- Ccnso-council - lists.icann.org

IANA WG Work Plan
by Olivier Guillard / AFNIC June 16, 2008

June 16, 2008

Dear Councillors, Find here included the draft IANA Working Group Work Plan. It's provided in two short documents: 1- A paper that describes IANA context and introduces IANAWG activities; 2- The expected schedule of IANAWG activities for 2009 Those only interested by IANAWG projects and activities can go directly to the second document. The process if the Council agree would be to post this to ccs when possible, for discussion in Paris. If someone sees anything that would improve those papers, or has any comment, I'm open (you can comment directly in the doc files). Kindest, -- Olivier

1 1

DNSSEC: Question about signing the root
by Olivier Guillard / AFNIC June 16, 2008

June 16, 2008

Dear Councillors, Over the last CENTR GA in Greece, Antoin Vershuren from .nl reported about CENTR tech group activities. He indicated that there had been general discussions about DNSSEC in the CENTR tech. Considering that some TLD operators had asked for the root to be signed, I asked him if there would be any problem if the root was signed, in particular for those TLDs that hadn't signed their zone. Is response was a clear and franc: "NO", there is no problem for the root to be signed". I then launched this discussion in the CENTR tech mailing list, and I had no objections for the root to be signed from those ccs that were not signed, I even had couple of explicit responses from some of them saying that, as unsigned ccs, they wouldn't see any problem for the root to be signed from a ccTLD point of view. I would appreciate to have input from other ccs in other regions submiting this question to then. Kindest regards, -- Olivier Guillard ccNSO IANA WG Chair

1 0

Dial in details council call 16 June 2008
by Gabriella Schittek June 16, 2008

June 16, 2008

Dear all, The dial-in details for today's call are below. Gabi -----Original Message----- From: owner-ccnso-council(a)icann.org [mailto:owner-ccnso-council@icann.org] On Behalf Of Gabriella Schittek Sent: Friday, June 06, 2008 11:47 AM To: ccnso-council(a)icann.org Subject: [ccnso-council] Dial in details council call 16 June 2008 Dear all, The next Council call will take place on the 16th June 2008 at 12.00 noon UTC (see http://timeanddate.com/worldclock/meeting.html for city times). The dial in details are below. Should you need to be dialed in by the operator, please let me know as soon as possible. The call will be recorded and made available online. Kind regards, Gabi CONFERENCE LEADER: GABRIELLA SCHITTEK PARTICIPANT PASSCODE: COUNCIL For security reasons, the passcode will be required to join the call. Country Toll Numbers Freephone/Toll Free Number ARGENTINA 0800-777-0494 AUSTRALIA ADELAIDE: 61-8-8121-4862 1-800-880-485 AUSTRALIA BRISBANE: 61-7-3102-0964 1-800-880-485 AUSTRALIA CANBERRA: 61-2-6100-1964 1-800-880-485 AUSTRALIA MELBOURNE: 61-3-9010-7733 1-800-880-485 AUSTRALIA PERTH: 61-8-9467-5243 1-800-880-485 AUSTRALIA SYDNEY: 61-2-8211-1386 1-800-880-485 AUSTRIA 43-1-92-89-654 0800-999-636 BELGIUM 32-2-402-2432 0800-4-8360 BRAZIL 0800-8912038 CHILE 1230-020-0281 CHINA* 86-400-810-4760 10800-712-1193 10800-120-1193 COLOMBIA 01800-9-156463 CZECH REPUBLIC 420-2-25-98-56-15 800-700-167 DENMARK 45-7014-0238 8088-6075 FINLAND Land Line: 106-33-164 0-800-1-12056 FINLAND Mobile: 09-106-33-164 0-800-1-12056 FRANCE LYON: 33-4-26-69-12-75 080-511-1431 FRANCE MARSEILLE: 33-4-86-06-00-75 080-511-1431 FRANCE PARIS: 33-1-70-75-00-04 080-511-1431 GERMANY 49-69-2222-52104 0800-216-1601 GREECE 30-80-1-100-0639 00800-12-5999 HONG KONG 852-2286-5632 800-964-136 HUNGARY 06-800-15227 INDIA 000-800-852-1216 INDONESIA 001-803-011-3500 IRELAND 353-1-246-0036 1800-931-782 ISRAEL 1-80-9303048 ITALY 39-02-3600-0326 800-906-585 JAPAN OSAKA: 81-6-7739-4763 00531-12-1149 JAPAN TOKYO: 81-3-5539-5154 00531-12-1149 LUXEMBOURG 352-27-000-1314 MALAYSIA 1-800-80-8121 MEXICO 001-866-627-0541 NETHERLANDS 31-20-710-9321 0800-023-4655 NEW ZEALAND 64-9-970-4641 0800-443-793 NORWAY 47-21-59-00-14 800-11982 PANAMA 011-001-800-5072119 POLAND 00-800-1210067 PORTUGAL 8008-12179 RUSSIA 8-10-8002-9613011 SINGAPORE 65-6883-9197 800-120-4057 SLOVAK REPUBLIC 421-2-322-422-15 SOUTH AFRICA 080-09-93390 SOUTH KOREA 82-2-6744-1052 00798-14800-6323 SPAIN 34-91-414-15-44 800-099-279 SWEDEN 46-8-566-10-782 0200-887-612 SWITZERLAND 41-44-580-7718 0800-000-038 TAIWAN 886-2-2795-7346 00801-137-565 THAILAND 001-800-1206-65091 UNITED KINGDOM BIRMINGHAM: 44-121-210-9015 0800-018-0795 UNITED KINGDOM GLASGOW: 44-141-202-3215 0800-018-0795 UNITED KINGDOM LEEDS: 44-113-301-2115 0800-018-0795 UNITED KINGDOM LONDON: 44-20-7019-0812 0800-018-0795 UNITED KINGDOM MANCHESTER: 44-161-601-1415 0800-018-0795 URUGUAY 000-413-598-3439 USA 1-210-795-0472 877-818-6787 VENEZUELA 0800-1-00-3205 *Access to your conference call will be either of the numbers listed, dependent on the participants' local telecom provider. Restrictions may exist when accessing freephone/toll free numbers using a mobile telephone. ____________________________________________________________________________ AUDIO FEATURES: Tones ____________________________________________________________________________ SPECIAL NOTES: __________________ CALL NOTES: THE DOWNLOADABLE FILE WILL BE AVAILABLE TO THE LEADER/CONTACT FOR A PERIOD OF 30 DAYS FROM 1 HR AFTER THE CONCLUSION OF THE CONFERENCE. YOU WILL BE ALLOWED 5 ATTEMPTS TO DOWNLOAD. ONCE THE FILE HAS BEEN DOWNLOADED SUCCESSFULLY, NO FURTHER DOWNLOADS WILL BE AVAILABLE. Verizon Business would like to send you e-mail notes to keep you informed of new or enhanced products and services, conferencing tips, or special offers, etc. If you would prefer not to receive these messages, you may unsubscribe now at http://www.mymeetings.com/mymeetings/remove.jsp. Thank you. Verizon Business and its affiliates respect your privacy and work hard to safeguard the privacy of your personal data. We want you to know that we apply our long-standing commitment to safeguarding privacy to our online and Internet activities. For information on Verizon Business privacy policy, please go to: http://www22.verizon.com/privacy/

