<?xml version="1.0" encoding="utf-8"?>
<TEI xmlns="http://www.tei-c.org/ns/1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:hal="http://hal.archives-ouvertes.fr/" xmlns:gml="http://www.opengis.net/gml/3.3/" xmlns:gmlce="http://www.opengis.net/gml/3.3/ce" version="1.1" xsi:schemaLocation="http://www.tei-c.org/ns/1.0 http://api.archives-ouvertes.fr/documents/aofr-sword.xsd">
  <teiHeader>
    <fileDesc>
      <titleStmt>
        <title>HAL TEI export of hal-04593323</title>
      </titleStmt>
      <publicationStmt>
        <distributor>CCSD</distributor>
        <availability status="restricted">
          <licence target="https://creativecommons.org/publicdomain/zero/1.0/">CC0 1.0 - Universal</licence>
        </availability>
        <date when="2026-05-22T14:52:28+02:00"/>
      </publicationStmt>
      <sourceDesc>
        <p part="N">HAL API Platform</p>
      </sourceDesc>
    </fileDesc>
  </teiHeader>
  <text>
    <body>
      <listBibl>
        <biblFull>
          <titleStmt>
            <title xml:lang="en">WHOIS Right? An Analysis of WHOIS and RDAP Consistency</title>
            <author role="aut">
              <persName>
                <forename type="first">Simon</forename>
                <surname>Fernandez</surname>
              </persName>
              <email type="md5">6556782b13d322f3b7dd466d4f04f6f1</email>
              <email type="domain">univ-grenoble-alpes.fr</email>
              <idno type="idhal" notation="string">simon-fernandez</idno>
              <idno type="idhal" notation="numeric">754220</idno>
              <idno type="halauthorid" notation="string">55692-754220</idno>
              <idno type="ORCID">https://orcid.org/0000-0003-3745-0868</idno>
              <affiliation ref="#struct-1043301"/>
              <affiliation ref="#struct-1043329"/>
              <affiliation ref="#struct-1043310"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Olivier</forename>
                <surname>Hureau</surname>
              </persName>
              <email type="md5">d6381b5672d46c064330a5688fa43665</email>
              <email type="domain">univ-grenoble-alpes.fr</email>
              <idno type="idhal" notation="string">hureauo</idno>
              <idno type="idhal" notation="numeric">1438009</idno>
              <idno type="halauthorid" notation="string">2913450-1438009</idno>
              <idno type="ORCID">https://orcid.org/0009-0007-4647-1579</idno>
              <affiliation ref="#struct-1043301"/>
              <affiliation ref="#struct-1043329"/>
              <affiliation ref="#struct-1043310"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Andrzej</forename>
                <surname>Duda</surname>
              </persName>
              <email type="md5">704ba8b72e0bcfe08f21aea3d66e0883</email>
              <email type="domain">imag.fr</email>
              <idno type="idhal" notation="string">andrzej-duda</idno>
              <idno type="idhal" notation="numeric">7498</idno>
              <idno type="halauthorid" notation="string">17984-7498</idno>
              <idno type="ORCID">https://orcid.org/0000-0002-6950-6574</idno>
              <idno type="GOOGLE SCHOLAR">https://scholar.google.fr/citations?user=NRBRmcIAAAAJ&amp;hl=en&amp;oi=ao</idno>
              <idno type="IDREF">https://www.idref.fr/066640172</idno>
              <affiliation ref="#struct-1043329"/>
              <affiliation ref="#struct-1043301"/>
              <affiliation ref="#struct-1043310"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Maciej</forename>
                <surname>Korczynski</surname>
              </persName>
              <idno type="halauthorid">731784-0</idno>
              <affiliation ref="#struct-1043310"/>
            </author>
            <editor role="depositor">
              <persName>
                <forename>Simon</forename>
                <surname>Fernandez</surname>
              </persName>
              <email type="md5">6556782b13d322f3b7dd466d4f04f6f1</email>
              <email type="domain">univ-grenoble-alpes.fr</email>
            </editor>
          </titleStmt>
          <editionStmt>
            <edition n="v1" type="current">
              <date type="whenSubmitted">2024-06-03 13:23:23</date>
              <date type="whenModified">2026-05-05 15:52:53</date>
              <date type="whenReleased">2024-06-04 09:29:02</date>
              <date type="whenProduced">2024-03-11</date>
              <date type="whenEndEmbargoed">2024-05-29</date>
              <ref type="file" target="https://hal.science/hal-04593323v1/document">
                <date notBefore="2024-05-29"/>
              </ref>
              <ref type="file" subtype="author" n="1" target="https://hal.science/hal-04593323v1/file/WHOIS_Right_An_Analysis_of_WHOIS_and_RDAP_Consistency.pdf" id="file-4593323-3990585">
