Gandi fights back against domain abuse!
By Ryan on Thursday 11 January 2007, 15:51 - Permalink
If you have been getting less spam in your mailbox recently, it may be due in part to our strengthened anti-spam efforts!
The usual way of preventing spam from getting into your mailbox is through mail filters and anti-spam software, but everyone knows that this only puts a band-aid over the wound. As a registrar, however, we are in a privileged position to take more active measures against spammers, identity thefts, and other fraudulent online activities when the domain is registered with us, by actually suspending the abusive domain!
We're not trigger happy...each case is very carefully examined and well documented before any action is taken, so unless you are a spammer, fear not!
There are three main conditions that determine whether or not we take action against a domain:
1. If the whois data is not fully accurate and verifiable.
A major element of our ICANN accreditation is our obligation to provide the appropriate registries with correct and up-to-date information concerning a domain's contacts and owner. Our General Sales Conditions underlines this in section 3 and 16, where our customers agree to provide reliable information as a prerequisite to using our services.
2. If the customer uses our services for illegal, fraudulent, or prejudicial activity
Domains registered with Gandi must be used in accordance with the rights of third parties (copyrights, intellectual property rights, personality rights, etc.), and current applicable laws and regulations.
For example, Gandi does not tolerate activity that is morally objectionable or that poses a threat to public order, that spreads Computer Contaminants (Viruses, Trojans, etc.), and/or that engages in fraudulent activity such as Identity Theft.
3. Evidence of spamming activity
We are very attentive to complaints involving unsolicited bulk email that originated from one of our domains, and take quick action if the UBE complaint is justified...
Why the increased vigilance?
Gandi now manages over half a million domains around the world, and continues to growing at a wonderful rate (thanks to you)! With this strength comes an ever greater responsibility to the global community to ensure that everyone's personal rights are respected, and that human dignity is upheld.
By taking an clear and decisive anti-spam position, we help uphold your rights, while setting a good example.
Imagine a spam-free world!... 
Comments
Well done!
Now if only every other domain registrar would pay this kind of attention to the problem.
I find it somewhat shocking that it's taken ordinary public citizens reporting these abuses for the larger ISP's to take notice. Tucows, arguably one of the larger ISP's and domain registrars in the known world, was seemingly unaware of how to properly shut down and redirect a rogue domain registration. I and others are finding that this is often the case with most other domain registrars as well.
How can we get the word out to these companies?
Thanks again for taking such a firm stance on this issue.
SiL
The more people\companies fight against spam the better. Hopefully many more companies will follow your example.
Great News!
You are blazing a trail in an area where most registers turn a blind eye. I don't knwo how many times the response to my spam complaints from the register was "we don't spam" or "we are not responsible" and pass the buck. With you as an example maybe there is hope they can figure out what they SHOULD ALREADY be doing with the accounts of spammers and other criminals.
Thank you for helping fight this problem.
Darius
Thank you, Gandi, for taking a stand! It is exciting to see registrars beginning to stand against spammers and the like. We know it costs money to fight the good fight, but it will a hugh relief for everyone when spam is gone.
KyferEz
For some time I've been complaining to the registrars. It's incredibly frustrating - they seem blockheaded or criminal. There have been some friendly ones as well, but so far I'll need to see the actual removals. I understand that they can't act on my evidence alone: I might be trying to frame somebody. But the more people complain, the more these registrars must "see the truth". And the faster they shut the spamversites down, the less complaints they'll get to bother them.
Just a thank you to Gandi-Sarl as one registrar with a sense of social responsibility as evidenced by this reply to one of my abuse reports.....
"Good afternoon
Thank you for this report. We have deactivated the domain name united-nord.biz.
Have a nice holiday season!
Best regards,
GANDI"
Norden United are just one of the many made-up name money fraudsters, (aka 'Impex Consult', 'Swiss-Invest' et al), that usually register with Joker as Joker support criminal activity by not acting on abuse reports, but for some reason they registered one of their domains with Gandi-Sarl for a change. I guess they won't be doing that too often in future if Gandi can keep this up! Well done!
Thank you all for your wonderful support!
SpamisLame: "ordinary public citizens" are just the people who Gandi listens to! In addition to the ethical battle against domain abuse, we really want to assure that our customers feel good about belonging to our community; that they are in a way making a statement about who they are, and what they believe in, by choosing to associate themselves with us
Guys, your support is all we need to keep on going and continue this fight for and with you !!!!
And YES, it does cost time, money and lots of efforts to do so :x
But it worth every cents looking at your comments, thanks.
Stephan
I've been getting spammed relentlessly for months by a notorious "dating" spammer. I forwarded each spammed domain to his domain registar (Register.com) only to be told they weren't responsible since they weren't hosting or providing email services. The site's hosting was spread among many compromised PCs and the emails were sent from botnets. All complaints were ignored.
Frustrated, I looked up the DNS they were using and found it was a domain registered with Gandi. I forwarded the evidence to Gandi's abuse desk and the DNS was null-routed within hours. It's very refreshing to see a registrar that doesn't turn a blind eye to criminals using their services. I applaud your efforts.
In the wake of MySpace's bone-headed takedown requests and GoDaddy's spineless complicity (see: <http://nodaddy.com/>), I am a bit concerned with condition #2: "If the customer uses our services for illegal, fraudulent, or prejudicial activity" and also with the comment that "Gandi does not tolerate activity that is morally objectionable".
I tend to think that the only "morally objectionable" activity that Gandi should be concerned with is offensive or slanderous speech in WHOIS information or in a domain name. The content of a Web site on a server in an Internet domain owned by someone who registered it through Gandi is no more Gandi's business than it is the business of the utility company that provides electricity to that server, the company who built the hardware on which it runs, or the municipality that maintains the road to the location where it runs.
