May 2005 - council - lists.icann.org

Draft Agenda for GNSO Council teleconference - Thursday 12 May 2005
by Bruce Tonkin July 26, 2005

July 26, 2005

Draft Agenda for Council meeting Thursday 12 May 2005 Coordinated Universal Time UTC 12:00 (5:00 Los Angeles, 8:00 Washington DC, 14:00 Brussels, 22:00 Melbourne) Item 1: Approval of minutes Item 2: Approval of new terms of reference for combined WHOIS task force, and approval of membership and voting rules Item 3: Process for use by ICANN in considering requests for consent and related contractual amendments to allow changes in the architecture operation of a gTLD registry. - review revised preliminary report for publication for public comment Item 4: Transfers policy report - discuss staff report, and provide guidance for the 6 monthly review Item 5: Update on ICANN strategic and operational planning process Item 6: Any other business

3 2

Reminder: Registry Approval Process Comments due May 27, 2005
by GNSO.SECRETARIAT＠GNSO.ICANN.ORG June 2, 2005

June 2, 2005

-------------------------------------------------------------------------------- [To council[at]gnso.icann.org] REMINDER Please submit your comments by COB on May 27, 2005 to: council[at]gnso.icann.org or reg-com[at]gnso.icann.org mailing lists. The report and the marked up copy can be viewed at the urls below: Second draft of Registry Approval Process http://www.gnso.icann.org/mailing-lists/archives/reg-com/msg00032.html Marked up copy of Second draft of Registry Approval Process http://www.gnso.icann.org/mailing-lists/archives/reg-com/msg00033.html Thank you. Kind regards, Glen de Saint Géry GNSO Secretariat - ICANN gnso.secretariat[at]gnso.icann.org http://gnso.icann.org

4 3

Fifth draft of WHOIS terms of reference
by Bruce Tonkin May 31, 2005

May 31, 2005

Hello All, The draft below incorporates a specific reference to the current work on resolving conflict between national laws and ICANN, as suggested by Maria Farrell. Regards, Bruce Fifth Draft of Terms of Reference for WHOIS task force The mission of The Internet Corporation for Assigned Names and Numbers ("ICANN") is to coordinate, at the overall level, the global Internet's systems of unique identifiers, and in particular to ensure the stable and secure operation of the Internet's unique identifier systems. In performing this mission, ICANN's bylaws set out 11 core values to guide its decisions and actions. Any ICANN body making a recommendation or decision shall exercise its judgment to determine which of these core values are most relevant and how they apply to the specific circumstances of the case at hand, and to determine, if necessary, an appropriate and defensible balance among competing values. ICANN has agreements with gTLD registrars and gTLD registries that require the provision of a WHOIS service via three mechanisms: port-43, web based access, and bulk access. The agreements also require a Registered Name Holder to provide to a Registrar accurate and reliable contact details and promptly correct and update them during the term of the Registered Name registration, including: the full name, postal address, e-mail address, voice telephone number, and fax number if available of the Registered Name Holder; name of authorized person for contact purposes in the case of an Registered Name Holder that is an organization, association, or corporation; the name, postal address, e-mail address, voice telephone number, and (where available) fax number of the technical contact for the Registered Name; and the name, postal address, e-mail address, voice telephone number, and (where available) fax number of the administrative contact for the Registered Name. The contact information must be adequate to facilitate timely resolution of any problems that arise in connection with the Registered Name. A registrar is required in the Registrar Accreditation Agreement (RAA) to take reasonable precautions to protect Personal Data from loss, misuse, unauthorized access or disclosure, alteration, or destruction. The goal of the WHOIS task force is to improve the effectiveness of the WHOIS service in maintaining the stability and security of the Internet's unique identifier systems, whilst taking into account where appropriate the need to ensure privacy protection for the Personal Data of natural persons that may be Registered Name Holders, the authorised representative for contact purposes of a Register Name Holder, or the administrative or technical contact for a domain name. Tasks: (1) Define the purpose of the WHOIS service in the context of ICANN's mission and relevant core values, international and national laws protecting privacy of natural persons, international and national laws that relate specifically to the WHOIS service, and the changing nature of Registered Name Holders. (2) Define the purpose of the Registered Name Holder, technical, and administrative contacts, in the context of the purpose of WHOIS, and the purpose for which the data was collected. Use the relevant definitions from Exhibit C of the Transfers Task force report as a starting point (from http://www.icann.org/gnso/transfers-tf/report-exhc-12feb03.htm) "Contact: Contacts are individuals or entities associated with domain name records. Typically, third parties with specific inquiries or concerns will use contact records to determine who should act upon specific issues related to a domain name record. There are typically three of these contact types associated with a domain name record, the Administrative contact, the Billing contact and the Technical contact. Contact, Administrative: The administrative contact is an individual, role or organization authorized to interact with the Registry or Registrar on behalf of the Domain Holder. The administrative contact should be able to answer non-technical questions about the domain name's registration and the Domain Holder. In all cases, the Administrative Contact is viewed as the authoritative point of contact for the domain name, second only to the Domain Holder. Contact, Billing: The billing contact is the individual, role or organization designated to receive the invoice for domain name registration and re-registration fees. Contact, Technical: The technical contact is the individual, role or organization that is responsible for the technical operations of the delegated zone. This contact likely maintains the domain name server(s) for the domain. The technical contact should be able to answer technical questions about the domain name, the delegated zone and work with technically oriented people in other zones to solve technical problems that affect the domain name and/or zone. Domain Holder: The individual or organization that registers a specific domain name. This individual or organization holds the right to use that specific domain name for a specified period of time, provided certain conditions are met and the registration fees are paid. This person or organization is the "legal entity" bound by the terms of the relevant service agreement with the Registry operator for the TLD in question." (3) Determine what data collected should be available for public access in the context of the purpose of WHOIS. Determine how to access data that is not available for public access. The current elements that must be displayed by a registrar are: - The name of the Registered Name; - The names of the primary nameserver and secondary nameserver(s) for the Registered Name; - The identity of Registrar (which may be provided through Registrar's website); - The original creation date of the registration; - The expiration date of the registration; - The name and postal address of the Registered Name Holder; - The name, postal address, e-mail address, voice telephone number, and (where available) fax number of the technical contact for the Registered Name; and - The name, postal address, e-mail address, voice telephone number, and (where available) fax number of the administrative contact for the Registered Name. (4) Determine how to improve the process for notifying a registrar of inaccurate WHOIS data, and the process for investigating and correcting inaccurate data. Currently a registrar "shall, upon notification by any person of an inaccuracy in the contact information associated with a Registered Name sponsored by Registrar, take reasonable steps to investigate that claimed inaccuracy. In the event Registrar learns of inaccurate contact information associated with a Registered Name it sponsors, it shall take reasonable steps to correct that inaccuracy." (5) Determine how to resolve differences between a Registered Name Holder's, gTLD Registrar's, or gTLD Registry's obligation to abide by all applicable laws and governmental regulations that relate to the WHOIS service, as well as the obligation to abide by the terms of the agreements with ICANN that relate to the WHOIS service. [Note this task refers to the current work in the WHOIS task force called 'Recommendation 2', A Procedure for conflicts, when there are conflicts between a registrar's of registry's legal obligations under local privacy laws and their contractual obligations to ICANN.]