                <date notBefore="2024-05-29"/>
              </ref>
              <ref type="externalLink" target="http://arxiv.org/pdf/2406.02046"/>
            </edition>
            <respStmt>
              <resp>contributor</resp>
              <name key="1032741">
                <persName>
                  <forename>Simon</forename>
                  <surname>Fernandez</surname>
                </persName>
                <email type="md5">6556782b13d322f3b7dd466d4f04f6f1</email>
                <email type="domain">univ-grenoble-alpes.fr</email>
              </name>
            </respStmt>
          </editionStmt>
          <publicationStmt>
            <distributor>CCSD</distributor>
            <idno type="halId">hal-04593323</idno>
            <idno type="halUri">https://hal.science/hal-04593323</idno>
            <idno type="halBibtex">fernandez:hal-04593323</idno>
            <idno type="halRefHtml">&lt;i&gt;International Conference on Passive and Active Network Measurement&lt;/i&gt;, Mar 2024, Virtual Event, United States. pp.206-231, &lt;a target="_blank" href="https://dx.doi.org/10.1007/978-3-031-56249-5_9"&gt;&amp;#x27E8;10.1007/978-3-031-56249-5_9&amp;#x27E9;&lt;/a&gt;</idno>
            <idno type="halRef">International Conference on Passive and Active Network Measurement, Mar 2024, Virtual Event, United States. pp.206-231, &amp;#x27E8;10.1007/978-3-031-56249-5_9&amp;#x27E9;</idno>
            <availability status="restricted">
              <licence target="https://creativecommons.org/licenses/by-sa/4.0/">CC BY-SA 4.0 - Attribution - ShareAlike<ref corresp="#file-4593323-3990585"/></licence>
            </availability>
          </publicationStmt>
          <seriesStmt>
            <idno type="stamp" n="UGA">HAL Grenoble Alpes</idno>
            <idno type="stamp" n="CNRS">CNRS - Centre national de la recherche scientifique</idno>
            <idno type="stamp" n="INPG">Institut polytechnique de Grenoble</idno>
            <idno type="stamp" n="LIG">Laboratoire d'Informatique de Grenoble</idno>
            <idno type="stamp" n="LIG_SRCPR" corresp="LIG">Systèmes Répartis, Calcul Parallèle et Réseaux</idno>
            <idno type="stamp" n="LIG_SRCPR_DRAKKAR" corresp="LIG_SRCPR">DRAKKAR</idno>
            <idno type="stamp" n="UGA-EPE">Université Grenoble Alpes [2020-*]</idno>
            <idno type="stamp" n="LIG_SIDCH" corresp="LIG">Systèmes intelligents pour les données, les connaissances et les humains</idno>
            <idno type="stamp" n="TEST-UGA">TEST-UGA</idno>
          </seriesStmt>
          <notesStmt>
            <note type="audience" n="2">International</note>
            <note type="invited" n="0">No</note>
            <note type="popular" n="0">No</note>
            <note type="peer" n="1">Yes</note>
            <note type="proceedings" n="0">No</note>
          </notesStmt>
          <sourceDesc>
            <biblStruct>
              <analytic>
                <title xml:lang="en">WHOIS Right? An Analysis of WHOIS and RDAP Consistency</title>
                <author role="aut">
                  <persName>
                    <forename type="first">Simon</forename>
                    <surname>Fernandez</surname>
                  </persName>
                  <email type="md5">6556782b13d322f3b7dd466d4f04f6f1</email>
                  <email type="domain">univ-grenoble-alpes.fr</email>
                  <idno type="idhal" notation="string">simon-fernandez</idno>
                  <idno type="idhal" notation="numeric">754220</idno>
                  <idno type="halauthorid" notation="string">55692-754220</idno>
                  <idno type="ORCID">https://orcid.org/0000-0003-3745-0868</idno>
                  <affiliation ref="#struct-1043301"/>
                  <affiliation ref="#struct-1043329"/>
                  <affiliation ref="#struct-1043310"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Olivier</forename>
                    <surname>Hureau</surname>
                  </persName>
                  <email type="md5">d6381b5672d46c064330a5688fa43665</email>
                  <email type="domain">univ-grenoble-alpes.fr</email>
                  <idno type="idhal" notation="string">hureauo</idno>
                  <idno type="idhal" notation="numeric">1438009</idno>
                  <idno type="halauthorid" notation="string">2913450-1438009</idno>
                  <idno type="ORCID">https://orcid.org/0009-0007-4647-1579</idno>
                  <affiliation ref="#struct-1043301"/>
                  <affiliation ref="#struct-1043329"/>
                  <affiliation ref="#struct-1043310"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Andrzej</forename>
                    <surname>Duda</surname>
                  </persName>