Do Gandi intend to police the content of Web sites and the uses of domains registered through them?
"Do Gandi intend to police the content of Web sites and the uses of domains registered through them?"
Only those through them, which they have every right to do in the absense of any specific law prohibiting such. You certainly can do this or that when you provide a service, right?
If you were asked that question, wouldn't you also say, "it's case to case"? Won't that be reasonable if some situations are especially more difficult than others?
Ignorance of the law excuses no one. But neither does ignoring the terms of your provider's legal agreement.
Hi PM,
Your concerns are entirely valid - though I am not so sure that is is "not our business". If someone were to register a domain from us and in turn use it for a child pornography ring, would then Gandi be involved in supporting that ring if it turned a blind eye? We must have the tools with which to combat domain abuse. What sets those in positions of responsability apart, however, is *how* such tools are used.
I feel the need to stress once again, that each abuse complaint we receive is documented and investigated, to see what is going on, and to get a clear and real picture of the situation. Unlike some registrars, we do not have a knee-jerk reaction to complaints; each one is unique, and treated as such.
When content is involved, we make sure that the host of the site is informed, and even go so far as to contact the webmaster or other administrators of the site by telephone as well as e-mail (assuming the Whois information is correct).
We do not police the internet - that is not our role. Gandi's job is to provide our customers with top-notch domain name management and excellent customer service.
But should the police or the community bring to our attention the fact that one of our domains is clearly involved in criminal activity, we cannot (as the historical excuse goes) "simply do our job"...
You can read our official position on this in the CNET article entitled, Survey: Are domain registrars free-speech friendly? where Gandi was voted by CNET as being one of the top two registrars that takes the most steps to guarantee against unnecessary domain name suspension!
This is roughly what I would like to hear from a domain registrar: "If we decide that we would rather not do further business with you, our customer, we will either discontinue service at the end or your registration period or assist you in transferring your domain registration elsewhere immediately. In the event that we are forced by court order to immediately discontinue your service, we will do so and immediately notify you of such action." (I'm not sure how a registrar would decide which court orders were worthy of action; those in their own area, or any court anywhere.)
Ryan wrote:
"If someone were to register a domain from us and in turn use it for a child pornography ring, would then Gandi be involved in supporting that ring if it turned a blind eye?"
Gandi would be no more involved than some government (or, I suppose private) agency at which the company's name was trademarked. You are a domain registrar, not a Web host (save for cases of Gandi-hosted data, such as your new blogging service).
"We must have the tools with which to combat domain abuse."
Please define "domain abuse". Upon first glance, at least, it seems to me that "domain abuse" should primarily include acts such as fraudulent or slanderous information in domain names and WHOIS data. "Unlike some registrars, we do not have a knee-jerk reaction to complaints; each one is unique, and treated as such." This is appreciated.
"But should the police or the community bring to our attention the fact that one of our domains is clearly involved in criminal activity, we cannot (as the historical excuse goes) "simply do our job"..."
First, thank you for being a registrar that makes it clear that domains registered through you are the property of your customers, not you. I assume that when you wrote "our domains" you meant "customers' domains that were registered through us".
Second, please explain which set of laws you intend to use for your definition of criminal activity, and whether, for jurisdictions in which someone is considered innocent until proven guilty by a court system, you intend to judge someone's involvement with crime yourself or to leave this up to the applicable court system.
Third (this is a really important point, and I sincerely hope that you will discuss it further here): I'd like to hear you compare and contrast a) Gandi's relationship to and responsibility for criminal activity clearly perpetrated by someone who uses a machine that uses an IP address that resolves from a host name in a domain that was registered with Gandi, b) the relationship and responsibility of and agency of a nation that grants exclusive use of a business name or trademark to criminal activity clearly perpetrated by someone who uses a name or trademark registered with that agency.
"You can read our official position on this in the CNET article entitled, Survey: Are domain registrars free-speech friendly?"
Thanks for the pointer. I read it. I was particularly interested in domain registrars' answers to this question posed by CNET: "Under what circumstances will you suspend a customer's domain name based on the content of his or her Web site, in the absence of a court order?"
DirectNIC's response: "In the absence of a court order we will suspend a domain name based on the content if the domain name is clearly focused on child porn or a phishing site. As an example, we would not shut down CNET.com if someone posted in a comment section a link to child porn hosted elsewhere. However, we would likely report the issue to CNET's abuse department so that they could take action."
In my opinion, this oversteps their obligation, but I like the fact that they have set a clear line between what they find acceptable and what they find non-acceptable.
Gandi's response: "In some instances, Gandi has suspended domain names where we have found that the Web site that uses the domain is clearly used for blatant illicit activity, and which has been recognized as doing so by other respected and identified sources. A clear example of this is when a domain is used to point to a well-known spam scheme such as "My Canadian Pharmacy." "
In my opinion, this similarly oversteps your obligation, but you have tied the line between what you think is right and wrong to an arbitrary set of ever-changing rules set by an arbitrary set of nations. You're in France, right? You are aware of the asinine state of many areas of law in the United States, right? Are you really willing to base your decision of whether or not to interfere with the activities of your customer on laws in foreign nations?
Ryan,
Perhaps you would like to comment and respond to the posts at nanae too !
http://groups.google.co.uk/group/ne...
Why do you allow the botnet abuse to continually occur ? Often by the same abusers !
Please publish response here and/or via nanae for the record.
Thank you.
Thank You Ryan - for your positive commitment and posts at NANAE
http://groups.google.co.uk/group/ne...
Well done !!!
Thanks Eddie - though I should add that you are seeing Gandi as we really are!
As you can see, we do have a very strong anti-domain abuse policy, and this is something that is recognized now by the internet community. With so many domain names, we rely in part on the vigilance of everyone out there in computerland, to bring cases of domain abuse to our attention. While we do take pro-active measures with regards to domain abuse, it is also very important that domains are brought to our attention as well
About my comment "for the record"....I think I will have to let our actions do the talking for now
PM,
It seems to me that you may be interested hosting content that is considered illegal by many nations, and are attempting to bash Ghandi for taking a stand against such sites.
PM wrote:
"This is roughly what I would like to hear from a domain registrar..."
My Reply:
It is _beyond_ impractical for registrars to obtain court orders to suspend domains, and to suggest such is _absurd_. If you knew _anything_ about how rampant domain abuse is, you wouldn't suggest it unless you want to host a criminal site or want the internet unusably littered by rampant amounts of illegal drug, spam, and child porn sites.
It is of my opinion that if you pay for a domain and use it to point to a site that hosts illegal content, you should expect to forfeit your domain and monies, though that may not be Ghandi's policy - Ryan could clarify. Using your own Trademark comparison, if a trademark was revoked for some reason, you would not be refunded the fees used to obtain said trademark.
PM wrote:
"Gandi would be no more involved than some government (or, I suppose private) agency at which the company's name was trademarked. You are a domain registrar, not a Web host (save for cases of Gandi-hosted data, such as your new blogging service)." and "compare and contrast a) Gandi's relationship to and responsibility for criminal activity clearly perpetrated by someone who uses a machine that uses an IP address that resolves from a host name in a domain that was registered with Gandi, b) the relationship and responsibility of and agency of a nation that grants exclusive use of a business name or trademark to criminal activity clearly perpetrated by someone who uses a name or trademark registered with that agency."
My Reply:
It is clear that Ghandi is not overstepping any of their obligations in removing domains used for illegal activity. Your statement is interesting, but does not apply here. Ghandi not only sells your the domain name, but they also use their servers to resolve the domain name to the host. The agency where you apply for a trademark/business name that gets used for criminal activity has no such continuous connection. Beside that, a trademark could be revoked just as a domain name can be suspended.
If Ghandi can prevent an illegal site from being accessed, then they have a responsibility to take action. It would be different if they sold the domain to you but were not responsible for it resolving - in that case your requested comparison could be more similar. However, since Ghandi's servers actively take part in making a site accessible, Ghandi would become complicit if they refused to remove a domain pointing to a site that contains content that is recognized as being illegal in their nation or other nations they do business in. Often this content is the illegal sale of drugs, sites used to steal personal information, child porn, and piracy. If Ghandi was complicit, they could then be held liable by the authorities, which they surely wish to avoid.
Ryan, maybe you should define abuse of a domain. Might I recommend:
1) Using inaccurate or misleading data in the Whois of any registered domain
2) Using a domain to point to another domain or site that displays or contains content deemed as illegal by the countries you operate in. This content includes, but is not limited to, spammed sites, illegal sale of drugs, phishing sites and other sites shown to be in operation to steal personal data, child porn, and software piracy.
KyferEz
It ultimately comes down to the TOS that the user agrees to. Just like there are hosts that allow porn, there are those that do not.. so is the same for registrars: some are more leniant and open to content than others.
By registering with a company, say Gandi, you're agreeing to THEIR terms for registration of your name. If you don't abide, they can suspend/deactivate as per the TOS you agree to.
I don't see what the issue is... you choose a business for, say, office supplies, based on the company, what they offer and you can choose any company you like. If you don't like the way a company operates DON'T DO BUSINESS WITH THEM. Capitalism at its finest.
>If you don't like the way a company operates DON'T DO BUSINESS WITH THEM. Capitalism at its finest.
I agree totally. The corollary is equally true - if you DO like the way a company does business, MOVE YOUR BUSINESS THEIR WAY. I'm not going to jump into the bed of the spammer friendly scammer haven registrars. More capitlalism at its finest.
KyferEz wrote: "It seems to me that you may be interested hosting content that is considered illegal by many nations, and are attempting to bash Ghandi for taking a stand against such sites."
I'm not attempting to bash Gandi at all.
I am not, to my knowledge, interested in hosting content that is considered illegal anywhere, but I am not familiar with the laws of all nations, so who knows? For instance, on my personal blog, I often criticize the actions of my government. I think that is illegal in some places. The way things are going in my country, it's not unreasonable to think that doing so might someday be illegal here, as well.
I'm really just trying to pin down what Gandi's policies are.
"It is _beyond_ impractical for registrars to obtain court orders to suspend domains, and to suggest such is _absurd_. "
I never said that a registrar should obtain a court order in order to suspend a domain. Please re-read my comment.
"It is clear that Ghandi is not overstepping any of their obligations in removing domains used for illegal activity."
I contend that it is not Gandi's responsibility to judge the legality of their clients' actions.
I don't know how it works in France, but in some nations, guilt in the eyes of the law is determined by a judge, and when individual citizens determine guilt and impose punishment, it is called vigilantism.
"If Ghandi can prevent an illegal site from being accessed, then they have a responsibility to take action."
Maybe (I don't think so), but with whose set of laws will they determine whether something is legal or not? And will they have their attorneys make such a decision, or just have their abuse department take a guess?
What if a Gandi-registered domain is used by someone in a place like China, where the government goes to great lengths to censor certain political speech? What if someone hosts information that is "copyrighted" in one nation on a machine located in a nation that does not observe such copyright or regulates it differently (loose examples: The Pirate Bay in Sweden, AllOfMP3 in Russia)? What if Newscorp (MySpace) calls and says that a Gandi client is illegally hosting the archives of a full-disclosure security mailing list, and they want it taken down?
