an ineffective amount of bureaucracy can definitely be turned or perceived as malicious.&lt;p&gt;I read about this originally when they made the rule and it seemed arcane and ridiculous, I dont know how it ever was passed. I believe everyone who some experience with whois info knows the information is either false or hidden behind privacy emails and contact information. If they are not, they are subject to annoying or even abusive misuse. (I remember someone back in the day calling me repeatedly because they found my website after I beat them in some video game, the internet is filled with nutters.)&lt;p&gt;If ICANN wants to know the details, I dont care, but if all the internet wants my phone number, they can take a long walk off of a short pier.</text></comment>
<story><title>As Deadly as a DDoS: ICANN Unleashes the Whois Accuracy Program</title><url>http://blog.easydns.org/2014/01/21/icann-unleashes-deadliest-ddos-attack-vector-of-2014/?</url></story><parent_chain><item><author>akerl_</author><text>The title is pretty much linkbait.&lt;p&gt;If you change registrar-level things about your domain, they&amp;#x27;re now required to confirm your contact info with you. This isn&amp;#x27;t a &amp;quot;DDoS&amp;quot;, or &amp;quot;deadly&amp;quot;, or any of that nonsense: it&amp;#x27;s a new strategy to ensure whois data stays updated.&lt;p&gt;Whether or not it&amp;#x27;s an &lt;i&gt;effective&lt;/i&gt; strategy for keeping whois data accurate is another debate (I don&amp;#x27;t think it is), but talking about it like some malicious act is pointless.</text></item></parent_chain><comment><author>thaumaturgy</author><text>The end of the article raised a good point though: this is going to train people to click on links in emails that look like they came from their registrar.&lt;p&gt;That&amp;#x27;s bad.&lt;p&gt;The registrar is public information. The registrant&amp;#x27;s contact information is public (or at least publicly accessible). So, wait a year for people to get accustomed to clicking on links in emails from their registrar, pick a target domain, forge an email from the registrar, send it to owner contact with a link to a phishing page. Congratulations, enjoy your new domain.</text></comment>