3 2

Draft Final Report IDNC WG
by Bart Boswinkel June 13, 2008

June 13, 2008

Dear all, Included is the draft Final Report of the IDNC Working Group as it will be published on the ICANN website in the next day or two. Please note the report has not been signed off by the IDNC WG, who will continue to provide their own comments and input, which includes a meeting of the IDNC WG in Paris during the ICANN meeting. kind regards, Bart

1 0

Dial in details council call 16 June 2008
by Gabriella Schittek June 13, 2008

June 13, 2008

Dear all, The next Council call will take place on the 16th June 2008 at 12.00 noon UTC (see http://timeanddate.com/worldclock/meeting.html for city times). The dial in details are below. Should you need to be dialed in by the operator, please let me know as soon as possible. The call will be recorded and made available online. Kind regards, Gabi CONFERENCE LEADER: GABRIELLA SCHITTEK PARTICIPANT PASSCODE: COUNCIL For security reasons, the passcode will be required to join the call. Country Toll Numbers Freephone/Toll Free Number ARGENTINA 0800-777-0494 AUSTRALIA ADELAIDE: 61-8-8121-4862 1-800-880-485 AUSTRALIA BRISBANE: 61-7-3102-0964 1-800-880-485 AUSTRALIA CANBERRA: 61-2-6100-1964 1-800-880-485 AUSTRALIA MELBOURNE: 61-3-9010-7733 1-800-880-485 AUSTRALIA PERTH: 61-8-9467-5243 1-800-880-485 AUSTRALIA SYDNEY: 61-2-8211-1386 1-800-880-485 AUSTRIA 43-1-92-89-654 0800-999-636 BELGIUM 32-2-402-2432 0800-4-8360 BRAZIL 0800-8912038 CHILE 1230-020-0281 CHINA* 86-400-810-4760 10800-712-1193 10800-120-1193 COLOMBIA 01800-9-156463 CZECH REPUBLIC 420-2-25-98-56-15 800-700-167 DENMARK 45-7014-0238 8088-6075 FINLAND Land Line: 106-33-164 0-800-1-12056 FINLAND Mobile: 09-106-33-164 0-800-1-12056 FRANCE LYON: 33-4-26-69-12-75 080-511-1431 FRANCE MARSEILLE: 33-4-86-06-00-75 080-511-1431 FRANCE PARIS: 33-1-70-75-00-04 080-511-1431 GERMANY 49-69-2222-52104 0800-216-1601 GREECE 30-80-1-100-0639 00800-12-5999 HONG KONG 852-2286-5632 800-964-136 HUNGARY 06-800-15227 INDIA 000-800-852-1216 INDONESIA 001-803-011-3500 IRELAND 353-1-246-0036 1800-931-782 ISRAEL 1-80-9303048 ITALY 39-02-3600-0326 800-906-585 JAPAN OSAKA: 81-6-7739-4763 00531-12-1149 JAPAN TOKYO: 81-3-5539-5154 00531-12-1149 LUXEMBOURG 352-27-000-1314 MALAYSIA 1-800-80-8121 MEXICO 001-866-627-0541 NETHERLANDS 31-20-710-9321 0800-023-4655 NEW ZEALAND 64-9-970-4641 0800-443-793 NORWAY 47-21-59-00-14 800-11982 PANAMA 011-001-800-5072119 POLAND 00-800-1210067 PORTUGAL 8008-12179 RUSSIA 8-10-8002-9613011 SINGAPORE 65-6883-9197 800-120-4057 SLOVAK REPUBLIC 421-2-322-422-15 SOUTH AFRICA 080-09-93390 SOUTH KOREA 82-2-6744-1052 00798-14800-6323 SPAIN 34-91-414-15-44 800-099-279 SWEDEN 46-8-566-10-782 0200-887-612 SWITZERLAND 41-44-580-7718 0800-000-038 TAIWAN 886-2-2795-7346 00801-137-565 THAILAND 001-800-1206-65091 UNITED KINGDOM BIRMINGHAM: 44-121-210-9015 0800-018-0795 UNITED KINGDOM GLASGOW: 44-141-202-3215 0800-018-0795 UNITED KINGDOM LEEDS: 44-113-301-2115 0800-018-0795 UNITED KINGDOM LONDON: 44-20-7019-0812 0800-018-0795 UNITED KINGDOM MANCHESTER: 44-161-601-1415 0800-018-0795 URUGUAY 000-413-598-3439 USA 1-210-795-0472 877-818-6787 VENEZUELA 0800-1-00-3205 *Access to your conference call will be either of the numbers listed, dependent on the participants' local telecom provider. Restrictions may exist when accessing freephone/toll free numbers using a mobile telephone. ____________________________________________________________________________ AUDIO FEATURES: Tones ____________________________________________________________________________ SPECIAL NOTES: __________________ CALL NOTES: THE DOWNLOADABLE FILE WILL BE AVAILABLE TO THE LEADER/CONTACT FOR A PERIOD OF 30 DAYS FROM 1 HR AFTER THE CONCLUSION OF THE CONFERENCE. YOU WILL BE ALLOWED 5 ATTEMPTS TO DOWNLOAD. ONCE THE FILE HAS BEEN DOWNLOADED SUCCESSFULLY, NO FURTHER DOWNLOADS WILL BE AVAILABLE. Verizon Business would like to send you e-mail notes to keep you informed of new or enhanced products and services, conferencing tips, or special offers, etc. If you would prefer not to receive these messages, you may unsubscribe now at http://www.mymeetings.com/mymeetings/remove.jsp. Thank you. Verizon Business and its affiliates respect your privacy and work hard to safeguard the privacy of your personal data. We want you to know that we apply our long-standing commitment to safeguarding privacy to our online and Internet activities. For information on Verizon Business privacy policy, please go to: http://www22.verizon.com/privacy/

