4 ms·
It’s not about all or nothing – WHOIS data should make public an email that can be reached, and, if the requester identifies themselves, they should also be abl
by kuschku 8y ago
It’s not about all or nothing – WHOIS data should make public an email that can be reached, and, if the requester identifies themselves, they should also be able to get more information to either directly contact or sue the owner.
But a random bot looking for victims it can spam shouldn’t be able to read all the WHOIS data.
- microcolonel 8y ago> But a random bot looking for victims it can spam shouldn’t be able to read all the WHOIS data. It is public information, and it is impossible to watermark. There is absolutely nothing you can do about the scraping of WHOIS data if it maintains any of its current usefulness.
- teamhappy 8y agoDENIC (the folks who handle the German .de domain) doesn't expose owner and admin-c via whois anymore. If you want/need that information you have to use their web interface which sends the data over TLS, requires you to solve a captcha and implements rate-limiting.
- kuschku 8y agoAnd DENIC has protected the OWNER and TECH-C and ZONE-C for a while already. I own a .de, a .eu and a .info I get hundreds of spam mails per day for the .info, nothing for the other two. It works.
- drdaeman 8y ago> WHOIS data should make public an email Technically, it's already in SOA record's RNAME field, which IMHO is a much saner option - given that whois is registry-dependent and doesn't even exist for some TLDs, and DNS is universal. Well, no one can guarantee that it's working and mails will be read. Same as with whois data, of course.
- kuschku 8y agoYeah the email and phone numbers in many of the WHOIS entries is absolutely useless. Even for companies – PrivateInternetAccess’s phone number just is a robot saying "please send an email to the address listed in our WHOIS data" and hangs up.