<html><head><base href="x-msg://97/"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">THanks for this response. Re your last line, In all risk assessment, the first thing we must do is accept that we live in a world of risk. Getting to Zero risk means being dead. Re your second last line, we do have to quantify the magnitude of risk increased by delay, or new risks created by delay. Otherwise, delay could be still ok.<div><br><div>So the operative questions are, how big is the risk? HOw likely is it? What is the impact? HOw is it sensitive to time ( ie does it compound)? can I tolerate it or do I have to transfer it? Are there reasonable mitigations that I can afford? Can I get somebody else to mitigate my risk, preferably at no cost to myself?</div><div>What I see is going on here, from my position of very limited knowledge of the day to day life of registrars, but a slightly larger experience of risk management (Michele will back me up here when I say I am not actually this modest, but for the purposes of this list I am trying to be well behaved, albeit overly talkative)....IS that we are asking registrars and proxy/privacy service providers to mitigate a few risks for other stakeholders. I don't find that fair, unless it can be proven that it is the most cost effective way to mitigate a risk that all stakeholders recognize exists at a high enough level to warrant significant cost and effort. Since we in NCSG purport to speak for civil society and the common person, that means there has to be a risk to them, as far as I am concerned, before new costs and risks start coming their way. I dont think the case has been made that the risk is high enough, or cannot be better mitigated other ways, and I think the registrars and p/p providers have made an eloquent case that loading the verification and the policing function on them is a workload out of scale with the purported benefits. I also guess it will drive new risks, worse than the old ones, as malfeasant actors adjust to new constraints. </div><div>Put more concisely: the risk is that people do bad things when they get a domain name. That risk cannot be mitigated by demanding verification of ID, it drives ID theft. It cannot be mitigated by reveal requests, response would likely be more spurious reveal requests, or revelation of bad data, or good data that still wont get you a warrant. Worst case scenario risks (my personal fav is trafficking of women from websites) are much better treated through standard traffic analysis techniques, or tackling the ISPs. (in the case of trafficking women, forget the domain registration data and follow the Johns).</div><div>Doubtless my views are still very uninformed but I have not seen evidence to change my mind yet....we need, I think, a comprehensive risk assessment where we list and evaluate all the risks. That would help a lot.</div><div>cheers SP<br><div><div>On 2014-03-03, at 10:20 AM, Williams, Todd wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite"><span class="Apple-style-span" style="border-collapse: separate; font-family: 'Lucida Grande'; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; font-size: medium; "><div lang="EN-US" link="blue" vlink="purple" style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><div class="WordSection1" style="page: WordSection1; "><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125); ">Thanks Stephanie. To first respond to Michele’s point in the attached: as I mentioned below, I don’t think the argument depends on there being anything “inherently suspicious” or “nefarious” about P/P services or their users (any more so than tractor-trailers or their drivers are “inherently suspicious”), simply a recognition of the risks posed.<o:p></o:p></span></div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125); "><o:p> </o:p></span></div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125); ">Which then gets to your bigger point Stephanie that the “fundamental disagreement” between the “2013 RAA” camp and the “more” camp (as referenced below) is as to this question: whether there is in fact more “risk posed” by P/P services. But there are different ways to assess the “risk posed”, right? One is to ask: “Is the risk higher that users of P/P services will engage in abusive behavior?” I think that is what you are referring to when you say that we have a fundamental disagreement with rival studies. But I also think that we can put that disagreement to the side for now, because I don’t think we need to get that far when assessing the “risk posed.”<o:p></o:p></span></div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125); "><o:p> </o:p></span></div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125); ">Rather, I think there is a second question that we should also ask when assessing the “risk posed” by P/P services, which is this: “Once a user of a P/P service does engage in abusive behavior (however frequently or infrequently that happens), will the fact that they are using a P/P service increase the risk that such abuse will not be successfully addressed/corrected/stopped, etc.?” The answer to this second question has to be yes, for the reason that Steve mentioned in our last call: the P/P service introduces at least some element of delay to the enforcement process. I suppose that we can debate the magnitude of the risk posed by that delay, and I suppose that it will also be related to the parameters that we put in place for relay/reveal etc. procedures down the road. But the magnitude is not zero. <o:p></o:p></span></div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125); "> <o:p></o:p></span></div><div><div style="border-right-style: none; border-bottom-style: none; border-left-style: none; border-width: initial; border-color: initial; border-top-style: solid; border-top-color: rgb(181, 196, 223); border-top-width: 1pt; padding-top: 3pt; padding-right: 0in; padding-bottom: 0in; padding-left: 0in; "><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><b><span style="font-size: 10pt; font-family: Tahoma, sans-serif; ">From:</span></b><span style="font-size: 10pt; font-family: Tahoma, sans-serif; "><span class="Apple-converted-space"> </span>Stephanie Perrin [mailto:stephanie.perrin@mail.utoronto.ca]<span class="Apple-converted-space"> </span><br><b>Sent:</b><span class="Apple-converted-space"> </span>Saturday, March 01, 2014 4:29 PM<br><b>To:</b><span class="Apple-converted-space"> </span>Williams, Todd<br><b>Cc:</b><span class="Apple-converted-space"> </span>James M. Bladel; Tim Ruiz; PPSAI<br><b>Subject:</b><span class="Apple-converted-space"> </span>Re: [Gnso-ppsai-pdp-wg] For review - updated templates Cat B, questions 1 and 2<o:p></o:p></span></div></div></div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><o:p> </o:p></div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; ">I don’t think we agree that there is more risk with P/P services, which is kind of a fundamental disagreement. We even have rival studies backing us up. <o:p></o:p></div><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; ">As to the analogies, they are useful but limited, as they can capture our imaginations in ways which are not in accord with the facts. My analogy for a p/p registration would not be a tractor trailer licence, it would be a small car with tinted windows. <o:p></o:p></div></div><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; ">Stephanie<o:p></o:p></div><div><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; ">On Mar 1, 2014, at 3:52 PM, Williams, Todd <<a href="mailto:Todd.Williams@turner.com" style="color: blue; text-decoration: underline; ">Todd.Williams@turner.com</a>> wrote:<o:p></o:p></div></div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><br><br><o:p></o:p></div><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125); ">I agree with James that using analogies/illustrations can be helpful to frame issues in these discussions, and I think his airport illustration does a nice job of that. But I would offer a different one:<br><br>Couldn't we say that registering a "standard" domain (without a P/P service) is to using a P/P service as driving a car is to driving a tractor-trailer? Everybody recognizes that there is a baseline floor of verification that should be required before you can get a driver's license. But everybody also recognizes that because the potential risk from "bad" tractor-trailer drivers is greater than that of "bad" car drivers (I'm leaving "bad" undefined here intentionally, because it doesn't matter whether it's abusive/malicious/incompetent, etc.), some EXTRA level of verification is needed before you can get a license to drive a tractor-trailer. In other words, nobody would argue that the same test should be used to get a standard driver's license as to get a license to drive tractor-trailers, because the latter by definition carries more risk. So too with "standard" domain registrations vs. P/P registrations.