Biggest point of confusion seemed to be over the purpose of social networks, particularly Twitter. I’ll have to post some follow up thoughts here about strategies for what social networks to join and how to use them.

I’d also welcome follow up questions from attendees or anyone else who may read this. Knowing your questions is really useful as I look for topics to address in my Forbes.com column on small to midsize business IT issues.

First column: Don’t Lose That Web Site on domain ownership problems that plague a lot of small organizations (and some that ought to know better). I’d still like to do an expanded version of this story for another publication, as there were a lot of details I had to leave out. (I also blogged about the topic here: The Danger of Losing Control of Your Internet Domain)

Second column will be for all the QuickBooks users: as your business grows, how do you know when it’s time to graduate to something more sophisticated (and typically more expensive). This will be a twice weekly feature, so I welcome suggestions on story ideas.

Is the Web Working for You?

A FREE Coral Springs Chamber of Commerce Workshop

Wednesday, February 24, 2010
3:30 p.m. at the
Coral Springs Chamber of Commerce

About the Speaker

David F. Carr writes about information technology for small to midsize businesses for Forbes.com. As Technology Editor of Internet World and Baseline Magazine, he researched the inner workings of Google, Yahoo, MySpace, and other Internet giants.

Through Carr Communications, David consults on Internet and communications strategy.

Coral Springs Chamber of Commerce
11805 Heron Bay Blvd
Coral Springs, FL 33076
954-752-4242

Look for the building with the green awning, opposite the Heron Bay Marriott

RSVP to rsvp@cschamber.com or 954-752-4242

David F. Carr can be reached at david@carrcommunications.com or 954-757-5827

Printable Flyer (PDF)

One reason for the confusion is that it refers to several overlapping concepts. Christopher Drumgoole, senior vice president of engineering and product development at Terremark Worldwide Inc., said the shortest explanation is, “it’s I.T. provided as a service.” Terremark hosted the chamber event at its Miami data center.

(read more)

Analysis of web-based services that provide a platform for building applications. This is the middle ground between packaged web based applications, such as those from Salesforce.com, and lower-level infrastructure services like web-based data storage services. Platform as a service is more like a bundle of operating system and app development services that lives in the network “cloud.”

The olivebelcher.com home page

Carr Communications is proud to announce the re-launch of olivebelcher.com, a website we revamped for Olive Belcher, the leading waterfront and luxury real estate specialist for Boca Raton, Delray Beach, Highland Beach, and surrounding communities.

The new home page design took advantage of some promotional art she had purchased, originally for a postcard mailer, which I was able to modify to work on the web.

Her old site suffered from too many slow-loading pages because of the way images of the different properties were organized and coded. Now, each property has its own distinct web page with its own photo gallery. Putting the properties on individual pages also creates the opportunity for each home she is selling to be indexed by the search engines or promoted with targeted advertising. Each listing also features widgets like a Google Maps display of the location and a mortgage calculator.

The site was created in Wordpress using the Shades of Blue theme by StudioPress, the Great Real Estate plug-in, and my own modifications.

This is where your website and business email both go dead one day, seemingly without warning, because you never got the notices that your registration was about to expire. Or, you hire someone else to revamp your website, only to discover that you can’t “turn on” the new and improved version because you don’t have the necessary password and aren’t recognized by the domain registrar as having the right to access the account.

See also: My column for Forbes.com on this topic

Your Internet identity is an important corporate asset for you to protect. Failing to do so is the kind of mistake that seems obvious in retrospect but is easily overlooked by an organization focused on getting up and running on the web.