"Ghandi not only sells your the domain name, but they also use their servers to resolve the domain name to the host."
I think this is only the case if they provide DNS for a domain.
"Ryan, maybe you should define abuse of a domain."
*Maybe* they should? Of course they should.
> On Wednesday 14 February 2007, 22:21 by Ryan
> " I should add that you are seeing Gandi as we really are! "
Thank you Ryan/Gandi !!
I was mistaken and take it all back !!
For the record
With apologies, I have also reflected my sentiments at nanae
http://groups.google.co.uk/group/ne...
Keep up the good work - Gandi is indeed up there with the top registrars !
You are too kind, thank you!
But, of course, now you are really putting us under pressure!!
PM wrote:
"I never said that a registrar should obtain a court order in order to suspend a domain. Please re-read my comment."
My Reply:
No, not in those exact terms, but it certainly sounds as if that is what you would prefer. Yes, yes, I know you say you want assistance transferring the domain or for them to host it until the end of it's term if they decide they don't want your business, but allowing that sort of action enables obvious criminals to easily continue operations and I for one don't want to see _any_ registrar adopt that sort of policy. I've said it once about court orders, and I'll say it again as it applies here too: If you knew _anything_ about how rampant domain abuse is, you wouldn't suggest such things unless you want to host a criminal site or want the internet unusably littered by rampant amounts of illegal drug, spam, and child porn sites.
PM wrote:
"I contend that it is not Gandi's responsibility to judge the legality of their clients' actions."
My Reply:
They are not judging your actions so much as they are following precedent where it comes to clearly defined laws being broken. Whose laws? See below.
PM Wrote:
"Maybe (I don't think so), but with whose set of laws will they determine whether something is legal or not? And will they have their attorneys make such a decision, or just have their abuse department take a guess?"
My Reply:
I've already answered part of that: "...in their nation or other nations they do business in."
I don't see the need for lawyers - unless the actions are questionable. Clear violation of laws (in the case of child porn, spamming, illegal sale of drugs) shouldn't require a lawyer being involved.
PM wrote:
"What if a Gandi-registered domain is used by someone in a place like China, where the government goes to great lengths to censor certain political speech? What if someone hosts information that is "copyrighted" in one nation on a machine located in a nation that does not observe such copyright or regulates it differently (loose examples: The Pirate Bay in Sweden, AllOfMP3 in Russia)? What if Newscorp (MySpace) calls and says that a Gandi client is illegally hosting the archives of a full-disclosure security mailing list, and they want it taken down?"
My Reply:
Like I said, laws "...in their nation or other nations they do business in." should be followed. Lets take the Pirate Bay example. Note I don't speak for Gandi in the following, but this is my opinion of how it should work. Ryan, will you clarify your stand?:
If a registrar was subject to copyright laws by their nation (or by a treaty their nation entered into) then they should abide by those laws or treaties. If there are not under such laws, and the user of the registrar's service was not in a country under any copyright laws either, they there is no reason to abide by another country's laws. However, if the user (the person who registered the domain, not some person browsing the site) of their service is under those copyright laws, then copyright laws should be enforced. If a registrar was under copyright laws, but not the user, the copyright laws should still be enforced. In Pirate Bay's case, neither user nor hosts are under copyright laws, and neither should be required to abide by those laws. As I've said, this is how those things should work, but may not be Gandi's stand.
PM wrote:
"What if Newscorp (MySpace) calls and says that a Gandi client is illegally hosting the archives of a full-disclosure security mailing list, and they want it taken down?"
My Reply:
Ryan already gave a clear answer to that. Stop rehashing please. In paraphrase: They open a case to examine merit of the claim and if it has merit, attempt to contact the client. Lets just suppose your logins and passwords for your bank(s) was posted for all to see. Wouldn't you want it taken down asap? GoDaddy's response was not unreasonable (as long as the claims were verified first), and Gandi's response shows they are even more responsible in attempting to contact their customer.
PM Wrote:
"*Maybe* they should? Of course they should."
My Reply:
Yes, but note that any such listing of things will nearly always be prefaced with: "including, but not limited to". So you still won't have an exhaustive listing, but at least it will be clearer.
If you don't like Gandi's stand on such issues, go somewhere else. It's quite clear they don't want the business of those intending to use their site for illegal content, and if you are using it for questionable reasons, you are taking a chance with Gandi or any other registrar, plain and simle. You have a better understanding of Gandi's policies than any other registrar out there. Make a decision already.
I am grateful for the questions posed by PM906 and would also like to see further discussion. The responses by KyferEz are unhelpful. Suggesting that PM906 wants to host illegal content completely ignores his (legitimate) concerns. He clearly explained that his concerns are related to politics and national boundaries. I have similar concerns.
We are a local internet service provider based in the United States. We have for some time directed our customers to Gandi because of their belief that a customer owns their domain. Many registrars believe that they own their customers' domains.
Many of our customers are progressive political activists. In some countries, some of the web sites we host might be considered illegal because of their political content. In some countries, some of the web sites we host might be considered illegal because they parody copyrighted content. This is protected to some degree in the United States, but as PM906 points out, things change.
This is the second reason we direct our customers to Gandi: we fear our government. We think french soil might protect us more than the United States constitution and legal system, both of which are under constant attack by forces that oppose the progressive agenda advanced by our company and our customers.
We are thankful that Gandi has some of the best domain name registration policies in the world, that they won't suspend domains without cause. PM906's additional inquiries, however, are worth considering. We have a saying, "the price of liberty is eternal vigilance." Keep up the good work, Gandi. Thanks for engaging your customers. We continue to be impressed.
