July 2009 - Ccnso-council - lists.icann.org

Dates of next Council calls
by Gabriella Schittek Aug. 4, 2009

Aug. 4, 2009

Dear Councillors, Based on the feedback received, the dates of the next three Council calls are: Monday, 24 August 12.00 UTC Tuesday, 15 September 12.00 UTC Tuesday, 13 October 12.00 UTC These dates will also be listed at ccnso.icann.org/calendar Kind regards, Gabi

3 2

July Update from ICANN's Policy Department Posted
by Gabriella Schittek July 31, 2009

July 31, 2009

Dear all, The latest update from ICANN¹s Policy Department is now available at http://www.icann.org/en/topics/policy/update-jul09-en.htm#1 The update is also available in all six official UN languages (English, Spanish, French, Arabic, Simplified Chinese, Russian). Issues 2 -6 are ccTLD related: 2) ccNSO Working Group Eyes DNS Emergency Response Planning - a new ccNSO ad-hoc working group on Emergency Response Planning has been formed. 3) Sydney Session Focuses on Strategic Planning Issues - an overview of the Strategic Planning Workshop held during the ccNSO meeting in Sydney. 4) ccNSO, GNSO Council Seek Consensus Approach on gTLD Issues - issues with the timing of the launch of the new gTLD process and the IDN ccTLD Fast Track leads to the formation of a gNSO/ccNSO Working Group, with the goal to get them resolved in a joint effort. 5) Members Named to Delegation and Redelegation Working Group - the members of the Delegation and Redelegation Working Group were confirmed during the ccNSO Council meeting in Sydney. 6) ccNSO Meetings Evaluation Conducted - an evaluation of the ccNSO meeting in Sydney was conducted, the results are available online. 7) Operators Asked to Participate in DNSSEC Survey - a new version of the DNSSEC survey (first conducted in 2007) has been launched. All ccTLD Operators are invited to participate. Another topic of interest may be: 11) Board Approves Geographic Regions Review Charter - the ICANN Board has approved the Charter of the Geographic Regions Review Working Group. The Working Group is determining whether the uses of ICANN¹s Geographic Regions (as currently defined) continue to meet the requirements of the relevant stakeholders and will submit proposals for community and Board consideration relating to the current and future uses and definition of the ICANN Geographic Regions. Kind regards, Gabi

5 9

Charter of the IR WG
by Bart Boswinkel July 22, 2009

July 22, 2009

Dear Chris, Included is the draft charter for the Emergency Response Planning Working Group for adoption by the Council. If the Council could take a vote before the end of next week, it would be great, Kind regards, Bart

2 3

Dates of next Council calls
by Gabriella Schittek July 21, 2009

July 21, 2009

Dear all, Please, could you let me know your availability for the next Council calls by filling in the table at http://doodle.com/tfhcrwdp9w3gpdf5 The suggested dates are 24 or 25 August at 12.00 UTC 14 or 15 September at 12.00 UTC 12 or 13 October at 12.00 UTC Please, do not email me directly with your replies, but make sure to fill in the table instead. Many thanks! Gabi

1 1

FW: [ccnso-members] <no subject>
by Gabriella Schittek July 17, 2009

July 17, 2009

Dear all, Please ignore this email which was sent out by mistake to this list. Gabi ------ Forwarded Message From: Gabriella Schittek <gabriella.schittek(a)icann.org> Date: Fri, 17 Jul 2009 13:26:52 -0700 To: <ccnso-members(a)icann.org> Subject: [ccnso-members] <no subject> approve fortyfive subscribe ccnso-members\ "Jessica Calvo" <jcalvo(a)nic.cr> ------ End of Forwarded Message

1 0

RE: [ccnso-members] ccNSO Council comments on country names as gTLDs
by Oscar A. Robles-Garay July 16, 2009