                  <email type="md5">704ba8b72e0bcfe08f21aea3d66e0883</email>
                  <email type="domain">imag.fr</email>
                  <idno type="idhal" notation="string">andrzej-duda</idno>
                  <idno type="idhal" notation="numeric">7498</idno>
                  <idno type="halauthorid" notation="string">17984-7498</idno>
                  <idno type="ORCID">https://orcid.org/0000-0002-6950-6574</idno>
                  <idno type="GOOGLE SCHOLAR">https://scholar.google.fr/citations?user=NRBRmcIAAAAJ&amp;hl=en&amp;oi=ao</idno>
                  <idno type="IDREF">https://www.idref.fr/066640172</idno>
                  <affiliation ref="#struct-1043329"/>
                  <affiliation ref="#struct-1043301"/>
                  <affiliation ref="#struct-1043310"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Maciej</forename>
                    <surname>Korczynski</surname>
                  </persName>
                  <idno type="halauthorid">731784-0</idno>
                  <affiliation ref="#struct-1043310"/>
                </author>
              </analytic>
              <monogr>
                <meeting>
                  <title>International Conference on Passive and Active Network Measurement</title>
                  <date type="start">2024-03-11</date>
                  <date type="end">2024-03-13</date>
                  <settlement>Virtual Event</settlement>
                  <country key="US">United States</country>
                </meeting>
                <imprint>
                  <publisher>Springer Nature Switzerland</publisher>
                  <pubPlace>Cham</pubPlace>
                  <biblScope unit="serie">Lecture Notes in Computer Science</biblScope>
                  <biblScope unit="volume">14537</biblScope>
                  <biblScope unit="pp">206-231</biblScope>
                  <date type="datePub">2024-03-20</date>
                </imprint>
              </monogr>
              <idno type="arxiv">2406.02046</idno>
              <idno type="doi">10.1007/978-3-031-56249-5_9</idno>
              <relatedItem target="https://doi.org/10.57745/RJX9XH" type="Cites" subtype="http://purl.org/coar/resource_type/c_ddb1"/>
              <relatedItem target="https://archive.softwareheritage.org/swh:1:dir:67e124f033ea25682b2f9098a6ac8a0e938a3cb8" type="Cites" subtype="http://purl.org/coar/resource_type/c_5ce6"/>
              <relatedItem target="https://archive.softwareheritage.org/swh:1:snp:47ce58d56c4f4339670f652de2c22db15266adff" type="Cites" subtype="http://purl.org/coar/resource_type/c_5ce6"/>
              <relatedItem target="https://archive.softwareheritage.org/swh:1:rev:d44ca350efd7f06f821600cbe9215aee4331f0a4" type="Cites" subtype="http://purl.org/coar/resource_type/c_5ce6"/>
            </biblStruct>
          </sourceDesc>
          <profileDesc>
            <langUsage>
              <language ident="en">English</language>
            </langUsage>
            <textClass>
              <keywords scheme="author">
                <term xml:lang="en">measurements</term>
                <term xml:lang="en">registration data</term>
                <term xml:lang="en">domain names</term>
                <term xml:lang="en">DNS</term>
                <term xml:lang="en">RDAP</term>
                <term xml:lang="en">WHOIS</term>
              </keywords>
              <classCode scheme="halDomain" n="info.info-ni">Computer Science [cs]/Networking and Internet Architecture [cs.NI]</classCode>
              <classCode scheme="halTypology" n="COMM">Conference papers</classCode>
              <classCode scheme="halOldTypology" n="COMM">Conference papers</classCode>
              <classCode scheme="halTreeTypology" n="COMM">Conference papers</classCode>
            </textClass>
            <abstract xml:lang="en">
              <p>Public registration information on domain names, such as the accredited registrar, the domain name expiration date, or the abusecontact is crucial for many security tasks, from automated abuse notifications to botnet or phishing detection and classification systems. Various domain registration data is usually accessible through the WHOIS or RDAP protocols—a priori they provide the same data but use distinct formats and communication protocols. While WHOIS aims to provide human-readable data, RDAP uses a machine-readable format. Therefore, deciding which protocol to use is generally considered a straightforward technical choice, depending on the use case and the required automation and security level. In this paper, we examine the core assumption that WHOIS and RDAP offer the same data and that users can query them interchangeably. By collecting, processing, and comparing 164 million WHOIS and RDAP records for a sample of 55 million domain names, we reveal that while the data obtained through WHOIS and RDAP is generally consistent, 7.6% of the observed domains still present inconsistent data on important fields like IANA ID, creation date, or nameservers. Such variances should receive careful consideration from security stakeholders reliant on the accuracy of these fields.</p>