2 1

RE: [council] [Fwd: Re: [alac] Draft Terms of Reference for Whois Task Force]
by Bruce Tonkin May 30, 2005

May 30, 2005

Hello Bret, Thanks for passing on the comment from John Levine. Note that task 3 includes the requirement: "Determine how to access data that is not available for public access." > > This concern from ALAC member John Levine seems like a fair > subject for inclusion in the terms of reference. > Specifically, could we have a discussion about what > constitutes abusive v. legitimate access to a registrar's > whois data? and avenues for users claiming to be legitimate > users to follow when they want/need whois access? > The starting point is to first determine the purpose for which the data is collected, the purpose of the public display of this data via WHOIS, and determine what is available for public access. Abuse in simple terms would be using the data for purposes other than which it was collected. Registrars implement various mechanisms to meet their obligations to ensure they take reasonable precautions to protect Personal Data from loss, misuse, unauthorized access or disclosure, alteration, or destruction. The mechanisms should not stop a user accessing the public data for the purpose for which it was collected and displayed. Regards, Bruce

1 0

ICANN publishes revised Telcordia report on .NET RFP
by GNSO.SECRETARIAT＠GNSO.ICANN.ORG May 30, 2005

May 30, 2005

[To:council[at]gnso.icann.org; ga[at]gnso.icann.org] [To:announce[at]gnso.icann.org;liaison6c[at]gnso.icann.org] http://www.icann.org/ FYI, ICANN has published the Revised Telcordia Report on .NET RFP Evaluation Final Report 27 May 2005 http://www.icann.org/tlds/dotnet-reassignment/net-rfp-finalreport-issue4-27… -- Glen de Saint Géry GNSO Secretariat - ICANN gnso.secretariat[at]gnso.icann.org http://gnso.icann.org

2 1

[Fwd: Re: [alac] Draft Terms of Reference for Whois Task Force]
by Bret Fausett May 26, 2005

May 26, 2005

Councilors, This concern from ALAC member John Levine seems like a fair subject for inclusion in the terms of reference. Specifically, could we have a discussion about what constitutes abusive v. legitimate access to a registrar's whois data? and avenues for users claiming to be legitimate users to follow when they want/need whois access? Bret -------- Original Message -------- Subject: Re: [alac] Draft Terms of Reference for Whois Task Force Date: 24 May 2005 22:46:31 -0400 From: John R Levine <johnl(a)iecc.com> To: Bret Fausett <bfausett(a)internet.law.pro> CC: ALAC <alac(a)icann.org> References: <4293D812.2000307(a)internet.law.pro> I don't know whether this is to the current negotiation, but I'd like to see something about ensuring WHOIS access to legitimate users. A nearby ISP and I provide secondary DNS service to each other, a very typical setup. Since I am a faster perl programmer than he is, I wrote a little program that runs every week and figures out which of his domains are nearing expiration and which have expired, by checking the WHOIS data. Its use of whois is quite moderate since it remembers the results from last time and only rechecks domains that are close to their expiration date, and the total number of domains we're talking about here is small, about 1100, spread over many registrars. Nonetheless, a while ago a computer at Network Solutions decided that I was abusing their whois server and blocked access from my entire network. I could deal with that if there were some way to get unblocked, but as far as I can tell there isn't, since they've never responded to any of my attempts to contact them. I realize that whois scraping is a problem, but it's hard to see how the modest number of lookups I've been doing would set off someone's scrape-o-meter, and it stinks that there's no way to correct errors. Regards, John Levine, johnl(a)iecc.com, Primary Perpetrator of "The Internet for Dummies", Information Superhighwayman wanna-be, http://www.johnlevine.com, Mayor "I shook hands with Senators Dole and Inouye," said Tom, disarmingly.

3 4

Final Whois Task Force report on Recommendation 1 - improving notification and consent
by Bruce Tonkin May 26, 2005

May 26, 2005

________________________________ From: Maria Farrell [mailto:maria.farrell@icann.org] Sent: Thursday, May 26, 2005 9:42 PM To: 'owner-council(a)gnso.icann.org' Subject: Final Whois Task Force report on Recommendation 1 - improving notification and consent Dear all, Attached is the Final Task Force Report on recommendations for improving notification and consent for the use of contact data in the Whois system. I am submitting this report to you on behalf of the Combined WHOIS Task Force (1, 2, 3) of the GNSO Council. The Combined Whois Task Force has continued the work of Task Force 2 whose terms of reference (29 October 2003) included the task of determining; "What is the best way to inform registrants of what information about themselves is made publicly available when they register a domain name and ... and receive notification of its use?" In addition, during the combined task force's discussions, a number of implementation issues were identified as possibly appropriate for consideration by an implementation group, if the Council chooses to form such a group. This list is attached with the caveats that the issues are not agreed on by everyone in the task force, are all worthy of further consideration and the list is not exhaustive. Best regards, Maria

1 0

Revised Draft Agenda for GNSO Council teleconference - Thursday 2 June 2005
by Bruce Tonkin May 26, 2005

May 26, 2005

Hello All, I have added a separate agenda item to consider the final report from the WHOIS task force on improving notification and consent for the use of contact data in the Whois system. Regards, Bruce Tonkin Revised Draft Agenda for Council meeting Thursday 2 June 2005 Coordinated Universal Time UTC 12:00 (5:00 Los Angeles, 8:00 Washington DC, 14:00 Brussels, 22:00 Melbourne) Item 1: Approval of minutes Item 2: Staff report - current areas of work - WHOIS, new gtlds, transfers, IDNs - Update on .net agreement and new sponsored agreements - update on strategic/operational planning process - status of meeting agenda for Luxembourg Item 3: Consideration of final report from the WHOIS task force with respect to improving notification and consent for the use of contact data in the Whois system. Item 4: Approval of new terms of reference for combined WHOIS task force, and approval of membership and voting rules Item 5: Process for use by ICANN in considering requests for consent and related contractual amendments to allow changes in the architecture operation of a gTLD registry. - update Item 6: Transfers policy staff report - update Item 7: new gtlds - discuss next steps for staff to begin to develop issues reports Item 8: internationalised domain names - update Item 9: Comments on 2005/2006 budget/operational plan Item 10: Any other business

1 0

RE: [council] Fourth draft of WHOIS task force terms of reference
by Bruce Tonkin May 26, 2005