3 2

ICANN Monthly Policy Update
by Denise Michel June 12, 2008

June 12, 2008

Below (and attached in Word with hyperlinks) are brief summaries of significant Internet policy issues that are being addressed by the ICANN community's bottom-up policy development structure, as well as other activities of interest. These "ICANN Policy Updates" are now available via online subscription. If you would like to receive these updates in your inbox each month, go to <http://www.icann.org/newsletter> and select "Policy Update" to subscribe. These monthly updates are provided by ICANN's Policy Staff in response to community requests for periodic summaries of ICANN's policy work. Links to additional information are included in the attached and we encourage you to go beyond these brief staff summaries and learn more about the ICANN community's work. These monthly updates also will be available on our website. Our goal is to maximize transparency and broad community participation in ICANN's policy development activities. We continue to investigate more effective and efficient ways to communicate the relevance, importance and status of ongoing issues to the ICANN community. Comments and suggestions on how we can improve these efforts are most welcome and should be sent to policy-staff(a)icann.org. Regards, Denise Michel ICANN VP, Policy denise.michel(a)icann.org ICANN POLICY UPDATE – June 2008 CONTENTS: 1. GNSO -- IMPROVEMENTS 2. GNSO -- DOMAIN NAME TASTING 3. GNSO -- WHOIS 4. GNSO -- INTER-REGISTRAR TRANSFER POLICY REVIEW 5. GNSO -- FAST FLUX HOSTING 6. GNSO -- DOMAIN NAME FRONT RUNNING 7. MULTIPLE ENTITIES -- IDN ccTLDs 8. MULTIPLE ENTITIES – ICANN'S GEOGRAPHIC REGIONS 9. CCNSO -- INTERNAL IMPROVEMENT PLANS CONTINUE 10. AT-LARGE -- NEW ALSes JOIN THE COMMUNITY 11. AT-LARGE -- ROAD TO PARIS 12. AT-LARGE -- BOARD LIAISON NOMINATIONS OPEN 13. ASO AC -- GLOBAL POLICY PROPOSALS (ASNs, IPv4) 14. SSAC – DNSSEC-CAPABLE NAME SERVER SURVEY 15. SSAC -- ANTI-PHISHING ACTIVITIES 1. GNSO -- IMPROVEMENTS Background: The ICANN Board is considering a comprehensive set of recommendations to improve the structure and operations of the Generic Names Supporting Organization (GNSO). This effort is part of ICANN's ongoing commitment to its evolution and improvement, and follows an independent review of the GNSO and extensive public consultation. A working group appointed by ICANN's Board (BGC WG) has developed a comprehensive proposal (GNSO Improvements Report) to improve the effectiveness of the GNSO, including its policy activities, structure, operations and communications. On 15 February 2008, the Board accepted the GNSO Improvements Report for consideration and directed ICANN Staff to open a public comment forum on the Report, draft a detailed implementation plan in consultation with the GNSO, begin implementation of the non-contentious recommendations, and return to the Board and community for further consideration of the implementation plan. A GNSO Improvement Planning Team comprised of GNSO leadership and constituency representatives, ICANN Staff and a Board liaison participant was formed to develop a top-level implementation plan to structure the implementation efforts. Recent Developments: On 19 May 2008, the GNSO improvements Planning Team produced a draft version of the GNSO Improvements Top Level Plan. The primary focus of the plan is the creation of two standing committees (GNSO Process and GNSO Operations) that would be responsible for ensuring that the substantive work of implementing the BGC WG recommendations is carried-out. The document is being circulated to the GNSO Council and to the community for discussions and further development. Next Steps: Board action on the BGC WG Report could occur at the June Board meeting in Paris, France. The GNSO Council is scheduled to discuss the top-level implementation plan during the Paris meeting at the end of June. The goal, assuming the plan is approved by the Council, is to initiate the actual work of the standing committees. More Information: • GNSO Improvements information page <http://www.icann.org/topics/gnso-improvements/> • Full GNSO Improvements Report <http://www.icann.org/topics/gnso-improvements/gnso-improvements-report-03fe…> • Board resolution on GNSO Improvements http://www.icann.org/minutes/resolutions-15feb08.htm#_Toc64545918> • Summary and Analysis of Comments on GNSO Improvements Report http://forum.icann.org/lists/gnso-improvements-report-2008/msg00033.html • GNSO Improvements - Top Level Plan, 19 May 2008 http://gnso.icann.org/drafts/gnso-improvements-top-level-plan-22may08.pdf Staff Contact: Rob Hoggarth, Senior Policy Director 2. GNSO -- DOMAIN NAME TASTING Background: The term "domain tasting" refers to a case when an entity registers a domain name and then tests to see if the name has sufficient traffic to generate more income than the annual registration fee (usually through the addition of pay-per-click advertising). If the address is deemed sufficiently profitable, it is kept. If not, the current "add grace period" (AGP) - where domains can be returned within five days without cost - is used to return the domain at no net cost to the registrant and no ICANN charge levied on the registrar. Among other reasons, the practice is controversial because registrants who engage in this behavior can typically register many hundreds of thousands of domain names under this practice, with these temporary registrations far exceeding the number of domain names actually licensed. Over time, there has been a significant increase in the number of domains registered and returned prior to expiration of the AGP. A significant number of community members feel the AGP process presents a loophole that facilitates this conduct. In May 2007, ICANN's At-Large Advisory Committee (ALAC), asked the GNSO Council to review the issue. In October 2007, after significant fact finding and consideration, the GNSO Council launched a formal policy development process (PDP) on domain tasting and encouraged ICANN Staff to consider applying ICANN's annual transaction fee to all names registered and subsequently de-registered during the AGP. Subsequently, Staff included in the initial draft of ICANN's next fiscal year budget, a proposal to charge a fee for all domains added - including a substantial percentage of domains added and subsequently deleted during the AGP. Public discussion of the budget, and this proposal, is ongoing. As part of the formal PDP process, an Initial Report was produced for public comment, outlining the problems caused by domain tasting, possible actions to be taken, and the arguments put forward for and against such actions. Public comments were incorporated into a draft Final Report posted on 8 February 2008. On 6 March 2008, the GNSO Council considered a motion to curb the practice of domain tasting. The motion would prohibit any gTLD operator that has implemented an AGP from offering a refund for any domain name deleted during the AGP that exceeds 10% of its net new registrations in that month, or fifty domain names, whichever is greater. Under the terms of the motion, an exemption from the limitation could be sought for a particular month, upon a showing of extraordinary circumstances detailed in the motion. Public comments and constituency impact statements regarding the motion were solicited and incorporated into a Final Report for Council consideration at its 17 April 2008 meeting. The comments and constituency statements reflected a plurality of views on what should be done to eliminate abuse of the AGP to facilitate domain tasting and addressed three potential options including (1) views on the draft resolution itself; (2) views on eliminating the AGP entirely; and (3) views on the proposed ICANN budget changes. Recent Developments: The GNSO Council approved the motion on 17 April 2008 by supermajority vote. The motion (now a GNSO Council recommendation by virtue of the supermajority vote) is pending Board consideration. Public comments were invited on the Council recommendation until 21 May 2008, and have been summarized by Staff. In addition, the most recent ICANN draft budget for FY 2009 contains a new transaction fee provision that calls for the ICANN USD .20 annual fee to apply to all new registrations that exceed the maximum of (i) 10% of that registrar's net new registrations in that month (defined as total new registrations less domains deleted during AGP), or (ii) fifty (50) domain names, whichever is greater. Next Steps: The Board is expected to consider both the GNSO Council motion and the FY 09 budget proposal during its June meeting in Paris. More Information: • Public comment request (http://www.icann.org/public_comment/#dt-motion-21may08) • GNSO Domain Tasting Issues Report, June 2007 < http://gnso.icann.org/issues/domain-tasting/gnso-domain-tasting-report-14ju… > • Outcomes Report, October 2007 < http://gnso.icann.org/drafts/gnso-domain-tasting-adhoc-outcomes-report-fina… > • Final Report, 4 April 2008 <http://gnso.icann.org/issues/domain-tasting/gnso-final-report-domain-tastin…> Staff Contact: Liz Gasster, Senior Policy Counselor 3. GNSO -- WHOIS Background: WHOIS services provide public access to data on registered domain names. That data currently includes contact information for Registered Name Holders. The extent of registration data collected at the time of registration of a domain name, and the ways such data can be accessed, are specified in agreements established by ICANN for domain names registered in generic top-level domains (gTLDs). For example, ICANN requires accredited registrars to collect and provide free public access to (1) the name of the registered domain name and its name servers and registrar, (2) the date the domain was created and when its registration expires, and (3) the contact information for the Registered Name Holder including the technical contact, and the registrant's administrative contact. WHOIS has been the subject of intense policy development debate and action over the last few years. Information contained in WHOIS is used for a wide variety of purposes. Some uses of WHOIS data are viewed as constructive and beneficial. For example, sometimes WHOIS data is used to track down and identify registrants who may be posting illegal content or engaging in phishing scams. Other uses of WHOIS are viewed as potentially negative, such as harvesting WHOIS contact information to send unwanted spam or fraudulent email solicitations. Privacy advocates have also been concerned about the privacy implications of unrestricted access to personal contact information. The GNSO Council decided in October 2007 that a comprehensive, objective and quantifiable understanding of key factual issues regarding WHOIS will benefit future GNSO policy development efforts, and plans to ask the ICANN Staff to conduct several studies for this purpose. Before defining the details of these studies, the Council has solicited suggestions for specific topics of study on WHOIS from community stakeholders. Possible areas of study might include a study of certain aspects of gTLD registrants and registrations, a study of certain uses and misuses of WHOIS data, a study of the use of proxy registration services, including privacy services, or a comparative study of gTLD and ccTLD WHOIS. A forum for public comments on suggestions for specific topics of study on WHOIS was open through 15 February 2008. Approximately 25 suggestions were received. A summary of those comments has been prepared. On 27 March the GNSO Council approved a motion to form a group of volunteers to: (1) review and discuss the 'Report on Public Suggestions on Further Studies of WHOIS; (2) develop a proposed list of recommended studies, if any, for which ICANN Staff will be asked to provide cost estimates to the Council; and (3) produce the list of recommendations with supporting rationale. Recent Developments: On 22 May 2008, the WHOIS study group delivered its report to the Council. In addition to considering the recommendations solicited from the public, the group also considered recommendations offered by the Governmental Advisory Committee (GAC) for WHOIS studies. The report reflects two opposing viewpoints among participants. A significant number of participants believe that no further studies should be conducted, because further study (and the resulting information) will be unlikely to persuade any stakeholders to modify existing strongly held positions. The second group of participants do believe further studies would be useful in informing the debate, and their recommendation includes specific recommendations for further study in three primary areas: 1) the availability of privacy services; 2) the demand and motivation for the use of privacy services, and certain studies of WHOIS misuse, detailed further in the report. Next Steps: During the Paris meeting, the Council will consider this report and provide additional direction to Staff on recommended data gathering and study requirements. Based on that direction, Staff will provide rough cost estimates for various components of data gathering and studies, if any are recommended by the Council. Subsequently, Council and Staff will consider what data gathering and studies should be pursued. More Information: • GNSO WHOIS Policy Work Web Page <http://gnso.icann.org/issues/whois/> • GAC Recommendations of 16 April 2008: http://www.icann.org/correspondence/karlins-to-thrush-16apr08.pdf • Summary of Public Suggestions on Further Studies of WHOIS (updated 10 May 2008 with GAC recommendations of 16 April): http://gnso.icann.org/issues/whois/whois-study-suggestion-report-10may08.pdf Staff Contact: Liz Gasster, Senior Policy Counselor 4. GNSO -- INTER-REGISTRAR TRANSFER POLICY REVIEW Background: Consistent with ICANN's obligation to promote and encourage robust competition in the domain name space, the Inter-Registrar Transfer Policy aims to provide a straightforward procedure for domain name holders to transfer their names from one ICANN-accredited registrar to another should they wish to do so. The policy also provides standardized requirements for registrar handling of such transfer requests from domain name holders. The policy is an existing community consensus that was implemented in late 2004 that is now being reviewed by the GNSO. As part of that effort, the Council formed a Transfers Working Group (TWG) to examine and recommend possible areas for improvements in the existing transfer policy. The TWG identified a broad list of over 20 potential areas for clarification and improvement. In an effort to get improvements on-line as soon as possible, the GNSO Council initiated a policy development process (Transfer PDP 1) to immediately clarify four specific issues regarding reasons for which a registrar of record may deny a request to transfer a domain name to a new registrar. In parallel with the PDP process, the Council tasked a short term planning group to evaluate and prioritize the remaining 19 policy issues identified by the Transfers Working Group. In March, the group delivered a report to the GNSO Council that suggested clustering the issues for consideration in five new PDPs. Recent Developments: ICANN Staff finalized and posted an Initial Report for public comment as part of the Transfer PDP 1 described above. The public comments received have been used by ICANN Staff to compile a Final Report for the GNSO Council's consideration of further steps to take in this PDP. At the GNSO Council meeting on 17 April 2008, a drafting group was launched to develop suggested text modifications in the current provisions. This group will report on its findings to Council following the group's last meeting on 4 June. During its 8 May 2008 meeting, the GNSO Council adopted the structuring of five additional inter-registrar transfers PDPs as suggested by the drafting group (in addition to the ongoing Transfer PDP 1 on the four reasons for denying a transfer). The five new PDPs will be addressed in a largely consecutive manner, with the possibility of overlap as resources permit. The Council requested an Issues Report from Staff on the first of the new PDP issue sets (Set A – New IRTP Issues), which has since been delivered to the Council. Next Steps: At the June ICANN meeting in Paris, the Council will consider the Issues Report on Set A and decide on further steps to take. The Council will also consider the drafting group's report on the PDP on clarification of reasons for denial and resolve what the next steps should be for that PDP. More Information: • Draft Advisory <http://gnso.icann.org/issues/transfers/gnso-draft-transfer-advisory-14nov07…> • Initial Report <http://www.icann.org/announcements/announcement-17mar08.htm> • Final Report < http://gnso.icann.org/drafts/final-report-irt-policy-09apr08.pdf> • PDP Recommendations <http://gnso.icann.org/drafts/transfer-wg-recommendations-pdp-groupings-19ma…> • Issues Report, Set A (http://gnso.icann.org/issues/transfers/transfer-issues-report-set-a-23may08… Staff Contact: Olof Nordling, Manager, Policy Development Coordination 5. GNSO – FAST FLUX HOSTING Background: Fast flux hosting is a term that refers to several techniques used by cyber criminals to evade detection, in which the criminals rapidly modify IP addresses and/or name servers. The ICANN Security and Stability Advisory Committee (SSAC) recently completed a study of fast flux hosting. The results of the study were published in January 2008 in the SSAC Advisory on Fast Flux Hosting and DNS (SAC 025). Because fast flux hosting involves many different players—the cybercriminals and their victims, ISPs, companies that provide web hosting services, and DNS registries and registrars—it is possible to imagine a variety of different approaches to mitigation. Most of these will require the cooperation of a variety of actors. On 26 March 2008, Staff posted an Issues Report on fast flux hosting, as directed by the GNSO Council. In the Report, Staff recommends that the GNSO sponsor additional fact-finding and research to develop best practices concerning fast flux hosting. Staff also notes that it may be appropriate for the ccNSO to participate in such an activity. At its 8 May 2008 meeting, the GNSO Council formally launched a policy development process (PDP), rejected a task force approach and called for creation of a working group on fast flux. Recent developments: At its 29 May meeting, the GNSO Council approved a working group charter to consider the following questions: • Who benefits from fast flux, and who is harmed? • Who would benefit from cessation of the practice and who would be harmed? • Are registry operators involved, or could they be, in fast flux hosting activities? If so, how? • Are registrars involved in fast flux hosting activities? If so, how? • How are registrants affected by fast flux hosting? • How are Internet users affected by fast flux hosting? • What technical (e.g. changes to the way in which DNS updates operate) and policy (e.g. changes to registry/registrar agreements or rules governing permissible registrant behavior) measures could be implemented by registries and registrars to mitigate the negative effects of fast flux? • What would be the impact (positive or negative) of establishing limitations, guidelines, or restrictions on registrants, registrars and/or registries with respect to practices that enable or facilitate fast flux hosting? • What would be the impact of these limitations, guidelines, or restrictions to product and service innovation? • What are some of the best practices available with regard to protection from fast flux? • Obtain expert opinion, as appropriate, on which areas of fast flux are in scope and out of scope for GNSO policy making. Next Steps: The Working Group shall report back to Council within 90 days, with a report discussing these questions and the range of possible answers developed by the Working Group members. The Working Group report also will outline potential next steps for Council deliberation. These next steps may include further work items for the WG or policy recommendation for constituency and community comment and review and for Council deliberation. More Information: • SSAC Report 025 on Fast Flux Hosting, January 2008 - http://www.icann.org/committees/security/sac025.pdf • Issues Report on Fast Flux Hosting, corrected 31 March 2008 - http://gnso.icann.org/issues/fast-flux-hosting/gnso-issues-report-fast-flux… Staff Contact: Liz Gasster, Senior Policy Counselor 6. GNSO – DOMAIN NAME FRONT RUNNING Background: Domain name front running is the practice whereby a domain name registrar uses insider information to register domains for the purpose of re-selling them or earning revenue via ads placed on the domain's landing page. This practice is also sometimes referred to by some as "domain reservation" or "cart-hold" or "cart-reserve." By registering the domains, the registrar locks out other potential registrars from selling the domain to a customer. The registrar typically uses the 5-day add grace period (AGP), during which the domain can be locked without permanent payment. Alerted to the issue by (1) industry input, (2) a Security and Stability Advisory Committee report, and (3) a letter from the At-Large Advisory Committee to the ICANN Board requesting emergency action, on 27 March 2008 the Chair of the ICANN Board referred the matter to the GNSO Council for additional information gathering and policy development, if necessary. Recent Developments: The GNSO Council, at its 8 May 2008 meeting, approved a motion to create a drafting team. The team will work to develop a recommendation to the Council on whether to request an Issues Report or whether other research on domain name front running (including further defining the problem) should be pursued. The drafting team will consider questions such as: • How is the problem defined? • How prevalent is the problem? • Will the measures relating to domain tasting affect front running? • Are there rules within the RAA that can be used to address this activity? Next Steps: The goal of the drafting team will be to bring a recommendation to the Council on whether to request an Issues Report or a more extensive research effort that could help to define the terms of the report. More Information: • Original ALAC Correspondence Raising Front Running Issue; (http://atlarge-lists.icann.org/pipermail/alac_atlarge-lists.icann.org/2008q…) • (SAC 022, SSAC Advisory on Domain Name Front Running, October 2007 (http://www.icann.org/committees/security/sac022.pdf) Staff Contact: Liz Gasster, Senior Policy Counselor 7. MULTIPLE ENTITIES -- IDN ccTLDs Background: The potential introduction of Internationalized Domain Names (IDNs) represents the beginning of an exciting new chapter in the history of the Internet. IDNs offer the potential for many new opportunities and benefits for Internet users of all languages around the world by allowing them to establish domains in their native languages and alphabets. An IDN ccTLD (internationalized domain name country code top level domain) is a country code top-level domain (corresponding to a country, territory, or other geographic location as associated with the ISO 3166-1 two-letter codes) with a label that contains at least one character that is not a standard Latin letter (A through Z), a hyphen, or one of the standard numerical digits (0 through 9). The technical potential for ICANN to now make these domain names available for assignment is prompting significant discussion, study and demand within the ICANN community – particularly for territories and communities who want to make use of non-Latin characters. Current efforts are taking place on two fronts; (1) efforts to identify a "fast track" process to provide new domain opportunities to territories with immediate justifiable needs; and (2) efforts to develop a comprehensive long term plan that ensures a stable process for all interested stakeholders. 7a. IDNC Working Group Pursues The IDN "Fast Track" A joint IDNC Working Group (IDNC WG) was chartered by ICANN's Board to develop and report on feasible methods, if any, that would enable the introduction of a limited number of non-contentious IDN ccTLDs, in a timely manner that ensures the continued security and stability of the Internet while a comprehensive long-term IDN ccTLD policy is being developed. On 1 February 2008, the IDNC WG posted a "Discussion Draft of the Initial Report" (DDIR) for public comment and input from the ICANN community. The DDIR clarified the relationship between the "fast track" process and the broader long-term process IDNccPDP (the ccNSO Policy Development Process on IDN ccTLDs) and also identified the mechanisms for the selection of an IDN ccTLD and an IDN ccTLD manager. The ccNSO Council determined that those mechanisms were to be developed within the parameters of: • The overarching requirement to preserve the security and stability of the DNS; • Compliance with the IDNA protocols; • Input and advice from the technical community with respect to the implementation of IDNs; and • Current practices for the delegation of ccTLDs, which include the current IANA practices. A public workshop was held 11 February in New Delhi, India to discuss the DDIR and a comment period was opened on that document. The IDNC WG produced a first draft of the IDNC WG Methodology in the form of an Interim Report that has also been made available for public comment. Discussions on the methodology were held at the ICANN Regional Meeting in Dubai, UAE (1-3 April 2008) and public comments on the methodology were open until 25 April 2008. Recent Developments: The IDNC WG has recently created several new opportunities for discussion of the WG methodology including at the RIPE meeting in Berlin, the APTLD meeting Kula Lumpur and the LAAC TLD meeting in Bahia, Brasil. The IDNC WG also conducted several conference calls during May, and a face-to face meeting in Geneva, Switzerland with remote participation on 12 May. Next Steps: A Draft Final Report, including recommendations of the IDNC WG will be published shortly for discussion at the ICANN Paris meeting. More Information: • Public Comments Requested on Initial Draft Fast-Track Mechanism (<http://icann.org/announcements/announcement-01feb08.htm>) • Draft Methodology for Fast Track (<http://ccnso.icann.org/workinggroups/idnc-proposed-methodology-31mar08.pdf> ) • Public Comments on the Discussion Draft of the Initial Report (<http://www.icann.org/public_comment/#dd-idn-cctld-ft>) Staff Contact: Bart Boswinkel, Senior Policy Advisor 7b. ccNSO Comprehensive IDNccTLD Policy Development Background: In parallel to considerations of a "fast track" approach, the ccNSO Council has initiated a comprehensive long-term policy development process for IDNccTLDs (referred to as the IDNccPDP). At its meeting in October 2007, the ccNSO Council resolved to call for an Issues Report to examine the need for an IDNccPDP to consider: • Whether Article IX of the ICANN bylaws applies to IDN ccTLDs associated with the ISO 3166-1 two letter codes, and if it does not then to establish if Article IX should apply. • Whether the ccNSO should launch a PDP to develop the policy for the selection and delegation of IDN ccTLDs associated with the ISO 3166-1 two-letter codes. The Council formally requested that Issues Report on 19 December 2007 and directed ICANN Staff to identify policies, procedures, and/or by-laws that should be reviewed and, as necessary revised, in connection with the development and implementation of any IDN ccTLD policy – including efforts designed to address the proposed fast-track concept. The GNSO and several other parties submitted comments regarding the proposal to set a comprehensive long-term policy development process for IDNccTLDs (referred to above as the IDNccPDP). An Issues Report will be submitted to the ccNSO Council and will form the basis for the Council's decision on whether or not to formally initiate the IDNccPDP. Next Steps: Comments regarding the preparation of an Issues Report on the IDNccPDP continue to be evaluated. More Information: IDNccPDP Announcement: (<http://www.icann.org/announcements/announcement-19dec07.htm>) Staff Contact: Bart Boswinkel, Senior Policy Advisor 8. MULTIPLE ENTITIES – ICANN'S GEOGRAPHIC REGIONS Background: An ICANN Board resolution in 2000 directed Staff to assign countries to geographic regions on the basis of the United Nations Statistics Division's current classifications, and introduced the concept of "citizenship" in relation to the definition of ICANN Geographic Regions. The ICANN Geographical Regions were originally created to ensure regional diversity in the composition of the ICANN Board and were subsequently expanded in various ways to apply to the GNSO, ALAC and ccNSO. The ICANN Bylaws define five geographic regions as Africa, North America, Latin America/Caribbean, Asia/Australia/Pacific and Europe -- and also expand the concept that "persons from an area that is not a country should be grouped together with the country of citizenship for that area" so that the area or territory itself was similarly allocated to the region of the "mother country." Over time, the ccNSO has developed concerns about the Geographic Regions and related representational issues. The ccNSO Council passed a resolution recommending that the ICANN Board appoint a community-wide working group to further study and review the issues related to the definition of the ICANN Geographic Regions, to consult with all stakeholders and submit proposals to the Board to resolve the issues relating to the current definition of the ICANN Geographic Regions. Recent Developments: The ICANN Board determined that because any change to ICANN Geographic Regions could have wide-spread effect in ICANN, the views of other Supporting Organizations and Advisory Committees should be sought by the Board. At its 2 November 2007 meeting in Los Angeles, the Board asked the ICANN community, including the GNSO, ccNSO, ASO, GAC, and ALAC, to provide the ICANN Staff with input on the ccNSO Council's resolution relating to ICANN's Geographic Regions. The Board directed ICANN Staff to summarize and analyze this input and prepare a report for consideration by the Board. Next Steps: ICANN Staff has begun soliciting input from all Supporting Organizations and Advisory Committees. The results will be summarized and reported to the Board for consideration. More Information: • ccNSO Working Group Report and