Mar15th2010

The History of Chinese ICP and .CN Requirements

NOTE:  This started off as a little blog post.  But after including all of the elements and history, we end up at 2700+ words.  I’ve made it as easy as possible with headings, however if you want to understand clearly and not be asking why and why not questions later – just read it all now in one hit.

Start Here

There has been a bit of a maelstrom recently regarding the use of .CN and ICP certificates all on top of the existing confusion.

So, to try and set the record straight this article is a nice little walk through the pages of history and clearly state the facts of the matter from the inception until the present. And hopefully not only explaining what the situation is, but also how it came about and the anthropology of how we got to the situation that we have today.

The Land that Time Forgot – 2005

There was a time where life was sweet, chocolate milk flowed from every faucet, a reasonably priced pork knuckle had crispy skin and the internet in China was (comparatively) more functional.

That time was 2005.

However, that was also the year that ICP, or Internet Content Provider, licenses first appeared. At first, like many new Chinese regulations, it was all bluster and wind. Combined with a good healthy respect for the lack of organizational ability of the people that often make these broad and sudden declarations – people just sat tight. Taking the view that, when they get their act together, they will point out to us where we are in breach and we will patch things on a case by case basis.

Even if legislators had wanted to force through compliance straight away – one couldn’t – nothing was set up and the ink was still wet on the paper. And like most things in China – subject to heavy blotting still.

People ask: “Do you remember the time and place that you were when you heard of the assassination of JFK or the death of Princess Di?” For some strange reason I remember the time and place I was when I heard about ICP too.

I was standing in our office’s mini machine room, kicking a very stubborn raised floor tile back into position and wondering why it couldn’t have been made to fit and work properly by those who created it in the first place before it got to me…

They got their Act Together – December 2008

Finally, at the end of 2008 the ISPs and IDCs started receiving the dreaded phone calls. Various time limits were given from a few hours to a week to get sites offline or registered. Sometimes lists were provided, but for every 20 sites identified, another 100 would be on the same IP (virtual hosting) with no request for an ICP made. One could therefore assume that DNS servers were being harvested to get an insight into the habits and traffic directions of users to find unregistered web sites. So the more obscure you were, the better it seemed.

In most cases one simply filled in the online registration form and was done with it. The only people who could not do this were dodgy businesses without clear registration in China, or were operating outside of their legally registered area. When discovered, if an ICP license was unobtainable (for whatever reason), the site had to be moved out of China.

It was also around this time that various hosting companies in China started to demand an ICP up front before putting a site up. While this was not strictly needed, it is how they decided to do things. By not needed, I mean that to apply for an ICP is not that hard and you could do that concurrently with the initial loading and development of a site. Later it became a requirement for all to do things in order.

There were some awkward moments too. You see many servers have “Remote Management Cards” as well as “IPMI/BMC Management Interfaces” – these all are web based. Company’s also have Extranets and Intranets. Which are also? Yup, web based.

The point that I am making is that there are a lot of web pages out there that are not web sites and are not for the public and indeed are all password protected. This however did not make them immune from cease and desist and take down threats. At first it started as a bit of a joke – “gee how ignorant can they be?” A good laugh at the policy
enforcers’ expense. Then it became annoying. Finally with enough heated phone calls and pleaded explanations via intermediaries, the enforcers gained the knowledge that these sorts of “Web Pages” are out there and can’t be “registered” or have an ICP code embedded in them.

The Shit Hits the Fan – mid-2009

While things progressed at a steady pace – downwards – in more ways than one – the ICP enforcement game started to become more prominent. Like clockwork, every FRIDAY afternoon, at 5.30PM, a call would come down the line – “You have 1 hour to remove the offending content or all of your IP’s and routes will be cut.”

I think it is important to also explain what “remove content” means, because in its nascent use in 2009 – we can see the genesis of the procedures that are causing confusion today.

Remove content means just that – remove ALL the content. It doesn’t matter WHAT the content is – EVERYTHING must be gone.

So…….? I hear you thinking.

Well simply using a control panel to “disable” a site is not enough. Because there would still be “Content” visible. “Site Disabled for Administrative Purposes” is just as infringing as anything else.

This then led to the next step – OK – remove the Virtual Host declarations. This also didn’t work. Because in the
absence of any defined VHOST the HTTPD daemon will serve the first declared VHOST on the server – which unto itself may be perfectly legit as a site.