May 26, 2005

Hello Maria, > > I have two editing suggestions regarding the terms of > reference. One is to tighten or footnote the language about > the Internet's unique identifiers in the first paragraph so > that it can't be interpreted as including other unique > identifiers such as IP numbers. I know the text in this > draft is there to avoid opening up other debates, so I will > try to find some existing language that describes ICANN's > role. Failing that, I'll suggest a footnote to narrow the > scope of the term. > The statement of mission at the beginning of the terms of reference is simply a factual statement of ICANN's mission from the bylaws. The remaining text of the terms of reference define the tasks of the task force. I will review the remaining text to make clear that this task force is looking at gTLD domain name WHOIS, rather than the use of the WHOIS service/protocol with respect to other identifiers. Regards, Bruce

1 0

Fourth draft of WHOIS task force terms of reference
by Bruce Tonkin May 26, 2005

May 26, 2005

Hello All, Below is a fourth draft of the WHOIS task force terms of reference. I reviewed the input from Marilyn Cade, Niklas Lagergren, and Tim Ruiz (on the WHOIS mailing list). The main changes are: (1) Added a second paragraph that reflects the need to consider ICANN core values using text extracted from Article 1,Section 2 of the ICANN Bylaws (http://www.icann.org/general/bylaws.htm#I) (2) In the third paragraph I extracted the full text of the obligation of the Registered Name Holder to provide data from clause 3.7.7.1 of the Registrars Accreditation Agreement (see http://www.icann.org/registrars/ra-agreement-17may01.htm ) (3) In task 1, I have also added the need to consider laws that relate specifically to WHOIS For example, from searching at: http://thomas.loc.gov, I have identified the U.S. Fraudulent Online Identity Sanctions Act 2004, which seems to provide penalties in the case of a Registered Name Holder doing something wrong with the domain, and at the same time providing materially false contact information to a domain name registrar, domain name registry, or other domain name registration authority. Note however this Act doesn't specifically mention the WHOIS service. The current requirement for Registered Name Holders to provide correct information is consistent with this Act. The various privacy laws around the world would seem to directly apply to WHOIS with respect to Personal Data. If members of the task force are aware of specific laws that related to WHOIS then they can post them to the list, and advise ICANN staff. I believe that in some countries, parties selling services on the Internet must display their contact information on the website (and presumably in emails) that is used to provide the service as part of consumer protection laws. These laws may not have any requirement with respect to WHOIS. (4) In task 3, I added the definition of "Domain Holder" from the Transfers Policy report. (5) I added a new task 5, that relates to the work on conflicts between the ICANN agreement and local laws. With respect to further changes to task 4 relating to accuracy, I noted that Niklas wished to include work on preventing the initial collection of inaccurate data. Marilyn also referenced a provision in the registrars accreditation agreement that states that if a consensus policy is created in this area, that registrars must comply (which is of course redundant as registrars have to comply with any consensus policy). I understand that this issue has been discussed at length within the previous WHOIS Task Force 3, and that there did not seem to be a chance in the short term of reaching consensus on further work on improving data collection. In the last few meetings of the WHOIS Task Force 3, there did seem to me to be willingness to improve the process of reporting, and responding to reports, on WHOIS inaccuracy, and potentially doing some verification of data provided in response to an accuracy complaint. I have drafted the terms of reference to be consistent with the work items that have been discussed so far in Mar Del Plata and in other recent meetings of the WHOIS task force and the GNSO Council. I suggest that further work on improving accuracy of data collection, would be more appropriate once other aspects of the WHOIS service have been refined. I have not added a task relating to requiring registrants to explicitly agree to the WHOIS provisions, as this work has as I understand it been completed by the task force (the final report is almost complete), and will be discussed at the Council before these terms of reference will be approved. Regards, Bruce Tonkin Fourth Draft of Terms of Reference for WHOIS task force The mission of The Internet Corporation for Assigned Names and Numbers ("ICANN") is to coordinate, at the overall level, the global Internet's systems of unique identifiers, and in particular to ensure the stable and secure operation of the Internet's unique identifier systems. In performing this mission, ICANN's bylaws set out 11 core values to guide its decisions and actions. Any ICANN body making a recommendation or decision shall exercise its judgment to determine which of these core values are most relevant and how they apply to the specific circumstances of the case at hand, and to determine, if necessary, an appropriate and defensible balance among competing values. ICANN has agreements with gTLD registrars and gTLD registries that require the provision of a WHOIS service via three mechanisms: port-43, web based access, and bulk access. The agreements also require a Registered Name Holder to provide to a Registrar accurate and reliable contact details and promptly correct and update them during the term of the Registered Name registration, including: the full name, postal address, e-mail address, voice telephone number, and fax number if available of the Registered Name Holder; name of authorized person for contact purposes in the case of an Registered Name Holder that is an organization, association, or corporation; the name, postal address, e-mail address, voice telephone number, and (where available) fax number of the technical contact for the Registered Name; and the name, postal address, e-mail address, voice telephone number, and (where available) fax number of the administrative contact for the Registered Name. The contact information must be adequate to facilitate timely resolution of any problems that arise in connection with the Registered Name. A registrar is required in the Registrar Accreditation Agreement (RAA) to take reasonable precautions to protect Personal Data from loss, misuse, unauthorized access or disclosure, alteration, or destruction. The goal of the WHOIS task force is to improve the effectiveness of the WHOIS service in maintaining the stability and security of the Internet's unique identifier systems, whilst taking into account where appropriate the need to ensure privacy protection for the Personal Data of natural persons that may be Registered Name Holders, the authorised representative for contact purposes of a Register Name Holder, or the administrative or technical contact for a domain name. Tasks: (1) Define the purpose of the WHOIS service in the context of ICANN's mission and relevant core values, international and national laws protecting privacy of natural persons, international and national laws that relate specifically to the WHOIS service, and the changing nature of Registered Name Holders. (2) Define the purpose of the Registered Name Holder, technical, and administrative contacts, in the context of the purpose of WHOIS, and the purpose for which the data was collected. Use the relevant definitions from Exhibit C of the Transfers Task force report as a starting point (from http://www.icann.org/gnso/transfers-tf/report-exhc-12feb03.htm) "Contact: Contacts are individuals or entities associated with domain name records. Typically, third parties with specific inquiries or concerns will use contact records to determine who should act upon specific issues related to a domain name record. There are typically three of these contact types associated with a domain name record, the Administrative contact, the Billing contact and the Technical contact. Contact, Administrative: The administrative contact is an individual, role or organization authorized to interact with the Registry or Registrar on behalf of the Domain Holder. The administrative contact should be able to answer non-technical questions about the domain name's registration and the Domain Holder. In all cases, the Administrative Contact is viewed as the authoritative point of contact for the domain name, second only to the Domain Holder. Contact, Billing: The billing contact is the individual, role or organization designated to receive the invoice for domain name registration and re-registration fees. Contact, Technical: The technical contact is the individual, role or organization that is responsible for the technical operations of the delegated zone. This contact likely maintains the domain name server(s) for the domain. The technical contact should be able to answer technical questions about the domain name, the delegated zone and work with technically oriented people in other zones to solve technical problems that affect the domain name and/or zone. Domain Holder: The individual or organization that registers a specific domain name. This individual or organization holds the right to use that specific domain name for a specified period of time, provided certain conditions are met and the registration fees are paid. This person or organization is the "legal entity" bound by the terms of the relevant service agreement with the Registry operator for the TLD in question." (3) Determine what data collected should be available for public access in the context of the purpose of WHOIS. Determine how to access data that is not available for public access. The current elements that must be displayed by a registrar are: - The name of the Registered Name; - The names of the primary nameserver and secondary nameserver(s) for the Registered Name; - The identity of Registrar (which may be provided through Registrar's website); - The original creation date of the registration; - The expiration date of the registration; - The name and postal address of the Registered Name Holder; - The name, postal address, e-mail address, voice telephone number, and (where available) fax number of the technical contact for the Registered Name; and - The name, postal address, e-mail address, voice telephone number, and (where available) fax number of the administrative contact for the Registered Name. (4) Determine how to improve the process for notifying a registrar of inaccurate WHOIS data, and the process for investigating and correcting inaccurate data. Currently a registrar "shall, upon notification by any person of an inaccuracy in the contact information associated with a Registered Name sponsored by Registrar, take reasonable steps to investigate that claimed inaccuracy. In the event Registrar learns of inaccurate contact information associated with a Registered Name it sponsors, it shall take reasonable steps to correct that inaccuracy." (5) Determine how to resolve differences between a Registered Name Holder's, gTLD Registrar's, or gTLD Registry's obligation to abide by all applicable laws and governmental regulations that relate to the WHOIS service, as well as the obligation to abide by the terms of the agreements with ICANN that relate to the WHOIS service.

