...

The way a policy is enforced - how, in what situations etc - is what matters. Most if not all ISP AUPs say basically the same mom and apple pie thing (no net abuse or we'll shut you down)

If what this guy says is right, his domain was taken down just because one of his servers was broken into and spammed through. I havent heard godaddy's side of the story yet - might be better to reserve judgement till they comment.

Godaddy (from what I can gather) generates a surprising number of these shut downs on weekends. The fact that their enforcement and reinstatement rules are not publicly available on their website (anywhere) and have no guarantees or assurances on time-to-respond smacks of something that could get very nasty and seems highly reactionary.... Would they suspend comcast.com or mcdonalds.com or ge.com if _one_ of their servers or services was hijacked? Highly doubtful.

In the long run, if this is a trend, those big enough will just become registrars themselves -- even if its just for their own operations. Its a silly thing for a domain registrar to take on enforcement operations that network operators aren't. Abusers don't care about domains, or domain names. Most abuse (spam aside) can operate perfectly well with just an IP address. By the time the DNS system pulls a domain the damage has already been done and the potential for high collateral damage is significant. Restoration time for good-eggs (say those who fix the problem once properly alerted) is several days in the best of cases with the bad result of acrimony and huge financial/reputation impact....

The only medium term impact is that Godaddy will lose the bad business and some good business and create some more competitors.

The only point I am trying to make is operational WRT the command structure of a NOC. Several of us here have built many of the large NOC's in operation of the Internet today and if you put us all in the same room we'd all agree that we already know how to build NOC's that respond and get the job done for the most part. It ain't that hard anymore. Question: Do people really think waking up Bob Parsons at 0400 is a good idea for a $9.00 domain only account? He already got a roughly ~$50.00 response with all the time he had GoDaddy on the phone and the out supervisor call. I think if Parkel does, he needs to sign up with VeriSign, UltraDNS, or anyone else who is running DNS assurance products. Note: Please refrain from inferring an endorsement for DNS assurance products. -M<