<span class="Apple-converted-space"> </span><br><br>To James's last point: note that the analogy doesn't depend on there being anything "inherently suspicious" about tractor-trailer drivers (in the normative sense); simply a recognition that what they are doing poses higher risks for the roadways. Note too that it wouldn't be much of an argument to say that because the extra verification required of tractor-trailer drivers wouldn't always catch "bad" drivers ahead-of-time, we should instead simply rely on the standard driver's license test.<span class="Apple-converted-space"> </span><br><br>Of course, this doesn't address just how far beyond the 2013 RAA floor our verification/re-verification requirements should go, or what additional measures would or wouldn't be effective. This is just to say that if the choice we're wrestling with now is between the 2013 RAA vs. "more" (however "more" is defined), I don't understand the argument on the 2013 RAA side.<span class="Apple-converted-space"> </span><br><br>Todd</span><o:p></o:p></div><div class="MsoNormal" align="center" style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; text-align: center; "><hr size="2" width="98%" align="center"></div><div id="divRplyFwdMsg"><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><b><span style="font-size: 11pt; font-family: Calibri, sans-serif; ">From:</span></b><span style="font-size: 11pt; font-family: Calibri, sans-serif; "><span class="Apple-converted-space"> </span><a href="mailto:gnso-ppsai-pdp-wg-bounces@icann.org" style="color: blue; text-decoration: underline; ">gnso-ppsai-pdp-wg-bounces@icann.org</a><span class="Apple-converted-space"> </span><<a href="mailto:gnso-ppsai-pdp-wg-bounces@icann.org" style="color: blue; text-decoration: underline; ">gnso-ppsai-pdp-wg-bounces@icann.org</a>> on behalf of James M. Bladel <<a href="mailto:jbladel@godaddy.com" style="color: blue; text-decoration: underline; ">jbladel@godaddy.com</a>><br><b>Sent:</b><span class="Apple-converted-space"> </span>Saturday, March 1, 2014 6:30:35 AM<br><b>To:</b><span class="Apple-converted-space"> </span>Tim Ruiz<br><b>Cc:</b><span class="Apple-converted-space"> </span>PPSAI<br><b>Subject:</b><span class="Apple-converted-space"> </span>Re: [Gnso-ppsai-pdp-wg] For review - updated templates Cat B, questions 1 and 2</span><o:p></o:p></div><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "> <o:p></o:p></div></div></div><div><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; ">So my last sentence doesn't make much sense, unless I substitute "it" with the idea of having differing verification/validation standards for Registrars and PP services. <br><br>Thanks--<o:p></o:p></div><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><o:p> </o:p></div></div><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; ">J.<o:p></o:p></div></div><div><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><o:p> </o:p></div></div><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; ">Sent from my iPad<o:p></o:p></div></div></div></div><div><p class="MsoNormal" style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 12pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><br>On Mar 1, 2014, at 9:35, "James M. Bladel" <<a href="mailto:jbladel@godaddy.com" style="color: blue; text-decoration: underline; ">jbladel@godaddy.com</a>> wrote:<o:p></o:p></p></div><blockquote style="margin-top: 5pt; margin-bottom: 5pt; "><div><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; ">In just one sentence, Tim has captured the essence of the problem. Which isn’t about determining the “right” answer, but attempting to strike a balance between security vs. ease of use and barriers to legitimate access.<o:p></o:p></div></div><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><o:p> </o:p></div></div><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; ">Here’s something we can all relate to: Back in 2001, some jerk tried to blow up a plane with his shoe. As a result, now 650 million passengers have to remove their shoes before boarding an airplane in the US. Is this reasonable? As a society, we have determined that it is, but would we feel the same if it was something more, like a full body search? Probably not. Our privacy service routinely investigates and suspends perhaps a thousand domain names in a year. Sounds like a lot, and it certainly keeps the Abuse team busy, but ultimately represents a tiny fraction of the tens of millions of domain names under management. <o:p></o:p></div></div><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><o:p> </o:p></div></div><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; ">In any event, I see no compelling reason why the verification requirements for a PP service should be any different than those of a registrar. First, as I believe some in this thread have pointed out, it would allow the service to leverage code, personnel, & processes developed by the affiliated registrar. And it creates a perception that there is something inherently suspicious about subscribing to a PP service, or wanting the equivalent of an unlisted phone number, which simply isn’t the case.<o:p></o:p></div></div><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><o:p> </o:p></div></div><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; ">Thanks—<o:p></o:p></div></div><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><o:p> </o:p></div></div><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; ">J.<o:p></o:p></div></div><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><o:p> </o:p></div></div><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><o:p> </o:p></div></div><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><o:p> </o:p></div></div><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><o:p> </o:p></div></div><div style="border-right-style: none; border-bottom-style: none; border-left-style: none; border-width: initial; border-color: initial; border-top-style: solid; border-top-color: rgb(181, 196, 223); border-top-width: 1pt; padding-top: 3pt; padding-right: 0in; padding-bottom: 0in; padding-left: 0in; "><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><b><span style="font-size: 11pt; font-family: Calibri, sans-serif; ">From:<span class="Apple-converted-space"> </span></span></b><span style="font-size: 11pt; font-family: Calibri, sans-serif; ">Tim Ruiz <<a href="mailto:tim@godaddy.com" style="color: blue; text-decoration: underline; ">tim@godaddy.com</a>><br><b>Date:<span class="Apple-converted-space"> </span></b>Friday, February 28, 2014 at 21:39<span class="Apple-converted-space"> </span><br><b>To:<span class="Apple-converted-space"> </span></b>John Horton <<a href="mailto:john.horton@legitscript.com" style="color: blue; text-decoration: underline; ">john.horton@legitscript.com</a>><br><b>Cc:<span class="Apple-converted-space"> </span></b>PPSAI <<a href="mailto:gnso-ppsai-pdp-wg@icann.org" style="color: blue; text-decoration: underline; ">gnso-ppsai-pdp-wg@icann.org</a>><br><b>Subject:<span class="Apple-converted-space"> </span></b>Re: [Gnso-ppsai-pdp-wg] For review - updated templates Cat B, questions 1 and 2<o:p></o:p></span></div></div><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><o:p> </o:p></div></div><div><div><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; ">So to make your invsetigation of 150 cases easier (which I question in any event) millions of users are needlessly hassled. Makes perfect sense in today's world I guess.