Let me back up and explain the basics of domain registration, because some of the problems stem from misunderstandings the basics. When you type an address such as “www.carrcommunications.com” into your browser, your computer looks up that address in a directory (actually a bunch of inter-connected directories) of all the Internet domains in the world. The first time you look up a new website, your request typically bounces around to a few computer servers until it finds one that can translate that alphanumeric address into a specific Internet address (in my case 67.225.178.130) used to locate the correct web server. If not for the Internet’s Domain Name System, we would have to memorize long strings of numbers for each website we wanted to visit or email server we wanted to connect to. The domain system is organized around registries for top-level domains such as .com, .org, .net and newer ones such as .biz and .name. Firms such as GoDaddy, Register.com, and Network Solutions function as domain registrars, meaning that they sell you the right to use a given domain for 1 to 10 years and take responsibility for recording, tracking, and updating that registry information on behalf of their customers. Each of these firms also provides other services, like hosting (operating the actual computer servers and networks that your website and email rely on), and assistance with constructing your website, but you can also have one company as your domain registrar, another as your web host, a third for email, and so on. But all the other services you associate with your domain are ultimately dependent on that registry record, controlled by whomever has an account with the domain registrar.

The data for a domain registration is recorded in the whois registry record showing who has the rights to that domain (the registrant) and also lists administrative, technical, and billing contacts. The problems come in when you do not have access to the domain registry account and you or your organization is not listed as the registrant.

So you want to be the one with that password, and you want it to be a good password because someone who hacks and hijacks your domain could wreak a lot of havoc. Of all the important passwords you use on the net, this is really the “one ring to rule it all,” so as Gandalf said, “keep it secret, keep it safe.”

Specific situations I’ve seen personally:

• The consultant moves overseas and can’t be reached for weeks on end
• The consultant stops returning phone calls and emails, perhaps because he knows he is about to lose the contract
• An organization winds up setting up a new website and trying to direct people to a different web address because it has lost control of the original domain.
• The volunteer who registered the domain for my neighborhood association website moved to the other side of the state and no longer had the same email address, didn’t remember his password, and couldn’t reset his password because the registrar’s password reset system works over email. Weeks dragged by, and he nearly lost patience with the registrar’s process for proving he was the same person who originally registered the account. I had to keep nagging him to try it again, and eventually we got it resolved.

One story I heard second-hand, for which I’ve been unable to confirm all the juicy details, had something to do with a domain account holder who ran off with a much younger woman, and the user name and password wound up as casualties of all the broken friendships that resulted from that little soap opera. The organization had to go through a mediation process (explained below) to regain control of the domain.

More than web consultant has told me they register the domains in their own name very deliberately, although not necessarily maliciously. One defense of this practice is that unsophisticated clients may fail to respond to domain renewal alerts in a timely fashion, so the consultant takes on that responsibility out of paternalistic concern. On the other hand, some consultants do it specifically because it gives them more leverage over a client in the event of a billing dispute. As someone trying to make a living in this field, I can sympathize with the later motivation. But as a client, I would not want to be at the mercy of a consultant whom I might judge hadn’t earned his fee.

Having direct control of your own domain puts you in the driver’s seat. It gives you the power to take your web, email, and other Internet services away from one provider and give them to someone else. Otherwise, you may be in the position of having to ask your old provider to help you take your business away from them. If you have the password to the domain registrar account, you can redirect your website and email to another firm’s servers. Without it, you can’t.

If you hire someone to create your website, it’s natural to assume that you own the site and the domain associated with it. Actually, you never really own a domain – it’s more like a lease – but you expect it to be under your control as long as you’re paying the bill. Push come to shove, you probably take the issue to court and prove that it ought to be so, after producing a contract showing the website was created on your behalf as work for hire. That’s  what I’ve been told by lawyers I’ve spoken with on this issue.

But a solution that relies on you winning a court judgment is not going to be a quick solution. There is also an administrative mediation process set up by the Internet’s administrative governing bodies known as the Uniform Domain Name Dispute Resolution Process (UDRP), but it’s mostly set up for use by corporations to use against “squatters” trying to co-opt their trademarks. So it may or may not be helpful, depending on whether you have trademarked your business name and fit neatly into this legal framework.

