August 2008 - Ccnso-council

...and a link...
by Gabriella Schittek Aug. 16, 2008

Aug. 16, 2008

...I forgot to add a link to the second SSAC report: https://par.icann.org/files/paris/SSACReportonDomainNameFrontRunning_24Jun0… Gabi -----Original Message----- From: Gabriella Schittek Sent: Saturday, August 16, 2008 5:11 PM To: 'Patricio Poblete' Cc: 'ccnso-council(a)icann.org' Subject: Clarification on question on front-running Hi Patricio, Whilst doing the minutes from the last council call I listened to the recording and I realised I misunderstood one of your questions regarding Domain Name Front Running. You asked "In the [domain name front running] briefing paper it is mentioned that front running also could be done by third parties through ISPs or by spy-ware. Is it really happening in that way, or is it just a possibility?". Then Chris asked me where I had that information from. The correct answer to this is that the information on the various methods derives from the first SSAC report which was published in October 2007 - see http://www.icann.org/en/committees/security/sac022.pdf, page 5 under the heading "Methods of Monitoring and Identifying Domain Names of Interest". However, the SSAC also writes in its report that "We include all the opportunities mentioned here; however, SSAC does not claim that any or all these methods are currently being used, or that this list is exhaustive, only that these represent plausible opportunities for gathering and monitoring domain names of interest to prospective registrants, and that these have been related to SSAC by parties who have anecdotal or partial information regarding a possible domain name front running incident." In the follow-up report, one of SSAC's conclusions is that (Page 8, finding 4): "Various acts of collecting names of interest from DNS, WHOIS, domain name availability checks, and other resources to preemptively register a domain name may appear to be unfair, improper and even criminal to registrants but these conclusions are not necessarily established facts." So, basically, yes, according to the SSAC report this is just a possibility, but there is no real proof it is happening. I hope this clarifies. Gabi

1 0

Clarification on question on front-running
by Gabriella Schittek Aug. 16, 2008

Aug. 16, 2008

Hi Patricio, Whilst doing the minutes from the last council call I listened to the recording and I realised I misunderstood one of your questions regarding Domain Name Front Running. You asked "In the [domain name front running] briefing paper it is mentioned that front running also could be done by third parties through ISPs or by spy-ware. Is it really happening in that way, or is it just a possibility?". Then Chris asked me where I had that information from. The correct answer to this is that the information on the various methods derives from the first SSAC report which was published in October 2007 - see http://www.icann.org/en/committees/security/sac022.pdf, page 5 under the heading "Methods of Monitoring and Identifying Domain Names of Interest". However, the SSAC also writes in its report that "We include all the opportunities mentioned here; however, SSAC does not claim that any or all these methods are currently being used, or that this list is exhaustive, only that these represent plausible opportunities for gathering and monitoring domain names of interest to prospective registrants, and that these have been related to SSAC by parties who have anecdotal or partial information regarding a possible domain name front running incident." In the follow-up report, one of SSAC's conclusions is that (Page 8, finding 4): "Various acts of collecting names of interest from DNS, WHOIS, domain name availability checks, and other resources to preemptively register a domain name may appear to be unfair, improper and even criminal to registrants but these conclusions are not necessarily established facts." So, basically, yes, according to the SSAC report this is just a possibility, but there is no real proof it is happening. I hope this clarifies. Gabi

1 0

Recording of council call up
by Gabriella Schittek Aug. 13, 2008

Aug. 13, 2008

Dear all, The recording of yesterday's council call is now up at http://www.ccnso.icann.org/calendar/ Gabi

1 0

RE: [ccnso-council] changed link
by Young Eum Lee Aug. 13, 2008

Aug. 13, 2008

1 0

changed link
by Gabriella Schittek Aug. 12, 2008

Aug. 12, 2008

Dear Councillors, One link which I provided in the briefing paper on Domain Name Front Running was recently changed. The ALAC statement to the ICANN Board is now located under http://atlarge-lists.icann.org/pipermail/at-large_atlarge-lists.icann.org/2… Attached is the corrected version of the briefing paper. Gabi