<o:p></o:p></div></div><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><o:p> </o:p></div></div><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; ">Tim<o:p></o:p></div></div><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><o:p> </o:p></div></div><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><o:p> </o:p></div></div><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><o:p> </o:p></div></div><div><p class="MsoNormal" style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 12pt; font-size: 12pt; font-family: 'Times New Roman', serif; ">On Feb 28, 2014, at 5:32 PM, "John Horton" <<a href="mailto:john.horton@legitscript.com" style="color: blue; text-decoration: underline; ">john.horton@legitscript.com</a>> wrote:<o:p></o:p></p></div><blockquote style="margin-top: 5pt; margin-bottom: 5pt; "><div><div><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><span style="font-family: Arial, sans-serif; color: rgb(7, 55, 99); ">Hi all,<o:p></o:p></span></div></div><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><span style="font-family: Arial, sans-serif; color: rgb(7, 55, 99); "><o:p> </o:p></span></div></div><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><span style="font-family: Arial, sans-serif; color: rgb(7, 55, 99); ">Verification and re-verification of registration data would be enormously useful and important in identifying, mapping and deterring malfeasance. Just to share our background to put our comments in context, we've assisted in over 150 drug or supplement investigations by conducting cybercrime research, and each project typically involved research into dozens, hundreds or even thousands of Whois records plus corresponding IP/NS/MX etc. information. There are numerous instances in which either 1) the accurate Whois data (including, accurate data behind a Whois privacy/proxy service) "broke open" the case, or 2) submitting a WDRPS complaint in instances where we could show that the Whois data was inaccurate resulted in modified Whois information that then "broke open" the case, either by virtue of the modified Whois information itself, or from derivative information (e.g., additional reverse queries on Whois, name server, IP address or other records). Keep in mind too that sometimes showing that the Whois record is falsified results in the suspension of the domain name, which also has the effect of stopping the harmful use of that particular domain name. Verification would result in some instances of inaccurate registration data becoming accurate, or alternatively, of discontinuing registration services.<o:p></o:p></span></div></div><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><span style="font-family: Arial, sans-serif; color: rgb(7, 55, 99); "><o:p> </o:p></span></div></div><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><span style="font-family: Arial, sans-serif; color: rgb(7, 55, 99); ">In the interests of brevity, I hope that summary is enough explanation, but if anyone still doesn't understand how (or agree that) verified registration data -- or by extension, verification and some sort of periodic re-verification -- is useful, I'm happy to provide a couple of real life examples of investigations we've worked on where either the a) accuracy of the Whois record or b) response to the inaccuracy finding was extremely useful, although I'll modify the domain names. Again, I'm happy to provide real-life examples, with redacted information. It's not just occasionally or mildly useful. It's enormously important. <o:p></o:p></span></div></div><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><span style="font-family: Arial, sans-serif; color: rgb(7, 55, 99); "><o:p> </o:p></span></div></div><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><span style="font-family: Arial, sans-serif; color: rgb(7, 55, 99); ">One additional point: keep in mind that when researching criminal networks, there are typically multiple (hundreds or even thousands) of domain names at play, and even if -- as Tim pointed out -- the verified email and phone number have nothing to do with the person's real identity, good cybercrime research across the thousands of Whois records can often result in derivative information pointing to the real identity of the criminal entities. <o:p></o:p></span></div></div><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><span style="font-family: Arial, sans-serif; color: rgb(7, 55, 99); "><o:p> </o:p></span></div></div><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><span style="font-family: Arial, sans-serif; color: rgb(7, 55, 99); ">As to the point that the domain name isn't harmful but the content may be, I suspect that there are minds that won't be changed in this group on both sides of that argument. :) But, I'd point out that that train has left the station, so to speak: Section 3.18 of the 2013 RAA clearly contemplates harmful use of a domain name. <o:p></o:p></span></div></div><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><span style="font-family: Arial, sans-serif; color: rgb(7, 55, 99); "><o:p> </o:p></span></div></div><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><span style="font-family: Arial, sans-serif; color: rgb(7, 55, 99); ">Thanks, <o:p></o:p></span></div></div><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><br clear="all"><o:p></o:p></div><div><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><span style="font-family: Arial, sans-serif; color: rgb(7, 55, 99); ">John Horton<br>President, LegitScript</span><o:p></o:p></div><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "> <span style="border-top-style: solid; border-right-style: solid; border-bottom-style: solid; border-left-style: solid; border-top-color: windowtext; border-right-color: windowtext; border-bottom-color: windowtext; border-left-color: windowtext; border-top-width: 1pt; border-right-width: 1pt; border-bottom-width: 1pt; border-left-width: 1pt; padding-top: 0in; padding-right: 0in; padding-bottom: 0in; padding-left: 0in; "><span><image001.jpg></span></span><o:p></o:p></div><div><div><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><span style="font-size: 9pt; font-family: Helvetica, sans-serif; "><o:p> </o:p></span></div></div><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><b><span style="font-size: 9pt; font-family: Helvetica, sans-serif; color: rgb(68, 68, 68); ">Follow</span></b><b><span style="font-size: 9pt; font-family: Helvetica, sans-serif; color: rgb(11, 83, 148); "><span class="Apple-converted-space"> </span></span></b><b><span style="font-size: 9pt; font-family: Helvetica, sans-serif; ">Legit<span style="color: rgb(11, 83, 148); ">Script</span></span></b><span style="font-size: 9pt; font-family: Helvetica, sans-serif; ">:<span class="Apple-converted-space"> </span><a href="http://www.linkedin.com/company/legitscript-com" target="_blank" style="color: blue; text-decoration: underline; "><span style="color: rgb(204, 0, 0); ">LinkedIn</span></a> | <a href="https://www.facebook.com/LegitScript" target="_blank" style="color: blue; text-decoration: underline; "><span style="color: rgb(106, 168, 79); ">Facebook</span></a> | <a href="https://twitter.com/legitscript" target="_blank" style="color: blue; text-decoration: underline; "><span style="color: rgb(103, 78, 167); ">Twitter</span></a> | <a href="https://www.youtube.com/user/LegitScript" target="_blank" style="color: blue; text-decoration: underline; "><span style="color: rgb(191, 144, 0); ">YouTube</span></a> | <u><span style="color: rgb(255, 153, 0); "><a href="http://blog.legitscript.com/" target="_blank" style="color: blue; text-decoration: underline; ">Blog</a></span></u><span class="Apple-converted-space"> </span> |<span style="color: rgb(255, 153, 0); "><span class="Apple-converted-space"> </span> <a href="https://plus.google.com/112436813474708014933/posts" target="_blank" style="color: blue; text-decoration: underline; ">Google+</a></span><o:p></o:p></span></div></div></div></div></div></div></div><p class="MsoNormal" style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 12pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><o:p> </o:p></p><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; ">On Fri, Feb 28, 2014 at 12:36 PM, Tim Ruiz <<a href="mailto:tim@godaddy.com" target="_blank" style="color: blue; text-decoration: underline; ">tim@godaddy.com</a>> wrote:<o:p></o:p></div><div><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; ">It doesn't. I can use perfectly good information, including a verifiable phone number and email address, that has nothing to do with who I really am. As we have tried to argue before, unsuccessfully, is that all verification does is push the "miscreants" to be better at obfiscating who they are (and it just isn't that hard). As you said, it only results in making it difficult for everyone for the acts of a few.