However this is still “Content” and it has to be removed.

So one then removed all the files from these offending sites, leaving the VHOST declarations intact. This of course then causes a series 500 error page upon loading. And while this isn’t a page that exists or could be edited and is in fact generated automatically… as an informational error message that we find all over tech land (..PC Load Letter..?! )…

…this is still “Content” and therefore it has to be removed too.

The answer then was to simply place an empty index.html file into the virtual host root. Upon loading the domain a blank page is presented.

This is the accepted definition of “Remove Content”. So take note and don’t ask why? Or why not? Just accept it and get on with things. You’ll live longer.

So what is an ICP and who really needs one?

We have now laid out the history of the inception of the ICP and how it was deployed and some of the lifecycle of how it has been enforced and managed. Before we get to the current stage of this little grub’s metamorphous into the beautiful butterfly that we have today in early 2010, lets indulge in one last bit of confusion surrounding the ICP.

Who needs one?

Before we go into this section – please note that the details contained within are purely for historic value. They DO NOT REPRESENT CURRENT STATE OF AFFAIRS, and more importantly how the law is enforced is still changing. What it will do, is like the previous discussions give an understanding to what has happened in the past and how that has helped shape the situation that we have today, both for better and for worse…

Originally, the rules as laid out and explained by the people that you apply for an ICP with, was that an ICP is needed for all domains that list a Chinese address in the WHOIS, are located on a China assigned IP and are owned/operated by a Chinese business entity. The ICP for these types was free in principle. For eCommerce and blog/BBS sites there were additional requirements as well as a quite high “application security fee” for eCommerce sites – refundable after the application process was completed (minus a few charges here and there).

A local business actually grew out of this to lend companies money for the application process – against a fee of course.

So foreign WHOIS, foreign IP, foreign company and individuals, were all (read: not enforced, though not necessarily legally) exempted. This situation, changed for the worse and caused no end of confusion when people who had foreign companies and/or foreign WHOIS records over night were being told by the enforcers (the people on the other end of the line that tell you have 1 hour before all IP’s are cut) to get ICP’s for all sites on a China assigned IP regardless of anything else. Of course this made it next to impossible for some companies to acquire an ICP, especially since you would need a Chinese Business License to apply for one.

The internet by it’s nature is borderless and many organizations that operate in China have a web site here by mandate of the superior local speed and the crappy international speed. Individually owned and operated sites were still in the clear though.

So what is one to do if you are a foreign entity and don’t have a local entity, be it a Representative Office, JV, WFOE or other establishment and you want an ICP? How the law was enforced at the time would lead you to conclude that you didn’t need an ICP. Indeed if you tried to apply for one with the ICP application office, they’d also tell you that you didn’t need one.

However let’s not be forgetting that there are those people on the end of the phone line at 5.30PM on a Friday…….so what is one to do? Well smart money is on listening to those with the biggest stick and actionable power.

This led to a somewhat dodgy and messy situation of foreign companies or web sites then trying to proxy or slipstream into an ICP via a local entity. The most common was the eager and “long term not in your best interests but only ours” local IDC/ISP’s that would, for a fee, let you use their ICP.

The ramifications of this ranged from dubious to outright illegal in some cases. Many of these ISP’s/IDC’s were basically taking quick profit from these hapless foreigners (oh how many a hapless foreigner, be it inside or outside China manages to get caught with their pants down around their ankles) who would eventually be found and taken down anyway after paying up their yearlong (non-cancelable of course) hosting contract.

A crackdown finally happened and hundreds of unregistered and dodgy data centers and ISP’s were shut down late last year. Many a foreign company who was lured in this way though, got their stuff online, did the big launch and started to spend money of advertising, only to be shut down one day out of the blue, usually finding out because their clients complain, not because their local IDC/ISP knew about or could bother to inform prior to taking action.

Back to our Time Line – it is late 2009

So, by the very end of 2009, for better and worse the internet in China is cleaned up a lot. The dodgy sites are gone, the dodgy data centers and ISP’s offline. Everyone is obeying, respecting and following the law and requirements of the ICP.

While it remains a problem with technologies fairly new to China, like geographic load balancing, private networks, IP aliasing, storage and cloud fabrics that further blur the line of “Server” and “IP” to be something far more ethereal and harder to pin down, in general the rule of thumb is – do what you need to do to make the tech work. But if content is being served to the public, from a China assigned IP, it must have an ICP, registered by the owners legal Chinese entity.

