auDA, the.AU policy and regulatory body, has terminated the registrar accreditation of Australian Style Pty Ltd, who trades as Bottle Domains, following a the Court of Appeal of the Supreme Court of Victoria dismissing Bottle Domains’ appeal in proceedings against auDA on 23 July 2010.The termination came about following a serious breach of its obligations under the Registrar Agreement by Bottle Domains.In February 2009, auDA was notified by the Australian Federal Police that there had been a security incident which affected customers of Bottle Domains. Refer to auDA Announcement 10/02/09.auDA subsequently discovered that Bottle Domains was the subject of an earlier security incident in April 2007, which auDA believes may have caused or contributed to the security incident in February 2009.Bottle Domains failed to notify auDA at the time of the April 2007 security incident, which was a breach of its obligations under the Registrar Agreement. Bottle Domains also failed to take appropriate remedial security action and alert customers of the incident.These failures led to auDA’s decision to terminate Bottle Domains’ registrar accreditation on 15 April 2009, however the termination had been suspended pending the conclusion of legal proceedings.Following Friday’s decision in its favour, auDA has today re-initiated the termination process. Approximately 8,900 domain names registered by Bottle Domains have been transferred to auDA, and the registrants of these names will be sent instructions on how to transfer to another auDA accredited registrar.”The domain names of Bottle Domains’ customers are NOT at risk. auDA is in the process of contacting all those whose domain name is registered through Bottle Domains to provide them with all the information they need” said auDA CEO, Chris Disspain.In its decision, the Court of Appeal recognised the importance of the system governing domain name allocation and use in Australia and that “protecting the system against unauthorised entry is therefore of paramount concern”.The Court also endorsed the actions of auDA, and its CEO, Chris Disspain: “Given the importance of the .au domain name system as a public resource to be administered in the public interest, it is in my opinion appropriate that this Court say clearly that it endorses the approach taken by Mr Disspain.”In his judgement, Justice Harper also said Bottle Domains “sought to persuade the trial judge that what on careful examination was clearly one thing, was actually another. His Honour was not persuaded.”However despite the damning judgement, Bottle Domains is claiming there are no problems anymore and the company sought to have their registrar accreditation reinstated in a statement they issued late Friday according to IT News.A spokesman claimed the company was “now operating at or above industry standards for internet security following a series of system improvements in line with auDA requirements,” reported IT News.”We have complied with auDA’s requirements and remedied all of the problems that had concerned the authority,” the spokesman said.He also claimed auDA-appointed security auditors had reviewed Bottle Domains’ security environment and “had been satisfied with their findings.””Given [our] commitment to the highest possible security standards, [we call] on auDA to now remove any doubt about the future of the registrar agreement which allows Bottle Domains to operate,” the spokesman said.The full court decision is available from:
www.austlii.edu.au/au/cases/vic/VSCA/2010/184.html