<o:p></o:p></div></div><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><span style="color: rgb(136, 136, 136); "><o:p> </o:p></span></div></div><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><span style="color: rgb(136, 136, 136); ">Tim<o:p></o:p></span></div></div><div><div><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><o:p> </o:p></div></div><div><p class="MsoNormal" style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 12pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><br>On Feb 28, 2014, at 2:07 PM, "Stephanie Perrin" <<a href="mailto:stephanie.perrin@mail.utoronto.ca" target="_blank" style="color: blue; text-decoration: underline; ">stephanie.perrin@mail.utoronto.ca</a>> wrote:<o:p></o:p></p></div><blockquote style="margin-top: 5pt; margin-bottom: 5pt; "><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; ">My apologies I totally mis-read that. So how does verification catch that then?<o:p></o:p></div><div><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; ">On 2014-02-28, at 1:52 PM, John Horton wrote:<o:p></o:p></div></div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><br><br><o:p></o:p></div><div><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><span style="font-family: Arial, sans-serif; color: rgb(7, 55, 99); ">Well, because absent an accurate Whois record, it can be difficult to know who to hold accountable.<o:p></o:p></span></div></div><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><span style="font-family: Arial, sans-serif; color: rgb(7, 55, 99); "><o:p> </o:p></span></div></div><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><span style="font-family: Arial, sans-serif; color: rgb(7, 55, 99); ">Stephanie, to clarify: I was saying that 95% of Whois data in a certain sub-category of criminal or miscreant behavior (spam, malware, phishing) is<span class="Apple-converted-space"> </span><u>inaccurate</u> (not "accurate"). <o:p></o:p></span></div></div><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><br clear="all"><o:p></o:p></div><div><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><span style="font-family: Arial, sans-serif; color: rgb(7, 55, 99); ">John Horton<br>President, LegitScript</span><o:p></o:p></div><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "> <span style="border-top-style: solid; border-right-style: solid; border-bottom-style: solid; border-left-style: solid; border-top-color: windowtext; border-right-color: windowtext; border-bottom-color: windowtext; border-left-color: windowtext; border-top-width: 1pt; border-right-width: 1pt; border-bottom-width: 1pt; border-left-width: 1pt; padding-top: 0in; padding-right: 0in; padding-bottom: 0in; padding-left: 0in; "><span><image001.jpg></span></span><o:p></o:p></div><div><div><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><span style="font-size: 9pt; font-family: Helvetica, sans-serif; "><o:p> </o:p></span></div></div><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><b><span style="font-size: 9pt; font-family: Helvetica, sans-serif; color: rgb(68, 68, 68); ">Follow</span></b><b><span style="font-size: 9pt; font-family: Helvetica, sans-serif; color: rgb(11, 83, 148); "><span class="Apple-converted-space"> </span></span></b><b><span style="font-size: 9pt; font-family: Helvetica, sans-serif; ">Legit<span style="color: rgb(11, 83, 148); ">Script</span></span></b><span style="font-size: 9pt; font-family: Helvetica, sans-serif; ">:<span class="Apple-converted-space"> </span><a href="http://www.linkedin.com/company/legitscript-com" target="_blank" style="color: blue; text-decoration: underline; "><span style="color: rgb(204, 0, 0); ">LinkedIn</span></a> | <a href="https://www.facebook.com/LegitScript" target="_blank" style="color: blue; text-decoration: underline; "><span style="color: rgb(106, 168, 79); ">Facebook</span></a> | <a href="https://twitter.com/legitscript" target="_blank" style="color: blue; text-decoration: underline; "><span style="color: rgb(103, 78, 167); ">Twitter</span></a> | <a href="https://www.youtube.com/user/LegitScript" target="_blank" style="color: blue; text-decoration: underline; "><span style="color: rgb(191, 144, 0); ">YouTube</span></a> | <u><span style="color: rgb(255, 153, 0); "><a href="http://blog.legitscript.com/" target="_blank" style="color: blue; text-decoration: underline; ">Blog</a></span></u><span class="Apple-converted-space"> </span> |<span style="color: rgb(255, 153, 0); "><span class="Apple-converted-space"> </span> <a href="https://plus.google.com/112436813474708014933/posts" target="_blank" style="color: blue; text-decoration: underline; ">Google+</a></span><o:p></o:p></span></div></div></div></div></div></div></div><p class="MsoNormal" style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 12pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><o:p> </o:p></p><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; ">On Fri, Feb 28, 2014 at 9:44 AM, Stephanie Perrin <<a href="mailto:stephanie.perrin@mail.utoronto.ca" target="_blank" style="color: blue; text-decoration: underline; ">stephanie.perrin@mail.utoronto.ca</a>> wrote:<o:p></o:p></div><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; ">I agree, it is all about risk...but what risk are we really talking about? I dont understand why a P/P provider should be forced to take on more risk than other registrars. Further,why should the registrar be accountable for verified data, once the original data verification is done. If John is correct and in 95% of cases the data from the P/P service provider was proven accurate, then how does any amount of data verification solve the problem? The accountability for miscreant behaviour of all kinds rests with the domain name user. IF the data is inaccurate, ramp up the penalties if it can be shown that the data was rendered inaccurate for the purposes of fraudulent activity. <o:p></o:p></div><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; ">At the risk of sounding overly philosophical, It seems to me that the Internet ecosystem is somehow being held to account for the actions of individuals. It is the individuals that should be held to account. Not the domain name, or the company that issued it. Particularly, I think that if products sold are tainted, then there is plenty of other consumer protection law that applies...why are we trying to solve that problem? <o:p></o:p></div></div><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; ">Cheers Stephanie perrin<o:p></o:p></div><div><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><o:p> </o:p></div><div><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; ">On 2014-02-28, at 12:29 PM, Carlton Samuels wrote:<o:p></o:p></div></div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><br><br><o:p></o:p></div><div><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><span style="font-size: 18pt; font-family: 'Comic Sans MS', serif; ">..which seems to me all about risk management on part of the provider. Its the results that matter.