WHOIS was created in the 1980s as a service to identify network operators on the Internet. Since this time, the Internet has changed far beyond expectations, evolving from a research network into a global commercial network that is integrated into everyday life. The usage of WHOIS has changed along with the evolution of the Internet, but the protocol has changed very little.
Consequently, the WHOIS protocol as it exists today has several deficiencies that are becoming increasingly apparent to the community. Some of the pressing issues include:
data accuracy and reliability
accessibility for users whose local language cannot be represented in ASCII
data protection and privacy concerns
Despite a series of task forces, working groups, workshops, surveys and studies over the last 15 years, the various issues with WHOIS policy and protocol still need to be addressed. The entire community of stakeholders are affected by WHOIS, bringing a wide variety of diverse concerns and interests to the table for discussion.
In 2010, ICANN formed the WHOIS Review Team, guided by the Affirmation of Commitments to review the are effectiveness of ICANN’s WHOIS policy and implementation, as well as if it meet the needs of the law enforcement community and promotes consumer trust. In response to the Review Team’s Final Report (2012), the ICANN Board passed a resolution to launch the Expert Working Group on gTLD Registration Directory Services (EWG) to “redefine the purpose of collecting, maintaining and providing access to gTLD registration data, and consider safeguards for protecting data” and to propose a new model for Registry Directory Services (RDS) that addresses the issues outlined above. Additionally, the Board’s resolution called for a GNSO Policy Development Process, to be informed by and address the issues in the EWG’s Final Report.
The EWG released its final report in 2014, initiating the process of structuring the Next-Generation gTLD Registration Directory Service to replace WHOIS PDP WG (Next-Gen RDS PDP WG). The PDP will be a three step process:
Establish gTLD registration data requirements to determine if and why a next-gen RDS is needed.
Design policies that detail functions that must be in place to support those requirements.
Provide guidance for how the next-gen RDS should implement those policies, including coexisting with and replacing WHOIS.
The process is currently in Phase One, in which the Next-Gen PDP WG aims to reach consensus recommendations, through analysis of several key questions, relating to the uses/purposes of RDS, who should have access to the data, data accuracy, privacy, steps for replacing WHOIS and other important issues.
Running parallel to this process, is the Public Comment period on the Registration Data Access Protocol (RDAP) Operational Profile for gTLD Registries and Registrars, which is a likely candidate to eventually replace WHOIS. The RDAP was developed by the IETF’s Web Extensible Internet Registration Data Services (WEIRDS) WG. Some major improvements that come with the RDAP include a standardized data model, internationalization for non-ASCII languages, and differentiated access.
As these processes develop, the outdated WHOIS Policy and Protocol will receive an overdue update, making improvements on the issues of accuracy, privacy and access. The Next-Gen PDP WG will hold their first face-to-face meeting at ICANN 55 to work toward their phase one goals.