# ICANN Testing Authentication for Law Enforcement Access to WHOIS Data New technical framework enables urgent access to non-public domain registration information for critical threats. - **Source:** [www.theregister.com - Articles](https://brifing.si/source/2c34ea50-d341-4a10-925d-12c012a9ad10) - **Published:** 2026-10-20 - **Topic:** [Business](https://brifing.si/c/business) - **Original article:** - **On Brifing:** https://brifing.si/s/16b30ffd-6aee-4065-87c1-cb9020186e5c ## Urgent Access Mechanism ICANN is developing authentication schemes to grant law enforcement agencies access to non-public WHOIS information. This initiative targets urgent scenarios involving imminent threats to life, serious bodily injury, critical infrastructure, or child exploitation. The organization aims to bridge the gap created by privacy regulations like GDPR that previously obscured domain owner contact details. ## Technical Implementation Strategy The proposed system utilizes Security Assertion Markup Language (SAML) to facilitate secure logins for law enforcement personnel. Users will access the Registration Data Request Service (RDRS) to file formal inquiries. ICANN is currently testing this specific technical approach with the FBI and Interpol, while remaining open to alternative authentication mechanisms for broader agency adoption. ## Registrar Response Times Once a request is filed via RDRS, ICANN routes it to the relevant domain registrar. Registrars are granted a 24-hour window to evaluate standard requests, with an extension up to 72 hours for complex queries. Registrars retain the authority to deny requests if they determine the submission fails to meet the established urgency threshold. ## Preventing System Overload To prevent potential system abuse or flooding by large agencies, ICANN plans to restrict request privileges to nominated personnel. Access will be enforced through tokens shared during SAML handshakes. This structure ensures that only authorized individuals can initiate data requests, maintaining the integrity of the RDRS platform against unauthorized or excessive administrative traffic. ## Industry Stakeholder Support During the annual meeting in Bali, major domain registrars including Namecheap and Verisign expressed support for the proposal. Their involvement highlights a collaborative effort between technical governance bodies and private industry. This consensus suggests that the technical framework aligns with the operational realities of domain management while addressing critical law enforcement requirements. ## Policy and Technical Separation The current Input Group focuses strictly on the technical architecture of the authentication mechanism. Once the technical specifications are finalized, separate ICANN policy groups will define acceptable use cases and governance rules. This modular approach allows specialists to build a robust, enforceable system that functions effectively across multiple diverse international legal jurisdictions. ## Protecting Agency Personnel ICANN is actively considering methods to protect the identities of law enforcement officers who file RDRS requests. There is concern that including specific email addresses in requests could expose agents to harassment or targeted retaliation. Developing a secure, anonymous communication channel remains a priority for the ongoing technical and policy development phases. ## Future Governance Outlook This initiative represents a significant shift in internet governance, balancing privacy protections with public safety needs. By formalizing how law enforcement interacts with domain registries, ICANN seeks to mitigate risks like malware command-and-control infrastructure and phishing. The success of this project depends on the finalization of token policies and broad international adoption. ## Sources covering this story - https://www.theregister.com/networks/2026/10/20/icann-testing-tech-to-let-law-enforcement-access-non-public-whois-info/5304036 — --- _Summary written by Brifing from the original reporting. Copyright in the original article belongs to its publisher; read the full piece at the link above._