<o:p></o:p></span></div></div><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><span style="font-size: 18pt; font-family: 'Comic Sans MS', serif; "><o:p> </o:p></span></div></div><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><span style="font-size: 18pt; font-family: 'Comic Sans MS', serif; ">So, for all the possible permutations, in line with those enumerated by Volker, might it not be more useful to refer 'verified credentials' as a requirement on the provider,<span class="Apple-converted-space"> </span> allow them to accept the business risk and leave it to them to decide how to do it.......and, inherently, the risks acceptable to them for provisioning the service?<o:p></o:p></span></div></div><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><span style="font-size: 18pt; font-family: 'Comic Sans MS', serif; "><o:p> </o:p></span></div></div><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><span style="font-size: 18pt; font-family: 'Comic Sans MS', serif; ">-Carlton <o:p></o:p></span></div></div></div><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><br clear="all"><o:p></o:p></div><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><br>==============================<br>Carlton A Samuels<br>Mobile:<span class="Apple-converted-space"> </span><a href="tel:876-818-1799" target="_blank" style="color: blue; text-decoration: underline; ">876-818-1799</a><br><i><span style="color: rgb(51, 204, 0); ">Strategy, Planning, Governance, Assessment & Turnaround</span></i><br>=============================<o:p></o:p></div></div><p class="MsoNormal" style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 12pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><o:p> </o:p></p><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; ">On Fri, Feb 28, 2014 at 6:29 AM, Volker Greimann <<a href="mailto:vgreimann@key-systems.net" target="_blank" style="color: blue; text-decoration: underline; ">vgreimann@key-systems.net</a>> wrote:<o:p></o:p></div><div><p class="MsoNormal" style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 12pt; font-size: 12pt; font-family: 'Times New Roman', serif; ">Hi John,<span class="Apple-converted-space"> </span><br><br>I am having a bit of a hard time understanding your point here.<br><br>You are describing three different cases here, two of which will not benefit from verification in the least bit and one might, but only in some cases:<br><br>a) The data is accurate, but stolen: Here verification would not uncover any issues with the data as it is essentially correct and will most likely be identified as accurate.<br>b) The data is false: Here, depending on the methods used, the inaccuracy may be uncovered and would lead to an automated request to provide updated data or deactivation after a set time. Remember, in order to keep providing services in a sensible manner, this needs to be automated in some form, i.e. no individual record would likely see any manual review.<br>c) The data is already accurate: If the data is already correct, what purpose does verification fulfill? The data cannot become more accurate. Verification in this case seems like an exercise in self-gratification.<br><br>That said, even if there is a benefit to be derived from verification, such benefits are achieved once verification concludes. Re-verification of already verified data fulfills no purpose whatsoever. So if a set of data has already been verified by the registrar, there is no need for the p/p provider to again verify the same data. Only if no verification is or can be performed on the registrar level does verification by providers come into play.<br><br>Volker<o:p></o:p></p><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; ">Am 28.02.2014 00:32, schrieb John Horton:<o:p></o:p></div></div><div><div><blockquote style="margin-top: 5pt; margin-bottom: 5pt; "><div><div><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><span style="font-family: Arial, sans-serif; color: rgb(7, 55, 99); ">Thanks, Marika. I also wanted to provide a comment pertaining to Question 2 in the attachments (relating to periodic checks).</span><span style="font-family: Arial, sans-serif; color: rgb(34, 34, 34); "><o:p></o:p></span></div></div><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><span style="font-family: Arial, sans-serif; color: rgb(34, 34, 34); "><o:p> </o:p></span></div></div><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><span style="font-family: Arial, sans-serif; color: rgb(7, 55, 99); ">In a few of the recent discussions, there's been some reference to criminals always or nearly always being untruthful in their Whois records (even if privacy-protected), leading to the conclusion that there is little purpose in having a registrar or any third party have to verify or re-verify the information (especially if it is difficult to prove that the data is falsified). I wanted to share our experience and observations on that point, in the hope that it's relevant to future discussion regarding Question 2.</span><span style="font-family: Arial, sans-serif; color: rgb(34, 34, 34); "><o:p></o:p></span></div></div><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><span style="font-family: Arial, sans-serif; color: rgb(34, 34, 34); "><o:p> </o:p></span></div></div><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><span style="font-family: Arial, sans-serif; color: rgb(7, 55, 99); ">Our consistent observation has been that when it comes to a particular sub-category of criminal activity, spam, phishing, malware, and so forth, it's probably safe to say that that statement is true -- the registrant's Whois information is nearly always inaccurate. Even in cases, such as some where we've worked with law enforcement, when the Whois record for a domain name involved in spam, phishing or malware is privacy-protected and is subsequently unmasked, the Whois record is still not accurate behind the privacy curtain. There are probably exceptions, but that's what we've seen well over 95% of the time. On occasion, it's a real address and phone number, just not one genuinely connected to the registrant. </span><span style="font-family: Arial, sans-serif; color: rgb(34, 34, 34); "><o:p></o:p></span></div></div><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><span style="font-family: Arial, sans-serif; color: rgb(34, 34, 34); "><o:p> </o:p></span></div></div><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><span style="font-family: Arial, sans-serif; color: rgb(7, 55, 99); ">But there are other types of criminal activity where the Whois record is not so regularly obfuscated. For example, we investigate a lot of websites selling tainted dietary supplements that end up containing some toxin or adulterant that harms people. In those cases, we've overwhelmingly seen that even if the Whois record is privacy-protected, the trend is that the underlying Whois record is accurate. The same has been true for illegal or counterfeit medical device websites that we've researched. On illegal Internet pharmacies not engaged in spam, it's probably 50-50. (It might be a shell corporation, but that's still valuable information.)</span><span style="font-family: Arial, sans-serif; color: rgb(34, 34, 34); "><o:p></o:p></span></div></div><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><span style="font-family: Arial, sans-serif; color: rgb(34, 34, 34); "><o:p> </o:p></span></div></div><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><span style="font-family: Arial, sans-serif; color: rgb(7, 55, 99); ">One important point to consider is that the Whois registration can be relevant information from a banking perspective for commercial entities. That is, some banks are going to look at an online merchant's domain name registration record and if it's either inaccurate or protected, they may require disclosure, or ask about any discrepancy, which can be an incentive for criminals selling products online who nevertheless want to get paid via credit card to have an accurate Whois. Hackers, malware providers and spammers will find a way around that, but they don't necessarily constitute "most" criminal activity.