- Ccnso-council - lists.icann.org

CENTR position on DNS-CERT
by Peter Van Roste March 25, 2010

March 25, 2010

Hi Everyone, The CENTR Comment on the DNS-CERT business case can be found on: https://www.centr.org/main/news/5548-CTR.html It's in the line of the other comments I've seen so far with a few minor twists. Maybe a relevant addition is that a DNS-CERT misses out on an important fact: internet security is an all-encompassing issue, building niche CERTs might not be the right solution. Or as one of my members wondered: "What's next, an email-CERT?". Regards, Peter Peter Van Roste General Manager cid:image003.jpg@01CA95CF.8949E250 CENTR - Belliardstraat 20, 1040 Brussels, Belgium tel +32 2 627 5550 - fax +32 2 627 5559 - <http://www.centr.org> www.centr.org

1 0

FW: State of play of e-IANA
by Chris Disspain March 25, 2010

March 25, 2010

All, Those of you who were at the joint GAC ccNSO meeting in Nairobi will recall that this topic came up. Below is Kim's update on the current position re e-IANA. Cheers, Chris Disspain CEO - auDA au Domain Administration Ltd <mailto:ceo@auda.org.au> ceo(a)auda.org.au <http://www.auda.org.au/> www.auda.org.au Important Notice - This email may contain information which is confidential and/or subject to legal privilege, and is intended for the use of the named addressee only. If you are not the intended recipient, you must not use, disclose or copy any part of this email. If you have received this email by mistake, please notify the sender and delete this message immediately. Please consider the environment before printing this email. From: Kim Davies [mailto:kim.davies@icann.org] Sent: Wednesday, 24 March 2010 06:01 To: Janis Karklins Cc: Chris Disspain; Rod Beckstrom; Doug Brent Subject: Re: State of play of e-IANA Dear Janis, On 12/03/2010, at 2:05 PM, Janis Karklins wrote: As we discussed in Nairobi, on behalf of the GAC I would like to ask you give us brief update on the e-IANA project. This question was raised during the GAC/ccNSO meeting and is subject of interest also to cc operators. Appreciate your cooperation. Thanks for the opportunity to update the GAC on the status of this project. The project is to introduce an automated workflow to the root zone management process. While several steps will remain manually processed as they do today, much of the process of making root zone changes would be handled by a new online system that is responsible for moving each request through all the processing steps, and performing a number of aspects (such as technical checks) fully automatically. Our plan for launching the system involves an extended period of "parallel" operations, whereby we run all root zone changes through both the current fully manual process, and through the automated system, and ensure the results that come out the end of the system are consistent. Once we have a track record of flawless operation, we will seek to have the automated system fully deployed and the manual processing conclude. We started our first tranche of parallel operations during the week of the ICANN Sydney meeting. Regrettably, a small but significant bug was identified that resulted in inconsistencies between ICANN and VeriSign's database that caused that testing to be halted. This has since been remedied and a detailed break-down of the fault was reported to the ccNSO meeting during the ICANN Seoul meeting. (Page 5-8 in http://www.icann.asia/meetings/seoul2009/presentation-iana-27oct09-en.pdf) Since that time the condition has been successfully tested between ICANN and VeriSign. At this time the agreed testing plan is being implemented by ICANN and VeriSign. Documented test cases are being run through the system in an Operational Testing and Evaluation (OT&E) environment. Since the first week of Feb 2010 we have been running all current requests through the test system. Additional development time has been required in the last six months for a couple of reasons. Firstly, the development teams of both ICANN and VeriSign have been also been those deploying DNSSEC in the root zone. This has meant some initial delays getting staff to be able to devote additional time to the RZM project. The intervening events have also necessitated additional requirements on RZM itself, namely, implementing DNSSEC (DS) record support. There have also been additional feature requirements that were not in the original specification which are now being implemented. We intend to continue to keep the community fully updated at future ICANN meetings on the progress of this project, and we are as keen as anyone to see it through to final implementation. If there are any specific questions please don't hesitate to let me know. With kindest regards, Kim Davies Manager, Root Zone Services __________ Information from ESET Smart Security, version of virus signature database 4966 (20100322) __________ The message was checked by ESET Smart Security. http://www.eset.com

1 0

Re: [ccnso-council] Joint Chair letter to ICANN re DNSCERT
by Drazek, Keith March 25, 2010