BL wrote:
" I am grateful for the questions posed by PM906 and would also like to see further discussion. The responses by KyferEz are unhelpful. Suggesting that PM906 wants to host illegal content completely ignores his (legitimate) concerns. He clearly explained that his concerns are related to politics and national boundaries. I have similar concerns."
My Reply:
If you read my last response, dated Friday 16 February 2007, 18:56, you will see I clearly answered ALL of the questions posed by PM. It is likely that you made your post before mine was available (there several days lag before posts are visible after being made), so I won't fault you for this reply, however, most people who wage war with spammers on a daily basis would agree that PM sounds like someone interested in using Gandi's services for questionable purposes... I simply called him out on it to see his response, which was reasonable, unlike a typical spammer.
BL wrote:
" We are a local internet service provider based in the United States. We have for some time directed our customers to Gandi because of their belief that a customer owns their domain. Many registrars believe that they own their customers' domains."
My reply:
Registrars don't necessarily own the domain, however they do provide services for it, and can suspend that service at any time. If that domain was used for illegal purposes, especially if the domain was purchased using stolen CC information, then the registrar does acutally own the domain, as it was never legally purchased. As such, they have the right to suspend and lock out transfers and updates.
BL wrote:
" Many of our customers are progressive political activists. In some countries, some of the web sites we host might be considered illegal because of their political content. In some countries, some of the web sites we host might be considered illegal because they parody copyrighted content. This is protected to some degree in the United States, but as PM906 points out, things change."
My reply:
This sort of situation was responded to by me in my last post dated Friday 16 February 2007, 18:56. Here it is again:
"Like I said, laws "...in their nation or other nations they do business in." should be followed. Lets take the Pirate Bay example. Note I don't speak for Gandi in the following, but this is my opinion of how it should work. Ryan, will you clarify your stand?:
If a registrar was subject to copyright laws by their nation (or by a treaty their nation entered into) then they should abide by those laws or treaties. If there are not under such laws, and the user of the registrar's service was not in a country under any copyright laws either, they there is no reason to abide by another country's laws. However, if the user (the person who registered the domain, not some person browsing the site) of their service is under those copyright laws, then copyright laws should be enforced. If a registrar was under copyright laws, but not the user, the copyright laws should still be enforced. In Pirate Bay's case, neither user nor hosts are under copyright laws, and neither should be required to abide by those laws. As I've said, this is how those things should work, but may not be Gandi's stand."
Read the prior posting for full context.
BL wrote:
" This is the second reason we direct our customers to Gandi: we fear our government. We think french soil might protect us more than the United States constitution and legal system, both of which are under constant attack by forces that oppose the progressive agenda advanced by our company and our customers."
My reply:
I won't argue with that. Certainly RIAA and MPAA are just two such "forces" at work in the USA; and if the site will be used for questionable content, you likely should directly contact Gandi about the type of content to see their stand on that particular site. I'm sure they will be willing to work with you directly, and this is not the place for outlining such specifics.
BL wrote:
We are thankful that Gandi has some of the best domain name registration policies in the world, that they won't suspend domains without cause. PM906's additional inquiries, however, are worth considering. We have a saying, "the price of liberty is eternal vigilance." Keep up the good work, Gandi. Thanks for engaging your customers. We continue to be impressed.
My reply:
Yes, Gandi is an excellent registrar to do business with, and you can be sure you will be treated fairly. As for the rest of your comment, see my reply above.
Aside: The saying is correctly quoted as: “eternal vigilance is the price of liberty” - by Wendell Phillips
Humm, does anyone else think BL169-GANDI's screenname is familiar [ahem: PM906-GANDI]. So both people didn't provide a real Name and are both arguing the same thing. Go figure.
PM, I mean BL (haha
), I just wanted to comment on your statement "we fear our government." If you fear your government, then you obviously have some reason to fear them. Usually someone that fears their government is either doing something they shouldn't, or is a bit paranoid. If the former is the case, I suggest you either stop doing what is causing you to fear them, or move to a country that doesn't make you fearful!
cyborg
Wow guys, there is a lot to comment on!
I apologize for not jumping in sooner, but we've been quite busy in the Customer Care Department, and I have a load of botnets that are in the middle of investigation...
Put simply, I will say this: Gandi.net is in France, and as such our business activity is governed by French law (copyright, intellectual rights, etc.). We are also an ICANN-accredited registrar, and so in that respect we must adhere to the terms and conditions of our contract with the registries, and the governing principles of our ICANN accreditation.
What makes us different from other registrars is the people here at Gandi. We are not machines with boolean filters in our brains that say something like:
...rather, we look at a complaint and say, "Is this really a spam? Who says it is spam? Why is it spam? Is the domain in violation of our T&C? If we continue to allow the domain to be registered with us does that put us in violation of French law? Does the domain adhere to ICANN rules for registrar accreditation? etc.There are many questions that I ask for each complaint I receive, simply because I am not a robot. If ever, *ever*, I hesitate in a case, the first thing I do is call the person (by the way BL, your telephone number in the whois did not work this morning
), and will call a meeting with Gandi's management to discuss the case, even our lawyer, because I always give our customers the benefit of the doubt.
Everyone is looking for a "black and white" answer to the question "When does Gandi suspend a domain"... I will say this, "the world is full of colors, and we're not trigger happy...each case is very carefully examined (in its content, within its context, with regards to French law and our ICANN accreditation, etc.) and well documented (so that we can prove to all that a suspension was justified) before any action is taken, so unless you are a spammer, fear not!
P.S. Don't spam, it is not nice.
In response to KyferEz's comments:
KE> It is clear that Ghandi is not overstepping any of their obligations
KE> in removing domains used for illegal activity."