</span><span style="font-family: Arial, sans-serif; color: rgb(34, 34, 34); "><o:p></o:p></span></div></div><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><span style="font-family: Arial, sans-serif; color: rgb(34, 34, 34); "><o:p> </o:p></span></div></div><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><span style="font-family: Arial, sans-serif; color: rgb(7, 55, 99); ">The point here is, I think verification can still be a useful and necessary tool in either scenario, even if it doesn't uncover useful information a portion of the time. I realize that only pertains to a portion of the issues related to Question 2, but I hope that our observations on that are relevant. </span><span style="font-family: Arial, sans-serif; color: rgb(34, 34, 34); "><o:p></o:p></span></div></div><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><span style="font-family: Arial, sans-serif; color: rgb(34, 34, 34); "><o:p> </o:p></span></div></div><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><span style="font-family: Arial, sans-serif; color: rgb(7, 55, 99); ">Thanks, </span><span style="font-family: Arial, sans-serif; color: rgb(34, 34, 34); "><o:p></o:p></span></div></div></div><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><br clear="all"><o:p></o:p></div><div><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><span style="font-family: Arial, sans-serif; color: rgb(7, 55, 99); ">John Horton<br>President, LegitScript</span><o:p></o:p></div><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "> <span style="border-top-style: solid; border-right-style: solid; border-bottom-style: solid; border-left-style: solid; border-top-color: windowtext; border-right-color: windowtext; border-bottom-color: windowtext; border-left-color: windowtext; border-top-width: 1pt; border-right-width: 1pt; border-bottom-width: 1pt; border-left-width: 1pt; padding-top: 0in; padding-right: 0in; padding-bottom: 0in; padding-left: 0in; "><span><image001.jpg></span></span><o:p></o:p></div><div><div><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><span style="font-size: 9pt; font-family: Helvetica, sans-serif; "><o:p> </o:p></span></div></div><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><b><span style="font-size: 9pt; font-family: Helvetica, sans-serif; color: rgb(68, 68, 68); ">Follow</span></b><b><span style="font-size: 9pt; font-family: Helvetica, sans-serif; color: rgb(11, 83, 148); "><span class="Apple-converted-space"> </span></span></b><b><span style="font-size: 9pt; font-family: Helvetica, sans-serif; ">Legit<span style="color: rgb(11, 83, 148); ">Script</span></span></b><span style="font-size: 9pt; font-family: Helvetica, sans-serif; ">:<span class="Apple-converted-space"> </span><a href="http://www.linkedin.com/company/legitscript-com" target="_blank" style="color: blue; text-decoration: underline; "><span style="color: rgb(204, 0, 0); ">LinkedIn</span></a> | <a href="https://www.facebook.com/LegitScript" target="_blank" style="color: blue; text-decoration: underline; "><span style="color: rgb(106, 168, 79); ">Facebook</span></a> | <a href="https://twitter.com/legitscript" target="_blank" style="color: blue; text-decoration: underline; "><span style="color: rgb(103, 78, 167); ">Twitter</span></a> | <a href="https://www.youtube.com/user/LegitScript" target="_blank" style="color: blue; text-decoration: underline; "><span style="color: rgb(191, 144, 0); ">YouTube</span></a> | <u><span style="color: rgb(255, 153, 0); "><a href="http://blog.legitscript.com/" target="_blank" style="color: blue; text-decoration: underline; ">Blog</a></span></u><span class="Apple-converted-space"> </span> |<span style="color: rgb(255, 153, 0); "><span class="Apple-converted-space"> </span> <a href="https://plus.google.com/112436813474708014933/posts" target="_blank" style="color: blue; text-decoration: underline; ">Google+</a></span><o:p></o:p></span></div></div></div></div></div></div></div><p class="MsoNormal" style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 12pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><o:p> </o:p></p><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; ">On Wed, Feb 26, 2014 at 2:39 AM, Marika Konings <<a href="mailto:marika.konings@icann.org" target="_blank" style="color: blue; text-decoration: underline; ">marika.konings@icann.org</a>> wrote:<o:p></o:p></div><div><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><span style="font-size: 10.5pt; font-family: Calibri, sans-serif; ">Dear All,<o:p></o:p></span></div></div><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><span style="font-size: 10.5pt; font-family: Calibri, sans-serif; "><o:p> </o:p></span></div></div><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><span style="font-size: 10.5pt; font-family: Calibri, sans-serif; ">Following our call yesterday, please find attached the updated templates for Category B – questions 1 & 2. Please review these templates to make sure the WG discussions have been accurately reflected and feel free to share any comments / edits you may have with the mailing list. We've created a page on the wiki where we'll post the templates that have been finalised for now (noting that for some of these the WG will need to come back to the template at a later date), see <a href="https://community.icann.org/x/ihLRAg" target="_blank" style="color: blue; text-decoration: underline; ">https://community.icann.org/x/ihLRAg</a>. <o:p></o:p></span></div></div><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><span style="font-size: 10.5pt; font-family: Calibri, sans-serif; "><o:p> </o:p></span></div></div><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><span style="font-size: 10.5pt; font-family: Calibri, sans-serif; ">The WG will continue its deliberations on Category B – Question 2 next week. Some of the questions that came up during the conversation yesterday and which you are encouraged to share your views on (and/or add additional questions that need to be considered in this context) are:<o:p></o:p></span></div></div><ul type="disc" style="margin-bottom: 0in; "><li class="MsoNormal" style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><span style="font-size: 10.5pt; font-family: Calibri, sans-serif; ">What would be the arguments for not using the same standards / requirements for validation and verification as per the 2013 RAA?<o:p></o:p></span></li><li class="MsoNormal" style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><span style="font-size: 10.5pt; font-family: Calibri, sans-serif; ">Should there be a requirement for re-verification, and if so, what instances would trigger such re-verification?<o:p></o:p></span></li><li class="MsoNormal" style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><span style="font-size: 10.5pt; font-family: Calibri, sans-serif; ">In case of affliction between the P/P service and the registrar, if the registration information has already been verified by the registrar, should this exempt the P/P provider from doing so?<o:p></o:p></span></li><li class="MsoNormal" style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><span style="font-size: 10.5pt; font-family: Calibri, sans-serif; ">Should the same requirements apply to privacy and proxy services or is there a reason to distinguish between the two?