{"id":3871,"date":"2026-10-28T17:51:10","date_gmt":"2026-10-28T20:51:10","guid":{"rendered":"https:\/\/nivaldocleto.cnt.br\/blog\/?p=3871"},"modified":"2026-10-28T17:51:10","modified_gmt":"2026-10-28T20:51:10","slug":"icann87-gac-communique-sets-out-priorities-for-a-safer-internet","status":"publish","type":"post","link":"https:\/\/nivaldocleto.cnt.br\/blog\/icann87-gac-communique-sets-out-priorities-for-a-safer-internet\/","title":{"rendered":"ICANN87 GAC Communiqu\u00e9 Sets Out Priorities for a Safer Internet"},"content":{"rendered":"
<\/div>\n

Governments call for progress on tackling abuse, enabling legitimate data access and protecting users as the domain name space expands<\/p>\n

By Nivaldo Cleto*<\/p>\n

The official GAC[i]<\/a><\/sup> Communiqu\u00e9 from ICANN87[ii]<\/a><\/sup>, released on 26 October, follows up on the discussions held in Bali about security and the expansion of the domain name space. [9]<\/a><\/p>\n

Having followed the meeting’s discussions, I believe this document helps identify the work that needs to move forward over the coming months. For Brazilian businesses, it is useful to follow how these proposals could improve fraud prevention and incident response.<\/p>\n

Understanding the positions of governments<\/b><\/h2>\n

The GAC brings together government representatives and advises ICANN on public policy issues within its mission. Its advice has a specific status under the organization’s Bylaws. The communiqu\u00e9 records the committee’s positions, but publication does not automatically turn every proposal into a contractual obligation. Each issue’s decision and implementation processes need to be followed. [2]<\/a><\/p>\n

Addressing domains associated with malicious activity<\/b><\/h2>\n

DNS[iii]<\/a><\/sup> Abuse includes practices such as phishing, which deceives people into providing information, and malware distribution. ICANN contracts already impose obligations to address these abuses on registry operators and registrars, the companies that offer domain name registrations. [3]<\/a><\/p>\n

One policy initiative under development concerns checking other domains associated with accounts involved in actionable abuse reports. Discussions include the criteria, timelines and safeguards for these checks. [4]<\/a><\/p>\n

The GAC supports cooperation across registrars and implementing this policy before new extensions enter the DNS. [1]<\/a><\/p>\n

Verifying data before a domain becomes active<\/b><\/h2>\n

Another issue is the debate over the 15-day timeline under existing contractual arrangements for validating and verifying contact information for gTLDs[iv]<\/a><\/sup>. The GAC recommends completing these steps before a new domain becomes accessible through the DNS. Implementation still involves discussions about policy development and contractual amendments. [5]<\/a><\/p>\n

For anyone relying on the Internet to sell products or serve customers, I see value in reducing opportunities for malicious use at the start of registration. Applying these measures also requires consideration of legitimate users and service providers’ operational capacity.<\/p>\n

Organizing legitimate access to registration data<\/b><\/h2>\n

The RDRS[v]<\/a><\/sup> and the future SSAD[vi]<\/a><\/sup> are part of the effort to organize requests for nonpublic registration data. The GAC advocates a permanent system with mandatory participation by all gTLD registrars and effective handling of requests concerning privacy and proxy services. [6]<\/a><\/p>\n

For urgent requests covered by the policy, the priority is to operationalize authentication of law enforcement requestors and the 24-hour response requirement. Making that requirement effective depends on completing the necessary mechanisms. Responding to a request involves assessing it and does not mean automatic disclosure of the data. [5]<\/a> [6]<\/a><\/p>\n

I believe clear procedures help both those investigating an incident and those who must assess a request while protecting the data in their care.<\/p>\n

Expanding extensions with consumer protection<\/b><\/h2>\n

The 2026 Round of new gTLDs requires governments to prepare to review applications and use the available participation mechanisms, including comments and early warnings. The Applicant Support Program is also part of this agenda. [7]<\/a><\/p>\n

In the communiqu\u00e9, the GAC highlights safeguards for applications linked to public services and regulated sectors, such as healthcare and finance. These assessments may lead to public interest commitments being incorporated into registry agreements. [1]<\/a><\/p>\n

From a business perspective, I believe a new extension needs to inspire trust. Opportunities to expand brands and services online should come with clarity about the responsibilities of those operating these spaces.<\/p>\n

Supporting linguistic diversity and access<\/b><\/h2>\n

The document reports only 21 applications for internationalized domain names, or IDNs[vii]<\/a><\/sup>, approximately 1.3% of the total. These figures are preliminary and subject to confirmation after String Confirmation Day in November. [1]<\/a><\/p>\n

Universal Acceptance, or UA[viii]<\/a><\/sup>, aims to ensure that valid domain names and email addresses work across systems regardless of language, script or length. The Bali session addressed the role of governments and the adaptation of digital services. [8]<\/a><\/p>\n

For a business, this can start with reviewing registration forms and customer service tools. If a system rejects a valid address, it creates a barrier at the very moment a user is trying to engage with the organization.<\/p>\n