PM> I contend that it is not Gandi's responsibility to judge the legality of
PM> their clients' actions. I don't know how it works in France, but in
PM> some nations, guilt in the eyes of the law is determined by a judge, and
PM> when individual citizens determine guilt and impose punishment, it is
PM> called vigilantism.
KE> They are not judging your actions so much as they are following
KE> precedent where it comes to clearly defined laws being broken.
If someone comes to Gandi and says, "Your client is acting illegally,"
and in response, Gandi says, "Yes, it appears that our client is acting
illegally," then yes, they have judged the client's actions. In this
case, I feel it is okay for Gandi to decline to renew service at the end
of the term that was agreed upon. I do not feel that it is okay for
Gandi to suspend the client's domain as some sort of retaliatory or
punative action. It's just not their place to do so.
Violations of previously-agreed-upon terms of service are a different
situation altogether.
PM> This is roughly what I would like to hear from a domain registrar:
PM> "[...] In the event that we are forced by court order to immediately
PM> discontinue your service, we will do so and immediately notify you of
PM> such action."
KE> "It is _beyond_ impractical for registrars to obtain court orders to
KE> suspend domains, and to suggest such is _absurd_. "
PM> I never said that a registrar should obtain a court order in order to
PM> suspend a domain. Please re-read my comment.
KE> No, not in those exact terms, but it certainly sounds as if that is what
KE> you would prefer.
Well, since I did not suggest it, please do not accuse me of having done
so. I still believe that it is not Gandi's place to judge guilt and
impose punitive action, as I do not believe in vigilante justice.
Of course Gandi does not need to obtain a court order to discontinue
service to its customer. I would like for Gandi to state that if they
*choose* to discontinue service to a customer for reasons other than the
customer violating terms of service, they will either complete the term
of service and decline to renew, or assist to some reasonable degree
with transfer to a different registrar. Agreeing to provide a service,
then saying, "Oh, we don't like what you're doing, so we'll take
whatever action we can (regardless of agreements we made with you) to
stop you from doing what you are doing", just doesn't seem ethical to
me. In the case of a court order, Gandi would not be choosing anything.
KE> I've said it once about court orders, and I'll say it again as it
KE> applies here too: If you knew _anything_ about how rampant domain
KE> abuse is, you wouldn't suggest such things unless you want to host a
KE> criminal site or want the internet unusably littered by rampant
KE> amounts of illegal drug, spam, and child porn sites.
That is incorrect. My opinion of whether or not a court order is good
reason for a domain registrar to take action is not affected by whether
or not I know anything about the rampancy of "domain abuse". That said,
I'm still waiting for someone to define "domain abuse".
KyferEz's attitude is troubling. Many people express similar sentiments
when it comes to police combating crime. How does this sound: "If you
only knew how bad crime is in my neighborhood, you would never suggest
that law enforcement officers should obtain a search warrant before
entering the home of someone accused of crime." I do not wish to live
in a police state.
KE> "Ghandi not only sells your the domain name, but they also use their
KE> servers to resolve the domain name to the host."
PM> I think this is only the case if they provide DNS for a domain.
Does anyone care to respond to this? Are Gandi's DNS servers involved
if a domain registered through them uses a third-party DNS service?
KE> If Ghandi can prevent an illegal site from being accessed, then they
KE> have a responsibility to take action. It would be different if they
KE> sold the domain to you but were not responsible for it resolving
...such as would be the case if someone registered a domain with Gandi
then opted not to use Gandi's DNS servers. Also, Gandi doesn't sell
domains (no one can own a domain prior to it's creation by registration)
they simply register them.
KE> Using your own Trademark comparison, if a trademark was revoked for
KE> some reason, you would not be refunded the fees used to obtain said
KE> trademark.
Please don't resort to straw-man arguments. I never said anything about
whether a fee should be refunded when a domain registrar (or trademark
registry, etc.) elects to discontinue service to a customer. The point
that I attempted to make (in response to Ryan's statement about Gandi's
responsibility to police Web sites) is that whoever maintains the
registry of names of organizations is not responsible for the actions of
those organizations.
> Registrars don't necessarily own the domain, however they do provide
> services for it, and can suspend that service at any time
This doesn't even make sense. Gandi makes it very clear that their
customers own domains and that they are simply an intermediary. I don't
know what it means to "provide services for a domain" besides responding
to requests for information about the owner of the domain and to requests
for the name servers for a domain.
Let's go back to one of my previous questions: Should a utility company
providing electricity turn off a customer's electricity because he was
accused of committing some crime that is only tangentially related to
the use of electricity? What about the postal service? Should the local
transportation department be obligated to come and break up the road
leading to a place at which they have been told that inappropriate activity
occurs? It's all absurd.
Gandi is a domain registrar. I believe that their obligation to police
their clients actions ends with actions directly related to domain
registration (and WHOIS data, etc.). The content of a Web site hosted
on a computer using an IP address to which a host name within a
Gandi-registered domain resolves is no more Gandi's business that it is
the business of the operator of the equipment used to build the road to
the location at which the computer is located.
cyborg wrote:
> does anyone else think BL169-GANDI's screenname is familiar [ahem:
> PM906-GANDI]. So both people didn't provide a real Name and are both
> arguing the same thing.
If they look familiar, Mr. cyborg (if that's really your name), it's
probably because they both look like the [Gandi-assigned handles][1]
that Gandi customers use.
> I just wanted to comment on your statement "we fear our government."
> If you fear your government, then you obviously have some reason to
> fear them.