2 1

GNSO Council draft minutes 12 May 2005
by GNSO.SECRETARIAT＠GNSO.ICANN.ORG May 24, 2005

May 24, 2005

[To: council[at]gnso.icann.org] Dear Council Members, Please find attached an html version of the draft minutes of the GNSO Council meeting held on 12 May 2005. This may be easier to read than the previous version sent to the council list earlier on. Please let me know if you would like any changes made. Thank you. Kind regards, -- Glen de Saint Géry GNSO Secretariat - ICANN gnso.secretariat[at]gnso.icann.org http://gnso.icann.org

1 0

GNSO Council draft minutes 12 May 2005
by GNSO.SECRETARIAT＠GNSO.ICANN.ORG May 24, 2005

May 24, 2005

[To: council[at]gnso.icann.org] Dear Council Members, Please find attached the draft minutes of the GNSO Council meeting held on 12 May 2005. Please let me know if you would like any changes made. Thank you. Kind regards, Glen de Saint Géry GNSO Secretariat - ICANN gnso.secretariat[at]gnso.icann.org http://gnso.icann.org

1 0

Draft Agenda for GNSO Council teleconference - Thursday 2 June 2005
by Bruce Tonkin May 24, 2005

May 24, 2005

Draft Agenda for Council meeting Thursday 2 June 2005 Coordinated Universal Time UTC 12:00 (5:00 Los Angeles, 8:00 Washington DC, 14:00 Brussels, 22:00 Melbourne) Item 1: Approval of minutes Item 2: Staff report - current areas of work - WHOIS, new gtlds, transfers, IDNs - Update on .net agreement and new sponsored agreements - update on strategic/operational planning process - status of meeting agenda for Luxembourg Item 3: Approval of new terms of reference for combined WHOIS task force, and approval of membership and voting rules Item 4: Process for use by ICANN in considering requests for consent and related contractual amendments to allow changes in the architecture operation of a gTLD registry. - update Item 5: Transfers policy staff report - update Item 6: new gtlds - discuss next steps for staff to begin to develop issues reports Item 7: internationalised domain names - update Item 8: Comments on 2005/2006 budget/operational plan Item 9: Any other business

1 0

FW: ICANN Strategic Plan Process Comments
by Grant Forsyth May 20, 2005

May 20, 2005

Fellow Councillors and other interested parties on the stratplan discussion list, Below is a posting made today as a further step in progress towards introducing a comprehensive bottom up strategic planning process to ICANN. As noted, those of us who are working to develop and document the consultation process, would welcome your comments and input to refine the process and settle it in time for consultation on the next cycle of strategic planning to commence at and post Luxembourg. Please feel free to post to any of the those individuals copied in on this email as well as/or alternately to the stratplan list. We also commend you posting comments on both the proposed process and substance of the latest version of the ICANN Strategic Plan, to the stratplan-revision list Regards Grant Forsyth Business Constituency Representative on the ICANN GNSO Council > -----Original Message----- > From: Grant Forsyth > Sent: Friday, 20 May, 2005 15:20 > To: 'stratplan-revision(a)icann.org' > Cc: 'Gomes, Chuck'; Marilyn Cade; Maureen Cubberley > Subject: ICANN Strategic Plan Process Comments > > Attached please find a paper that addresses the process for ongoing > consultation and review of the ICANN Strategic Plan. > This is work that originated in the discussions that were held in > Amsterdam in February 2005 and refined by consultation and discussions > between members of the various ICANN Support Organisations and in > particular through discussions held at the ICANN meeting in Mar del Plata > in April 2005. > > The main collaborative group of authors responsible for the work include: > Marilyn Cade > Maureen Cubberley > Chuck Gomes > Grant Forsyth > > Our wish is to have the process agreed prior to the next ICANN > face-to-face meeting in Luxembourg. The draft ICANN 2005-2006 budget has > just been released and is scheduled to be adopted by the Board at the > Luxembourg meeting. It is important that the consultation process be > understood and agreed prior to Luxembourg, in order that consultation on > the draft Budget can be received and considered prior to Luxembourg and > the review of the Strategic Plan can be finalized and started in July. > > > Grant Forsyth > Business Constituency Representative on the GNSO Council > <<ICANN Strategic Planning Process Proposal 050520.doc>>

2 1

ICANN has posted the proposed Budget for the FY 2005 -2006
by GNSO.SECRETARIAT＠GNSO.ICANN.ORG May 18, 2005

May 18, 2005

[To:council[at]gnso.icann.org; ga[at]gnso.icann.org] [To:announce[at]gnso.icann.org;liaison6c[at]gnso.icann.org] FYI, ICANN has posted the proposed Budget for the Fiscal Year 2005 -2006 and invites public comment. http://www.icann.org/financials/proposed-budget-17may05.html In accordance with Article XVI, Section 4 of the ICANN Bylaws, ICANN today posted its Proposed Budget for fiscal year 2005-06. The budget will be submitted to the ICANN Board for approval in Luxembourg on 15 July 2005 after additional review by the Budget Advisory Group and Finance Committee, constituency reviews, public comment, and possible amendment. Comment can be made to budget-comments(a)icann.org. The archive of comments is available at <http://forum.icann.org/lists/budget-comments/>. Kind regards, Glen de Saint Géry GNSO Secretariat - ICANN gnso.secretariat[at]gnso.icann.org http://gnso.icann.org -- Glen de Saint Géry GNSO Secretariat - ICANN gnso.secretariat[at]gnso.icann.org http://gnso.icann.org