1 0

Action 31-03
by Gabriella Schittek Aug. 12, 2008

Aug. 12, 2008

Dear Councillors, One of the action items from last council meeting is still open, waiting for more information: Action 31-03 The Secretariat to draft a resolution for a change to the ccNSO/GAC Working Group structure in time for the next Council call. Following still needs to be considered: 1) The GAC WG charter needs to be reconfirmed: http://www.icann.org/presentations/vastenburg-ccnso-ct-02dec04.pdf 2) The ccNSO Chair needs to contact the GAC Chari whether they want to continue under the same charter 3) If the WG shall continue under the same charter, the ccNSO Council should reconfirm the ccNSO GAC WG members: Keith Davidson (Chair),.nz Keith Drazek, .us Paulos Nyirenda, .mw Oscar Robles, .mx Hilde Thunem, .no This will be discussed under item 6 "Reconstitution of ccNSO-GAC Working Group" o today's Agenda. Kind regards, Gabi

1 0

Dial in details Conference Call 12th August 12.00 UTC
by Gabriella Schittek Aug. 11, 2008

Aug. 11, 2008

Dear all, Below are the dial in details for the Council call on the 12th August 12.00 UTC (see http://timeanddate.com/worldclock/meeting.html for city times). Could those of you who need to be dialed in by the operator please let me know as soon as possible. Many thanks, Gabi PARTICIPANT PASSCODE: 2348776 For security reasons, the passcode will be required to join the call. Country Toll Numbers Freephone/Toll Free Number ARGENTINA 0800-777-0498 AUSTRALIA ADELAIDE: 61-8-8121-4863 1-800-758-196 AUSTRALIA BRISBANE: 61-7-3102-0965 1-800-758-196 AUSTRALIA CANBERRA: 61-2-6100-1965 1-800-758-196 AUSTRALIA MELBOURNE: 61-3-9010-7734 1-800-758-196 AUSTRALIA PERTH: 61-8-9467-5244 1-800-758-196 AUSTRALIA SYDNEY: 61-2-8211-1396 1-800-758-196 AUSTRIA 43-1-92-80-003 0800-677-861 BELGIUM 32-1-150-0312 0800-4-9471 BRAZIL 0800-8912026 CHILE 1230-020-2453 CHINA* 86-400-810-4761 10800-712-1202 10800-120-1202 COLOMBIA 01800-9-156439 CZECH REPUBLIC 420-2-25-98-56-16 800-700-168 DENMARK 45-7014-0239 8088-2100 FINLAND Land Line: 106-33-149 0-800-1-12771 FINLAND Mobile: 09-106-33-149 0-800-1-12771 FRANCE LYON: 33-4-26-69-12-76 080-563-9909 FRANCE MARSEILLE: 33-4-86-06-00-76 080-563-9909 FRANCE PARIS: 33-1-70-75-25-35 080-563-9909 GERMANY 49-69-2222-3198 0800-101-6627 GREECE 30-80-1-100-0674 00800-12-6609 HONG KONG 852-2286-5642 800-968-764 HUNGARY 06-800-17241 INDIA 000-800-852-1218 INDONESIA 001-803-011-3502 IRELAND 353-1-247-5274 1800-992-870 ISRAEL 1-80-9303035 ITALY 39-02-3601-0953 800-985-849 JAPAN OSAKA: 81-6-7739-4764 0034-800-40-0719 JAPAN TOKYO: 81-3-5539-5164 0034-800-40-0719 LUXEMBOURG 352-27-000-1351 MALAYSIA 1-800-80-8124 MEXICO 001-866-627-0579 NETHERLANDS 31-20-718-8530 0800-023-4392 NEW ZEALAND 64-9-970-4646 0800-447-834 NORWAY 47-21-59-00-49 800-15497 PANAMA 011-001-800-5072083 POLAND 00-800-1211184 PORTUGAL 8008-12439 RUSSIA 8-10-8002-9873011 SINGAPORE 65-6883-9208 800-120-4284 SLOVAK REPUBLIC 421-2-322-422-16 SOUTH AFRICA 080-09-93384 SOUTH KOREA 82-2-6744-1062 00798-14800-6326 SPAIN 34-91-414-40-78 800-098-194 SWEDEN 46-8-505-96-328 0200-897-068 SWITZERLAND 41-44-580-4210 0800-000-782 TAIWAN 886-2-2795-7358 00801-137-694 THAILAND 001-800-1206-65092 UNITED KINGDOM BIRMINGHAM: 44-121-210-9016 0800-279-3590 UNITED KINGDOM GLASGOW: 44-141-202-3216 0800-279-3590 UNITED KINGDOM LEEDS: 44-113-301-2116 0800-279-3590 UNITED KINGDOM LONDON: 44-20-7950-6551 0800-279-3590 UNITED KINGDOM MANCHESTER: 44-161-601-1416 0800-279-3590 URUGUAY 000-413-598-3431 USA 1-210-795-1143 866-297-1588 VENEZUELA 0800-1-00-2797 *Access to your conference call will be either of the numbers listed, dependent on the participants' local telecom provider. Restrictions may exist when accessing freephone/toll free numbers using a mobile telephone. ____________________________________________________________________________