Recommendations (http://ccnso.icann.org/workinggroups/ccnso-final-report-regions-wg-240907.p…) • 2 November 2007 ICANN Board Resolution (http://www.icann.org/minutes/resolutions-02nov07.htm#_Toc55609368) Staff Contact: Robert Hoggarth, Senior Policy Director 9. CCNSO -- INTERNAL IMPROVEMENT PLANS CONTINUE Background: The ccNSO Council has initiated efforts to improve its work plans, administrative procedures and communications tools. As a result of a Council workshop held at the ICANN New Delhi meeting, a working group of the Council was established to propose administrative procedures for the ccNSO. The Council also approved creation of a new "authoritative" ccNSO email list. In addition, the ccNSO has been conducting a participation survey to understand better why ccTLDs do or do not participate in ccNSO meetings, and has developed a leaflet on participation both in the ccNSO and Regional Organisations. Recent Developments: The ccNSO Council is internally reviewing the proposed new administrative procedures before they are sent out to ccNSO members for discussion at the ICANN Paris meeting. The procedures include: • Guidelines for ccNSO Council meetings; • Guidelines for ccNSO general meetings; • Setting up Working Groups and templates to assist drafting of charters; • Guidelines for Selection of Board seats 11 and 12, and election of ccNSO Council members by the ccNSO; • Guidelines for liaisons and observers with other ICANN related entities. More Information: • ccNSO <http://www.ccnso.icann.org/> • ccTLD Community Email List < http://www.ccnso.icann.org/about/charter-cctld-community-list.pdf> • ccNSO Participation Working Group <www.ccnso.icann.org/workinggroups/participationwg.htm> • ccNSO Administrative Processes Working Group: <http://www.ccnso.icann.org/workinggroups/processeswg.htm> Staff Contacts: Bart Boswinkel, Senior Policy Advisor and Gabriella Schittek, ccNSO Secretariat 10. AT-LARGE: NEW GROUPS JOIN THE COMMUNITY In May, At-Large welcomed three new Internet end-user groups (referred to as 'At-Large Structures' or 'ALSs') to the At-Large community: • Associación de Derecho Informático de Argentina (ADIAR): From Argentina, ADIAR is a group of legal professionals oriented towards Information Technology Law. • Pacific Community Networks Association (PCNA): From Canada, PCNA is one of several ALSs that work at the grassroots level helping individuals, especially in remote areas, get connected to the Internet and learn to use it effectively. • Association for Technology and Internet (APTI): From Romania, APTI's mission is to promote "the fair and lawful use of information society service,s and aims at protecting the Internet users against illegal activities and abuses that may occur on the Internet." There are currently 101 total ALSs from every geographic region. Three additional applications are currently being reviewed. More information: For information about joining ICANN's At-Large community, visit http://www.atlarge.icann.org/. Staff Contact: Nick Ashton-Hart, Director for At-Large 11. AT-LARGE: THE ROAD TO PARIS At-Large has been actively preparing for meetings in Paris with the Governmental Advisory Committee (GAC), the ccNSO Council, and the GNSO Council respectively. As part of that effort the At-Large Staff organised a series of briefings in early June on New GTLDs, the FY 09 Operating Plan and Budget, and Fast Flux Hosting. At the ICANN Paris meeting, At-Large will receive additional briefings, and also will consider proposed At-Large input on new gTLDs, among other items. The At-Large New GTLDs Policy Working Group has been tasked with drafting input from the community on implementation planning for new GTLDs. Also in Paris, the European Regional At-Large Organization (EURALO) will conduct its first General Assembly. It is expected to set a work plan for the coming year, as well as conduct nominations for the open ALAC seat recently vacated by the resignation of Veronica Cretu of Moldova. More information: Full schedule details for At-Large at the ICANN Paris meeting may be found at https://st.icann.org/alac/index.cgi?paris_meeting. Staff Contact: Nick Ashton-Hart, Director for At-Large 12. AT-LARGE: BOARD LIAISON NOMINATIONS OPEN Nominations are now open for ALAC's ICANN Board Liaison for the term beginning at the end of the Cairo ICANN meeting. Current nominees include the incumbent, Wendy Seltzer, and Beau Brendler of Consumer Reports. Nominations close on the eve of the Paris meeting. Staff Contact: Nick Ashton-Hart, Director for At-Large 13. ASO AC - GLOBAL POLICY PROPOSALS (ASNs, IPv4) Background: Two significant global policy proposals on addressing matters continue to be actively studied and discussed within the addressing community. If they are (1) adopted by all Regional Internet Registries (RIRs), (2) verified by the Address Supporting Organization (ASO), and (3) subsequently ratified by the ICANN Board, the policies will govern the allocation of Internet addresses from the Internet Assigned Numbers Authority (IANA) to the RIRs. The two current proposals are described below. Recent Developments – Autonomous System Numbers (ASNs): ASNs are addresses used in addition to IP addresses for Internet routing. A new global policy proposal for ASNs would formalize the current procedure for allocation of ASNs and provides a policy basis for the transition from 2-byte (16 bits) to 4-byte (32 bits) ASNs. The final transition step is now foreseen for 31 December 2009, after which date the distinction between 2- and 4-byte ASNs will cease and all ASNs will be regarded as of 4-byte length, by appending initial zeroes to those of 2-byte original length. Next Steps: This new 4-byte proposal has been adopted by all RIRs. It will be forwarded to the ICANN Board for ratification by the ASO Address Council (ASO AC) after the Council has verified that each RIR's procedural steps have been duly followed. The final text has been submitted from the NRO Executive Committee to the ASO AC and a decision to forward the proposal to the ICANN Board is expected at the next ASO AC call on 12 June. Recent Developments – Remaining IPv4 address space: The IANA pool of unallocated IPv4 address blocks continues to be depleted. As previously announced, a new global policy has been proposed to allocate the remaining address blocks once a given threshold is triggered. The text of the proposed policy essentially recommends that when there are five /8 blocks remaining in the IANA pool, one remaining block will be allocated to each RIR. The proposal has been discussed at all the RIR meetings (APNIC, ARIN, RIPE, LACNIC and AfriNIC) during the last four (4) months. Next Steps: Discussions within RIPE and APNIC are not conclusive regarding the level of support for the proposal at this stage and may not be so until the next RIPE and APNIC meetings later in 2008. More information: • Background Report ASN <http://www.icann.org/announcements/proposal-asn-report-29nov07.htm> • Background Report IPV4 <http://www.icann.org/announcements/proposal-ipv4-report-29nov07.htm> Staff Contact: Olof Nordling, Manager Policy Development Coordination 14. SSAC -- DNSSEC-CAPABLE NAME SERVER SURVEY Background: SSAC has begun a survey to determine the availability of DNSSEC features among commercial, open source, and publicly available name server software releases. A public notice web page (SAC030) announcing the survey has been published, http://www.icann.org/committees/security/sac030.htm. The set of survey questions were sent to approximately 40 software vendors and developers. Recent Developments: SSAC has received survey responses from about 25% of the vendors and products surveyed. The majority of responses come from commercial vendors. Soliciting survey responses from the Open Source community has been more difficult. The initial set of responses is being reviewed and will be published in early June. Next Steps: A survey summary will be presented at the ICANN Paris meeting (pending sufficient responses). More Information: SSAC <http://www.icann.org/committees/security/> Staff Contact: Dave Piscitello, Senior Security Technologist 15. SSAC – ANTI PHISHING ACTIVITIES Background: The term "phishing" has been used to describe criminal and fraudulent attempts by bad actors to acquire sensitive private information, such as usernames, passwords and credit card details, by masquerading as trustworthy entities in an electronic communication. Recent Developments: Following a one-month opportunity offered to the registrar community to review and comment, SAC028, "Registrar Impersonation in Phishing Attacks," was published 26 May 2008. The document was warmly received by the Anti Phishing Working Group, which hopes to factor some of SAC028's findings into the fast flux issues identification work being done for the GNSO. ICANN Staff has also reviewed a new report that surveys and analyzes data related to phishing attacks during 2007. Of particular interest is the report's analysis of phishing distribution across ccTLDs and a rise in the use of subdomains for phishing attacks. This report and a second report presented at the HTCIA (High Technology Crime Investigation Association) are provide valuable insights into the spam and phishing "hot spots." Using spam data collected since 2005 the HTCIA report concludes that 90% of illegal web sites are hosted at domains registered through just 20 registrars. Staff suspects that public outcries to "take down" the 20 registrars and revise future registrar agreements to require registrars to do more to see that domains are used for legitimate purposes (or strengthen clauses in their UTAs) are forthcoming. In parallel, the Staff is continuing its work with phishing investigators and ICANN's compliance officers to exert pressure on one registrar (yes, among the 20) by issuing a steady stream of WHOIS inaccuracy claims. More Information: • SAC028, "Registrar Impersonation in Phishing Attacks," 26 May 2008. See http://icann.org/committees/security/ssac-documents.htm • Global Phishing Survey 2007 (<http://www.apwg.org/reports/APWG_GlobalPhishingSurvey2007.pdf.>) Staff Contact: Dave Piscitello, Senior Security Technologist # # #