1 0

RE: [gnso-dow123] RE: [council] Third draft of WHOIS task force terms of reference
by Niklas_Lagergren＠mpaa.org May 17, 2005

May 17, 2005

Dear All - I think the amendments put forward by Marilyn to Bruce's third draft make a lot of sense. By adding a few elements that I think can fairly be described as factual, it results in a draft ToR that could constitute a good basis for future work on the "WHOIS" topic. However - in order not to give the impression that the GNSO is ducking a crucial issue - I would suggest one additional amendment to Task (4) of the draft ToR, specifically to the first sentence of Task (4). See red-coloured addition below: "(4) Determine how to improve the process for notifying a registrar of inaccurate WHOIS data, and the processes for investigating and correcting inaccurate data and for preventing the initial collection of inaccurate data." I have also included this suggestion in the Word document circulated by Marilyn (see updated Word document in attachment). Many thanks to both Bruce and Marilyn for their work on this! Kind regards - Niklas _____ From: Marilyn Cade [mailto:marilynscade@hotmail.com] Sent: mardi 17 mai 2005 0:39 To: 'Bruce Tonkin'; council(a)gnso.icann.org Cc: gnso-dow123(a)gnso.icann.org Subject: [gnso-dow123] RE: [council] Third draft of WHOIS task force terms of reference Attached is a redline version of my BC proposal for changes to the Third version of the ToR. I made what I consider some factual additions to include the registered name holder. I also tried to make what I hope will make the ToR more broadly adoptable by using neutral terms in describing applicable and relevant law, etc., while still acknowledging privacy specifically. To the BC, there are many applicable and relevant laws, including those that deal with consumer protection, crimes, etc. that also have to be acknowledged, but I didn't spell those out... My interest is trying to get a neutral tone to that segment that can allow the TF work to move forward. I also put in a placeholder for the addition of the work items from the existing activities, that I believe that Jordyn and Maria were drafting. PLEASE NOTE, JUST IN CASE ANYONE HAS TROUBLE OPENING THE WORD DOCUMENT THAT THIS IS NOT A REDLINED VERSION BELOW. IT IS THE THIRD VERSION WITH MY PROPOSED ADDITIONS INCORPORATED -- ALL THE SYSTEM WOULD ALLOW ME TO DO, BUT I KNOW THAT SOME ARE TRAVELING AND MAY HAVE LIMITED ACCESS. ------------------------------------- Changes provided by Marilyn Cade, BC Councilor, as modifications to Bruce Tonkin's Third Draft of Terms of Reference for WHOIS task force The mission of The Internet Corporation for Assigned Names and Numbers ("ICANN") is to coordinate, at the overall level, the global Internet's systems of unique identifiers, and in particular to ensure the stable and secure operation of the Internet's unique identifier systems. ICANN has agreements with gTLDS registrars and gTLDS registries that require the provision of a WHOIS service via three mechanisms: port-43, web based access, and bulk access. The agreements also require a Registered Name Holder to provide accurate contact information for themselves, as well as technical and administrative contact information adequate to facilitate timely resolution of any problems that arise in connection with the Registered Name. A registrar is required in the Registrar Accreditation Agreement (RAA) to take reasonable precautions to protect Personal Data from loss, misuse, unauthorized access or disclosure, alteration, or destruction. The goal of the WHOIS task force is to improve the effectiveness of the WHOIS service in maintaining the stability and security of the Internet's unique identifier systems, whilst taking into account where appropriate the issues of privacy for the personal data of individuals that may be Registered Name Holders, or the administrative or technical contact for a domain name. Tasks: (1) Define the purpose of the WHOIS service in the context of ICANN's mission, relevant applicable international and national laws, including, but not limited to those regarding privacy, and the changing nature of Registered Name Holders. (2) Define the purpose of the registered name holder, technical and administrative contacts, in the context of the purpose of WHOIS, and the purpose for which the data was collected. Relevant definitions are taken from Exhibit C of the Transfers Task force report as a starting point (from http://www.icann.org/gnso/transfers-tf/report-exhc-12feb03.htm) "Contact: Contacts are individuals or entities associated with domain name records. Typically, third parties with specific inquiries or concerns will use contact records to determine who should act upon specific issues related to a domain name record. There are typically three of these contact types associated with a domain name record, the Administrative contact, the Billing contact and the Technical contact. Contact, Administrative: The administrative contact is an individual, role or organization authorized to interact with the Registry or Registrar on behalf of the Domain Holder. The administrative contact should be able to answer non-technical questions about the domain name's registration and the Domain Holder. In all cases, the Administrative Contact is viewed as the authoritative point of contact for the domain name, second only to the Domain Holder. Contact, Billing: The billing contact is the individual, role or organization designated to receive the invoice for domain name registration and re-registration fees. Contact, Technical: The technical contact is the individual, role or organization that is responsible for the technical operations of the delegated zone. This contact likely maintains the domain name server(s) for the domain. The technical contact should be able to answer technical questions about the domain name, the delegated zone and work with technically oriented people in other zones to solve technical problems that affect the domain name and/or zone." Contact: Domain Holder: The individual or organization that registers a specific domain name. This individual or organization holds the right o use that specific domain name for a specified period of time, provided certain conditions are met and the registration fees are paid. This person or organization is the "legal entity" bound by the terms of the relevant service agreements with the Registry operation of the TLD in question." (3) Determine what data collected should be available for public access in the context of the purpose of WHOIS. Determine how to access data that is not available for public access. The current elements that must be displayed by a registrar are: - The name of the Registered Name; - The names of the primary name server and secondary name server(s) for the Registered Name; - The identity of Registrar (which may be provided through Registrar's website); - The original creation date of the registration; - The expiration date of the registration; - The name and postal address of the Registered Name Holder; - The name, postal address, e-mail address, voice telephone number, and (where available) fax number of the technical contact for the Registered Name; and - The name, postal address, e-mail address, voice telephone number, and (where available) fax number of the administrative contact for