<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">
<div dir="auto" style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">
Hi Bill.</div>
<div dir="auto" style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">
Thanks for answering my question.<br class="">
<div class=""><br class="">
</div>
<div class="">The reason why I was asking for data is that I am very suspicious about analyses based only on suppositions, in particular when suppositions are addressed in one direction only.</div>
<div class=""><br class="">
</div>
<div class="">Since we are in the domain (pun not intended) of hypotheses, I will propose mine - supported, when possible, by observation - going in a different direction.</div>
<div class=""><br class="">
</div>
<div class="">IDNs are being deployed for years now. Had reputable organizations felt the risk of registrations of IDNs that are confusingly similar (personally I find the qualification of “indistinguishable” factually incorrect) as a serious risk, we would
have witnessed a spike in defensive registrations. To me, the fact that it did not happen is, if not a proof, at least an indication that the vast majority of these organizations do not see this as a serious threat.</div>
<div class=""><br class="">
</div>
<div class="">As you say, ICANN has produced a few months ago tables of the potential threats. My observation is that crime normally acts fast - generally before the potential pitfall is brought to the general public. Why would this case be different?</div>
<div class=""><br class="">
</div>
<div class="">My observation is that a cure that limits the effects of a problem without addressing the root cause is seldom effective. In this case the root cause is, IMHO, that the “real” url is not the displayed one, therefore potentially inducing the user
in error. Maybe to solve this problem is not trivial, but it seems to me that addressing the behaviour of the browsers will produce far better results in the long term than creating blacklists, regulating the domain name market, forcing defensive registrations,
or whatever else. Unless, of course, the objective is not solving the problem but influencing the domain name market.</div>
<div class=""><br class="">
</div>
<div class="">I would like to conclude with a provocative question. How come that the potential problems supposedly originated by the introduction and deployment of IDNs are raised only by people and interest groups that are operating in a plain ASCII environment
- and more often than not of English mother tongue?</div>
<div class=""><br class="">
</div>
<div class="">Cheers,</div>
<div class="">Roberto</div>
<div class=""><br class="">
<div><br class="">
<blockquote type="cite" class="">
<div class="">On 07.01.2020, at 18:45, Bill Jouris via CPWG <<a href="mailto:cpwg@icann.org" class="">cpwg@icann.org</a>> wrote:</div>
<br class="Apple-interchange-newline">
<div class="">Hi Roberto,
<div id="yMail_cursorElementTracker_1578418733518" class=""><br class="">
</div>
<div id="yMail_cursorElementTracker_1578418733749" class="">I don't work for Citi Bank, and am not aware of knowing anyone who does. So I have no idea. </div>
<div id="yMail_cursorElementTracker_1578418794157" class=""><br class="">
</div>
<div id="yMail_cursorElementTracker_1578418794348" class="">I would note that, at this moment, we are probably 6 months from ICANN publishing the IDN effort's tables of all the variations on the Latin alphabet. Having that readily available will make coming
up with indistinguishable domain names much easier for bad actors. And thus the need for defensive registrations. </div>
<div id="yMail_cursorElementTracker_1578418998369" class=""><br class="">
</div>
<div id="yMail_cursorElementTracker_1578418998557" class="">In short, the problem wrt the need for defensive registrations is still at the readily foreseeable stage, rather than the already exploding in our face stage. </div>
<div id="yMail_cursorElementTracker_1578418805613" class=""><br class="">
</div>
<div id="yMail_cursorElementTracker_1578419092575" class="">Bill<br id="yMail_cursorElementTracker_1578418714462" class="">
<br class="">
<div id="ymail_android_signature" class=""><a id="ymail_android_signature_link" href="https://go.onelink.me/107872968?pid=InProduct&c=Global_Internal_YGrowth_AndroidEmailSig__AndroidUsers&af_wl=ym&af_sub1=Internal&af_sub2=Global_YGrowth&af_sub3=EmailSignature" class="">Sent
from Yahoo Mail on Android</a></div>
<br class="">
<blockquote style="margin: 0 0 20px 0;" class="">
<div style="font-family:Roboto, sans-serif; color:#6D00F6;" class="">
<div class="">On Tue, Jan 7, 2020 at 2:16 AM, Roberto Gaetano</div>
<div class=""><<a href="mailto:roberto_gaetano@hotmail.com" class="">roberto_gaetano@hotmail.com</a>> wrote:</div>
</div>
<div style="padding: 10px 0 0 20px; margin: 10px 0 0 0; border-left: 1px solid #6D00F6;" class="">
<div id="yiv0299565059" class="">
<div class="">Hi Bill.
<div class="yiv0299565059">Just a couple of questions wrt:<br clear="none" class="yiv0299565059">
<div class=""><br clear="none" class="yiv0299565059">
<blockquote class="yiv0299565059" type="cite">
<div class="yiv0299565059">
<div class="yiv0299565059" id="yiv0299565059yMail_cursorElementTracker_1578328607437" style="font-family:Helvetica;font-size:14px;font-style:normal;font-weight:normal;letter-spacing:normal;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;text-decoration:none;">
<br clear="none" class="yiv0299565059">
</div>
<div class="yiv0299565059" id="yiv0299565059yMail_cursorElementTracker_1578328607640" style="font-family:Helvetica;font-size:14px;font-style:normal;font-weight:normal;letter-spacing:normal;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;text-decoration:none;">
The only obvious defense, for registrants who want their customers to arrive reliably at their website, will be defensive registrations. Lots of defensive registrations. (I did a quick calculation for Citi Bank. 4 letter domain name. Close to 300 readily
confusable variations. Longer names would have more, of course.)</div>
<div class="yiv0299565059" id="yiv0299565059yMail_cursorElementTracker_1578328394126" style="font-family:Helvetica;font-size:14px;font-style:normal;font-weight:normal;letter-spacing:normal;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;text-decoration:none;">
<br clear="none" class="yiv0299565059">
</div>
</div>
</blockquote>
<div class=""><br clear="none" class="yiv0299565059">
</div>
<div class="">How many actual defensive registrations has Citi Bank?</div>
<div class="yiv0299565059yqt6734340698 yQTDBase" id="yiv0299565059yqtfd69431">
<div class=""><br clear="none" class="yiv0299565059">
</div>
<div class="">Thanks,</div>
</div>
<div class="">R.</div>
<div class="yiv0299565059yqt6734340698 yQTDBase" id="yiv0299565059yqtfd32682"></div>
</div>
<div class="yiv0299565059yqt6734340698 yQTDBase" id="yiv0299565059yqtfd67916"><br clear="none" class="yiv0299565059">
</div>
</div>
<div class="yiv0299565059yqt6734340698 yQTDBase" id="yiv0299565059yqtfd09347"></div>
</div>
</div>
</div>
</blockquote>
</div>
_______________________________________________<br class="">
CPWG mailing list<br class="">
<a href="mailto:CPWG@icann.org" class="">CPWG@icann.org</a><br class="">
https://mm.icann.org/mailman/listinfo/cpwg<br class="">
<br class="">
_______________________________________________<br class="">
By submitting your personal data, you consent to the processing of your personal data for purposes of subscribing to this mailing list accordance with the ICANN Privacy Policy (https://www.icann.org/privacy/policy) and the website Terms of Service (https://www.icann.org/privacy/tos).
You can visit the Mailman link above to change your membership status or configuration, including unsubscribing, setting digest-style delivery or disabling delivery altogether (e.g., for a vacation), and so on.</div>
</blockquote>
</div>
<br class="">
</div>
</div>
</body>
</html>