# ICANN Testing Authentication for Law Enforcement WHOIS Access New technical framework enables urgent access to non-public domain data for critical investigations. - **Source:** [www.theregister.com - Articles](https://www.theregister.com) - **Published:** 2026-10-20 - **Topic:** [Business](https://brifing.si/c/business) - **Original article:** - **On Brifing:** https://brifing.si/s/caf84f60-1c4d-4a1a-b85e-4ecfbab4d29e ## Urgent Access Requirements ICANN is developing authentication schemes to grant law enforcement agencies access to non-public WHOIS information. This initiative targets urgent scenarios involving imminent threats to life, serious bodily injury, critical infrastructure, or child exploitation. The project aims to bridge the gap created by GDPR-related privacy protections that currently obscure domain ownership data. ## Technical Governance Process The Input Group on Law Enforcement Agency Authentication Mechanisms presented progress at the annual ICANN meeting in Bali. This group focuses strictly on technical feasibility, leaving policy-related usage guidelines to separate internal bodies. This modular approach ensures that the resulting system remains practical, enforceable, and adaptable across multiple global legal jurisdictions. ## Industry Stakeholder Support Major domain registrars, including Namecheap and Verisign, have publicly expressed support for the proposed authentication framework. Their involvement during the development phase suggests a collaborative effort to balance user privacy with the necessity of investigating malicious activities like malware hosting, command-and-control infrastructure, or phishing operations that misuse domain resources. ## SAML Integration Strategy ICANN currently favors Security Assertion Markup Language (SAML) to facilitate secure logins to the Registration Data Request Service (RDRS). Testing is already underway with the FBI and Interpol, though the organization remains open to alternative authentication mechanisms. The goal is to publish a standardized specification that various global agencies can adopt. ## Registrar Response Timelines Once a request is filed via RDRS, ICANN routes it to the specific registrar that sold the domain. Registrars are granted a 24-hour window to review standard requests, with an extension up to 72 hours for complex queries. Registrars retain the authority to deny requests that fail to meet the established urgency threshold. ## Preventing System Overload To prevent the RDRS from being overwhelmed by mass requests, ICANN plans to restrict access to nominated personnel within law enforcement agencies. These authorized users will be verified via tokens shared during SAML handshakes. This mechanism ensures that only vetted individuals can initiate data requests, maintaining system stability and operational integrity. ## Protecting Investigator Identity ICANN is actively considering methods to protect the identities of law enforcement officers who file RDRS requests. There is a specific concern that including personal email addresses in these requests could expose investigators to harassment or targeted retaliation. Developing a secure, anonymous communication layer remains a priority for the ongoing technical discussions. ## Future Policy Development While the Input Group defines the technical architecture, other ICANN policy groups will finalize the rules regarding acceptable use and token content. This collaborative governance model ensures that the technical implementation aligns with broader internet policy. The project represents a significant evolution in how domain data is managed during high-stakes criminal investigations. ## Sources covering this story - https://www.theregister.com/networks/2026/10/20/icann-testing-tech-to-let-law-enforcement-access-non-public-whois-info/5304036 — --- _Summary written by Brifing from the original reporting. Copyright in the original article belongs to its publisher; read the full piece at the link above._