<o:p></o:p></span></li></ul><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><span style="font-size: 10.5pt; font-family: Calibri, sans-serif; ">Best regards,<o:p></o:p></span></div></div><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><span style="font-size: 10.5pt; font-family: Calibri, sans-serif; "><o:p> </o:p></span></div></div><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><span style="font-size: 10.5pt; font-family: Calibri, sans-serif; ">Marika<o:p></o:p></span></div></div></div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><br>_______________________________________________<br>Gnso-ppsai-pdp-wg mailing list<br><a href="mailto:Gnso-ppsai-pdp-wg@icann.org" target="_blank" style="color: blue; text-decoration: underline; ">Gnso-ppsai-pdp-wg@icann.org</a><br><a href="https://mm.icann.org/mailman/listinfo/gnso-ppsai-pdp-wg" target="_blank" style="color: blue; text-decoration: underline; ">https://mm.icann.org/mailman/listinfo/gnso-ppsai-pdp-wg</a><o:p></o:p></div></div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><o:p> </o:p></div></div></div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><br><br><o:p></o:p></div><pre style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 10pt; font-family: 'Courier New'; ">_______________________________________________<o:p></o:p></pre><pre style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 10pt; font-family: 'Courier New'; ">Gnso-ppsai-pdp-wg mailing list<o:p></o:p></pre><pre style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 10pt; font-family: 'Courier New'; "><a href="mailto:Gnso-ppsai-pdp-wg@icann.org" target="_blank" style="color: blue; text-decoration: underline; ">Gnso-ppsai-pdp-wg@icann.org</a><a href="https://mm.icann.org/mailman/listinfo/gnso-ppsai-pdp-wg" target="_blank" style="color: blue; text-decoration: underline; ">https://mm.icann.org/mailman/listinfo/gnso-ppsai-pdp-wg</a><o:p></o:p></pre></blockquote><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><o:p> </o:p></div></div></div><pre style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 10pt; font-family: 'Courier New'; ">-- <o:p></o:p></pre><pre style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 10pt; font-family: 'Courier New'; ">Bei weiteren Fragen stehen wir Ihnen gerne zur Verfügung.<o:p></o:p></pre><pre style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 10pt; font-family: 'Courier New'; "><o:p> </o:p></pre><pre style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 10pt; font-family: 'Courier New'; ">Mit freundlichen Grüßen,<o:p></o:p></pre><pre style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 10pt; font-family: 'Courier New'; "><o:p> </o:p></pre><pre style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 10pt; font-family: 'Courier New'; ">Volker A. Greimann<o:p></o:p></pre><pre style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 10pt; font-family: 'Courier New'; ">- Rechtsabteilung -<o:p></o:p></pre><pre style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 10pt; font-family: 'Courier New'; "><o:p> </o:p></pre><pre style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 10pt; font-family: 'Courier New'; ">Key-Systems GmbH<o:p></o:p></pre><pre style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 10pt; font-family: 'Courier New'; ">Im Oberen Werk 1<o:p></o:p></pre><pre style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 10pt; font-family: 'Courier New'; ">66386 St. Ingbert<o:p></o:p></pre><pre style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 10pt; font-family: 'Courier New'; ">Tel.: <a href="tel:%2B49%20%280%29%206894%20-%209396%20901" target="_blank" style="color: blue; text-decoration: underline; ">+49 (0) 6894 - 9396 901</a><o:p></o:p></pre><pre style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 10pt; font-family: 'Courier New'; ">Fax.: <a href="tel:%2B49%20%280%29%206894%20-%209396%20851" target="_blank" style="color: blue; text-decoration: underline; ">+49 (0) 6894 - 9396 851</a><o:p></o:p></pre><pre style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 10pt; font-family: 'Courier New'; ">Email: <a href="mailto:vgreimann@key-systems.net" target="_blank" style="color: blue; text-decoration: underline; ">vgreimann@key-systems.net</a><o:p></o:p></pre><pre style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 10pt; font-family: 'Courier New'; "><o:p> </o:p></pre><pre style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 10pt; font-family: 'Courier New'; ">Web: <a href="http://www.key-systems.net/" target="_blank" style="color: blue; text-decoration: underline; ">www.key-systems.net</a> / <a href="http://www.rrpproxy.net/" target="_blank" style="color: blue; text-decoration: underline; ">www.RRPproxy.net</a><a href="http://www.domaindiscount24.com/" target="_blank" style="color: blue; text-decoration: underline; ">www.domaindiscount24.com</a> / <a href="http://www.brandshelter.com/" target="_blank" style="color: blue; text-decoration: underline; ">www.BrandShelter.com</a><o:p></o:p></pre><pre style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 10pt; font-family: 'Courier New'; "><o:p> </o:p></pre><pre style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 10pt; font-family: 'Courier New'; ">Folgen Sie uns bei Twitter oder werden Sie unser Fan bei Facebook:<o:p></o:p></pre><pre style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 10pt; font-family: 'Courier New'; "><a href="http://www.facebook.com/KeySystems" target="_blank" style="color: blue; text-decoration: underline; ">www.facebook.com/KeySystems</a><a href="http://www.twitter.com/key_systems" target="_blank" style="color: blue; text-decoration: underline; ">www.twitter.com/key_systems</a><o:p></o:p></pre><pre style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 10pt; font-family: 'Courier New'; "><o:p> </o:p></pre><pre style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 10pt; font-family: 'Courier New'; ">Geschäftsführer: Alexander Siffrin<o:p></o:p></pre><pre style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 10pt; font-family: 'Courier New'; ">Handelsregister Nr.: HR B 18835 - Saarbruecken <o:p></o:p></pre><pre style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 10pt; font-family: 'Courier New'; ">Umsatzsteuer ID.: DE211006534<o:p></o:p></pre><pre style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 10pt; font-family: 'Courier New'; "><o:p> </o:p></pre><pre style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 10pt; font-family: 'Courier New'; ">Member of the KEYDRIVE GROUP<o:p></o:p></pre><pre style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 10pt; font-family: 'Courier New'; "><a href="http://www.keydrive.lu/" target="_blank" style="color: blue; text-decoration: underline; ">www.keydrive.lu</a> <o:p></o:p></pre><pre style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 10pt; font-family: 'Courier New'; "><o:p> </o:p></pre><pre style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 10pt; font-family: 'Courier New'; ">Der Inhalt dieser Nachricht ist vertraulich und nur für den angegebenen Empfänger bestimmt. Jede Form der Kenntnisgabe, Veröffentlichung oder Weitergabe an Dritte durch den Empfänger ist unzulässig. Sollte diese Nachricht nicht für Sie bestimmt sein, so bitten wir Sie, sich mit uns per E-Mail oder telefonisch in Verbindung zu setzen.<o:p></o:p></pre><pre style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 10pt; font-family: 'Courier New'; "><o:p> </o:p></pre><pre style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 10pt; font-family: 'Courier New'; ">--------------------------------------------<o:p></o:p></pre><pre style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 10pt; font-family: 'Courier New'; "><o:p> </o:p></pre><pre style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 10pt; font-family: 'Courier New'; ">Should you have any further questions, please do not hesitate to contact us.