CIRA Survey Finds 71% Of Canadian Organisations Impacted By A Cyberattack In 2018

Canada’s ccTLD registry has published the results of their 2019 Cybersecurity Survey Report that found 71% of organisations reported experiencing at least one cyber-attack that impacted the organisation in some way, including time and resources, out of pocket expenses and paying a ransom.

“Now more than ever, Canadians need trust in the internet,” said Byron Holland, president and CEO, CIRA. “We believe that security is the foundation of that trust which is why we have leveraged our experience safeguarding the .CA domain to help Canadian organisations protect themselves and their users.”

The report provides an overview of the Canadian cybersecurity landscape and surveyed more than 500 individuals with responsibility over IT security decisions at both private and public sector institutions across Canada to learn more about how they are coping with the increase in cyber threats.

The full report, released as part of CIRA’s Cybersecurity Awareness Month activities, also found 96% of respondents said that cybersecurity awareness training was at least somewhat effective in reducing incidents while only 22% conducted the training monthly or better.

Other key findings were:

  • Only 41% of respondents have mandatory cybersecurity awareness training for all employees.
  • Among those businesses that were victimised by a cyber-attack, 13% indicated the attack damaged their reputation. This perception is a sharp contrast to the findings of CIRA’s recent report: Canadians deserve a better internet, which indicated that only 19% of Canadians would continue to do business with an organisation if their personal data were exposed in a cyber-attack.
  • 43% of respondents were unaware of the mandatory breach requirements of PIPEDA.
  • Of those businesses that were subject to a data breach, only 58% reported it to a regulatory body; 48% to their customers; 40% to their management and 21% to their board of directors.
  • 43% of respondents who said they didn’t employ dedicated cybersecurity resource cited lack of resources as the reason. This is up from 11% last year.

“While technical solutions are important, the best layer of security for any organisation are cyber-aware employees,” said Jacques Latour, chief security officer, CIRA. “We are happy to see more organisations embracing cybersecurity awareness training as a critical element of their defence. However, there is more work to be done to ensure the quality and rigor of the training offered keeps pace with the ever-changing world of cybersecurity.”

The full report is available to download from: https://cira.ca/resources/cybersecurity/report/2019-cira-cybersecurity-survey

WIPO Conference To Look Back At 20 Years Of UDRP

The WIPO-designed Uniform Domain Name Dispute Resolution Policy (UDRP) turns 20 this year and to commemorate they’re holding a conference at their Geneva headquarters on 21 October.

The conference, As the UDRP Turns 20: Looking Back, Looking Ahead, will take stock and look ahead in terms of UDRP jurisprudence, ADR system design, relevant Internet developments, and a range of other topical subjects.

In the 20 years it’s existed, WIPO’s UDRP has adjudicated over 45,000 cases and this milestone will be commemorated. WIPO will not hold its traditional two-day Advanced Domain Name Workshop this year.

The conference is aimed at the more than 100 attending UDRP Panellists as well as brand owners, trademark practitioners, party counsel, registrars, ccTLD administrators, academics, and other domain name and Internet stakeholders.

Participants can register online. The fee for the event is CHF 250 and space is limited; refunds for cancellations will be permitted up to 7 October. There is also a conference page here.

.BOND To Commence Sunrise on 17 October

The .bond new gTLD, originally applied for by the Australian Bond University, but now owned by the operators of .icu, ShortDot SA, is gearing up for a launch with Sunrise commencing on 17 October.

.bond will be launching in its Sunrise phase, for trademark holders, on 17 October. Sunrise will last 33 days ending on 18 November. Following will be an Early Access Program that adds an access fee to the cost of registration that will gradually decrease over the first seven days, giving users the ability to register more desirable names before others. Prices for the EAP appear not to have been publicly released, but .bond registrars will receive a detailed email with pricing for the EAP as well as normal wholesale registration rates. There will be a small list of Registry Reserved names. General Availability will then commence for .bond on 19 November.

“Our goal is to let end users be creative, free, and unique online with what is to the left of the dot by making the extension short and easy to recognise. We think .bond will resonate with those in the financial services arena, but we are excited to find out exactly who the early adopters will be,” said Lars Jensen, founder and CEO, ShortDot.

“We recommend that trademark owners who want to register their matching .bond domain reach out to their preferred registrar or take a look at our list of accredited registrars to secure their brand as soon as possible,” he added.

ShortDot uses CentralNic as their backend service provider and when .bond officially launches on 17 October all registrations, renewals and EPP lookups will be done via the CentralNic EPP servers.

