Namecheap's claim seems overly definitive, but after a quick skim I think one area of concern might be the proposed new Section 1104(b)(4)(B), granting everyone

Namecheap's claim seems overly definitive, but after a quick skim I think one area of concern might be the proposed new Section 1104(b)(4)(B), granting everyone involved civil and criminal immunity "for decisions made based on cyber threat information identified, obtained, or shared under this section." That's a vague and broad grant that might enable many abuses: essentially, a government agent might say, "we'll share cyber threat info with you if you promptly turn off the threats we point out, and you'll be safe from any liability... or you can refuse to coordinate with us, and risk prosecution without this immunity". I would welcome more clarification from a legal expert with CISPA concerns.