Ethical Hacking News
ICANN is introducing a new authentication mechanism to enable law enforcement agencies to access non-public WHOIS information in a controlled and secure manner. This initiative aims to strike a balance between protecting individual privacy and facilitating the investigation of internet-related crimes, and is currently being tested with the FBI and Interpol.
ICANN is introducing a new authentication mechanism to bolster global internet security.The mechanism will enable law enforcement agencies to access non-public WHOIS information in a controlled and secure manner.ICANN has convened an Input Group on Law Enforcement Agency Authentication Mechanisms to explore the feasibility of developing a standardized authentication protocol.The proposed system uses Security Assertion Markup Language (SAML) to authenticate users from law enforcement agencies.The system aims to prevent potential abuse by law enforcement agencies and protect the identity of those making RDRS requests.
ICANN's latest initiative aims to bolster global internet security by introducing a novel authentication mechanism that will enable law enforcement agencies to access non-public WHOIS information in a controlled and secure manner. This groundbreaking approach seeks to strike a delicate balance between protecting individual privacy and facilitating the efficient investigation of internet-related crimes.
In an effort to address the pressing concerns of law enforcement agencies, ICANN has convened an Input Group on Law Enforcement Agency Authentication Mechanisms to explore the feasibility of developing a standardized authentication protocol. This group's work is critical in ensuring that the proposed mechanism is both practical and enforceable in multiple jurisdictions.
The proposed system, which is currently being tested with the FBI and Interpol, will utilize Security Assertion Markup Language (SAML) to authenticate users from law enforcement agencies. This will enable authorized personnel to log into the Registration Data Request Service (RDRS) and file requests to access non-public WHOIS information. The RDRS will then forward these requests to the relevant domain registrar, which will have a limited time frame to consider the request.
This approach is designed to prevent potential abuse by law enforcement agencies, such as flooding RDRS with requests from thousands of individual agents. To mitigate this risk, ICANN's plan requires law enforcement agencies to nominate specific personnel who are permitted to make requests, and to enforce this permission using a token shared during SAML handshakes. The content of this token is expected to be finalized by other groups within ICANN dedicated to policy.
Another crucial aspect of this initiative is the protection of the identity of law enforcement workers who make RDRS requests. ICANN is concerned that if these requests include email addresses, the workers could become targets of harassment or worse. To address this issue, ICANN is exploring ways to anonymize the requests and protect the identity of the law enforcement personnel involved.
The proposed system has received support from representatives of domain registrars Namecheap and Verisign, who spoke during the ICANN's annual meeting in Bali, Indonesia. This endorsement lends credibility to the initiative and suggests that the proposed mechanism is being taken seriously by key stakeholders in the industry.
While the proposed system is still in the testing phase, it has the potential to significantly enhance global internet security by providing law enforcement agencies with a more efficient and effective means of investigating internet-related crimes. By striking a balance between individual privacy and the need for law enforcement to access non-public WHOIS information, ICANN's innovative efforts have the potential to make a lasting impact on the global internet community.
Related Information:
https://www.ethicalhackingnews.com/articles/ICANNs-Innovative-Efforts-to-Enhance-Global-Internet-Security-Allowing-Law-Enforcement-Access-to-Non-Public-WHOIS-Information-ehn.shtml
https://www.theregister.com/networks/2026/10/20/icann-testing-tech-to-let-law-enforcement-access-non-public-whois-info/5304036
https://www.icann.org/en/announcements/details/icann-adds-urgent-requests-requirement-to-registration-data-policy-12-05-2026-en
Published: Mon Oct 19 21:44:42 2026 by llama3.2 3B Q4_K_M
