<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:"Segoe UI Symbol";
panose-1:2 11 5 2 4 2 4 2 2 3;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph
{mso-style-priority:34;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
p.msonormal0, li.msonormal0, div.msonormal0
{mso-style-name:msonormal;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
span.EmailStyle19
{mso-style-type:personal;
font-family:"Calibri",sans-serif;
color:windowtext;}
span.EmailStyle20
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-SG" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;mso-fareast-language:EN-US">Comments received from Govt. of India.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;mso-fareast-language:EN-US">Regards,<br>
Sarmad Hussain<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><b><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri",sans-serif">From:</span></b><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri",sans-serif"> tsantosh@meity.gov.in [mailto:tsantosh@meity.gov.in]
<br>
<b>Sent:</b> Monday, May 01, 2017 11:13 AM<br>
<b>To:</b> Sarmad Hussain <sarmad.hussain@icann.org><br>
<b>Cc:</b> JS DeitY Rajiv Bansal; Pradeep Kumar Verma; Harish Chowdhary; shubham nixi
<br>
<b>Subject:</b> [Ext] Comments from India-Internationalized Domain Name (IDN) Implementation Guidelines<o:p></o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Dear Mr. Sarmad,<o:p></o:p></p>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Please find below the comments from India on Internationalized Domain Name (IDN) Implementation Guidelines <a href="https://www.icann.org/public-comments/idn-guidelines-2017-03-03-en">https://www.icann.org/public-comments/idn-guidelines-2017-03-03-en</a><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<blockquote style="margin-left:30.0pt;margin-right:0in">
<blockquote style="margin-left:30.0pt;margin-right:0in">
<blockquote style="margin-left:30.0pt;margin-right:0in">
<p class="MsoNormal" style="mso-margin-top-alt:auto;text-align:justify">For a diverse and global Internet where all languages and scripts can be used easily the universal acceptance for Unicode domain names (IDNs) and email addresses (EAIs) is crucial.The following
are suggested.<o:p></o:p></p>
</blockquote>
</blockquote>
<blockquote style="margin-left:30.0pt;margin-right:0in">
<blockquote style="margin-left:30.0pt;margin-right:0in">
<p class="MsoListParagraphCxSpFirst" style="mso-margin-top-alt:0in;margin-right:0in;margin-bottom:0in;margin-left:.75in;margin-bottom:.0001pt;mso-add-space:auto;text-align:justify;text-indent:-.5in">
<b>I.</b><span style="font-size:7.0pt"> </span><b>promote a better public understanding of the issue, countering the trend that "IDN URLs are for phishing"</b><o:p></o:p></p>
</blockquote>
</blockquote>
<blockquote style="margin-left:30.0pt;margin-right:0in">
<blockquote style="margin-left:30.0pt;margin-right:0in">
<p class="MsoListParagraphCxSpMiddle" style="mso-margin-top-alt:0in;margin-right:0in;margin-bottom:0in;margin-left:1.0in;margin-bottom:.0001pt;mso-add-space:auto;text-align:justify">
<b>Rationale</b><o:p></o:p></p>
</blockquote>
</blockquote>
<blockquote style="margin-left:30.0pt;margin-right:0in">
<blockquote style="margin-left:30.0pt;margin-right:0in">
<p class="MsoListParagraphCxSpMiddle" style="mso-margin-top-alt:0in;margin-right:0in;margin-bottom:0in;margin-left:1.5in;margin-bottom:.0001pt;mso-add-space:auto;text-align:justify;text-indent:-9.0pt">
<span style="font-size:7.0pt">
</span>i.<span style="font-size:7.0pt"> </span>Efforts to promote universal acceptance, to stop the misuse of IDNs for fraud and phishing is essential. Just very recently, many news sources reprised a security advice that directed users to disable the
display of IDN URLs in browsers, to prevent phishing by using whole-script confusable domain names: (<a href="https://www.wordfence.com/blog/2017/04/chrome-firefox-unicode-phishing/">https://www.wordfence.com/blog/2017/04/chrome-firefox-unicode-phishing/</a>)<o:p></o:p></p>
</blockquote>
</blockquote>
<blockquote style="margin-left:30.0pt;margin-right:0in">