March 25, 2010

No problem, thanks Chris. My comment was made before the extension was announced, so this works for me. Great work on the letter. K ________________________________ From: Chris Disspain To: Drazek, Keith; 'ccNSO Council' Sent: Wed Mar 24 21:49:53 2010 Subject: RE: [ccnso-council] Joint Chair letter to ICANN re DNSCERT Hi Keith, Given that an extension to 15 April has been announced Chuck, Cheryl and I felt that asking for even more time would distract from the other important aspects of the letter so have instead acknowledged the extension and left it at that. Cheers, Chris Disspain CEO - auDA au Domain Administration Ltd ceo(a)auda.org.au<mailto:ceo@auda.org.au> www.auda.org.au<http://www.auda.org.au/> Important Notice - This email may contain information which is confidential and/or subject to legal privilege, and is intended for the use of the named addressee only. If you are not the intended recipient, you must not use, disclose or copy any part of this email. If you have received this email by mistake, please notify the sender and delete this message immediately. Please consider the environment before printing this email. From: Drazek, Keith [mailto:Keith.Drazek@neustar.biz] Sent: Wednesday, 24 March 2010 00:51 To: 'Chris Disspain'; ccNSO Council Subject: RE: [ccnso-council] Joint Chair letter to ICANN re DNSCERT Hi Chris, thank you for sharing this with us. I support this letter, but recommend the extension be longer than 15 days. I believe 30 days would be more appropriate in light of the complexity of the matter and the concerns already being voiced by the community. Thanks, Keith From: owner-ccnso-council(a)icann.org [mailto:owner-ccnso-council@icann.org] On Behalf Of Chris Disspain Sent: Monday, March 22, 2010 9:44 PM To: ccNSO Council Subject: [ccnso-council] Joint Chair letter to ICANN re DNSCERT Importance: High All, We are currently collating and drafting cc public comments re DNSCERT etc. Meanwhile, the Chairs of the gNSO, ALAC and I would like to send the attached letter to Peter and Rod. Are there any objections? Cheers, Chris Disspain CEO - auDA au Domain Administration Ltd ceo(a)auda.org.au<mailto:ceo@auda.org.au> www.auda.org.au<http://www.auda.org.au/> Important Notice - This email may contain information which is confidential and/or subject to legal privilege, and is intended for the use of the named addressee only. If you are not the intended recipient, you must not use, disclose or copy any part of this email. If you have received this email by mistake, please notify the sender and delete this message immediately. Please consider the environment before printing this email. __________ Information from ESET Smart Security, version of virus signature database 4966 (20100322) __________ The message was checked by ESET Smart Security. http://www.eset.com __________ Information from ESET Smart Security, version of virus signature database 4966 (20100322) __________ The message was checked by ESET Smart Security. http://www.eset.com __________ Information from ESET Smart Security, version of virus signature database 4972 (20100324) __________ The message was checked by ESET Smart Security. http://www.eset.com

1 0

FW: ICANN News Alert -- Proposed Implementation Plan for Synchronized IDN ccTLDs
by Chris Disspain March 25, 2010

