DNS Abuse Framework

The DNS Abuse Framework is an initiative aimed at reinforcing the safety and security of the DNS by highlighting best practices toward disrupting DNS Abuse.

Overview

This document defines DNS abuse and the main forms it takes (phishing, malware, spam as a vector, botnets, pharming), and it demands that registrars and registries act upon these categories of DNS Abuse.

The framework also explains that registries and registrars cannot respond to "Website Content Abuse," as the line between illegal content and free expression varies from place to place, and their actions could lead to collateral damage. However, the framework does make an exception for content that is not DNS abuse but demonstrably threatens human life. Those categories of activity include:

1. child sexual abuse materials (“CSAM”);
   
2. illegal distribution of opioids online;
   
3. human trafficking; and
   
4. specific and credible incitements to violence.
   

Otherwise, registrars and registries have their own acceptable terms of use policies for covering these and additional forms of abuse.

Finally, it briefly outlines the roles of ICANN, Trusted Notifiers, DNS actors, and parties who can remove content (Site operators, Registrants, and hosting providers).