<blockquote style="margin-left:30.0pt;margin-right:0in">
<p class="MsoListParagraphCxSpMiddle" style="mso-margin-top-alt:0in;margin-right:0in;margin-bottom:0in;margin-left:1.5in;margin-bottom:.0001pt;mso-add-space:auto;text-align:justify;text-indent:-9.0pt">
<span style="font-size:7.0pt">
</span>ii.<span style="font-size:7.0pt"> </span>Due to the point mentioned above, IDNs would start to be widely rejected throughout the Internet. It is thus an important responsibility by ICANN to prevent these dangers.<o:p></o:p></p>
</blockquote>
</blockquote>
<blockquote style="margin-left:30.0pt;margin-right:0in">
<blockquote style="margin-left:30.0pt;margin-right:0in">
<p class="MsoListParagraphCxSpMiddle" style="mso-margin-top-alt:0in;margin-right:0in;margin-bottom:0in;margin-left:.75in;margin-bottom:.0001pt;mso-add-space:auto;text-align:justify;text-indent:-.5in">
<b>II.</b><span style="font-size:7.0pt"> </span><b>To free the Internet from whole-script confusables (Similar characters in diffrenet scripts)</b><o:p></o:p></p>
</blockquote>
</blockquote>
<blockquote style="margin-left:30.0pt;margin-right:0in">
<blockquote style="margin-left:30.0pt;margin-right:0in">
<p class="MsoListParagraphCxSpMiddle" style="mso-margin-top-alt:0in;margin-right:0in;margin-bottom:0in;margin-left:1.5in;margin-bottom:.0001pt;mso-add-space:auto;text-align:justify;text-indent:-9.0pt">
<span style="font-size:7.0pt">
</span>iii.<span style="font-size:7.0pt"> </span>To establish, a basic principle, that any two domain names that look confusable to an average Internet user must be considered variants of the same domain name and must never be registered to different registrants.<o:p></o:p></p>
</blockquote>
</blockquote>
<blockquote style="margin-left:30.0pt;margin-right:0in">
<blockquote style="margin-left:30.0pt;margin-right:0in">
<p class="MsoListParagraphCxSpMiddle" style="mso-margin-top-alt:0in;margin-right:0in;margin-bottom:0in;margin-left:2.5in;margin-bottom:.0001pt;mso-add-space:auto;text-align:justify;text-indent:-.25in">
<span style="font-size:7.0pt">
</span>i.<span style="font-size:7.0pt"> </span>As confusability is by definition a subjective feature, there are technical standards
<b>(i.e. Unicode TR-39) </b> which provide an implementable definition and algorithm for detecting confusable domain names.It is advisable to implement these standards in the proposed guidelines.<o:p></o:p></p>
</blockquote>
</blockquote>
<blockquote style="margin-left:30.0pt;margin-right:0in">
<blockquote style="margin-left:30.0pt;margin-right:0in">
<p class="MsoListParagraphCxSpMiddle" style="mso-margin-top-alt:0in;margin-right:0in;margin-bottom:0in;margin-left:1.5in;margin-bottom:.0001pt;mso-add-space:auto;text-align:justify;text-indent:-9.0pt">
<span style="font-size:7.0pt">
</span>iv.<span style="font-size:7.0pt"> </span>In addition to that, allowing the registration of confusable domain names is not just hampering adoption of IDNs, but it is also creating significant financial and organizational costs to the rest of the
Internet. Even before any successful phishing attack happens, software developers and Internet service providers dealing with all sorts of Internet applications are forced to take into account possible homoglyph (look-a-like characters) attacks and implement
countermeasures. It is much more efficient to detect and stop these situations just once at the registry level, rather than have the entire Internet run around in circles to deal with them.<o:p></o:p></p>
</blockquote>
</blockquote>
<blockquote style="margin-left:30.0pt;margin-right:0in">
<blockquote style="margin-left:30.0pt;margin-right:0in">
<p class="MsoListParagraphCxSpMiddle" style="mso-margin-top-alt:0in;margin-right:0in;margin-bottom:0in;margin-left:1.5in;margin-bottom:.0001pt;mso-add-space:auto;text-align:justify;text-indent:-9.0pt">
<span style="font-size:7.0pt">
</span>v.<span style="font-size:7.0pt"> </span>To the specific issue of whole script confusables, point 17 of the current recommendation is a "may" rather than a "must". But if we feel that it should move to a must. Replacing “may” to must will help to