July 16, 2009

>From my perspective, it is sensitive as well to consider this proposal (deletion of "including government"). I think that we shouldn't try to explain what we understand by "local Internet Community", this is not our business, even more when entering into this detail my hurt some of our members. Oscar -----Original Message----- From: owner-ccnso-members(a)icann.org [mailto:owner-ccnso-members@icann.org] On Behalf Of J. William Semich Sent: Sunday, July 05, 2009 11:16 PM To: Chris Disspain Cc: e-gtld-evaluation(a)icann.org; ccNSO Council; ccNSO Members Subject: Re: [ccnso-members] ccNSO Council comments on country names as gTLDs Chris: Many thanks to the council for this draft submission. Although in general .NU Domain agrees with the ccNSO position (and Janis Karklin's statement), that "The ccNSO has proposed that country or territory names on the ISO-list are treated as ccTLDs" and that "This seems to be a sensible approach to ensure that geographic names are afforded sufficient protection," we do not agree with the wider-reaching statement in the Council's draft comments that "ccTLDs set their policy within territory and in consultation with their local Internet community, including government." Although that statement may be applicable to many ccTLDs, it is not true for - nor is it applicable to - all. I would suggest we try to find a more general and inclusive way to make the our position clear with respect to ccTLD managers' historical and ongoing independent policy-setting mechanisms in the Council's comments - or delete that part of the comments. In addition, I think there is no general consensus among ccTLD managers that there are commonly agreed-upon "fundamental principles associated with national sovereignty" shared among ccTLD managers. We would suggest. again, that the council use wider-ranging and more general language to describe the ccTLD managers' historical and established independence from ICANN gTLD policy, excepting, of course, any policies agreed between any specific ccTLD managers and ICANN under the terms of any contracts, agreements, Accountability Frameworks or exchanges of letters with ICANN, particularly with respect to ccTLD managers' responsibility to obey the local laws where they operate. If my position is not clear on this, please feel free to contact me off-list for further discussions. Regards, Bill Semich .NU Domain On Jul 5, 2009, at 9:03 PM, Chris Disspain wrote: > Comments attached. > > Chris Disspain > CEO - auDA > au Domain Administration Ltd > ceo(a)auda.org.au > www.auda.org.au > > Important Notice - This email may contain information which is > confidential and/or subject to legal privilege, and is intended for > the use of the named addressee only. If you are not the intended > recipient, you must not use, disclose or copy any part of this > email. If you have received this email by mistake, please notify the > sender and delete this message immediately. Please consider the > environment before printing this email. > > > > __________ Information from ESET NOD32 Antivirus, version of virus > signature database 4219 (20090705) __________ > > The message was checked by ESET NOD32 Antivirus. > > http://www.eset.com

2 4

FW: Charter of the IR WG
by Chris Disspain July 15, 2009

July 15, 2009

All, Attached is the proposed charter for the Incident Response Working Group that we discussed in Sydney. Given the tight time line with which the WG is expected to work prior to Seoul, I propose that we take the charter as approved by the Council unless there are any comments or objections by Wednesday 22 July. Cheers, Chris Disspain CEO - auDA au Domain Administration Ltd ceo(a)auda.org.au www.auda.org.au <http://www.auda.org.au/> Important Notice - This email may contain information which is confidential and/or subject to legal privilege, and is intended for the use of the named addressee only. If you are not the intended recipient, you must not use, disclose or copy any part of this email. If you have received this email by mistake, please notify the sender and delete this message immediately. Please consider the environment before printing this email. From: Bart Boswinkel [mailto:bart.boswinkel@icann.org] Sent: Wednesday, 15 July 2009 19:06 To: Chris Disspain Cc: ccNSO Council Subject: Charter of the IR WG Dear Chris, Included is the draft charter for the Emergency Response Planning Working Group for adoption by the Council. If the Council could take a vote before the end of next week, it would be great, Kind regards, Bart __________ Information from ESET NOD32 Antivirus, version of virus signature database 4244 (20090715) __________ The message was checked by ESET NOD32 Antivirus. http://www.eset.com

3 2

DNSSEC Survey 2009
by Gabriella Schittek July 14, 2009

July 14, 2009

Dear all, The ccNSO is relaunching the DNSSEC survey which was first conducted in September/October 2009 (see results at http://ccnso.icann.org/surveys/dnssec-survey-report-2007.pdf) We would be very grateful if you could take a few minutes to reply to the survey which you can access at: http://www.zoomerang.com/Survey/?p=WEB229C76TPWJ4 (it can only be filled in once per computer station) You will note that a few questions have been added, or slightly reshaped compared to the previous version (these questions have been clearly marked), in order to better reflect the current situation. The reason for the re-launch is a request from the .se registry and the European Network and Information Security Agency (ENISA) which suggested that a comparison between the two surveys could be of great interest. Your participation in this survey is very valuable and we are grateful over every reply received! Please, let me know should you have any questions! Kind regards, Gabi

1 2

Potential attack against ccTLD Registration Systems
by Gabriella Schittek July 13, 2009