<o:p></o:p></pre><pre style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 10pt; font-family: 'Courier New'; "><o:p> </o:p></pre><pre style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 10pt; font-family: 'Courier New'; ">Best regards,<o:p></o:p></pre><pre style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 10pt; font-family: 'Courier New'; "><o:p> </o:p></pre><pre style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 10pt; font-family: 'Courier New'; ">Volker A. Greimann<o:p></o:p></pre><pre style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 10pt; font-family: 'Courier New'; ">- legal department -<o:p></o:p></pre><pre style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 10pt; font-family: 'Courier New'; "><o:p> </o:p></pre><pre style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 10pt; font-family: 'Courier New'; ">Key-Systems GmbH<o:p></o:p></pre><pre style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 10pt; font-family: 'Courier New'; ">Im Oberen Werk 1<o:p></o:p></pre><pre style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 10pt; font-family: 'Courier New'; ">66386 St. Ingbert<o:p></o:p></pre><pre style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 10pt; font-family: 'Courier New'; ">Tel.: <a href="tel:%2B49%20%280%29%206894%20-%209396%20901" target="_blank" style="color: blue; text-decoration: underline; ">+49 (0) 6894 - 9396 901</a><o:p></o:p></pre><pre style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 10pt; font-family: 'Courier New'; ">Fax.: <a href="tel:%2B49%20%280%29%206894%20-%209396%20851" target="_blank" style="color: blue; text-decoration: underline; ">+49 (0) 6894 - 9396 851</a><o:p></o:p></pre><pre style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 10pt; font-family: 'Courier New'; ">Email: <a href="mailto:vgreimann@key-systems.net" target="_blank" style="color: blue; text-decoration: underline; ">vgreimann@key-systems.net</a><o:p></o:p></pre><pre style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 10pt; font-family: 'Courier New'; "><o:p> </o:p></pre><pre style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 10pt; font-family: 'Courier New'; ">Web: <a href="http://www.key-systems.net/" target="_blank" style="color: blue; text-decoration: underline; ">www.key-systems.net</a> / <a href="http://www.rrpproxy.net/" target="_blank" style="color: blue; text-decoration: underline; ">www.RRPproxy.net</a><a href="http://www.domaindiscount24.com/" target="_blank" style="color: blue; text-decoration: underline; ">www.domaindiscount24.com</a> / <a href="http://www.brandshelter.com/" target="_blank" style="color: blue; text-decoration: underline; ">www.BrandShelter.com</a><o:p></o:p></pre><pre style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 10pt; font-family: 'Courier New'; "><o:p> </o:p></pre><pre style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 10pt; font-family: 'Courier New'; ">Follow us on Twitter or join our fan community on Facebook and stay updated:<o:p></o:p></pre><pre style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 10pt; font-family: 'Courier New'; "><a href="http://www.facebook.com/KeySystems" target="_blank" style="color: blue; text-decoration: underline; ">www.facebook.com/KeySystems</a><a href="http://www.twitter.com/key_systems" target="_blank" style="color: blue; text-decoration: underline; ">www.twitter.com/key_systems</a><o:p></o:p></pre><pre style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 10pt; font-family: 'Courier New'; "><o:p> </o:p></pre><pre style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 10pt; font-family: 'Courier New'; ">CEO: Alexander Siffrin<o:p></o:p></pre><pre style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 10pt; font-family: 'Courier New'; ">Registration No.: HR B 18835 - Saarbruecken <o:p></o:p></pre><pre style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 10pt; font-family: 'Courier New'; ">V.A.T. ID.: DE211006534<o:p></o:p></pre><pre style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 10pt; font-family: 'Courier New'; "><o:p> </o:p></pre><pre style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 10pt; font-family: 'Courier New'; ">Member of the KEYDRIVE GROUP<o:p></o:p></pre><pre style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 10pt; font-family: 'Courier New'; "><a href="http://www.keydrive.lu/" target="_blank" style="color: blue; text-decoration: underline; ">www.keydrive.lu</a> <o:p></o:p></pre><pre style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 10pt; font-family: 'Courier New'; "><o:p> </o:p></pre><pre style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 10pt; font-family: 'Courier New'; ">This e-mail and its attachments is intended only for the person to whom it is addressed. Furthermore it is not permitted to publish any content of this email. You must not use, disclose, copy, print or rely on this e-mail. If an addressing or transmission error has misdirected this e-mail, kindly notify the author by replying to this e-mail or contacting us by telephone.<o:p></o:p></pre><pre style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 10pt; font-family: 'Courier New'; "><o:p> </o:p></pre><pre style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 10pt; font-family: 'Courier New'; "><o:p> </o:p></pre><pre style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 10pt; font-family: 'Courier New'; "><o:p> </o:p></pre></div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><br>_______________________________________________<br>Gnso-ppsai-pdp-wg mailing list<br><a href="mailto:Gnso-ppsai-pdp-wg@icann.org" target="_blank" style="color: blue; text-decoration: underline; ">Gnso-ppsai-pdp-wg@icann.org</a><br><a href="https://mm.icann.org/mailman/listinfo/gnso-ppsai-pdp-wg" target="_blank" style="color: blue; text-decoration: underline; ">https://mm.icann.org/mailman/listinfo/gnso-ppsai-pdp-wg</a><o:p></o:p></div></div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><o:p> </o:p></div></div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; ">_______________________________________________<br>Gnso-ppsai-pdp-wg mailing list<br><a href="mailto:Gnso-ppsai-pdp-wg@icann.org" target="_blank" style="color: blue; text-decoration: underline; ">Gnso-ppsai-pdp-wg@icann.org</a><br><a href="https://mm.icann.org/mailman/listinfo/gnso-ppsai-pdp-wg" target="_blank" style="color: blue; text-decoration: underline; ">https://mm.icann.org/mailman/listinfo/gnso-ppsai-pdp-wg</a><o:p></o:p></div></div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><o:p> </o:p></div></div></div></div></div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><br>_______________________________________________<br>Gnso-ppsai-pdp-wg mailing list<br><a href="mailto:Gnso-ppsai-pdp-wg@icann.org" target="_blank" style="color: blue; text-decoration: underline; ">Gnso-ppsai-pdp-wg@icann.org</a><br><a href="https://mm.icann.org/mailman/listinfo/gnso-ppsai-pdp-wg" target="_blank" style="color: blue; text-decoration: underline; ">https://mm.icann.org/mailman/listinfo/gnso-ppsai-pdp-wg</a><o:p></o:p></div></div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><o:p> </o:p></div></div></div></div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><o:p> </o:p></div></div></blockquote><blockquote style="margin-top: 5pt; margin-bottom: 5pt; "><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; ">_______________________________________________<br>Gnso-ppsai-pdp-wg mailing list<br><a href="mailto:Gnso-ppsai-pdp-wg@icann.org" target="_blank" style="color: blue; text-decoration: underline; ">Gnso-ppsai-pdp-wg@icann.org</a><br><a href="https://mm.icann.org/mailman/listinfo/gnso-ppsai-pdp-wg" target="_blank" style="color: blue; text-decoration: underline; ">https://mm.icann.org/mailman/listinfo/gnso-ppsai-pdp-wg</a><o:p></o:p></div></div></blockquote></div></div></div></div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><o:p> </o:p></div></div></div></div></blockquote></div></div></div></blockquote><blockquote style="margin-top: 5pt; margin-bottom: 5pt; "><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; ">_______________________________________________<br>Gnso-ppsai-pdp-wg mailing list<br><a href="mailto:Gnso-ppsai-pdp-wg@icann.org" style="color: blue; text-decoration: underline; ">Gnso-ppsai-pdp-wg@icann.org</a><br><a href="https://mm.icann.org/mailman/listinfo/gnso-ppsai-pdp-wg" style="color: blue; text-decoration: underline; ">https://mm.icann.org/mailman/listinfo/gnso-ppsai-pdp-wg</a><o:p></o:p></div></div></blockquote></div></div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; ">_______________________________________________<br>Gnso-ppsai-pdp-wg mailing list<br><a href="mailto:Gnso-ppsai-pdp-wg@icann.org" style="color: blue; text-decoration: underline; ">Gnso-ppsai-pdp-wg@icann.org</a><br><a href="https://mm.icann.org/mailman/listinfo/gnso-ppsai-pdp-wg" style="color: blue; text-decoration: underline; ">https://mm.icann.org/mailman/listinfo/gnso-ppsai-pdp-wg</a><o:p></o:p></div></div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><o:p> </o:p></div></div></div><span><RE [Gnso-ppsai-pdp-wg] For review - updated templates Cat B, questions 1 and 2.eml></span></div></span></blockquote></div><br></div></div></body></html>