the Registered Name. (4) Determine how to improve the process for notifying a registrar of inaccurate WHOIS data, and the process for investigating and correcting inaccurate data. Currently a registrar must require a "Registered Name Holder [to] provide to Registrar accurate and reliable contact details and promptly correct and update them during the term of the Registered Name registration;" "shall abide by any specifications or policies established according to Section 4 requiring reasonable and commercially practicable (a) verification, at the time of registration, of contact information associated with a Registered Name sponsored by Registrar or (b) periodic re-verification of such information; " and "shall, upon notification by any person of an inaccuracy in the contact information associated with a Registered Name sponsored by Registrar, take reasonable steps to investigate that claimed inaccuracy. In the event Registrar learns of inaccurate contact information associated with a Registered Name it sponsors, it shall take reasonable steps to correct that inaccuracy." Insert here the relevant sections being drafted by Jordyn and Maria that captures the existing work. Submitted by Marilyn Cade, BC Councilor -----Original Message----- From: owner-council(a)gnso.icann.org [mailto:owner-council@gnso.icann.org] On Behalf Of Bruce Tonkin Sent: Saturday, May 14, 2005 9:32 PM To: council(a)gnso.icann.org Cc: gnso-dow123(a)gnso.icann.org Subject: [council] Third draft of WHOIS task force terms of reference Hello All, Here is a third draft of the WHOIS terms of reference. The main changes are: - ICANN mission statement taken directly from ICANN bylaws - noting that there is a difference between the data collected and the display of that data (presently the agreements assume that everything collected will be publicly displayed - the new draft takes in account that in future some data that is collected may not be placed on public display), I have made it clearer that the present agreements require Registered Name Holders to provide certain data to the Registrar and keep it accurate, the Registrar is required to display this data as part of its WHOIS obligations. The purpose of the WHOIS service (ie the public display of data) is not clearly defined, but the purpose for which data is collected is indirectly defined in clause 3.7.7.3. - at the suggestion of the NCUC I have added the need to take into account international and national privacy laws when defining the purpose of WHOIS. Regards, Bruce Tonkin Third Draft of Terms of Reference for WHOIS task force The mission of The Internet Corporation for Assigned Names and Numbers ("ICANN") is to coordinate, at the overall level, the global Internet's systems of unique identifiers, and in particular to ensure the stable and secure operation of the Internet's unique identifier systems. ICANN has agreements with gtld registrars and gtld registries that require the provision of a WHOIS service via three mechanisms: port-43, web based access, and bulk access. The agreements also require a Registered Name Holder to provide accurate technical and administrative contact information adequate to facilitate timely resolution of any problems that arise in connection with the Registered Name. A registrar is required in the Registrar Accreditation Agreement (RAA) to take reasonable precautions to protect Personal Data from loss, misuse, unauthorized access or disclosure, alteration, or destruction. The goal of the WHOIS task force is to improve the effectiveness of the WHOIS service in maintaining the stability and security of the Internet's unique identifier systems, whilst taking into account where appropriate the need to ensure privacy protection for the Personal Data of individuals that may be Registered Name Holders, or the administrative or technical contact for a domain name. Tasks: (1) Define the purpose of the WHOIS service in the context of ICANN's mission, international and national laws protecting privacy, and the changing nature of Registered Name Holders. (2) Define the purpose of the technical and administrative contacts, in the context of the purpose of WHOIS, and the purpose for which the data was collected. Use the definitions from Exhibit C of the Transfers Task force report as a starting point (from http://www.icann.org/gnso/transfers-tf/report-exhc-12feb03.htm) "Contact: Contacts are individuals or entities associated with domain name records. Typically, third parties with specific inquiries or concerns will use contact records to determine who should act upon specific issues related to a domain name record. There are typically three of these contact types associated with a domain name record, the Administrative contact, the Billing contact and the Technical contact. Contact, Administrative: The administrative contact is an individual, role or organization authorized to interact with the Registry or Registrar on behalf of the Domain Holder. The administrative contact should be able to answer non-technical questions about the domain name's registration and the Domain Holder. In all cases, the Administrative Contact is viewed as the authoritative point of contact for the domain name, second only to the Domain Holder. Contact, Billing: The billing contact is the individual, role or organization designated to receive the invoice for domain name registration and re-registration fees. Contact, Technical: The technical contact is the individual, role or organization that is responsible for the technical operations of the delegated zone. This contact likely maintains the domain name server(s) for the domain. The technical contact should be able to answer technical questions about the domain name, the delegated zone and work with technically oriented people in other zones to solve technical problems that affect the domain name and/or zone." (3) Determine what data collected should be available for public access in the context of the purpose of WHOIS. Determine how to access data that is not available for public access. The current elements that must be displayed by a registrar are: - The name of the Registered Name; - The names of the primary nameserver and secondary nameserver(s) for the Registered Name; - The identity of Registrar (which may be provided through Registrar's website); - The original creation date of the registration; - The expiration date of the registration; - The name and postal address of the Registered Name Holder; - The name, postal address, e-mail address, voice telephone number, and (where available) fax number of the technical contact for the Registered Name; and - The name, postal address, e-mail address, voice telephone number, and (where available) fax number of the administrative contact for the Registered Name. (4) Determine how to improve the process for notifying a registrar of inaccurate WHOIS data, and the process for investigating and correcting inaccurate data. Currently a registrar "shall, upon notification by any person of an inaccuracy in the contact information associated with a Registered Name sponsored by Registrar, take reasonable steps to investigate that claimed inaccuracy. In the event Registrar learns of inaccurate contact information associated with a Registered Name it sponsors, it shall take reasonable steps to correct that inaccuracy."

