New EU Privacy Law May Weaken Security
Summary: With the GDPR set to take effect on May 25, 2018, ICANN has been weighing proposals to redact registrant data from public WHOIS records, ranging from removing name, email and phone number to removing all registrant data and requiring a subpoena or court order to reveal it. Sources told KrebsOnSecurity that ICANN is poised to recommend a model showing only domain name, city, state/province and country, with public email addresses replaced by a contact relay and non-public data available through a credentialing system for law enforcement and intellectual property holders.
What's compelling: Security experts quoted in the piece argue WHOIS data is indispensable for tracking spam, phishing and malware operations, and one EU security firm declined to share a list of IP addresses tied to an IoT botnet it had discovered because IP addresses could be considered private data - a sign that cybercriminals may end up the biggest beneficiaries of the law.
Read the original at Krebs on Security ↗
- Topics
- Privacy
- Related
- Italy Fines Meta €805 Million Over Facebook's Android Gallery Access Without Explicit Consent Cyber Risks · Nov 15, 2026