As cited
Copy frozen at (site build).
government policy
ICANN testing tech to let law enforcement access non-public WHOIS info
ICANN is testing authentication mechanisms to allow law enforcement agencies to request non-public WHOIS information in urgent situations involving threats to life, critical infrastructure, or child exploitation. The organization is piloting Security Assertion Markup Language (SAML) authentication with the Federal Bureau of Investigation (FBI) and Interpol, with registrars given 24 to 72 hours to respond to requests through ICANN's Registration Data Request Service. The approach includes safeguards such as limiting which personnel at law enforcement agencies can submit requests and protecting the identity of requesters.
Why it matters: Law enforcement, domain registrars, and organizations hosting content need to understand the emerging process for accessing previously hidden WHOIS data when investigating malware, command-and-control infrastructure, or phishing; practitioners should monitor how policy groups at ICANN define acceptable use and urgency thresholds.
- Source published
- First seen by Cybersecurity Tracker