1 0

LAST CHANCE!!!: Survey on Phishing Issues
by Gabriella Schittek June 9, 2008

June 9, 2008

Dear Councillors, This is the last chance for you to reply to the Phishing survey - I will start with the evaluations by the end of this week, so please, can I have the replies by Wednesday, 11th June. The results of the survey will be presented at the Paris meeting. As the response-rate has been very poor, every reply would help improving the statistics. The survey was initiated by the council at the New Delhi meeting (see http://www.ccnso.icann.org/meetings/newdelhi/newdelhi-council-minutes-13feb…) - i.e. - it would look odd not having more councillors replying to it! The Council ccTLDs which have already replied to this survey are: .au, .cl, .eg, .jp, .mx, .pr, .tt Please, find the survey below. Thanks, Gabi -- Anti-Phishing Survey 1) Are you aware of any phishing activity using domain names under your ccTLD? YES/NO 1.1) If YES - Do you consider the phishing activity under your domain large-scale? YES/NO 2) Who informs you about a phishing incident? Specially dedicated anti-phishing agents Government agents Internet engineering bodies CERTS Affected companies Registry Registrar Registrants Other (please, specify) 3) Do you have policies in place to suspend domain names used for phishing purposes? YES/NO 3.1) If YES: Are they published? 3.2) If you have policies in place: What documentation/proof of abuse is required? 3.3) If you have policies in place: Under what circumstances will your registry suspend a domain name? 3.4) If you don't have policies in place: Why? Haven't thought about it There is no phishing problem under our ccTLD There are government agencies responsible for that The Registry decided not to, as it has to do with content and use of the domain name We are unable to implement such policies because of the terms of our agreement with the sponsoring organisation for the ccTLD. Other (please, specify) 4) Who decides that a domain has been used for phishing? Registry External Committee Registrar Court Other (please, specify) 5) Do you notify the registrant of the pending suspension? YES/NO 5.1) If YES: How do you notify the registrant? Per email Per post Per telephone Other (please specify) 5.2) Do you provide a grace period to resolve the issue? YES/NO 5.3) How much time does it take, on average, to notify the registrant? 1 day or less 1 - 3 days 3 days - 1 week 1 - 3 weeks 3 weeks or more 6) How much time does it take from when a complainant starts the procedure, until final elimination/suspension of the domain name? (If foreseen by the procedure) 1 day or less 1 - 3 days 3 days - 1 week 1 - 3 weeks 3 weeks or more 7) Please, describe the full procedure the complainant has to follow when dealing with a phishing domain complaint: 8) What is the most efficient way to solve the phishing incidents in your opinion? Deletion of the domain name Suspension of the domain name Shutting down the web site (through the hosting provider) Send a warning to the phisher Criminal prosecution Other (please, specify) 9) Would you like the ccNSO to continue to undertake initiatives regarding anti-phishing? YES/NO 9.1. If YES, which of the following activities should the ccNSO undertake in your view: - Providing exchange of information on Phishing issues - Develop Best Practices on Phishing issues - Develop global policies on Phishing issues - Other (please, specify)