1 0

Third draft of WHOIS task force terms of reference
by Bruce Tonkin May 17, 2005

May 17, 2005

Hello All, Here is a third draft of the WHOIS terms of reference. The main changes are: - ICANN mission statement taken directly from ICANN bylaws - noting that there is a difference between the data collected and the display of that data (presently the agreements assume that everything collected will be publicly displayed - the new draft takes in account that in future some data that is collected may not be placed on public display), I have made it clearer that the present agreements require Registered Name Holders to provide certain data to the Registrar and keep it accurate, the Registrar is required to display this data as part of its WHOIS obligations. The purpose of the WHOIS service (ie the public display of data) is not clearly defined, but the purpose for which data is collected is indirectly defined in clause 3.7.7.3. - at the suggestion of the NCUC I have added the need to take into account international and national privacy laws when defining the purpose of WHOIS. Regards, Bruce Tonkin Third Draft of Terms of Reference for WHOIS task force The mission of The Internet Corporation for Assigned Names and Numbers ("ICANN") is to coordinate, at the overall level, the global Internet's systems of unique identifiers, and in particular to ensure the stable and secure operation of the Internet's unique identifier systems. ICANN has agreements with gtld registrars and gtld registries that require the provision of a WHOIS service via three mechanisms: port-43, web based access, and bulk access. The agreements also require a Registered Name Holder to provide accurate technical and administrative contact information adequate to facilitate timely resolution of any problems that arise in connection with the Registered Name. A registrar is required in the Registrar Accreditation Agreement (RAA) to take reasonable precautions to protect Personal Data from loss, misuse, unauthorized access or disclosure, alteration, or destruction. The goal of the WHOIS task force is to improve the effectiveness of the WHOIS service in maintaining the stability and security of the Internet's unique identifier systems, whilst taking into account where appropriate the need to ensure privacy protection for the Personal Data of individuals that may be Registered Name Holders, or the administrative or technical contact for a domain name. Tasks: (1) Define the purpose of the WHOIS service in the context of ICANN's mission, international and national laws protecting privacy, and the changing nature of Registered Name Holders. (2) Define the purpose of the technical and administrative contacts, in the context of the purpose of WHOIS, and the purpose for which the data was collected. Use the definitions from Exhibit C of the Transfers Task force report as a starting point (from http://www.icann.org/gnso/transfers-tf/report-exhc-12feb03.htm) "Contact: Contacts are individuals or entities associated with domain name records. Typically, third parties with specific inquiries or concerns will use contact records to determine who should act upon specific issues related to a domain name record. There are typically three of these contact types associated with a domain name record, the Administrative contact, the Billing contact and the Technical contact. Contact, Administrative: The administrative contact is an individual, role or organization authorized to interact with the Registry or Registrar on behalf of the Domain Holder. The administrative contact should be able to answer non-technical questions about the domain name's registration and the Domain Holder. In all cases, the Administrative Contact is viewed as the authoritative point of contact for the domain name, second only to the Domain Holder. Contact, Billing: The billing contact is the individual, role or organization designated to receive the invoice for domain name registration and re-registration fees. Contact, Technical: The technical contact is the individual, role or organization that is responsible for the technical operations of the delegated zone. This contact likely maintains the domain name server(s) for the domain. The technical contact should be able to answer technical questions about the domain name, the delegated zone and work with technically oriented people in other zones to solve technical problems that affect the domain name and/or zone." (3) Determine what data collected should be available for public access in the context of the purpose of WHOIS. Determine how to access data that is not available for public access. The current elements that must be displayed by a registrar are: - The name of the Registered Name; - The names of the primary nameserver and secondary nameserver(s) for the Registered Name; - The identity of Registrar (which may be provided through Registrar's website); - The original creation date of the registration; - The expiration date of the registration; - The name and postal address of the Registered Name Holder; - The name, postal address, e-mail address, voice telephone number, and (where available) fax number of the technical contact for the Registered Name; and - The name, postal address, e-mail address, voice telephone number, and (where available) fax number of the administrative contact for the Registered Name. (4) Determine how to improve the process for notifying a registrar of inaccurate WHOIS data, and the process for investigating and correcting inaccurate data. Currently a registrar "shall, upon notification by any person of an inaccuracy in the contact information associated with a Registered Name sponsored by Registrar, take reasonable steps to investigate that claimed inaccuracy. In the event Registrar learns of inaccurate contact information associated with a Registered Name it sponsors, it shall take reasonable steps to correct that inaccuracy."

3 3

Strategic plan - regional presence - '... immediate job openings for the position of Liaison Managers for multiple world regions'
by Alick Wilson May 17, 2005

May 17, 2005

ICANN has posted '... immediate job openings for the position of Liaison Managers for multiple world regions.' http://www.icann.org/general/jobs.htm#RegionalLiaisonManagers. The job listing does not state the preferred location of the successful candidates? Are the positions located in the two existing offices of Marina del Rey and Brussels, or are they located in regional offices? 'I note that 'ICANN Staff posted the latest version of the Strategic Plan on 6 May 2005 and has extended the public comment period until 20 May 2005.' http://www.icann.org/minutes/resolutions-03may05.htm. I also note that Version 7.3 of the plan http://www.icann.org/strategic-plan/strategic-plan-v7_3.pdf states ' In addition there are a number of areas that are included in this plan that have been identified by the community through the consultation process as needing more discussion and further work. Rather than attempt to deal with these issues in the timeframe of the current plan, they are listed here so that they can be given the detailed treatment that they need as part of the next planning cycle. Those issues are: ... . Determining whether ICANN should have segregated funds . Clarifying the nature of ICANN's regional presences ... ' It seems inappropriate, then, to post these 'immediate job openings' when 1. Version 7.3 of the plan is still open for comment. 2. Version 7.3 proposes deferment and detailed treatment of issues related to regional presence 3. The Board has not approved Version 7.3 of the plan or any variation thereof. Perhaps this is a logistics error, in which case the job listings should be removed ASAP with appropriate notice. If it is not a logistics error, would Board and/or staff please explain? Alick Wilson

1 0

GNSO Council discussion posted to dot Net public forum
by GNSO.SECRETARIAT＠GNSO.ICANN.ORG May 15, 2005

May 15, 2005

[To: council[at]gnso.icann.org] Please find attached the posting, GNSO Council discussion on dot Net - excerpt from draft minutes, http://forum.icann.org/lists/net-rfp-general/msg00055.html sent to the dot Net public comment forum http://forum.icann.org/lists/net-rfp-general/ The full minutes will be published shortly on the Council list. Thank you. Kind regards, Glen de Saint Géry GNSO Secretariat - ICANN gnso.secretariat[at]gnso.icann.org http://gnso.icann.org

1 0

Revised Registry Approval Process - constituency comments by May 27,2005
by GNSO.SECRETARIAT＠GNSO.ICANN.ORG May 14, 2005

May 14, 2005

[To council[at]gnso.icann.org] At the GNSO council meeting on Thursday May 12, 2005 it was agreed that the constituencies discuss the revised preliminary report on the Registry Approval Process with their members and submit comments within 14 days, that is, by COB on May 27, 2005. The report and the marked up copy can be viewed at the urls below: Second draft of Registry Approval Process http://www.gnso.icann.org/mailing-lists/archives/reg-com/msg00032.html Marked up copy of Second draft of Registry Approval Process http://www.gnso.icann.org/mailing-lists/archives/reg-com/msg00033.html Thank you. Kind regards, -- Glen de Saint Géry GNSO Secretariat - ICANN gnso.secretariat[at]gnso.icann.org http://gnso.icann.org

2 1

GNSO Council Teleconf. 12 May 2005, MP3 recording
by GNSO.SECRETARIAT＠GNSO.ICANN.ORG May 12, 2005

May 12, 2005

[To: ga[at]gnso.icann.org; announce[at]gnso.icann.org] [To: liaison6c[at]gnso.icann.org; council[at]gnso.icann.org] Please find the MP3 recording of the GNSO Council teleconference, held on May 12, 2005 at: http://gnso-audio.icann.org/GNSO-Council-20050512.mp3 Happy listening! -- Glen de Saint Géry GNSO Secretariat - ICANN gnso.secretariat[at]gnso.icann.org http://gnso.icann.org

1 0

Forwarding from Jordyn Buchanan - relating to new terms of reference
by Bruce Tonkin May 12, 2005

