What I would like to see is a KYC of beneficial owners of .ca domains. CIRA could mandate that a registrar enforce KYC type rules so that the first time you create a registrant profile that you have to verify it with a passport/ID/corporate registration, etc... A registrar could even be allowed to charge a nominal fee for that one time setup. And in theory you just do that once because you can ensure all your domains are tied to the same contact.