CIRA Jests With “Don’t Be A Traitor” Campaign, Challenging Canadians To Choose A .CA Domain

CIRA is sending in the law enforcement, the “€œEh Team”€, threatening Canadians who choose a .com or other top-level domain instead of their very own .ca in a humorous attempt to encourage more .ca domain name registrations.

It’s the Canadian ccTLD registry’€™s first ever broadcast campaign, called “€œDon’€™t Be A Traitor”€, and is hoping a little fun will help educate Canadians as to the value of .ca domain names for Canadian businesses.

€”Even today, it is estimated that more than 50 per cent of Canadian businesses still don’€™t have a website,”€ said Byron Holland, president and CEO of CIRA. “€œThese businesses are missing out on economic advantages that the web offers, and if they don’€™t have a .CA domain, they are missing out on potential customers as well. Our goal with this campaign is to break through the noise with some over-the-top humour, and demonstrate the value of a .CA domain for Canadian businesses.”

CIRA’€™s .CA Domain Squad is dogged in their efforts to help Canadian business make the right choice to attract more customers to their businesses with a .CA domain name. Their methods are at times extreme, but it’€™s only because they care.

CIRA explains the .CA Domain Squad is comprised of:

  • The Sergeant: He’€™s not just a “€œby the book” type, he wrote the book.
  • The Rookie: What he lacks in experience he makes up for in knee-high socks.
  • The Loose Cannon: Rumour has it she once bought a poorly made juicer from a .com website. She has never been the same since.
  • The Vet: He retires in two days. Hopefully we can wrap this up by then.
https://www.youtube.com/watch?v=QlbRJCdemWc
CIRA’s Don’t Be A Traitor advertisement

“€œ.CA domain names help Canadian businesses attract more customers, enhance their brand, and they help support Canada’€™s internet,”€ said David Fowler, vice president, marketing and communications at CIRA. “œOur goal with this campaign is to promote the value of .CA to support Canadian businesses. Using anything else is almost criminal.€”

The commercial will air over broadcast television in the Greater Toronto Area from 23 September until 17 November. It will also be featured on streaming services and in cinemas in the Greater Toronto Area.

An integrated social media, search and content campaign featuring the .CA Domain Squad will accompany the commercial.

Start-ups Using .TECH Domains Raise Over $2B In Venture Capital Funding

Radix, the company behind the .tech new gTLD, announced recently that at least 170 start-ups using .tech domain names have raised over $2 billion in venture capital funding between 2017 to 2019. According to Radix, these start-ups are spread across industries such as auto, crypto, mobility and energy, among others. Based on an analysis of start-ups that are listed on Crunchbase, the source of the information, as of June 2019, there are over 250 new top-level domains that are in use by start-ups. However .tech is the most popular being used by over 650 start-ups.

Speaking about .tech’s popularity amongst start-ups and investors, Suman Das, Director of Brand Operations at Radix, said, “Since its launch, there has been a steady organic uptake across the tech industry with start-ups, small tech businesses, thought leaders, pioneers, and communities adopting .tech domain extension for branding their online presence.”

There are currently 262,000 .tech domain names according to nTLDstats and according to Radix around 41,500 websites using .tech domain names, which are registered in 106 countries.

.tech boasts of a wide array of usage from top-notch industry pioneers such as Consumer Electronics Show, CES (ces.tech), Viacom (viacom.tech), and Intel (insight.tech), to name a few. The domain extension has also garnered significant interest from coveted social media influencers such as Austin Evans (AustinEvans.tech with 12M+ social reach), Edgar Oganesyan (DealSource.Tech with 1.8M+ social reach), and Dom Esposito (Dom.tech with 500K social reach), amongst many others.

“Our primary focus has always been to ensure that .tech is presented as an enabler of tech and product innovation to the growing community of technology enthusiasts, and to increase awareness of not just .tech but also the new top-level domains industry on the whole”, Suman Das further added.

With this in mind, .tech has supported over 17K students of technology through hackathons, and thousands of other developers across the globe through exciting partnerships with premier tech schools, and leading tech platforms such as GitHub. Github was acquired by Microsoft last October, and to be associated with such reputed brands is definitely a step in the right direction to add more credibility to .tech and other new top-level domains.

Based on independent market research conducted by Radix among tech professionals and tech students in North America in June 2019, one in two respondents (with a Confidence Level of 95%) were found to be aware of .tech domain extension. In addition, .tech was found to be most associated with attributes such as credibility, uniqueness, and suitability for tech businesses in the context of domain names.

Speaking about the future plans of the brand, Suman Das added, “We will continue with our efforts to amplify the visibility for .tech amongst the tech ecosystem. With high-impact partnerships and adoption across the spectrum, we wish to make .tech the most sought-after domain extension in the global tech industry.”

.tech, which was 4 years old in August, is one of the premier domain extensions in Radix’s new top-level domains portfolio of 9 new gTLDs, including .store, .site and .online, with 4.958 million domains under management, the most of any new gTLD operator.

NamesCon Crowdsourcing Session Submissions

NamesCon Global has grown over the years to become the largest annual domain-industry conference. It’s gone from being a domain investor-centric gathering to an event for everything domain-related, from channel providers and software vendors to domain investors and end-customers. And now as part of that growth they’ve moved to crowdsourcing for submissions for some of their sessions for this year’s theme: 360 Degrees Around the Dot.

The move from Las Vegas is also a reinvention of sorts: they’re going to Austin to establish the Domain Economic Forum, taking a broader and deeper look at the ecosystem in which we work and strive to innovate.

NamesCon is not looking for pitches of specific products or solutions but rather they want to see an industry overview, surfacing potential large-scale opportunities over the next decade. Successful submissions will round out the current programme.

NamesCon explain they’re looking for submissions in the following three clusters:

Quantifying the Domain Ecosystem

What is the true size of the domain industry? They explain that several parts of the ecosystem are not quantified—at least not yet. In particular we’re thinking of the secondary domain market: the opacity here is due to the fact that, for several reasons, most secondary-market transactions are not reported.

They’re seeking session ideas that will help a broader audience to understand the size and scope of the domain industry as a whole, and specifically in the secondary market—and the opportunities that lie within.

Big-Picture Market Opportunities

They want to dig more deeply into liquid domains as digital assets or a store of value, such as long-tail registrations for brand protection. They also want to explore the future of identity management, as well as next-generation DNS services as a driver for the domain industry: Right now, email and websites are based on domains, but what comes next?

The Buyer’s Perspective

NamesCon want as many buyers as possible at the Domain Economic Forum, and this means a diversity of needs and use cases. They’re looking for buyers from various backgrounds and industries to talk about the experience buying domains from investors; as well as how they approach brand protection. They want to learn more about real-life buying behaviour, budgeting, and other factors that make or break a deal.

To submit session ideas click here.

DENIC Issues Invitation to ccTLDs For ID4me Authority Workshop on 17 October in Madrid

DENIC ID logo

DENIC is inviting interested ccTLDs to an ID4me Authority Workshop on 17 October – the day before this year’s ID4me Summit – in Madrid.

ID4me is an open and federated standard for digital identity management based on domains. The single sign-on solution was developed with substantial involvement of DENIC, IONOS and Open-Xchange. The new DENIC ID service is a first example of a market-ready solution for implementing the federated approach.

The 5-hour workshop aims at the role of ID Authorities within the ID4me ecosystem and is a perfect opportunity to jointly develop concepts for a collaboration and cooperation between ccTLD registries. It also is an ideal platform to exchange ideas on how registries could benefit from the single sign-on solution, which offers to customers an attractive complementary service for a domain.

Information on DENIC ID, which is based on the open standard ID4me, is available here.

For any questions or for those who want to register, contact DENIC via email : info[at]denic-id[dot]de.

Independent Review Finds NZ’s Domain Name Commission “A Sound And Competent Regulator”

An independent review into the body responsible for regulating New Zealand’s ccTLD, the Domain Name Commission, has found “there is much for current and past DNCL staff to be proud of” and that it “is a sound and competent regulator of the .nz space.”

An independent review into the body responsible for regulating New Zealand’s ccTLD, the Domain Name Commission, has found “there is much for current and past DNCL staff to be proud of” and that it “is a sound and competent regulator of the .nz space.”

It’s the first regulatory review into the Domain Name Commission and was undertaken over 2018-2019 by independent reviewer David Pickens and was published Thursday. It’s a far cry from New Zealand’s neighbours Australia where a government review published in April 2018 found “urgent reforms are necessary” and that auDA’s “current management framework is no longer fit-for-purpose and reform is necessary if the company is to perform effectively and meet the needs of Australia’s internet community.”

The independent reviewer found DNCL staff are well regarded for their achievements, and there is much optimism with respect to where the DNCL is heading.

One of the findings of the report is “against the theory of regulatory standards and enforcement theory, the evidence available to the review and from the interviews, the DNCL is a sound and competent regulator of the .nz space. It is highly regarded internationally and operates absent many of the handicaps other TLDs contend with. With small exceptions, the .nz policies and the enforcement of those standards were viewed as appropriate.”