July 13, 2009

Dear all, I was asked to distribute following message from the ICANN security team on our email lists. For any questions, please contact Yurie Ito yurie.ito(a)icann.org. Kind regards, Gabi ---- Hi all, My name is Yurie Ito, from the ICANN security team. Towards the end of April, security staff was made aware that DNS configuration information associated with certain Pacific and African domains had been subjected to forms of hijacking attacks. Attackers have recently targeted ccTLD operators. In the reported incidents, the attackers were able to obtain the user account credentials (logins and passwords) for a number of high profile domain names, by using data insertion exploits (primarily, SQL injection methods) to provide the attacker with privileged access to the registrars' applications or server operating systems. Reports further indicate the hackers then used the domain name credentials to modify the DNS configuration of domains and re-delegate names to web sites hosting unauthorized content (political agendas or personal messages). This trend is worrisome and we encourage the DNS community to monitor domain registration attacks for suspicious activities during registration account login attempts, stay informed, share information with other TLD operators and to consider whether it is appropriate to adopt additional measures to protect against unauthorized access to registration accounts. What's at stake? - --------------- Attackers appear focused on high profile domains. Beyond the costs of response, registration service providers or TLD operators will have to bear, the organizations affected by the attacks will also incur monetary losses, loss of business opportunities, embarrassment and harm to brands. The DNS community at large also will suffer from several second order affects, including the loss of user confidence in the DNS infrastructure and registration services, and reputational harm to TLD operators. Moreover, even in circumstances where the attack is discovered and resolved quickly, the incorrect DNS information can continue to propagate for some considerable time due to replication and TTL lifetimes. Why am I reading this? - ------------------------ Registration services have become attractive targets for hacker groups, who share exploit information quickly. Unauthorized access to registration accounts has numerous benefits to attackers beyond web defacements: once an attacker gains control of a domain's DNS configuration, he can use seemingly legitimate name resolution service to support fast flux networks and botnets, or he can redirect any critical business application of the targeted organization (mail, voice, intranet) to malicious or impersonation sites. What can you do? - ---------------- The security staff at ICANN will continue to share information on breaches or compromises brought to our attention. Open collaboration and incident information sharing among registry and registrar operators may help prevent similar incidents from occurring in CCTLDs that have not yet been targeted We'd like to ask your consideration to the following practices to reduce or mitigate the current hijacking threat. - - Consider whether making an Incident Response point of contact available 24x7 to your customers to receive incident reporting, could provide opportunities for early detection and remediation - - If you have not already made Incident Response point of contact details available to your customers, consider doing so now. - - Consider how registries might identify and share best practices, e.g., forming or engaging in some form of social networking where registries can exchange ideas and built trust relationships among peers - - Treat the frequency and diversity of attacks against other CCTLDs as an early warning and an opportunity to review your current methods of protecting registration account logins - - Educate your customers. Make them aware of the threat and suggest that your customers include some periodic form of domain name and DNS monitoring in their network administration, as well as risk assessment, and disaster recovery planning (Consider whether this might be an enhanced service opportunity for your operation.) - If you do not already include web applications in your security auditing, consider doing so now. Many best practices and analysis tools for securing web applications are available and several in particular focus on methods to assess and mitigate data insertion exploits. ICANN security staff are available to share information about these with any TLD operator or registrar who is interested. For more information, * ICANN's Security and Stability Advisory Committee (SSAC) is planning to release SAC040, "Measures to Protect Domain Registration Services from Exploitation and Misuse" approximately 21 July 2009 We encourage you to share information (in confidence) regarding suspicious activities with ICANN security staff and ask to alert your colleagues (again, in confidence) if you suspect or are aware of an on going attack. Thanks and Best Regards, Yurie yurie.ito(a)icann.org

1 0

ccNSO Council comments on country names as gTLDs
by Chris Disspain July 6, 2009

July 6, 2009

Comments attached. Chris Disspain CEO - auDA au Domain Administration Ltd <mailto:ceo@auda.org.au> ceo(a)auda.org.au <http://www.auda.org.au/> www.auda.org.au Important Notice - This email may contain information which is confidential and/or subject to legal privilege, and is intended for the use of the named addressee only. If you are not the intended recipient, you must not use, disclose or copy any part of this email. If you have received this email by mistake, please notify the sender and delete this message immediately. Please consider the environment before printing this email.

1 0