March 25, 2010

All, See below. It would be useful if the ccNSO could provide comment. Perhaps those members who are interested in this issue could consider the proposed plan and let me have any concerns, comments, notes of approval etc. as soon as possible. Cheers, Chris Disspain CEO - auDA au Domain Administration Ltd <mailto:ceo@auda.org.au> ceo(a)auda.org.au <http://www.auda.org.au/> www.auda.org.au Important Notice - This email may contain information which is confidential and/or subject to legal privilege, and is intended for the use of the named addressee only. If you are not the intended recipient, you must not use, disclose or copy any part of this email. If you have received this email by mistake, please notify the sender and delete this message immediately. Please consider the environment before printing this email. <http://www.icann.org/> ICANN News Alert http://www.icann.org/en/announcements/announcement-22mar10-en.htm _____ Proposed Implementation Plan for Synchronized IDN ccTLDs 22 March 2010 ICANN is pleased to announce the public comment period for the proposed <http://www.icann.org/en/topics/idn/fast-track/proposed-plan-synchronized-id…> Implementation Plan for Synchronized IDN ccTLDs [PDF, 440K]. Synchronized IDN ccTLDs are described by situations in the Fast Track Process where: * IDN ccTLDs are requested in more than one official language or script in a country/territory, * the requests for corresponding multiple strings are considered equivalent and delegation would solve a significant problem for Internet users, and * users accessing domains under any of the equivalent IDN ccTLDs expect that such domains will resolve to the same address or value. If approved by the ICANN Board, the proposed implementation plan and process will be available for IDN ccTLD requests for synchronized IDN ccTLDs that have completed the String Evaluation step in the Fast Track Process. Following successful completion of the evaluation process, the requesters may initiate delegation of the synchronized IDN ccTLDs by following ICANN's standard processes for TLD delegation, through the IANA function. The implementation plan is based on a set of principles <http://www.icann.org/en/minutes/resolutions-12mar10-en.htm#13> created by the Equivalent Strings Working Group (ES-WG) that was formed by <http://www.icann.org/en/minutes/resolutions-12mar10-en.htm#12> the ICANN Board at the Nairobi meeting. The ES-WG was formed to review the issue relating to synchronized IDN ccTLDs, and develop a framework to guide development of the synchronized implementation plan. The ES-WG remains available for consultation during consideration of this plan. The Proposed Implementation Plan is posted for public comments through 13 April 2010, after which it will be provided the ICANN Board for their considerations at their meeting on 22 April 2010. Comments can be submitted at sync-idn-cctlds(a)icann.org and reviewed at http://forum.icann.org/lists/sync-idn-cctlds. General information about ICANN's IDN Program can be found here: http://www.icann.org/en/topics/idn/ <http://www.icann.org/en/topics/idn/> The Final Implementation Plan for the IDN ccTLD Fast Track Process can be found here: http://www.icann.org/en/topics/idn/fast-track/idn-cctld-implementation-plan… The IDNC Final report can be found here: http://www.icann.org/en/announcements/announcement-26jun08-en.htm _____ Sign up for ICANN's Monthly Magazine <http://www.icann.org/magazine/> This message was sent from ICANN News Alert to janis.karklins(a)mfa.gov.lv. It was sent from: ICANN, 4676 Admiralty Way, Suite 330 , Marina del Rey, CA 90292-6601. You can modify/update your subscription via the link below. <http://www.icontact.com/a.pl/144186> Email Marketing by <http://www.icontact.com/a.pl/144186> iContact - Try It Free! <http://app.icontact.com/icp/static/images/icons/email_manage_subscription.p…> <http://app.icontact.com/icp/mmail-mprofile.pl?r=9828367&l=6333&s=2OHS&m=296…> Manage your subscription <http://click.icptrack.com/icp/track.php?msgid=296798&act=2OHS&r=9828367&c=1…> __________ Information from ESET Smart Security, version of virus signature database 4966 (20100322) __________ The message was checked by ESET Smart Security. http://www.eset.com

1 0

FW: DNS CERT
by Chris Disspain March 25, 2010

March 25, 2010

FYI Chris Disspain CEO - auDA au Domain Administration Ltd <mailto:ceo@auda.org.au> ceo(a)auda.org.au <http://www.auda.org.au/> www.auda.org.au Important Notice - This email may contain information which is confidential and/or subject to legal privilege, and is intended for the use of the named addressee only. If you are not the intended recipient, you must not use, disclose or copy any part of this email. If you have received this email by mistake, please notify the sender and delete this message immediately. Please consider the environment before printing this email. From: Chris Disspain [mailto:ceo@auda.org.au] Sent: Thursday, 25 March 2010 13:04 To: Dengate Thrush Peter; Rod Beckstrom Cc: Chuck Gomes; 'Cheryl Langdon-Orr' Subject: DNS CERT Peter, Rod, Please see the attached letter from Chairs of ALAC, ccNSO and gNSO. It has also been posted as a comment to the relevant calls for comment. Cheers, Chris Disspain CEO - auDA au Domain Administration Ltd <mailto:ceo@auda.org.au> ceo(a)auda.org.au <http://www.auda.org.au/> www.auda.org.au Important Notice - This email may contain information which is confidential and/or subject to legal privilege, and is intended for the use of the named addressee only. If you are not the intended recipient, you must not use, disclose or copy any part of this email. If you have received this email by mistake, please notify the sender and delete this message immediately. Please consider the environment before printing this email. __________ Information from ESET Smart Security, version of virus signature database 4972 (20100324) __________ The message was checked by ESET Smart Security. http://www.eset.com

1 0

Joint Chair letter to ICANN re DNSCERT
by Chris Disspain March 25, 2010

March 25, 2010

All, We are currently collating and drafting cc public comments re DNSCERT etc. Meanwhile, the Chairs of the gNSO, ALAC and I would like to send the attached letter to Peter and Rod. Are there any objections? Cheers, Chris Disspain CEO - auDA au Domain Administration Ltd <mailto:ceo@auda.org.au> ceo(a)auda.org.au <http://www.auda.org.au/> www.auda.org.au Important Notice - This email may contain information which is confidential and/or subject to legal privilege, and is intended for the use of the named addressee only. If you are not the intended recipient, you must not use, disclose or copy any part of this email. If you have received this email by mistake, please notify the sender and delete this message immediately. Please consider the environment before printing this email.