The report notes that “overwhelmingly, the response from the DNCL’s stakeholders was positive, with one exception… The majority offered no or minor criticism only. Favourably commented upon were the people, culture, systems and comparative international performance.”

The one exception was criticism of how the DNC deals with domain name abuse but even here there were diverging views with criticism not coming from all respondents.

“All regulators and a number of other stakeholders felt the DNCL needed to more actively reduce opportunities for domain name abuse. Harm was being perpetrated that the DNCL was uniquely positioned to stop, New Zealand was now out of step with international developments, there was a growing risk to integrity and confidence in the .nz space and legal and political risks to the DNCL was growing. Nearly all, however, acknowledged the DNCL appeared more open to debating and moving towards a more proactive role, and its recent efforts were supported.”

With this though there were “a significant number of people who supported the status quo, arguing policing this activity was not the DNCL’s responsibility and that comparatively New Zealand performed well. It was also argued greater policing efforts would be costly and generate little benefit.”

One key weakness identified during interviews was “the absence of well-developed indicators allowing comparison of the DNCL’s performances with comparable entities overseas.”

“This has been a huge amount of work for Mr Pickens, and we thank him for the thought-provoking report,” said DNCL Chair Jordan Carter.

“Since the Domain Name Commission was established in 2002 to regulate the .nz online space, the .nz space has evolved. In today’s online era, the .nz domain is at the heart of New Zealand’s distinctive online world.”

The Domain Name Commissioner Brent Carey welcomed the review findings saying “Mr Pickens’ recommendations will help to ensure we are keeping pace with modern self-regulatory challenges”.

“The Commission and InternetNZ will be looking to work with others to equip us with the right relationships and tools to help us keep .nz fair and safe for everyone.”

There were a number of recommendations made by Pickens including that “the DNCL should view itself more as a competitor against other TLD administrators and regulators,” “to explore the utility of a comprehensive information disclosure regime to drive better performance across registrars in the .nz space”, to collect and disseminate performance data, “seek international co-operation”, “rescinding the current market concentration policies” and to collect market concentration information “with respect to the abuse of market power by registrars”.

In responding to the report, the DNCL have “already commenced the implementation of some of the recommendations and will continue to incorporate the report’s findings and recommendations in its priorities.”

Additionally, the DNCL “have identified several improvement areas including, process improvement, delivery capability, emerging policy considerations, stakeholder relationship management and enforcement and compliance.”

Of the 15 recommendations in the report, the DNCL note they either fully support or support in principle every one of them.

The Commission has published the full final review along with its response to the recommendations. For the report, Pickens conducted 23 interviews with DNC stakeholders, current and past staff, Board members, staff of the other two main players in the .nz space (InternetNZ and the Registry), Government and self-regulators and registrars. Specialists from overseas and those delivering the Disputes Resolution Service were also interviewed. Registrants were sought out, although many interviewed were .nz registrants.

The Independent Review can be downloaded here [pdf] and the Domain Name Commission’s response is available here [pdf].

WIPO Now Providing Dispute Resolution Services for .CN and .中国

WIPO have announced that as of 1 August they began providing domain name dispute resolution services for .CN and .中国 (China).

In their announcement, the World Intellectual Property Organization note the services are pursuant to the China ccTLD Dispute Resolution Policy (.CN Policy), the China ccTLD Dispute Resolution Policy Rules (.CN Rules), and the WIPO Supplemental Rules for China ccTLD Dispute Resolution Policy and China ccTLD Dispute Resolution Policy Rules (WIPO Supplemental Rules).

For those wishing to lodge disputes, they should consult the dedicated page for .CN and .中国 domain name dispute resolution services, including links to the above policy and procedural rules, model pleadings and case fees.

The page also features a comparison table highlighting the differences between the .CN Policy and the UDRP.

Under the WIPO-initiated Uniform Domain Name Dispute Resolution Policy (UDRP) the WIPO Center has processed some 44,000 cases. WIPO also provides its domain name services for over 75 Country Code Top-Level Domains (ccTLDs) as well as a number of generic top-level domain including .com and a number of new gTLDs to which the UDRP applies.

Verisign’s Top Trending .COM/.NET June Keywords Reveals…

Verisign released their top 10 trending keywords in English for .com and .net for June this week. Verisign note that there’s often a correlation between domain name registrations and newsworthy and popular events, as well as anticipated trends. But what do June’s trending keywords reveal?

The top trending keywords in English are:

.COM .NET
textinsurance
glasseswedding
remotecanna
indexvirtual
yearrage
termmass
feefalls
papersguru
jumbohard
braceslawyer