3 ms·

I rely on WHOIS data to contact sysops of delinquent sites, it is completely reasonable that somebody be available to at least attempt to contact. If you don't

I rely on WHOIS data to contact sysops of delinquent sites, it is completely reasonable that somebody be available to at least attempt to contact. If you don't like the spam, use Google apps/Gmail for your technical/administrative contacts. It is fair and reasonable, if you are operating a domain, to be available for legitimate contact. I accept the small amount of money and time I spend receiving spam phone calls roughly once or twice a month, in exchange for the important notices and communications I receive (and can make) every couple.

kuschku 8y ago
It’s not about all or nothing – WHOIS data should make public an email that can be reached, and, if the requester identifies themselves, they should also be able to get more information to either directly contact or sue the owner. But a random bot looking for victims it can spam shouldn’t be able to read all the WHOIS data.
- microcolonel 8y ago
  > But a random bot looking for victims it can spam shouldn’t be able to read all the WHOIS data. It is public information, and it is impossible to watermark. There is absolutely nothing you can do about the scraping of WHOIS data if it maintains any of its current usefulness.
  - teamhappy 8y ago
    DENIC (the folks who handle the German .de domain) doesn't expose owner and admin-c via whois anymore. If you want/need that information you have to use their web interface which sends the data over TLS, requires you to solve a captcha and implements rate-limiting.
    - kuschku 8y ago
      And DENIC has protected the OWNER and TECH-C and ZONE-C for a while already. I own a .de, a .eu and a .info I get hundreds of spam mails per day for the .info, nothing for the other two. It works.
- drdaeman 8y ago
  > WHOIS data should make public an email Technically, it's already in SOA record's RNAME field, which IMHO is a much saner option - given that whois is registry-dependent and doesn't even exist for some TLDs, and DNS is universal. Well, no one can guarantee that it's working and mails will be read. Same as with whois data, of course.
  - kuschku 8y ago
    Yeah the email and phone numbers in many of the WHOIS entries is absolutely useless. Even for companies – PrivateInternetAccess’s phone number just is a robot saying "please send an email to the address listed in our WHOIS data" and hangs up.

kuschku 8y ago

It’s not about all or nothing – WHOIS data should make public an email that can be reached, and, if the requester identifies themselves, they should also be able to get more information to either directly contact or sue the owner. But a random bot looking for victims it can spam shouldn’t be able to read all the WHOIS data.

microcolonel 8y ago
> But a random bot looking for victims it can spam shouldn’t be able to read all the WHOIS data. It is public information, and it is impossible to watermark. There is absolutely nothing you can do about the scraping of WHOIS data if it maintains any of its current usefulness.
- teamhappy 8y ago
  DENIC (the folks who handle the German .de domain) doesn't expose owner and admin-c via whois anymore. If you want/need that information you have to use their web interface which sends the data over TLS, requires you to solve a captcha and implements rate-limiting.
  - kuschku 8y ago
    And DENIC has protected the OWNER and TECH-C and ZONE-C for a while already. I own a .de, a .eu and a .info I get hundreds of spam mails per day for the .info, nothing for the other two. It works.
drdaeman 8y ago
> WHOIS data should make public an email Technically, it's already in SOA record's RNAME field, which IMHO is a much saner option - given that whois is registry-dependent and doesn't even exist for some TLDs, and DNS is universal. Well, no one can guarantee that it's working and mails will be read. Same as with whois data, of course.
- kuschku 8y ago
  Yeah the email and phone numbers in many of the WHOIS entries is absolutely useless. Even for companies – PrivateInternetAccess’s phone number just is a robot saying "please send an email to the address listed in our WHOIS data" and hangs up.