Why not use LoTW?

Foundations of Amateur Radio

The other day I witnessed a fellow amateur attempting to guilt another into using LoTW with comments about how their QSO partner would appreciate confirmation via the service, even if they didn't care for it.

Before I continue, if you're unfamiliar, when two amateurs make a contact, or a QSO, with each other, then there's generally a log entry at both ends to record the event. Some amateurs, myself included, save up these contacts and count how many continents, countries, states and other entities are recorded in the log.

Several amateur radio organisations allow you to claim an award for such a record. However, before they accept your word for it, they require confirmation of the contact, something that the amateur community refers to as a QSL. To recap, a QSO is the contact, a QSL is the confirmation of that contact.

Traditionally this was achieved with postcards, known as QSL cards, transported across the globe through various postal services, and coordinated by so-called QSL bureaus, often run by the amateur radio peak body in each country.

With the advent of the Internet, much of this process has turned electronic. LoTW is an example of an electronic QSL service, run by the ARRL, the American Radio Relay League. It's not the only such service, but today I'm looking specifically at the Logbook of The World, or LoTW.

As I said, LoTW is not the only service and anyone telling you that you must use it is selling you something. Now, that's not why I don't use it, and again, you're free to, but you're not required to.

For me there are several issues with LoTW.

Having used it for a period, I feel comfortable in expressing some of its shortcomings, but I note that the last time I used it was almost a decade ago. I'll acknowledge that things might have improved or changed, but I have no evidence to suggest that it did.

Let's start with how it works. You create a log in a specified format, using an application called TQSL you sign that log, ostensibly linking your identity to that log, then you upload that signed log to LoTW and wait for confirmations of contacts with other LoTW users.

Signing is a process where you add information to a file that proves to the recipient that the log was created by you and wasn't modified in transit, which requires that you have a file called a certificate, which is created and sent to you via email by the ARRL, after they've authenticated you.

So, first of all, in my opinion, the level of security is absurd and exceeds that of my bank, or my tax department.

In addition, proving your identity comes with hurdles if you're not in America where an amateur who registers receives a postcard with an authentication code, made possible by the central database held by the FCC.

For everyone else, the ARRL requires that you: "must send a copy of his/her Amateur Radio operating authorization in addition to a copy of one other government-issued document indicating his/her identity", via the post, snail mail, stamp, envelope, the whole thing.

I'd also like to observe that at no time has the ARRL linked your identity to your email address, since they haven't asked for it at any point in the verification process.

If that's not enough of a security nightmare, in Australia and other parts of the world, amateurs no longer hold a personal license, instead they are members of a so-called class license. There's no public record stating my ownership of my callsign, just that it's allocated. With increased privacy concerns, this is happening elsewhere too.

In other words, proving that you are who you say you are is getting increasingly difficult and even if you did, you're sending that information to the ARRL, who you might recall paid a ransom to hackers who infiltrated their network. I've asked and never received a response about what actually happened to the information they continue to hold in relation to me, well that and an email from 2013 which states that "Data is never removed from LoTW."

Even so, let's say that