EU Proposals Could Unmask Domain Name Registrants

The EU could be gearing up to ban anonymous registration of domain data in a bid to boost security and anti-piracy efforts, it has emerged.

360 Mobile Vision - 360mobilevision.com North & South Carolina Security products and Systems Installations for Commercial and Residential - $55 Hourly Rate. ACCESS CONTROL, INTRUSION ALARM, ACCESS CONTROLLED GATES, INTERCOMS AND CCTV INSTALL OR REPAIR 360 Mobile Vision - 360mobilevision.com is committed to excellence in every aspect of our business. We uphold a standard of integrity bound by fairness, honesty and personal responsibility. Our distinction is the quality of service we bring to our customers. Accurate knowledge of our trade combined with ability is what makes us true professionals. Above all, we are watchful of our customers interests, and make their concerns the basis of our business.

The new provision was added to the “NIS2” legislation making its way through the European Parliament. It’s aimed at closing loopholes that currently allow registrants to potentially give false contact, or “WHOIS,” information to domain registrars – while expanding the personal details they must provide.

“In order to ensure the availability of accurate, verified and complete domain name registration data, TLD registries and entities providing domain name registration services should be required to collect domain name registration data,” it explains.

“They should aim to ensure the integrity and availability of such data by implementing technical and organizational measures, such as a confirmation process for registrants. In particular, TLD registries and entities providing domain name registration services should establish policies and procedures for the collection and maintenance of accurate, verified and complete registration data, as well as for the prevention and correction of inaccurate registration data.”

In short, the proposals will require registrars to demand a valid email address and telephone number, in addition to the registrant’s name and physical address, which were required before.

Privacy activists have warned that the proposals could endanger activists by removing online anonymity, but security experts welcomed the legislative move.

“This change in posture shows just how important registrant information can be for defenders. We’ve certainly found other ways of fingerprinting actors based on tactics, techniques, and procedures (TTPs), but taking down large swaths of domains tied to a single individual is much quicker when they can actually be tied to that individual, and time is increasingly of the essence,” argued DomainTools senior security researcher, Chad Anderson.

“For those that say this will be a hit to whistleblowers and activists: that’s hogwash as they should all be using Tor and pre-built sites anyways to protect their anonymity. If anything, this will force their hand to use better operational security.”

Other arguments against the proposals are that cyber-criminals will gravitate to registrars outside the EU where there’s more opacity in domain registrations.

However, Anderson claimed that this misses the point.

“Defensive work is never about eliminating the threats, it’s about making it so expensive that the threat cannot operate,” he said. 

“This raises the bar and makes it expensive for easy cyber-criminality like business email compromise (BEC) and credential phishing campaigns. Additionally, this reduces the attacking area left to monitor as it reduces the number of registrars that attackers can use.”

By admin