Following the work after Bali<\/b><\/h2>\n

As a member of the Business Constituency, I believe the business community should follow upcoming consultations and participate in policy implementation. Timelines, responsibilities and the results of the measures adopted all deserve attention.<\/p>\n

This is the perspective I bring to following ICANN’s work and sharing my diaries. A business that relies on the Internet has a direct interest in the quality of the rules that support its operation.<\/p>\n

*Nivaldo Cleto is an entrepreneur in accounting and digital certification, a member of the Brazilian Internet Steering Committee (CGI.br<\/a>) representing business users of the Internet, and a member of the ICANN Business Constituency (BC).<\/i><\/p>\n

\n
\n

Acronyms and terms<\/b><\/h2>\n
[i] GAC Governmental Advisory Committee, ICANN’s committee of government representatives.<\/div>\n
[ii] ICANN Internet Corporation for Assigned Names and Numbers, the organization coordinating unique Internet identifiers.<\/div>\n
[iii] DNS Domain Name System, which links domain names to the addresses used by computers.<\/div>\n
[iv] gTLD Generic top-level domain, such as .com.<\/div>\n
[v] RDRS Registration Data Request Service, which routes requests for nonpublic registration data.<\/div>\n
[vi] SSAD System for Standardized Access\/Disclosure of registration data.<\/div>\n
[vii] IDN Internationalized Domain Name, allowing characters from different languages and writing systems.<\/div>\n
[viii] UA Universal Acceptance, enabling digital systems to accept valid domain names and email addresses.<\/div>\n<\/section>\n
<\/div>\n
\n

Official sources<\/b><\/h2>\n

Bali Communiqu\u00e9 and official ICANN87 background materials. Accessed on 27 October 2026.<\/p>\n

    \n
  1. GAC Communiqu\u00e9 \u2014 Bali, 26 October 2026<\/a><\/li>\n
  2. GAC \u2014 Role of the GAC<\/a><\/li>\n
  3. ICANN87 \u2014 DNS Abuse Mitigation Plenary Session<\/a><\/li>\n
  4. ICANN87 \u2014 GAC Briefing on DNS Abuse Mitigation<\/a><\/li>\n
  5. ICANN87 \u2014 GAC Briefing on Registration Data<\/a><\/li>\n
  6. ICANN87 \u2014 WHOIS and Data Protection GAC Plenary<\/a><\/li>\n
  7. ICANN87 \u2014 GAC Briefing on the New gTLD Program<\/a><\/li>\n
  8. ICANN87 \u2014 GAC Universal Acceptance Session<\/a><\/li>\n
  9. ICANN \u2014 Official announcement of the ICANN87 GAC Communiqu\u00e9<\/a><\/li>\n<\/ol>\n<\/section>\n

     <\/p>\n

     <\/p>\n

    Foto – icannphotos<\/p>\n","protected":false},"excerpt":{"rendered":"

    Governments call for progress on tackling abuse, enabling legitimate data access and protecting users as the domain name space expands By Nivaldo Cleto* The official GAC[i] Communiqu\u00e9 from ICANN87[ii], released on 26 October, follows up on the discussions held in Bali about security and the expansion of the domain name space. [9] Having followed the meeting’s discussions, I believe this document helps identify the work that needs to move forward over the coming months. For Brazilian businesses, it is useful to follow how these proposals could improve fraud prevention and incident response. Understanding the positions of governments The GAC brings together government representatives and advises ICANN on public policy issues within its mission. Its advice has a specific status under the organization’s Bylaws. The communiqu\u00e9 records the committee’s positions, but publication does not automatically turn every proposal into a contractual obligation. Each issue’s decision and implementation processes need to be followed. [2] Addressing domains associated with malicious activity DNS[iii] Abuse includes practices such as phishing, which deceives people into providing information, and malware distribution. ICANN contracts already impose obligations to address these abuses on registry operators and registrars, the companies that offer domain name registrations. [3] One policy initiative […]<\/p>\n","protected":false},"author":2,"featured_media":3866,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[84],"tags":[],"class_list":["post-3871","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-icann87"],"_links":{"self":[{"href":"https:\/\/nivaldocleto.cnt.br\/blog\/wp-json\/wp\/v2\/posts\/3871","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/nivaldocleto.cnt.br\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/nivaldocleto.cnt.br\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/nivaldocleto.cnt.br\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/nivaldocleto.cnt.br\/blog\/wp-json\/wp\/v2\/comments?post=3871"}],"version-history":[{"count":2,"href":"https:\/\/nivaldocleto.cnt.br\/blog\/wp-json\/wp\/v2\/posts\/3871\/revisions"}],"predecessor-version":[{"id":3873,"href":"https:\/\/nivaldocleto.cnt.br\/blog\/wp-json\/wp\/v2\/posts\/3871\/revisions\/3873"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/nivaldocleto.cnt.br\/blog\/wp-json\/wp\/v2\/media\/3866"}],"wp:attachment":[{"href":"https:\/\/nivaldocleto.cnt.br\/blog\/wp-json\/wp\/v2\/media?parent=3871"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/nivaldocleto.cnt.br\/blog\/wp-json\/wp\/v2\/categories?post=3871"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/nivaldocleto.cnt.br\/blog\/wp-json\/wp\/v2\/tags?post=3871"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}