May 12, 2005

________________________________ From: Jordyn A. Buchanan [mailto:jordyn@confusion.net] Sent: Thursday, 12 May 2005 9:50 PM To: Bruce Tonkin Cc: Glen De Saint Géry Subject: Fwd: [gnso-dow123] Recommendations relating to new terms of reference Hi Bruce: Just wanted to flag these issues for consideration in the council's discussion today. There hasn't been any feedback on the list, so I wouldn't necessarily characterize them as task force positions yet, but at the very least it's some feedback from the TF chair. It would be difficult to know how to handle some of our existing work items without some explicit feedback from the Council. Jordyn Begin forwarded message: From: "Jordyn A. Buchanan" <jordyn(a)confusion.net> Date: May 11, 2005 1:02:14 PM EDT To: Whois TF mailing list <gnso-dow123(a)gnso.icann.org> Subject: [gnso-dow123] Recommendations relating to new terms of reference As we discussed yesterday, I've drafted some comments from the TF to the council to consider in deciding on new terms of reference. Hopefully these are fairly un-controversial. Please let me know if you have any feedback: (1) The task force requests that the council clearly specify whether the terms of reference are considered to be a new set of terms of reference or merely modifications to the existing terms of reference. The task force also requests that the council specify whether the intent is to apply the terms of reference to a new task force, or is rechartering the existing task force. (2) The task force requests that the council clearly indicate whether policy development should continue in each of the areas in which the task force currently has work items. In the event that the council directs the task force not to continue to develop policy in one or more areas, we request that the council make appropriate provisions to conclude work and make necessary factual reports to council. The third area we discussed, incorporating a reference to the transfers task force definition of contact roles, has already been incorporated in Bruce's latest draft. Jordyn

1 0

FW: NCUC edits to ToR for GNSO tele-mtg on 12th
by Bruce Tonkin May 12, 2005

May 12, 2005

-----Original Message----- From: Robin Gross [mailto:robin@ipjustice.org] Sent: Thursday, 12 May 2005 11:42 AM To: Bruce Tonkin Subject: NCUC edits to ToR for GNSO tele-mtg on 12th Hello Bruce, Besides the overbroad purpose being assigned to whois, NCUC is very concerned about the lack of attention given to the privacy and freedom of expression issues in the current proposal for the whois Terms of Reference. Therefore, NCUC would like to submit the attached edits to this ToR for discussion at the GNSO council meeting on the 12th. Would you please forward the attached proposed edits to the council? Also attached as part of the submission is a report of Task Force 2 that lays various national and international privacy problems for the whois policy. Please let me know if you have any questions or if I can provide any additional information on this. Thank you, Robin Gross NCUC

1 0

Second Draft WHOIS terms of reference
by Bruce Tonkin May 12, 2005

May 12, 2005

Hello All, I have added the reference to the definitions of contacts in Exhibit C of the Transfers Report as suggested by Ross Rader. Regards, Bruce Tonkin Second Draft of Terms of Reference for WHOIS task force ICANN's mission is to maintain the stability and security of the Internet's unique identifier systems, while fostering competition where appropriate to give Internet users greater choice at optimal cost. Within the context of this mission, ICANN has agreements with gtld registrars and gtld registries that require the provision of a WHOIS service via three mechanisms: port-43, web based access, and bulk access. The purpose of the WHOIS service as contained in the Registrar Accreditation Agreement (RAA) is to provide accurate technical and administrative contact information adequate to facilitate timely resolution of any problems that arise in connection with the Registered Name. A registrar is also required in the RAA to take reasonable precautions to protect Personal Data from loss, misuse, unauthorized access or disclosure, alteration, or destruction. The goal of the WHOIS task force is to improve the effectiveness of the WHOIS service in maintaining the stability and security of the Internet's unique identifier systems, whilst taking into account where appropriate the need to ensure privacy protection for the Personal Data of individuals that may be Registered Name Holders, or the administrative or technical contact for a domain name. Tasks: (1) Review the current purpose of WHOIS, and determine whether it should be refined in the context of ICANN's mission and the changing nature of Registered Name Holders. "The purpose of WHOIS is to provide accurate technical and administrative contact information adequate to facilitate timely resolution of any problems that arise in connection with the Registered Name" (2) Define the purpose of the technical and administrative contacts, in the context of the purpose of WHOIS, to improve the accuracy and relevance of the data collected. Use the definitions from Exhibit C of the Transfers Task force report as a starting point (from http://www.icann.org/gnso/transfers-tf/report-exhc-12feb03.htm) "Contact: Contacts are individuals or entities associated with domain name records. Typically, third parties with specific inquiries or concerns will use contact records to determine who should act upon specific issues related to a domain name record. There are typically three of these contact types associated with a domain name record, the Administrative contact, the Billing contact and the Technical contact. Contact, Administrative: The administrative contact is an individual, role or organization authorized to interact with the Registry or Registrar on behalf of the Domain Holder. The administrative contact should be able to answer non-technical questions about the domain name's registration and the Domain Holder. In all cases, the Administrative Contact is viewed as the authoritative point of contact for the domain name, second only to the Domain Holder. Contact, Billing: The billing contact is the individual, role or organization designated to receive the invoice for domain name registration and re-registration fees. Contact, Technical: The technical contact is the individual, role or organization that is responsible for the technical operations of the delegated zone. This contact likely maintains the domain name server(s) for the domain. The technical contact should be able to answer technical questions about the domain name, the delegated zone and work with technically oriented people in other zones to solve technical problems that affect the domain name and/or zone." (3) Determine what WHOIS data elements should be available for public access that are needed to maintain the stability and security of the Internet. Determine how to access data that is not available for public access. The current elements that must be displayed by a registrar are: - The name of the Registered Name; - The names of the primary nameserver and secondary nameserver(s) for the Registered Name; - The identity of Registrar (which may be provided through Registrar's website); - The original creation date of the registration; - The expiration date of the registration; - The name and postal address of the Registered Name Holder; - The name, postal address, e-mail address, voice telephone number, and (where available) fax number of the technical contact for the Registered Name; and - The name, postal address, e-mail address, voice telephone number, and (where available) fax number of the administrative contact for the Registered Name. (4) Determine how to improve the process for notifying a registrar of inaccurate WHOIS data, and the process for investigating and correcting inaccurate data. Currently a registrar "shall, upon notification by any person of an inaccuracy in the contact information associated with a Registered Name sponsored by Registrar, take reasonable steps to investigate that claimed inaccuracy. In the event Registrar learns of inaccurate contact information associated with a Registered Name it sponsors, it shall take reasonable steps to correct that inaccuracy."

2 1

RE: [council] Draft WHOIS terms of reference
by Bruce Tonkin May 12, 2005

May 12, 2005

Hello Robin, > > Where can I find > this purpose defined as such in the RAA? > It is extracted from clause 3.7.7.3 of the Registrars Accreditation Agreement (RAA) available at: http://www.icann.org/registrars/ra-agreement-17may01.htm Regards, Bruce Tonkin

2 1