Thus the ICP issue was finally settled and the rules and regulations crystal clear at the end of 2009 – or so one would think. Though one never got a clearer or more definitive statement of what was needed and who was required to have one. Pragmatically speaking though, the actions of the enforcers spoke loudly and clearly. And the legitimate industry players listened.

Post Script – Time of Domain Crack Down

So, now towards the end of Q1, 2010, things are almost settled – again. By settled, I don’t mean ideal, I mean, quantifiable. This is where the domain name saga starts. First off there was a ruling that no Chinese citizen is allowed to own ANY domain name. As a result domains that could not be verified as being owned by a business in all TLD’s were being excised from the registries very quickly by local registrars.

Now whether or not this is in line with current ICANN rules or other TLD rules – if you are a Chinese registrar and are being told that certain domain name sales are now illegal… what is one to do? Well smart money is on listening to those with the biggest stick and actionable power. Am I repeating myself?

Of course if one has a domain registered overseas in any domain but .CN – then you are safe – no one can take your domain away from you. If on the other hand you do have a .CN domain name, registered anywhere in the world – you now have a problem. The Chinese Academy of Science – who makes the rules for .CN domains on behalf of the Ministries – are in the process of enforcing their specific understanding of these rules, rules that now are seeming to settle in.

What has finally settled in the last few weeks (everyone now agrees on a common understanding of the intent and purpose of the law – at least it seems that way) is that basically all .CN domains have to be registered to a Chinese registered company and furthermore the business name and .CN domain names must have a proven similarity or relationship.

This is not all that new of an idea. auDA along with a lot of other TLD authorities saw the shambles that went on in the .COM space with domain squatters and trade mark disputes and wanted to avoid the same fate. China is merely bringing control of it’s own .CN in line with how other countries manage their TLD’s – at least in part.

This is a good move if you ask me, as many a domain name here is “taken” and put up with a nice for sale parking sign. Domain squatters and opportunists have run rampant in China with the comparatively cheap cost to register a domain name.

During this whole process of the facts settling in, hosting companies received emails from the registrars that are on the ball and were given key dates and pre filled in PDF’s of the legal forms for convenience. Clients that took the cheap and ill advised registrar route when it comes to business domain name registration (let alone .CN) got nothing. There was an uproar and the EU got involved and started to solicit for information (complaints) from businesses.

The key dates came and went and nothing happened.

So now what does one do if one wants to register a new .CN domain name?

REQUIREMENTS

Domain name applicants need to submit the formal paper based application material as well when making the online application to the registrar.

The application material includes the original application form with Chinese branch business seal, company business license (photocopy), and registrant ID (photocopy).

Individuals are not allowed to register.

China Branch: means international companies, enterprises, and organizations establish within
mainland China (PRC), a wholly owned or share controlling entity: including a branch, a subsidiary or a representative office which is having the same “name” as the parent entity. The local entity must register with the relevant Chinese authorities.

For example: IBM should use “IBM China” to register IBM.cn

Chinese employee: the person submitting the application on behalf of the registrant (the entity), must be a Chinese citizen and has a valid PRC personal ID.

Once all the above is done, the domain name must also be pointed at a China assigned IP and left content free (ie blank HTML page) for 20 working days – so one month of normal days. Then – barring anything going wrong – you will be issued the ICP and can start to put up content.

And what does one do if one already has a registered .CN domain name? My advice is get your China business registration sorted out quick smart, or go and get the next best .COM or similar domain – though you’ll still need an ICP to host inside China!

UPDATE 22nd March 2010

Domains must now resolve to nothing.  So no A records allowed.  The blank page era has just been blotted.  Expect more changes to happen as the preparation phase takes place during the implementation phase.

Cross Posted to CANDIS BLOG

11 Responses to “The History of Chinese ICP and .CN Requirements”


  1. Mar16th2010
    1 Keith Mar 16th, 2010 at 6:31 AM

    Good write up! I was just getting ready to register a new domain here, and ….

  2. Mar23rd2010
    2 xuedi Mar 23rd, 2010 at 4:50 PM

    Nice and massiv port! Thanks a lot … now i don’t see any way or point to register my forign hosted .cn for an icp anymore … what a pity …

    Cheers
    xuedi

  3. Apr8th2010
    3 richard Apr 8th, 2010 at 9:36 PM

    There are even more changes now – added an update….