4 5

Review of ICANN's operational plan by SOP WG
by Bart Boswinkel March 24, 2010

March 24, 2010

Dear all, The Strategic and Operational Planning Working Group (SOP WG) hopes to solicit the ccTLD community's feedback on ICANN's Proposed Framework for FY11 Operating Plan and Budget ( see: http://www.icann.org/en/announcements/announcement-2-15feb10-en.htm) In order to facilitate and increase involvement in ICANN's Strategic and Operational Planning process, this report provides additional comment on the five priorities identified by the cc community as most important to them during the October 2009 survey of ccNSO members on ICANN's Strategic Plan. These area's were: * Enhance security, stability and resiliency in the allocation and assignment of the Internet's unique identifiers; * Implement IDN's * Ensure financial accountability, stability and responsibility * Strengthen ICANN's multi-stakeholder model to manage increasing demand and changing needs * Strive for excellence in core operations Please participate and share your comments directly with ICANN on the proposed Framework at: http://www.icann.org/en/public-comment/public-comment-201004-en.htm#op-budg… Please note the public comment period will close on 1 April 2010. Kind regards, Bart

1 0

Dates of next Council calls
by Gabriella Schittek March 24, 2010

March 24, 2010

Dear Councillors, The dates of the next Council calls are: Tuesday, 13 April 12.00 UTC Tuesday, 11 May 12.00 UTC Tuesday, 8 June 12.00 UTC These dates will also be listed at ccnso.icann.org/calendar Kind regards, Gabi

2 1

Fast Track String Evaluation Update
by Gabriella Schittek March 23, 2010

March 23, 2010

Dear all, Six countries/territories have now had their Fast Track String Evaluation plan completed, two are pending as they must also go through a synchronised IDN ccTLD Evaluation process (this is for IDN ccTLDs requests in more than one official language or script in a country/territory, or where the request could cause a problem for internet users) - these countries are China, Hong-Kong, Quatar, Palestinian Territory, Taiwan, Thailand, Tunisia, Sri Lanka. This means the String Delegation Process (through IANA) can now be initiated - see http://www.icann.org/en/topics/idn/fast-track/announcements-en.htm for more information. An implementation plan for synchronised IDNs has also been published for public comments: http://www.icann.org/en/announcements/announcement-22mar10-en.htm The comment period closes on the 13th April. Kind regards, Gabi

2 1

Accountability and tranparency review
by Chris Disspain March 21, 2010

March 21, 2010

Janis & Peter, At the ccNSO Council meeting yesterday the following resolution was passed; “The ccNSO Council endorses and supports Becky Burr for the Transparency and Accountability review panel and thanks Becky for her willingness to undertake this role”. I will be formally confirming our endorsement to Marco and Alice shortly. I understand that there is disagreement between the two of you about Becky being on the panel. Please note the following: 1. The ccNSO has overwhelmingly endorsed Becky for this role. We believe she is extraordinarily well qualified to undertake the task and will bring a depth of knowledge on all aspects of ICANN to the work of the panel. 2. Becky has been appointed to the ccNSO council by the Nominating Committee. She is now in her second 3 year term on the council having been re-appointed. The Nominating Committee is tasked to find persons of integrity, objectivity, and intelligence, with reputations for sound judgment and open minds. Becky demonstrates all of these and this is clearly endorsed by the Nominating Committee who have appointed her twice to her role on our Council. 3. As you, Peter, demonstrated this morning in the public forum during Wolfgang’s presentation (by asking the Nominating Committee appointed directors to identify themselves etc.) appointees of the Nominating Committee should be and indeed are held in high esteem. I urge you to follow the endorsement and recommendation of the ccNSO. Further, I understand that you are considering asking us to seek additional volunteers that the Council would endorse as you are concerned that ccTLD community in ‘under-represented’. The ccNSO is satisfied that Becky is more than capable of representing us on the panel. However, provided that you confirm Becky as a panellist we will, should you wish, endeavour to find some additional panel members from the ccTLD community. If you are not prepared to select Becky the ccNSO council will not provide further endorsements. Should you wish to meet to discuss this, I shall be happy to do so. Regards, Chris Disspain Chair – ccNSO Council

3 2