In most cases, when dealing with a recalcitrant consultant, you shouldn’t have to go further than having to hire a lawyer to write them a strongly worded letter. I actually think the situations where the official registrant or domain registrar account holder can’t be reached are the most problematic. Some registrars may allow you to make a case that the whois record is inaccurate, for example by showing that the website associated with the domain lists your firm’s contact information and was obviously set up on your firm’s behalf. Others really may insist on seeing something on the order of a ruling from a court or the UDRP before they will allow you to change the domain record.

Here is how you protect yourself

Solution #1: Register it yourself

Registering a domain is not that hard. Despite some of the complexities I’ve sketched here, firms like GoDaddy make their providing a user-friendly front end to the process. So the simplest way of avoiding all these problems is to register the domain yourself or have someone within your organization do it. If the domain is currently registered in someone else’s name, politely but firmly insist on having it transferred into your control.

If the domain will be used by an organization, rather than an individual, the name or the organization should be included in the registrant section of the domain record. Ideally, the email address associated with that registrant record (as well as with the account at the registration firm) should be a general “bucket” address such as info@mycompany.com rather than the email account of an individual who may have left the company by the time the domain comes up for renewal or needs to be updated.

I am specifically advising my clients to register their own domains but day-to-day administration to Carr Communications by setting the name servers to ns1.carrcommunications.com and ns2.carrcommunications.com (see my specific instructions for GoDaddy). This allows me to configure web and email services for your domain, while you reserve the right to take that power away from me whenever you wish.

Solution #2: Trust, but verify

Despite everything I’ve said, I do manage the domains of many of my clients because it’s easier that way for both of us. I’m glad they trust me, and I’m sure there are many other trustworthy consultants out there who you might deal with. If you choose to register your domain through an intermediary, the next best step you can take to protect yourself is to make sure that your name or the name of your organization is included in the registrant section of the domain registration. Write this into your contract with the intermediary you hire to create your Internet presence and then verify that it’s done correctly by looking up the whois record.

Again, the email for your organization should probably be a stable one, perhaps an alias that forwards to more than one person.

If you are listed as the registrant, but someone else controls the domain account, you should be aware that they do have the power to update the whois record, potentially writing you out of the picture. The account holder is also in a position to transfer the domain to another account with another service or to reconfigure the domain so that it no longer points to your web and email servers. You might or might not get email notifications of these changes.

Of course, in business there are lots of people and organizations whom we put our trust in who potentially could do evil to us. We make the best judgments we can about who is trustworthy, and we also trust in our legal system to help us sort things out if we happen to trust the untrustworthy every once in a while. What I’m recommending here should put you in a better situation in the worst case scenario. Even if the account holder changed the registrant information, there would still be an audit trail that the registrar could research to establish that your organization was previously listed as the registrant and did not authorize the change.

I want to drive home the point that this is something many organizations ought to be a little more paranoid about. But if you take a few simple precautions, you can protect your online identity.

I’m in the process of researching a magazine article on this topic and would be interested in talking to anyone who has a story to share about domain registration snafus or tips to share on how to resolve these problems when they arise – david@carrcommunications.com

I haven’t found many others writing about this issue, but the Rocky Mountain News had a related story, more focused on domain hijacking scenarios, with its own suggestions on ways to protect yourself. See: New Wave of cyber-theft involves the names of Web sites

Virtual world technologies aid real world problems

Agencies show growing interest in Second Life and other 3-D environments

Having done a Baseline cover story on “Is Business Ready for Second Life,” I was interested to see how more serious applications of that environment are starting to emerge. But the more important trend was clearly the military’s focus on using simulation as a training tool for ground forces, where in past years simulators were primarily for pilots and tank operators. Also, the interest in more realistically depicting the situation on the ground, whether with more realistic blood and gore in battle scenarios or more complex language and cultural interaction for simulated negotiations with the locals.

Windows 7: 5 Things for CIOs to Consider Before Deployment

Due for an energy makeover

By David F. Carr
InformationWeek
November 13, 2009 03:00 PM (From the November 9, 2009 issue)