I agree, and I'll list some reasons for you:
[Amnesty International stated last year][2] that over the past five years,
they have seen the United States "engage in systematic violations of
international law" including:
* Secret detention
* Enforced disappearance
* Torture and other cruel, inhuman or degrading treatment
* Outrages upon personal dignity, including humiliating treatment
* Denial and restriction of [habeas corpus][3]
* Indefinite detention without charge or trial
* Prolonged incommunicado detention
* Arbitrary detention
* Unfair trial procedures
And since George W. Bush signed the [Military Commissions Act of
2006][4], we in the United states:
* Allow torture (or rather, our President gets to say what is torture
and what is not)
* Do not have to abide by the Geneva Conventions
* Can grab non-Americans from anywhere and hold them indefinitely,
without charge, without access to a judge or an attorney, based
simply on accusations. (No more innocent until proven guilty -- it's
guilty if we say so, and we don't have to tell you what you're guilty
of.)
* Can label anyone, including Americans, to be an "enemy combatant" if
he is found to have "knowingly provided material support" to a
terrorist, or if a military tribunal (a board of at least three
officers) simply says that he is an enemy combatant.
So, yes, we and everyone else have good reason to fear the United
States government.
References:
[1]: http://www.gandi.net/faq/tutorial/6...
[2]: http://web.amnesty.org/library/inde...
[3]: http://en.wikipedia.org/wiki/Habeas...
[4]: http://thomas.loc.gov/cgi-bin/query...
> Don't spam, it is not nice.
I agree. In fact, I choose to do business with an [ISP][1] that [sues spammers][2].
References:
[1]: http://inwa.net/
[2]: http://smallclaim.info/
Ryan, our phone number is correct. The problem is this new-fangled VOIP technology. We continue to own the number and it mostly works. Sometimes though, it doesn't, and we have to figure out silly workarounds like "if you call out first, incoming calls will start working again, so call out every few hours." We also lose business then, but more frustrating is the work involved in getting the crap to work, as well as potential problems like ya'll sticking us through the suspension process.
KyferEz, the suggestion that the price of liberty is eternal vigilence came before Wendell Phillips. John Philpot Curran is usually given credit for this in a 1790 speech, though it likely came before him. You should probably start correcting internet people to the Curran quote, because Curran was massively funnier than Phillips.
Cyborg, PM906 and I are using our Gandi IDs, which are significantly more informative than any other user name posted here. If you look that up you can start finding out all kinds of things about me, like the fact that I'm one of the first people to collect money suing spammers (http://smallclaim.info) or that I work on pot legalization initiatives (http://sensibleseattle.org) and festivals (http://hempfest.org), or that the man sometimes messes with me (http://inwa.net/~ben/trespass/). Your suggestion that nobody should fear their government if they are doing nothing illegal -- well, I'll let that stand on its own.
Thanks again, Gandi.
I learned about Gandi from the CNET survey. I am visiting to find out the outlets for maximum free speech available on the net. Gandi seemed like a superior candidate provider of an internet named identity for an entity seeking uncensored speech.
I find statements by KyferEz and Cyborg disturbing and precisely the attitude and thought process against which Gandi and all registrars should be vigilant. Questions- mere questions about Gandi's policies - led to thinly veiled accusations and suspicions of illegal and criminal intent. Suggesting the solution that Gandi allow governments and courts to determine what is and is not legal rather than assume that responsibility themselves was met with the accusation that the petitioner must then *want* to see child porn and phishing on the net. Cyborg suggested that people who fear government usually are doing something they should not be doing or are paranoid. The claim was made that knowledge of illegal activity requires a party to report the activity or stand responsible for the continuation of the activity, and, statements are made such as " support criminal activity by not acting on abuse reports." And finally, petitioners were told, if you don't like Gandi's policies, go elsewhere.
Militant ethnocentrics use such tactics in shaping government and corporate policies.
One of the founding principles of the United States at least is that all people should fear all governments. Gandi's position is that it serves customers so it is completely proper for customers to petition Gandi to change what the customer does not like before "going elsewhere". Tagging people with desires to allow child pornography on the net is clearly inflamatory and in the face of absolutely no affirmative evidence of such is also clearly negligent, reckless, or purposely McCarthyism. I do not know the laws of France, but in many jurisdictions knowledge of illegal activity does not require reporting of illegal activity - in many neighborhoods, reporting local crimes is a quick way to death.
Judgements about legal vs. illegal activity are finally decided by judicial processes, legal judgments by non-judicial processes are guesses. Obviously, such processes are slow to act in many cases such as copyright violations. In cases of real child pornography or terrorist activity, law enforcement and judicial processes can and do work very quickly. Obviously, society and governments have the capability of assigning priority and relative importance and they have done so.
For individuals entities to make such decisions is to usurp the place of the state with the paradigms and epistemes of private entities. Individuals and companies can and do make similar judgements about what they do and do not support. What is not mandated by law and ICANN agreements is regulated by Gandi's choice. The question that has now been brought up by Ryan's initial post and subsequent comments here is how much free speech Gandi intends to service.
Ryan apparently cites "morally objectionable" content as an example of illegal, fraudulent, or prejudicial activity. PM906-GANDI then opines its concern with morality as within Gandi's proper purview. I searched the Gandi general and domain name specific TOS for the word moral and found no such occurrence. Compliance with law is part of the TOS, controlling spam is there too, morality is not explicitly declared. (My guess was that morality was omitted for a reason.)
Morality is generally considered the area of distinction between what is right and what is wrong and these concepts are known to be locally decided. Internet registrars serve so many localities that any reference to morality is therefore highly problematic...to use KyferEz's terms, morality on the world net is impractical to consider or enforce or judge with any sense of integrity except to a particular local set of rules. Local rules are antithetical to the conceptual space created by the internet's unique ability to connect and confuse regions.
