ICANN tests law-enforcement login for urgent non-public WHOIS requests
Original title: ICANN testing tech to let law enforcement access non-public WHOIS info
SAML access to the Registration Data Request Service is in test with the FBI and Interpol; registrars get 24 hours, or 72 for complex cases.
ICANN is testing authentication so law enforcement can request non-public WHOIS data for imminent threats to life, serious bodily injury, critical infrastructure, or child exploitation. The preferred design uses SAML so nominated agency users can sign in to the Registration Data Request Service. ICANN would forward requests to the registrar, which may deny queries that miss the urgency threshold. Policy groups still have to set acceptable use, and agencies would limit who may file requests through a token.
Unconfirmed: Acceptable-use rules and the contents of the SAML permission token are not finalized.
- Testing is underway with the FBI and Interpol, with other mechanisms still open.
- Namecheap and Verisign representatives spoke in support during the Bali session.
- ICANN wants a published specification other agencies can follow.
- The group is also considering how to shield requesting officers’ identities.
From the original article
3 min read at theregister.comSingle sign-on to help address imminent threats to life, critical infrastructure, or kids
By Simon Sharwood · theregister.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.