            </abstract>
          </profileDesc>
        </biblFull>
      </listBibl>
    </body>
    <back>
      <listOrg type="structures">
        <org type="laboratory" xml:id="struct-1043301" status="VALID">
          <idno type="IdRef">148425550</idno>
          <idno type="ISNI">0000 0001 2286 4035</idno>
          <idno type="RNSR">200711886U</idno>
          <idno type="ROR">https://ror.org/01c8rcg82</idno>
          <orgName>Laboratoire d'Informatique de Grenoble</orgName>
          <orgName type="acronym">LIG</orgName>
          <date type="start">2020-01-01</date>
          <desc>
            <address>
              <addrLine>UMR 5217 - Laboratoire LIG - Bâtiment IMAG - 700 avenue Centrale - Domaine Universitaire de Saint-Martin-d’Hères Adresse postale : CS 40700 - 38058 Grenoble cedex 9Tél. : 04 57 42 14 00</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.liglab.fr/</ref>
          </desc>
          <listRelation>
            <relation active="#struct-300009" type="direct"/>
            <relation name="UMR5217" active="#struct-441569" type="direct"/>
            <relation active="#struct-1042703" type="direct"/>
            <relation active="#struct-1043329" type="direct"/>
          </listRelation>
        </org>
        <org type="institution" xml:id="struct-1043329" status="VALID">
          <idno type="IdRef">026388804</idno>
          <idno type="ROR">https://ror.org/05sbt2524</idno>
          <orgName>Institut polytechnique de Grenoble - Grenoble Institute of Technology</orgName>
          <orgName type="acronym">Grenoble INP</orgName>
          <date type="start">2020-01-01</date>
          <desc>
            <address>
              <addrLine>46 avenue Félix Viallet 38031 Grenoble Cedex 1</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.grenoble-inp.fr/</ref>
          </desc>
          <listRelation>
            <relation active="#struct-1042703" type="direct"/>
          </listRelation>
        </org>
        <org type="researchteam" xml:id="struct-1043310" status="VALID">
          <orgName>Drakkar</orgName>
          <date type="start">2020-01-01</date>
          <desc>
            <address>
              <addrLine>Laboratoire LIG - Bâtiment IMAG - 700 avenue Centrale, CS 40700 - 38058 Grenoble cedex 9</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://drakkar.imag.fr</ref>
          </desc>
          <listRelation>
            <relation active="#struct-1043301" type="direct"/>
            <relation active="#struct-300009" type="indirect"/>
            <relation name="UMR5217" active="#struct-441569" type="indirect"/>
            <relation active="#struct-1042703" type="indirect"/>
            <relation active="#struct-1043329" type="indirect"/>
          </listRelation>
        </org>
        <org type="institution" xml:id="struct-300009" status="VALID">
          <idno type="ROR">https://ror.org/02kvxyf05</idno>
          <orgName>Institut National de Recherche en Informatique et en Automatique</orgName>
          <orgName type="acronym">Inria</orgName>
          <desc>
            <address>
              <addrLine>Domaine de VoluceauRocquencourt - BP 10578153 Le Chesnay Cedex</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.inria.fr/en/</ref>
          </desc>
        </org>
        <org type="regroupinstitution" xml:id="struct-441569" status="VALID">
          <idno type="IdRef">02636817X</idno>
          <idno type="ISNI">0000000122597504</idno>
          <idno type="ROR">https://ror.org/02feahw73</idno>
          <orgName>Centre National de la Recherche Scientifique</orgName>
          <orgName type="acronym">CNRS</orgName>
          <date type="start">1939-10-19</date>
          <desc>
            <address>
              <country key="FR"/>
            </address>
            <ref type="url">https://www.cnrs.fr/</ref>
          </desc>
        </org>
        <org type="regroupinstitution" xml:id="struct-1042703" status="VALID">
          <idno type="IdRef">240648315</idno>
          <idno type="ROR">https://ror.org/02rx3b187</idno>
          <orgName>Université Grenoble Alpes</orgName>
          <orgName type="acronym">UGA</orgName>
          <date type="start">2020-01-01</date>
          <desc>
            <address>
              <addrLine>Adresse CS 40700 - 38058 Grenoble cedex</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.univ-grenoble-alpes.fr</ref>
          </desc>
        </org>
      </listOrg>
    </back>
  </text>
</TEI>