This is the dynamic at play in regards to website content as well. I produce and distribute content related to pedophilia and childhood sexuality that is truthful as judged by numerous peer reviewed scientific journals based in various countries across decades of past research. However, these truths are not accepted by 98% of the Western public. The content, even content which has already been published in medical literature, is routinely censored, maligned, and removed from all manner of internet facilities due to "moral objection", "accusation of illegality", "TOS violation", or "harmful to minors".
The agent cause of such actions is almost always a complaint lodged by self-appointed moral vigilantees who pressure internet providers into making a politically correct choice to "save the children" under threat of public exposure for "assisting immoral actions".
Individuals and companies can and do make similar judgements about what they do and do not support. What is not mandated by law and ICANN agreements is regulated by Gandi's choice.
The question here now is how much free speech Gandi intends to service? I am not yet convinced that Ryan meant to say Gandi was now in the business of adjudicating what is moral. He started this post announcing a commitment to fight spam. Spam is considered illegal in many Western jurisdictions and I would guess otherwise as well. But there are many immoral laws in the view of many communities, e.g. anti-etuhenasia laws, prohibitions of medicinal use of marijuana.
But let's assume Ryan is in fact accurately stating a corporate decision by Gandi to terminate service that may abet immoral behavior. PM906-GANDI in effect asks, since Ryan is declaring for the first time that morality with its requisite reliance on local rules will be a criteria for service, what is the local set of morality rules Gandi will use?
I am looking for a registrar who understand's Ibsen's Enemy of the People.
"The minority is always in the right.....The majority never has right on its side. Never, I
say! That is one of these social lies against which an
independent, intelligent man must wage war. Who is it that
constitute the majority of the population in a country? Is it the
clever folk, or the stupid? I don't imagine you will dispute the
fact that at present the stupid people are in an absolutely
overwhelming majority all the world over. But, good Lord!--you
can never pretend that it is right that the stupid folk should
govern the clever ones I (Uproar and cries.) Oh, yes--you can
shout me down, I know! But you cannot answer me. The majority has
might on its side--unfortunately; but right it has not. I am in
the right--I and a few other scattered individuals. The minority
is always in the right.........I propose to raise a revolution against
the lie that the majority
has the monopoly of the truth. What sort of truths are they that
the majority usually supports? They are truths that are of such
advanced age that they are beginning to break up. And if a truth
is as old as that, it is also in a fair way to become a lie,
gentlemen.....The truths of which the masses now
approve are the very truths that the fighters at the outposts
held to in the days of our grandfathers. We fighters at the
outposts nowadays no longer approve of them; and I do not believe
there is any other well-ascertained truth except this, that no
community can live a healthy life if it is nourished only on such
old marrowless truths."
Now that Ryan has declared morality as a criteria Gandi will use to determine service, I am hoping it will find its way to become the strongest registrar in the world by becoming the registrar that stands most alone in supporting the speech of the smallest minority view unless that activity is illegal, fraudulent, or prejudicial.
Amorality is not immorality, and it may be the most moral stance on the internet.
It ultimately comes down to the TOS that the user agrees to. Just like there are hosts that allow porn, there are those that do not.. so is the same for registrars: some are more leniant and open to content than others.
Hello BL169-GANDI,
We also use a new-fangled VOIP technology for our telephone, so I do understand what you are talking about!
There too, however, you can see what I have been trying to say... As you can see, your domain has not been suspended simply because I could not reach you by telephone (unlike: http://domainnamewire.com/2007/02/2... ). Why? well, because I can reach you by e-mail, this forum, by mail, etc...
Of course, you might nonetheless consider changing the telephone number in your whois to one that works better, since, that is still the quickest way to contact you in the event of an emergency.
i appreciate gandi's responsible attitude to improper behaviour and the excellent comments by ryan and KyferEz.
the line between free speech and free screech really need not be as murky as some seem to wish it to be.
I'm afraid blocking domains from a domain registrar's perspective is flawed by nature in regards to spam. I've seen spammers forge the source address of their emails as coming from one of my domains, which is really easy to do. I don't use gandi's email system for my domains, so how can gandi tell that these spam messages came from my mail server or not?
In my hosting configuration I could have a different server for inbound and outbound email, so from the information gandi has about the domain configuration (most likely my inbound email server), gandi can't guess whether the IP(s) these emails are coming from are mine or not.
My point is that the source email address in any email can be forged very easily. So there is no point in punishing the owner of the domain used in that source. If the spam message contains a link to a child pornography website whose domain is controlled by gandi, then yes it makes perfectly sense to block that one. But punishing the owner of a domain which is used as some spam's source email address is nonsense.
Kouiskas, I understand your concern. This is one fact that we are very wall aware of
Indeed, we get a couple of complaints a week where I need to explain to the person who received the spam that the header was forged.
We perform a wide range of tests before any action is taken, and know precisely what needs to be done, or not. This process goes as far as contacting the domain owner personally and discussing the issue with them directly.
Blocking domains when used for spam is not flawed, it just requires that the registrar take a responsible attitude and not behave like wild west cowboys, shooting at the first thing that moves. Whether the domain is used as a fast flux nameserver that is used in connection with a botnet of hijacked machines, or one that is registered with the stolen identity of grandma, these are things that come up in our investigations...or not.
We don't make mistakes in this area, because of how completely we understand the nature of spam and domain abuse, and because our investigations are thorough and well-documented.
But don't just take my word on it! I invite you to refer to CNET, that concluded that Gandi is one of the two registrars that "...offer(s) the most extensive guarantees against unnecessary domain name suspension."
http://www.gandibar.net/post/2007/0...
Thanks for keeping this important debate alive!