Congressional Comittee Mulls WHOIS Data Integrity

Alien54 writes: "The US Congress Subcommittee on Courts, the Internet, and Intellectual Property is holding a hearing today on "The Accuracy and Integrity of the WHOIS DATABASE." This is specifically on HR 4640, "To provide criminal penalties for providing false information in registering a domain name on the Internet." - - You can hear live audio of the hearing here on the weekly schedule page (NB windows media). Strangely, this had passed throught hands of the House Subcommittee on Crime, Terrorism, and Homeland Security which is involved in a number of things on interest to Slashdot readers." (Visit Thomas and type in "HR 4640" in the query box to read more on this bill.)

I refuse.

[inkfox]

I refuse to provide fully accurate information until there are criminal penalties for spamming and junk-mailing registered individuals.

Re:

[account_deleted]

Comment removed based on user account deletion

Re:I refuse.

[isorox]

So personal domain registrations have your own personal phone number on, ready for malicsious calls etc.

Any bets we'll have Bill's number for microsoft.com? Or even a 24 hour number?

Comment removed

[account_deleted]

Comment removed based on user account deletion

Re:I refuse.

[ShaunC]

Had you, or the editors of Slashdot, actually taken the time to read the bill you would have discovered that it only prohibits falsification of the information with the intent to defraud

I don't see how that narrows things down any. Intent to defraud who, and how so? That's not explained. Intent to get a domain for free by using someone else's credit card? It doesn't say that. Intent to hide who's behind 0daywarez.com by putting 31337 Cherry Lane in the WHOIS database? It doesn't say that. Intent to avoid getting junkmail postcards from competing registrars and webhosting companies? It doesn't make an exception for that.

The current language allows the courts to interpret "intent to defraud" any way they like. If this bill passes, I guarantee you that the first prosecutor to land a case in court will be claiming that entering false information is intent to defraud. And if I were the courts, I'd buy it. After all, when you type the fake information in, you know it's fake and you're doing it intentionally, presumably to prevent others from knowing who really owns the domain.

IANAL, nor am I the courts. Nor do I like this bill. I own a lot of domains and I don't want my full name and address available to the general public anywhere, much less in the WHOIS database.

Shaun

Re:

[account_deleted]

Comment removed based on user account deletion

Re:

[account_deleted]

Comment removed based on user account deletion

Here we go again...

[jo42]

The US Congress does not have the authority to pass laws that affect people outside of US borders. Many domain registrations are by people and companies outside of US borders. Can some American with more than half a brain please point this out to the imbecile US government.

Re:

[account_deleted]

Comment removed based on user account deletion

How about the WWW or Linux

[isaac]

The internet's extension outside the U.S. predicated the birth of the world-wide-web, which was created by Tim Berners-Lee, a high-energy physicist at CERN in Switzerland. It also allowed the early development of Linux back when Linus Torvalds lived in Finland.

Maybe YOU don't care for the WWW or for Linux, but both have brought "most U.S. users" more "gain" than "pain."

I won't mod you down - I feel the need to call you a twit explicitly, rather than by implication.

-Isaac

Re:

[account_deleted]

Comment removed based on user account deletion

Re:How about the WWW or Linux

[isaac]

I am sure that extending the Internet to the whole world sped the development of the web. But to pretend that we would still be limited to Gopher and FTP had the Internet not been internationalized is simply a denial of reality. Had Tim Berners-Lee not "invented the web", someone else would have.

You're right! I'm sure AOL would have come up with something nice for us. Or maybe Compuserve. Of course, you can pretty much forget about creating your own content under those systems, but who wants that ability?

As to Linux, I used BBSs before the web was available. Collaborative software development worked that way, too.

Sorry, not on the same scale - not even the same order of magnitude. Fidonet didn't work *that* well.

-Isaac

Re:Here we go again...

[zangdesign]

Look, dumbass, it's pretty obvious that the law would apply to people inside the US borders and not those outside the US borders. There's just as big a problem with false registration inside our country as out of it.

So now the ball's in your court to get people in YOUR country to not provide false information, oh, but wait, no one from your country EVER does anything unethical do they?

Re:Here we go again...

[Thu Anon Coward]

"Can some American with more than half a brain please point this out to the imbecile US government?"

that's easy to do. however, we're talking about politicians here. by definition (in the U.S. at least) that means 'no brains'.

the American definition of politician
politician = "person who thinks he has the RIGHT to suck at the public tit his whole life while justifying that "I'm just representing my con-stit-chew-ents. I feel their pain when being taxed. after all, I AM a compassionate conservative" "

look at Bush Jr. a COMPLETE failure in business, always gettin' bailed out by daddies oil buddies until they got tired of it and made him invest in the Texas Rangers when it was up for sale. boy howdy! i'd sure like to make $700,000 turn into over $14 million! then he ran for gub'ner and the rest is (shameful) history.

thank god I never voted for that moron. I can hold my head high. can you?

Who controls WHOIS?

[n-baxley]

Does Verisign control the WHOIS database? Since they are a US company, is that what gives the US the right to patrol that database? If not Verisign, who? Will the US rules be applied to other countries? This is legislation that will not be enforcable!

Already the case in the UK...

[Bazzargh]

for the .ltd.uk and .plc.uk domain names. See here [www.nic.uk] for details.

Names within .ltd and .plc have to match names of companies registered at Companies House in the UK. Apart from the laws against misrepresentation quoted on the page linked to above, companies are bound by law to register the home addresses of directors, and you can get this information from Companies House (not as easy as WHOIS, but its there).

I'd like large chunks of the net to stay anonymous and all that, but equally I'd like it if more of the net was like this - you can actually determine who you're dealing with 'in meatspace' because the registrar has the law on his side.

Technically, SSL certificates are supposed to help with this whole trust issue (which is what it boils down to - businesses have to earn trust to make sales) - but the CAs themselves are not trustworthy [slashdot.org]. How much for a certificate issued by the Consumer Association [which.net] or Greenpeace [greenpeace.org]?