3 2

Re: [ccnso-council] LAST CHANCE!!!: Survey on Phishing Issues
by Drazek, Keith June 9, 2008

June 9, 2008

Sorry for the delay. .us will submit our response shortly. ----- Original Message ----- From: owner-ccnso-council(a)icann.org <owner-ccnso-council(a)icann.org> To: 'Gabriella Schittek' <gabriella.schittek(a)icann.org>; ccnso-council(a)icann.org <ccnso-council(a)icann.org> Sent: Mon Jun 09 19:06:55 2008 Subject: RE: [ccnso-council] LAST CHANCE!!!: Survey on Phishing Issues All, Please do reply to the survey. It doesn't look great if even the council doesn’t respond to a survey that we initiated. Cheers, Chris Disspain CEO - auDA Australia's Domain Name Administrator ceo(a)auda.org.au www.auda.org.au Important Notice - This email may contain information which is confidential and/or subject to legal privilege, and is intended for the use of the named addressee only. If you are not the intended recipient, you must not use, disclose or copy any part of this email. If you have received this email by mistake, please notify the sender and delete this message immediately. Please consider the environment before printing this email. > -----Original Message----- > From: owner-ccnso-council(a)icann.org [mailto:owner-ccnso-council@icann.org] On Behalf Of Gabriella Schittek > Sent: Monday, 9 June 2008 21:53 > To: ccnso-council(a)icann.org > Subject: [ccnso-council] LAST CHANCE!!!: Survey on Phishing Issues > > > Dear Councillors, > > This is the last chance for you to reply to the Phishing survey - I will start with the evaluations by the end of this > week, so please, can I have the replies by Wednesday, 11th June. The results of the survey will be presented at the > Paris meeting. As the response-rate has been very poor, every reply would help improving the statistics. The survey > was initiated by the council at the New Delhi meeting (see http://www.ccnso.icann.org/meetings/newdelhi/newdelhi- > council-minutes-13feb08.pdf) - i.e. - it would look odd not having more councillors replying to it! > > The Council ccTLDs which have already replied to this survey are: > .au, .cl, .eg, .jp, .mx, .pr, .tt > > Please, find the survey below. > > Thanks, > > Gabi > > > -- > > Anti-Phishing Survey > > 1) Are you aware of any phishing activity using domain names under your > ccTLD? > > YES/NO > > 1.1) If YES - Do you consider the phishing activity under your domain > large-scale? > > YES/NO > > 2) Who informs you about a phishing incident? > > Specially dedicated anti-phishing agents > Government agents > Internet engineering bodies > CERTS > Affected companies > Registry > Registrar > Registrants > Other (please, specify) > > 3) Do you have policies in place to suspend domain names used for phishing > purposes? > > YES/NO > > 3.1) If YES: Are they published? > > 3.2) If you have policies in place: What documentation/proof of abuse is > required? > > 3.3) If you have policies in place: Under what circumstances will your > registry suspend a domain name? > > 3.4) If you don't have policies in place: Why? > > Haven't thought about it > There is no phishing problem under our ccTLD > There are government agencies responsible for that > The Registry decided not to, as it has to do with content and use of the > domain name > We are unable to implement such policies because of the terms of our > agreement with the sponsoring organisation for the ccTLD. > Other (please, specify) > > 4) Who decides that a domain has been used for phishing? > > Registry > External Committee > Registrar > Court > Other (please, specify) > 5) Do you notify the registrant of the pending suspension? > > YES/NO > > 5.1) If YES: How do you notify the registrant? > > Per email > Per post > Per telephone > Other (please specify) > > 5.2) Do you provide a grace period to resolve the issue? > > YES/NO > > 5.3) How much time does it take, on average, to notify the registrant? > > 1 day or less > 1 - 3 days > 3 days - 1 week > 1 - 3 weeks > 3 weeks or more > > 6) How much time does it take from when a complainant starts the procedure, > until final elimination/suspension of the domain name? (If foreseen by the > procedure) > > 1 day or less > 1 - 3 days > 3 days - 1 week > 1 - 3 weeks > 3 weeks or more > > 7) Please, describe the full procedure the complainant has to follow when > dealing with a phishing domain complaint: > > 8) What is the most efficient way to solve the phishing incidents in your > opinion? > > Deletion of the domain name > Suspension of the domain name > Shutting down the web site (through the hosting provider) > Send a warning to the phisher > Criminal prosecution > Other (please, specify) > > 9) Would you like the ccNSO to continue to undertake initiatives regarding > anti-phishing? > > YES/NO > > > 9.1. If YES, which of the following activities should the ccNSO undertake in > your view: > > - Providing exchange of information on Phishing issues > - Develop Best Practices on Phishing issues > - Develop global policies on Phishing issues > - Other (please, specify) >

1 0

Draft Agenda Council Call 16th June
by Gabriella Schittek June 6, 2008

June 6, 2008

Dear all, Below is the draft agenda for the next council call on the 16th June. Should you have any additions, questions or amendments, please let me know as soon as possible. Kind regards, Gabi Draft Agenda Council Call 16th June 2008 1) Review of Last Minutes and Actions 2) Readiness for Paris - Agenda ccNSO meeting - Technical Workshop - Administrative Workshop - IDN Workshop - ccNSO/gNSO meeting - ccNSO/ALAC meeting 3) ICANN Budget - Call 5 June 2008 4) Working Group Update - GAC Working Group - IANA Working Group - IDNC Working Group - Joint ccNSO/GAC IDN Working Group - Participation Working Group - Tech Working Group - Processes Working Group 5) McAfee Report 6) AOB

1 0

joint ccNSO/gNSO meeting Thursday 26th June
by Gabriella Schittek June 5, 2008

June 5, 2008

Dear Councillors, As discussed, there will be a joint ccNSO/gNSO meeting on Thursday, 26th June. The meeting starts at 12.00 and finishes at 14.15 (in the meeting room "Rodin"). A small lunch will be provided. Could the councillors who plan to attend this meeting please let me know by this Friday, 6th June, whether you plan to attend. For those of you who can't make it to the Paris meeting in person - a telephone line will be set up for the ccNSO/gNSO meeting. Please, also let me know if you plan to attend per telephone by this Friday! Kind regards, Gabi

6 5