stop registration of the domains like "g00gle.com", to put blocks on cyber-squatting.<o:p></o:p></p>
</blockquote>
</blockquote>
<blockquote style="margin-left:30.0pt;margin-right:0in">
<blockquote style="margin-left:30.0pt;margin-right:0in">
<p class="MsoListParagraphCxSpMiddle" style="mso-margin-top-alt:0in;margin-right:0in;margin-bottom:0in;margin-left:1.5in;margin-bottom:.0001pt;mso-add-space:auto;text-align:justify;text-indent:-9.0pt">
<span style="font-size:7.0pt">
</span>vi.<span style="font-size:7.0pt"> </span>In point 16 of the proposed draft, and to make the detection and blocking of whole-script confusables compulsory. The first sentence of point 16 should thus be replaced by the following<o:p></o:p></p>
</blockquote>
</blockquote>
<blockquote style="margin-left:30.0pt;margin-right:0in">
<blockquote style="margin-left:30.0pt;margin-right:0in">
<p class="MsoListParagraphCxSpMiddle" style="mso-margin-top-alt:0in;margin-right:0in;margin-bottom:0in;margin-left:1.5in;margin-bottom:.0001pt;mso-add-space:auto;text-align:justify">
<i>TLD registries must apply to new registrations whole label evaluation rules that minimize whole-script confusables as determined by Unicode Technical Standard #39: Unicode Security Mechanisms; new domain names that according to those rules are whole-script
confusables in respect to an existing domain name must be </i><o:p></o:p></p>
</blockquote>
</blockquote>
<blockquote style="margin-left:30.0pt;margin-right:0in">
<blockquote style="margin-left:30.0pt;margin-right:0in">
<p class="MsoListParagraphCxSpMiddle" style="mso-margin-top-alt:0in;margin-right:0in;margin-bottom:0in;margin-left:1.5in;margin-bottom:.0001pt;mso-add-space:auto;text-align:justify">
<i>a) allocated to the same registrant of the existing domain name, or </i><o:p></o:p></p>
</blockquote>
</blockquote>
<blockquote style="margin-left:30.0pt;margin-right:0in">
<blockquote style="margin-left:30.0pt;margin-right:0in">
<p class="MsoListParagraphCxSpMiddle" style="mso-margin-top-alt:0in;margin-right:0in;margin-bottom:0in;margin-left:1.5in;margin-bottom:.0001pt;mso-add-space:auto;text-align:justify">
<i>b) blocked from registration.</i><o:p></o:p></p>
</blockquote>
</blockquote>
<blockquote style="margin-left:30.0pt;margin-right:0in">
<blockquote style="margin-left:30.0pt;margin-right:0in">
<p class="MsoListParagraphCxSpMiddle" style="mso-margin-top-alt:0in;margin-right:0in;margin-bottom:0in;margin-left:.75in;margin-bottom:.0001pt;mso-add-space:auto;text-align:justify;text-indent:-.5in">
<b>III.</b><span style="font-size:7.0pt"> </span><b>To deal with Emojis</b><o:p></o:p></p>
</blockquote>
</blockquote>
<blockquote style="margin-left:30.0pt;margin-right:0in">
<blockquote style="margin-left:30.0pt;margin-right:0in">
<p class="MsoListParagraphCxSpLast" style="mso-margin-top-alt:0in;margin-right:0in;margin-bottom:0in;margin-left:1.5in;margin-bottom:.0001pt;mso-add-space:auto;text-align:justify;text-indent:-9.0pt">
<span style="font-size:7.0pt">
</span>i.<span style="font-size:7.0pt"> </span>There should be separate guidelines to deal with EMOJIS.<o:p></o:p></p>
</blockquote>
</blockquote>
<blockquote style="margin-left:30.0pt;margin-right:0in">
<blockquote style="margin-left:30.0pt;margin-right:0in">
<div>
<p class="MsoNormal"><span style="background:white"> E.g. https://</span><span style="font-family:"Segoe UI Symbol",sans-serif;background:white">❤❤❤</span><span style="background:white">.ws/</span> <o:p></o:p></p>
</div>
</blockquote>
</blockquote>
</blockquote>
<div>
<p class="MsoNormal"><br>
-- <o:p></o:p></p>
<div>
<p class="MsoNormal">Warm Regards <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><br>
T.Santhosh <br>
Scientist 'E' / Additional Director<br>
Ministry of Electronics and Information Technology<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">Government of India<br>
Electronics Niketan, 6 CGO Complex, <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">New Delhi - 110003 (<b>India</b>) <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">Tel: +91-11-24364741, 24301831<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</div>
</div>
</body>
</html>