  4. May31st2010
    4 Michael Cole May 31st, 2010 at 7:56 PM

    Hi Richard,
    Thanks for the thorough explanation of the ICP regs. Of course, all of this brings me to a further question concerning commercial vs non-commercial ICP licenses.

    From my understanding, companies who are in the Internet business, or are using their websites for commercial purposes, need to get a commercial ICP license. I have also been told by a local lawyer that, in order to qualify for a commercial ICP license, that companies should have registered capital of at least RMB 10 million.

    In this case, what do Internet startups do about ICP licenses? Just use a non-commercial license and hope no one notices?

  5. May31st2010
    5 richard May 31st, 2010 at 8:43 PM

    Good questions.

    If you are not carrying out transactions on your site (Shopping cart) then a commercial ICP is not needed.

    Using a website as a “Commercial interest” as far as advertising your company is fine. In fact since individuals can no longer own a domain – only businesses are eligible so the bulk are and need to have an ICP and be, well….. organisations.

    The registered capital amount sounds about right from what I have heard as well (differing figures though!)

    You need to define “Internet startup”. It goes to the point of if you are an ISP or not – in that case you need to be a local company. And what business your “Internet Startup” flows into as certain industries have other requirements as well. But being a net startup in the generic sense – a normal ICP is all that is needed…once you are a registered entity that is, with the normal registered capital for a joint venture being about 15K RMB or so…..again depending on the industry and your local officials and connections.

    As far as registered capital goes – well you get your hands on it like most businesses do here. It is a registration capital – not a working capital.

  6. Jun3rd2013
    6 Andy Jun 3rd, 2013 at 3:35 PM

    You mention that for “blog/BBS sites there were additional requirements” – I take it this is still the case? Is this because they contain user generated content (UGC)? What are the different rules for sites with UGC? Do you need a different license? Is it hard to get? How do sites posting reviews of services or products get round UGC – do they moderate any pre-published articles, or post-publish moderate?

  7. Jun3rd2013
    7 Andy Jun 3rd, 2013 at 3:36 PM

    Ha ha, I’m guessing pre-publish moderate by the “Your comment is awaiting moderation.” message after I submitted my last comment! Do you require any special ICP licence for this?

  8. Jun6th2013
    8 richard Jun 6th, 2013 at 8:05 AM

    Basically you become a publisher, so you need a “publisher”, also need to monitor content and now require all users to sign up with real names and ID and verify that too.

    The requirements reach beyond just the ICP…..

  9. Dec5th2013
    9 Toby Dec 5th, 2013 at 7:08 PM

    Richard,

    Fantastic write-up – many thanks, and really impressive to see you still answering replies on this site 3 years later…

    If you don’t mind, I’d like to muddy the waters a little:

    1. Any idea what the current situation is with CDN-only hosting in China? For example, running a site outside on servers located outside of China but contracting a CDN provider with edge nodes in China. The site itself will load from the non-Chinese servers, but certain parts of the site (images, downloads etc.) will be served from the CDN. Do you think an ICP is required for the CDN? It’s not a “website” in the pure sense of the word – not a line of HTML will be on the CDN – just a pile of static images, compressed JavaScript etc.

    2. The new “no DNS A record” rule is amazing. It basically means that a site happily running outside of China with a good user base has no way to relocate to China without being down for 20+ days while the ICP application is being vetted. Maybe a subdomain could be used on the application (e.g. cn.movingtochina.com), but in that case, the base domain post-move wouldn’t be covered by the ICP…

    3. Do you know if the ICP is locked to IP addresses or hosting providers? i.e. can an ICP holder change hosting providers or IP blocks without having to re-apply? I’ve heard that ICPs can be updated, but is this is quick and painless (dare I say “self-service”) process, or is it like starting again with the possibility of enforced no A record downtime?

    Thanks for a valuable resource for everyone trying to figure this out.

  1. 1 Double ICP Needed at Utility Computing dot China Pingback on Aug 12th, 2010 at 2:43 PM
  2. 2 China Government Notice August 2010: ICP Application Process at Utility Computing dot China Pingback on Aug 17th, 2010 at 11:47 PM
Comments are currently closed.