6 5

New suggested dates for council calls
by Gabriella Schittek Aug. 11, 2008

Aug. 11, 2008

Dear all, As some of you indicated that Mondays are not suitable for the council calls, we are now suggesting following dates instead: Tuesday, 12th August Tuesday, 16th September Tuesday, 14th October The meetings will be held at 12.00 noon UTC. Please, could you let me know by Wednesday, 6th August if you can't make these dates. Thanks, Gabi

7 7

FW: ICANN information on announced DNS exploit
by Chris Disspain Aug. 8, 2008

Aug. 8, 2008

All, Please see email below from Doug Brent re the DNS exploit. Cheers, Chris Disspain CEO - auDA Australia's Domain Name Administrator ceo(a)auda.org.au www.auda.org.au Important Notice - This email may contain information which is confidential and/or subject to legal privilege, and is intended for the use of the named addressee only. If you are not the intended recipient, you must not use, disclose or copy any part of this email. If you have received this email by mistake, please notify the sender and delete this message immediately. Please consider the environment before printing this email. > -----Original Message----- > From: Doug Brent [mailto:doug.brent@icann.org] > Sent: Thursday, 7 August 2008 12:06 > To: Chris Disspain > Subject: ICANN information on announced DNS exploit > > Chris, > > A DNS exploit that has been discussed for months has now been officially > announced by security researcher Dan Kaminsky. This has been widely covered > in today's on-line press. > > You should be aware that this exploit cannot impact root servers, and should > not impact name servers for top level domains. It can impact the servers > operated by ISPs and corporations, and the results can be serious. > > Today, ICANN issued a press release regarding this vulnerability. See: > http://icann.org/en/announcements/announcement-06aug08-en.htm > > Also, ICANN has posted a frequently asked questions document, primarily > targeted at TLD operators to make it more clear what they need to do to > ensure the TLD they operate is not susceptible to this attack. See: > http://www.iana.org/reports/2008/cross-pollination-faq.html > > Further, ICANN developed a a web-based tool that allows any TLD operator, or > any Internet end-user to check if a particular TLD or domain is set up in a > way that would allow this kind of attack. The tool is available at: > http://recursive.iana.org/ > > Finally, over the last days, ICANN proactively tested all TLD nameservers to > see if they were correctly configured so as to avoid this exploit. On 25 > July, 72 TLDs failed this test (2 generic registries and 70 cc registries). > As of today (with numbers still changing), the number of vulnerable TLDs has > been reduced to 45, and ICANN is actively working with six of these to > address the issue. The remainder have been unresponsive to this point, > though ICANN staff has and will continue to reach out through email and > personal contact over the next days to help in any way possible. > > If any ccNSO members require additional background information, or > specifically are concerned in obtaining some technical advice in this > matter, please let ICANN staff know how we can help. > > Sincerely, > Doug Brent > Chief Operating Officer > ICANN > Voice: +1 310.301.3871 > Mobile: +1 650.996.4447 > Fax: +1 310.823.8649 > > > > > > > > __________ Information from ESET NOD32 Antivirus, version of virus signature database 3333 (20080806) > __________ > > The message was checked by ESET NOD32 Antivirus. > > http://www.eset.com >

1 0

Draft Agenda Council call Tuesday 12th August
by Gabriella Schittek Aug. 7, 2008

Aug. 7, 2008

Dear all, As more people seem to be able to attend the calls on Tuesdays, we will now go for having the Council calls on these days instead (Tuesday, 12th August; Tuesday, 16th September; Tuesday, 14th October). The next call will be held on Tuesday, 12th August at 12.00 UTC. The draft agenda for this call is: 1) Approval of minutes and actions from 16th June 2008 and 25th June 2008. 2) Solution for Administrative Workshop Cairo 3) ICANN's announcement on DNSSEC 4) Appointment of an official ccNSO liaison to the GNSO council 5) ccNSO/GNSO Council meting in Cairo 6) Reconstitution of ccNSO-GAC Working Group 7) IANA software testing 8) Working Group Update: IANA Working Group GAC Working Group Joint ccNSO/GAC IDN Working Group Participation Working Group Processes Working Group Tech Working Group 9) Next steps Anti-phishing 10) Domain Name Front Running* 11) AOB *Please, see the attached briefing paper on the topic. Should you wish to add/change anything, please let me know as soon as possible. Kind regards, Gabi

1 0