The End of WHOIS: Welcome to the Era of RDAP

ByJorge Pereira

For over 35 years, if you wanted to know who owned a website, you used WHOIS. It was the internet’s public phone book, operating quietly over Port 43. Type in a domain name, and the protocol would spit out the owner’s full name, home address, phone number, and personal email.

That era has officially come to an end. On January 28, 2025, ICANN permanently retired the contractual obligation for registries and registrars to maintain the legacy WHOIS protocol. If you manage or look up domains like .com, .net, or .org, the underlying technology you rely on has fundamentally shifted.

Here is a breakdown of why WHOIS was retired, what replaced it, and how the new system works.

Why Was WHOIS Retired?

The legacy WHOIS protocol was built in 1982 for an older, smaller internet. As the web grew, the system fractured under three major flaws:

  1. The Privacy Problem: WHOIS was a “one-size-fits-all” broadcast system. It lacked privacy controls, making it a goldmine for data scrapers, spammers, and cybercriminals. When major regulations like Europe’s GDPR arrived, the absolute transparency of WHOIS became legally unsustainable.
  2. No Data Standard: WHOIS returned data as unstructured, raw text. A lookup from one registrar looked completely different from another, making it incredibly difficult for software engineers to write code that could automate domain lookups.
  3. Insecure and Outdated: It didn’t natively support encryption or user authentication, and it struggled severely with internationalized domain names (like those using non-Latin characters, such as Arabic or Chinese scripts).

The Modern Alternative: RDAP

The direct, official successor to WHOIS is RDAP (Registration Data Access Protocol). Developed by the Internet Engineering Task Force (IETF), RDAP changes how domain data is stored and delivered.

Instead of operating on its own obscure network port, RDAP runs natively on HTTPS. This means it uses the exact same secure, encrypted web architecture that powers your standard online banking or e-commerce browsing.

Key Advantages of RDAP:

  • Structured Data (JSON): RDAP returns clean, machine-readable JSON data. This allows automated tools, apps, and dashboards to parse domain data uniformly and reliably.
  • Tiered & Differentiated Access: Unlike the old “all-or-nothing” WHOIS, RDAP can show different data depending on who is asking. The general public sees technical details, while authorized entities can view deeper data.
  • Global Compatibility: It natively supports Unicode, meaning international domain names in any language are processed seamlessly.

How Does It Work in Practice?

For everyday internet users, looking up a domain feels very similar, but the backend mechanics have completely transformed. Here is how RDAP is used today across different use cases:

1. General Public Lookups

If you use a public web interface like the ICANN Lookup Tool, the platform is querying the RDAP network behind the scenes. You will quickly see technical data like expiration dates, nameservers, registrar details, and active security locks. However, the registrant’s private contact details will be safely redacted.

Others include:

  • RDAP.org: This is a highly praised, privacy-first interface. Instead of routing your search through a third-party company, your web browser connects directly to the registry’s RDAP server via an encrypted connection.
  • DomainTools: One of the oldest and most robust domain investigation platforms on the web. It displays the current RDAP data while offering historical records for a fee.
  • Whois.com: Despite the classic name, its web search tool has been updated to fetch and format modern registration data directly from authoritative servers.
  • ARIN RDAP Search: Managed by the American Registry for Internet Numbers, this interface provides perfectly formatted HTML results for networks across North America
  • Addiotionally every major domain registrar provides a public web interface that queries the RDAP database. You do not need an account to use them:
  • and so many others!

2. Contacting Domain Owners Anonymously

Because RDAP hides personal emails to protect against spam, it includes structured links to an anonymized contact form or a proxy email provided by the registrar. If you want to buy a domain, you use these links to safely send a message directly to the owner.

3. Vetted Access for Cybersecurity & Law Enforcement

If cyber investigators, trademark attorneys, or law enforcement officers have a valid legal reason to see who owns a domain, they no longer use public lookups. Instead, they log into the ICANN Registration Data Request Service (RDRS). This centralized system acts as a secure gateway, routing legitimate requests for non-public data directly to participating registrars for formal review.

Summary

The January 2025 retirement of WHOIS marks a massive step forward for digital privacy and technical standardization. Through RDAP, the internet successfully balances the need for accountability and domain intelligence with the fundamental right to personal data protection.

Some of My Related Posts: