March 2024 - CPWG - lists.icann.org

Update on ICM Registry
by mike palage.com 31 Mar '24

31 Mar '24

Hello All, Listed below is a complaint that I submitted to ICANN Compliance this weekend consistent with the concerns I raised on the CPWG call this past Wednesday. I will keep the community informed of any developments. <Complaint Submitted to ICANN Compliance> ICM Registry during its application to become the registry operator of the .XXX TLD made several material representations to ICANN (Org/Board/Community) as well as the broader Internet community in connection with how it would operate the .XXX TLD. Two such representations involved registry safeguards (services) designed to minimize abuse and child sexual abusive material. The first involved enhanced registrant verification to ensure that ICM knew every registrant and that they had met the registration criteria. The second involved the use of a Membership Contact ROID that was associated with each domain name registration. This feature allowed ICM Registry to quickly remove from the zone file all domain names associated with a problematic registrant upon becoming aware of a problem. As ICANN compliance is keenly aware Registry Operators are required to file a Registry Services Evaluation Process (RSEP) in connection with any new, modified, or deprecated registry service. ICANN Org has taken a very expansive definition of when a Registry Operator is required to submit an RSEP. Case in point, ICANN required fTLD to file an RSEP in connection with minor changes in how .Bank and .Insurance registrants are verified, see https://www.icann.org/en/system/files/files/rsep-2017039-bank-et-al-request… Upon information and belief ICM Registry has changed the process by which registrants are verified and they have removed the Membership Contact ROID without submitting an RSEP which is a violation of their Registry Agreement. Additionally, any attempt by ICM Registry to deprecate these services would constitute a material deviation from the representations made by ICM Registry when securing their right to operate the .XXX TLD.

1 0

Apology - Need to step down from co-chairing the CPWG
by Hadia El Miniawi 29 Mar '24

29 Mar '24

Dear All, After much consideration and thinking I have realised the necessity of devoting more time to my responsibilities as AFRALO chair and the planing of the upcoming meeting in Africa. Additionally, I am eager to initiate more engagement activities that will require more focus and time. Olivier it was a pleasure co-chairing the group with you. However, stepping down from this role means I will have more time to contribute to the At-large policy statements and work as I remain an active member of the CPWG. See you all on the next CPWG call P.S. Olivier you will need to look for another co-chair or run the call solo! I will now be more on the policy contributors side, I had no time for both. Thanks again. Kind regardsHadia Elminiawi

12 15

Input Requested - Draft Public Comment Statement - Review of the Draft Applicant Support Program (ASP) Handbook – New gTLD Program
by Andrew Chen 29 Mar '24

29 Mar '24

Dear CPWG Members, In preparation for the Public Comment Statement submission for the Review of the Draft Applicant Support Program (ASP) Handbook – New gTLD Program<https://www.icann.org/en/public-comment/proceeding/review-of-the-draft-appl…>, please see linked below the Draft Public Comment Statement for the Review of the Draft Applicant Support Program (ASP) Handbook – New gTLD Program Public Comment Proceeding. Please have all comments submitted by tomorrow, no later than 20:00UTC. The ALAC will begin its vote to endorse this statement shortly after the closure of the comment period. Voting will take place between 28 March and 01 April 2024. Draft Public Comment Statement: https://docs.google.com/document/d/14xXyM_mDl7nv5ImqlnEXFsD3womZbLwdhmMUi53… Please let us know if you have any questions. Sincerely, Andrew -- Andrew Chen Policy Development Support Sr. Specialist, Policy Development Support Internet Corporation for Assigned Names and Numbers (ICANN) https://www.icann.org/ Skype: atchen122

2 1

Proposed response to the Change of Registrant Data (CORD) policy
by Steinar Grøtterød 29 Mar '24

29 Mar '24

Dear all, Attached is my proposed response to the CORD policy (PDF copy). Please review the draft preliminary recommendations in detail. Using the tables provided (starting on p.9 of the worksheet), please identify any recommendations you believe should be changed. The tables contemplate levels of support (or lack of support): * Cannot live with the recommendation as written - this means that, unless significantly altered, your group cannot live with the text being included in the Initial Report * Could live with, but would prefer a change * Grammatical/typographical edits * Support recommendation as written All with the link to the Google doc (https://docs.google.com/document/d/1kQzyDWRydL6r9lroP8LwMRIhwEqmvBEIHXxDcFX…) can add comments. If you need access to write, please let me know. GNSO-TPR working group members are instructed to get feedback from the group (At-Large), hence your input to the proposed CORD policy is of importance. A key question is At-Large is in favor of enabling an opt out for mandatory notifications when there is a change of Registrant Data. Enabling the opt out for notification can be seen as a security risk. In my view, it should NOT be possible for Registrars to enable an opt out for notifications. I will ask for 15-20 minutes to discuss this at the CPWG meeting on April 3, 2024. Regards, Steinar Grøtterød

1 0

At-Large Consolidated Policy Working Group (CPWG)
by ICANN Policy Calendar 28 Mar '24

28 Mar '24

**If you require a dial out or need to state an apology, please contact At-Large staff at staff(a)atlarge.icann.org<mailto:staff@atlarge.icann.org> with your preferred number*** Dear All, The next At-Large Consolidated Policy Working Group (CPWG) Call is scheduled for Wednesday, 03 April 2024 at 14:00 UTC for 90 mins, For other times: https://tinyurl.com/nwmsv58d<http://tinyurl.com/bdcm479f> The agenda (to be updated) and call details can be found at: https://community.icann.org/x/UwAsEw Zoom Room: https://icann.zoom.us/j/765717566?pwd=UTJCdWRSZVdJNEhOYW02OVBqQVQ1Zz09 / Passcode: #CPWG2345* Real time transcription (RTT) available at (subject to availability): https://www.streamtext.net/player?event=ICANN ADIGO Conference Bridge: (subject to availability) EN, ES & FR: 3535 Toll-free access number (US and Canada): 800 550 6865 Other toll-free numbers: https://www.adigo.com/icann At-Large Consolidated Policy Working Group (CPWG) Wiki Space: https://community.icann.org/x/jYDpB If you require a dial-out please contact At-Large staff at: staff(a)atlarge.icann.org<mailto:staff@atlarge.icann.org> Thank you. Kind Regards, At-Large Staff ICANN Policy Staff in support of the At-Large Community Website: atlarge.icann.org<https://atlarge.icann.org/> Facebook: facebook.com/icann<https://www.facebook.com/icannatlarge>atlarge<https://www.facebook.com/icannatlarge> Twitter: @<https://twitter.com/ICANNAtLarge>ICANNAtLarge<https://twitter.com/ICANNAtLarge>

1 0

Re: [CPWG] Apology - Need to step down from co-chairing the CPWG
by Hadia El Miniawi 28 Mar '24

28 Mar '24

Thank you a lot Cheryl. Much appreciated. Hadia On Wednesday, March 27, 2024 at 11:25:45 PM GMT+2, Cheryl Langdon-Orr <langdonorr(a)gmail.com> wrote: Sensible move... You of course have my support... On Thu, 28 Mar 2024, 08:23 Hadia El Miniawi via CPWG, <cpwg(a)icann.org> wrote: Dear All, After much consideration and thinking I have realised the necessity of devoting more time to my responsibilities as AFRALO chair and the planing of the upcoming meeting in Africa. Additionally, I am eager to initiate more engagement activities that will require more focus and time. Olivier it was a pleasure co-chairing the group with you. However, stepping down from this role means I will have more time to contribute to the At-large policy statements and work as I remain an active member of the CPWG. See you all on the next CPWG call P.S. Olivier you will need to look for another co-chair or run the call solo! I will now be more on the policy contributors side, I had no time for both. Thanks again. Kind regardsHadia Elminiawi _______________________________________________ CPWG mailing list CPWG(a)icann.org https://mm.icann.org/mailman/listinfo/cpwg _______________________________________________ By submitting your personal data, you consent to the processing of your personal data for purposes of subscribing to this mailing list accordance with the ICANN Privacy Policy (https://www.icann.org/privacy/policy) and the website Terms of Service (https://www.icann.org/privacy/tos). You can visit the Mailman link above to change your membership status or configuration, including unsubscribing, setting digest-style delivery or disabling delivery altogether (e.g., for a vacation), and so on.

1 0

***REMINDER*** Meeting invitation: At-Large Consolidated Policy Working Group (CPWG) Call on Wednesday, 27 March 2024 at 19:00 UTC
by ICANN At-Large Staff 27 Mar '24

27 Mar '24

**f you require a dial out or need to state an apology, please contact At-Large staff at staff(a)atlarge.icann.org<mailto:staff@atlarge.icann.org> with your preferred number*** Dear All, The next At-Large Consolidated Policy Working Group (CPWG) Call is scheduled for Wednesday, 27 March 2024 at 19:00 UTC for 90 mins, For other times: https://tinyurl.com/mt6enak2 The agenda and call details can be found at: https://community.icann.org/x/DwAZEw Zoom Room: https://icann.zoom.us/j/765717566?pwd=UTJCdWRSZVdJNEhOYW02OVBqQVQ1Zz09 / Passcode: #CPWG2345* Real time transcription (RTT) available at: https://www.streamtext.net/player?event=ICANN ADIGO Conference Bridge: EN, ES & FR: 3535 Toll-free access number (US and Canada): 800 550 6865 Other toll-free numbers: https://www.adigo.com/icann At-Large Consolidated Policy Working Group (CPWG) Wiki Space: https://community.icann.org/x/jYDpB If you require a dial-out please contact At-Large staff at: staff(a)atlarge.icann.org<mailto:staff@atlarge.icann.org> Thank you. Kind Regards, At-Large Staff ICANN Policy Staff in support of the At-Large Community Website: atlarge.icann.org<https://atlarge.icann.org/> Facebook: facebook.com/icann<https://www.facebook.com/icannatlarge>atlarge<https://www.facebook.com/icannatlarge> Twitter: @<https://twitter.com/ICANNAtLarge>ICANNAtLarge<https://twitter.com/ICANNAtLarge>

1 0

Meeting invitation: At-Large Consolidated Policy Working Group (CPWG) Call on Wednesday, 27 March 2024 at 19:00 UTC
by ICANN At-Large Staff 27 Mar '24

27 Mar '24

**f you require a dial out or need to state an apology, please contact At-Large staff at staff(a)atlarge.icann.org<mailto:staff@atlarge.icann.org> with your preferred number*** Dear All, The next At-Large Consolidated Policy Working Group (CPWG) Call is scheduled for Wednesday, 27 March 2024 at 19:00 UTC for 90 mins, For other times: https://tinyurl.com/mt6enak2<http://tinyurl.com/bdcm479f> The agenda (to be updated) and call details can be found at: https://community.icann.org/x/DwAZEw Zoom Room: https://icann.zoom.us/j/765717566?pwd=UTJCdWRSZVdJNEhOYW02OVBqQVQ1Zz09 / Passcode: #CPWG2345* Real time transcription (RTT) available at (subject to availability): https://www.streamtext.net/player?event=ICANN ADIGO Conference Bridge: (subject to availability) EN, ES & FR: 3535 Toll-free access number (US and Canada): 800 550 6865 Other toll-free numbers: https://www.adigo.com/icann At-Large Consolidated Policy Working Group (CPWG) Wiki Space: https://community.icann.org/x/jYDpB If you require a dial-out please contact At-Large staff at: staff(a)atlarge.icann.org<mailto:staff@atlarge.icann.org> Thank you. Kind Regards, At-Large Staff ICANN Policy Staff in support of the At-Large Community Website: atlarge.icann.org<https://atlarge.icann.org/> Facebook: facebook.com/icann<https://www.facebook.com/icannatlarge>atlarge<https://www.facebook.com/icannatlarge> Twitter: @<https://twitter.com/ICANNAtLarge>ICANNAtLarge<https://twitter.com/ICANNAtLarge>

1 0

REMINDER / Meeting invitation: At-Large Consolidated Policy Working Group (CPWG) Call on Wednesday, 27 March 2024 at 19:00 UTC
by ICANN At-Large Staff 26 Mar '24

26 Mar '24

**f you require a dial out or need to state an apology, please contact At-Large staff at staff(a)atlarge.icann.org<mailto:staff@atlarge.icann.org> with your preferred number*** Dear All, The next At-Large Consolidated Policy Working Group (CPWG) Call is scheduled for Wednesday, 27 March 2024 at 19:00 UTC for 90 mins, For other times: https://tinyurl.com/mt6enak2 The agenda (to be updated) and call details can be found at: https://community.icann.org/x/DwAZEw Zoom Room: https://icann.zoom.us/j/765717566?pwd=UTJCdWRSZVdJNEhOYW02OVBqQVQ1Zz09 / Passcode: #CPWG2345* Real time transcription (RTT) available at (subject to availability): https://www.streamtext.net/player?event=ICANN ADIGO Conference Bridge: (subject to availability) EN, ES & FR: 3535 Toll-free access number (US and Canada): 800 550 6865 Other toll-free numbers: https://www.adigo.com/icann At-Large Consolidated Policy Working Group (CPWG) Wiki Space: https://community.icann.org/x/jYDpB If you require a dial-out please contact At-Large staff at: staff(a)atlarge.icann.org<mailto:staff@atlarge.icann.org> Thank you. Kind Regards, At-Large Staff ICANN Policy Staff in support of the At-Large Community Website: atlarge.icann.org<https://atlarge.icann.org/> Facebook: facebook.com/icann<https://www.facebook.com/icannatlarge>atlarge<https://www.facebook.com/icannatlarge> Twitter: @<https://twitter.com/ICANNAtLarge>ICANNAtLarge<https://twitter.com/ICANNAtLarge> [signature_607142721]

1 0

Readout from ICANN79 ALAC Plenary Session #2 - Building Trust on the Internet Through Registrant Verification
by mike palage.com 26 Mar '24

26 Mar '24

Hello All, Below please find a readout in connection with the ALAC Plenary Session that Avri and I co-moderated during ICANN79. Best regards, Michael On 6-March-2024, the ICANN At Large Advisory Committee (ALAC) held a plenary session entitled “Building Trust on the Internet Through Registrant Verification” at the ICANN79 Community Forum in San Juan Puerto, Rico that Michael Palage and Avri Doria co-moderated. This session was inspired in part by a recent World Economic Forum report entitled “Reimagining Digital ID” that noted “[d]espite a sustained focus on ID, the increasingly widespread use of digital technologies, and the rapid development of AI, the internet lacks an ID layer.” This session focused on innovations by TLD registry operators (both gTLD and ccTLD) that are increasing trust in their respective namespace using enhanced registrant verification, and how this innovation can have an impact beyond the domain name marketplace. Listed below is a summary of each speaker’s comments along with a link to their respective presentation in the order they presented. Finn Petersen, the Danish Director of International ICT Relations Agency for Digital Government, provided a presentation<https://community.icann.org/download/attachments/292978838/Presentation%20-…> on the recently enacted European Network and Information Security Directive 2 (NIS 2.0) and its potential impact on domain registration authorities. Finn specifically addressed Article 28 and its requirements regarding the collection, verification, and publication of domain name registrant data. Finn is uniquely qualified to provide insight on Article 28 as he is the Chair of Work Stream (WS) on WHOIS that currently encompasses a Task Force on Verification and Legitimate Access. Karla McKenna, Managing Director/Head of Standards at the Global Legal Entity Identifier Foundation (GLEIF) provided a presentation<https://community.icann.org/download/attachments/292978838/2024-03-06_Organ…> on the establishment of GLIEF in 2011 to create global unique Legal Entity Identifiers (LEIs) to identify parties in financial transactions. Karla explained how GLIEF has used 38 global partners to issue over 2 million LEIs and the recent innovation of verifiable LEIs (vLEIs). vLEIs enable Zero Trust Architecture for Organizational Identifiers through Verifiable Provenance and Instate Revocation State Verification. Avri Doria, a research consultant, then spoke on the various standards (some complimentary and some competitive) surrounding digital identity and why it is so hard to find a universal solution. Avri produced a readout of her presentation via a short blog<https://medium.com/@doriavr/why-is-it-so-hard-8f55ef531913> available where she included a compilation of current and evolving standards in various standard bodies to help educate those attempting to navigate the digital identity landscape. Lucas Prêtre, Telecommunication Engineer at the Swiss Federal Office of Communications OFCOM provided a presentation<https://community.icann.org/download/attachments/292978838/ICANN79_ALAC_dot…> about how OFCOM has historically handled registrant verification of legal entities through the use of an UID (Enterprise Identification Number) corresponding to the Swiss corporate identifier. Lucas also spoke about how OFCOM intends to expand registration of .SWISS domains to natural persons through the use of a UPI (Unique Person Identification) in 2024. Another unique aspect of the .SWISS TLD that Lucas discussed is how they have integrated the UID and UPI into the registry via the “publicID” in the WHOIS/RDAP protocol. Niamh Lewis, Senior Digital Health & Policy Expert at the National Association of Boards of Pharmacy (NABP) gave a presentation<https://community.icann.org/download/attachments/292978838/NABP-deck%5B1%5D…> on how a 120 old US-based non-profit organization dedicated to protecting public health has leveraged its skill set in licensing and accreditation to vet registrants in the .pharmacy TLD. Niamh also shared how domain name registrants in .pharmacy can use their registration as a fraud-proof seal that is recognized by third-party stakeholders, such as Google, Bing, TikTok, Twitter/X, Reddit, Visa and Mastercard. Craig Schwartz, Managing Director, fTLD Registry Services spoke<https://community.icann.org/download/attachments/292978838/ICANN79-ALAC-Ple…> about the importance of security in the operation of the .Bank and .Insurance domains and the various security innovations they have implemented. Craig also spoke about fTLD’s continued enhancements regarding registrant verification and how 80% of .Bank registrants already have an existing GLEIF LEI. Thomas Keller, Executive Board Member DENIC presented<https://community.icann.org/download/attachments/292978838/DENIC_Verificati…> on how DENIC has worked in collaboration with its 290 Members to implement appropriate safeguards they believe comply with the requirements of NIS 2.0 before the end of the year. As one of the world’s largest TLDs with over 17 million domain names under management, DENIC was looking for an approach that would not only meet its immediate needs but also provide a future-oriented, scalable, and risk-based approach. The solution presented proposes a Traffic Light Risk Assessment (red, yellow, green) toward domain name registrant verification that relies heavily upon close coordination with its Registrar Members. Bruce Tonkin, Chief Operating Officer at .au Domain Administrator (auDA), spoke<https://community.icann.org/download/attachments/292978838/alac-session-reg…> about auDA has incorporated Registrant verification of natural and legal persons into their normal business operations to comply with Australian nexus requirements. Bruce also spoke to how .au has had low volumes of malicious registrants with those instances generally associated with stolen identities. Jaromir Talíř, Technical Fellow at CZ.NIC, provided<https://community.icann.org/download/attachments/292978838/Jaromir%20ICANN7…> a historical overview of the pioneering work that CZ.NIC has been engaged in the area of registrant verification over the past 18 years. These innovations include, but are not limited to: the rollout of MojeID (digital identity service) in 2010; participation in RegeID, a joint EU project involving 4 ccTLD exploring the use of eIDs; and their current active participation in one of the four Large-Scale eIDAS 2.0 pilots involving the European Digital Identity Wallet. Timo Võhmar, Head of Business and IT Development at the Estonia Internet Foundation, spoke<https://community.icann.org/download/attachments/292978838/ICANN%2079%20-%2…> about .EE’s commitment to registrant verification since 2010, and spoke of some of the challenges they have faced with foreign registrants. Timo also shared a new eeID initiative leveraging FIDO and passkeys to promote the use of federated user-centric identifiers and enhanced multi-factor authentication. Jacques Latour, Chief Technology & Security Officer at CIRA presented<https://community.icann.org/download/attachments/292978838/Latour-CA-ALAC.p…> on CIRA’s involvement in various IETF working groups and a recent report that he co-authored entitled A trust Layer for the Internet is Emerging<https://www.cira.ca/uploads/2023/12/2023_A-trust-layer-for-the-internet-is-…>. Jacques also spoke about various CIRA pilots involving verified registrant credentials. Some of the additional work that Jacques and CIRA have been involved in was also discussed during two other ICANN79 sessions: DNS Trust Panel<https://icann79.sched.com/event/1a1CA/dnssec-and-security-workshop-1-of-3> and eID Panel Discussion<https://icann79.sched.com/event/1a1DU/tech-day-3-of-4>. A Zoom recording from this ALAC Plenary session is available from the ICANN website at https://icann.zoom.us/rec/share/RHdhIaT_AQ94rO49u1LbU0HxjSZKdx_Z8KlHL-bm5kG…

2 3