[Input Requested] At-Large CPWG Poll on DNS Abuse Gaps - respond by 15 July 2025 at 23:59 UTC
Dear CPWG Members, Thank you for participating in the CPWG discussion on DNS Abuse of 9 July (and the earlier survey of 25 June). As mentioned during the call, I am making a call for input to a poll in order to establish the order of priority for all the gaps that had been selected for addressing through the earlier survey. The present poll will *close on 30 June 2025 at 23:59 UTC.* *Link to Poll* https://forms.gle/zkFQR9beLCCVB7ADA *Next Steps*The results of this poll will be shared during the next CPWG call on 16 July 2025. The results will also be relayed to the GNSO Council DNS Abuse Small Team. Thanks, Justine
Dear CPWG Members, A gentle reminder to provide your input as requested below. If you wish to weigh in on which DNS Abuse gaps the GNSO should try to tackle first, then this is your chance to inform them accordingly. Thanks, Justine ---------- Forwarded message --------- From: Justine Chew <justine.chew.icann@gmail.com> Date: Thu, 10 Jul 2025 at 16:50 Subject: [Input Requested] At-Large CPWG Poll on DNS Abuse Gaps - respond by 15 July 2025 at 23:59 UTC To: CPWG <cpwg@icann.org> Dear CPWG Members, Thank you for participating in the CPWG discussion on DNS Abuse of 9 July (and the earlier survey of 25 June). As mentioned during the call, I am making a call for input to a poll in order to establish the order of priority for all the gaps that had been selected for addressing through the earlier survey. The present poll will *close on 30 June 2025 at 23:59 UTC.* *Link to Poll* https://forms.gle/zkFQR9beLCCVB7ADA *Next Steps*The results of this poll will be shared during the next CPWG call on 16 July 2025. The results will also be relayed to the GNSO Council DNS Abuse Small Team. Thanks, Justine
Dear CPWG Members, A gentle reminder to provide your input as requested below. If you wish to weigh in on which DNS Abuse gaps the GNSO should try to tackle first, then this is your chance to inform them accordingly. The present poll will *close on *15 July* 2025 at 23:59 UTC*. Apologies for any confusion caused earlier. Thanks, Justine ---------- Forwarded message --------- From: Justine Chew <justine.chew.icann@gmail.com> Date: Thu, 10 Jul 2025 at 16:50 Subject: [Input Requested] At-Large CPWG Poll on DNS Abuse Gaps - respond by 15 July 2025 at 23:59 UTC To: CPWG <cpwg@icann.org> Dear CPWG Members, Thank you for participating in the CPWG discussion on DNS Abuse of 9 July (and the earlier survey of 25 June). As mentioned during the call, I am making a call for input to a poll in order to establish the order of priority for all the gaps that had been selected for addressing through the earlier survey. The present poll will *close on 15 July 2025 at 23:59 UTC.* *Link to Poll* https://forms.gle/zkFQR9beLCCVB7ADA *Next Steps*The results of this poll will be shared during the next CPWG call on 16 July 2025. The results will also be relayed to the GNSO Council DNS Abuse Small Team. Thanks, Justine
Thanks for the reminder, Justine. All -- takes 5 to 10 minutes at most to complete and would really help out with priorities, so please consider spending the little time on this to make an impact. Kindest regards, Olivier On 14/07/2025 03:49, Justine Chew via CPWG wrote:
Dear CPWG Members,
A gentle reminder to provide your input as requested below. If you wish to weigh in on which DNS Abuse gaps the GNSO should try to tackle first, then this is your chance to inform them accordingly.
The present poll will *close on *15 July* 2025 at 23:59 UTC*. Apologies for any confusion caused earlier.
Thanks, Justine * *
---------- Forwarded message --------- From: *Justine Chew* <justine.chew.icann@gmail.com> Date: Thu, 10 Jul 2025 at 16:50 Subject: [Input Requested] At-Large CPWG Poll on DNS Abuse Gaps - respond by 15 July 2025 at 23:59 UTC To: CPWG <cpwg@icann.org>
Dear CPWG Members,
Thank you for participating in the CPWG discussion on DNS Abuse of 9 July (and the earlier survey of 25 June). As mentioned during the call, I am making a call for input to a poll in order to establish the order of priority for all the gaps that had been selected for addressing through the earlier survey. The present poll will *_close on 15 July 2025 at 23:59 UTC._*
*Link to Poll* https://forms.gle/zkFQR9beLCCVB7ADA
*Next Steps *The results of this poll will be shared during the next CPWG call on 16 July 2025. The results will also be relayed to the GNSO Council DNS Abuse Small Team.
Thanks, Justine * *
_______________________________________________ CPWG mailing list --cpwg@icann.org To unsubscribe send an email tocpwg-leave@icann.org
_______________________________________________ By submitting your personal data, you consent to the processing of your personal data for purposes of subscribing to this mailing list accordance with the ICANN Privacy Policy (https://www.icann.org/privacy/policy) and the website Terms of Service (https://www.icann.org/privacy/tos). You can visit the Mailman link above to change your membership status or configuration, including unsubscribing, setting digest-style delivery or disabling delivery altogether (e.g., for a vacation), and so on.
Dear CPWG Members, I'm extending availability of this poll and making a last call for input. Please participate if you wish to *before 16 July 2025, 23:59 UTC *and ignore the 15 July closing date stamped on the poll introduction. *Link to Poll* https://forms.gle/zkFQR9beLCCVB7ADA *Next Steps* I will share the results of this poll on this mail list asap on 17 July and promptly relay results to the GNSO Council DNS Abuse Small Team (also due on 17 July). Kind regards, Justine On Tue, 15 Jul 2025 at 15:08, Olivier MJ Crépin-Leblond via CPWG < cpwg@icann.org> wrote:
Thanks for the reminder, Justine.
All -- takes 5 to 10 minutes at most to complete and would really help out with priorities, so please consider spending the little time on this to make an impact.
Kindest regards,
Olivier
On 14/07/2025 03:49, Justine Chew via CPWG wrote:
Dear CPWG Members,
A gentle reminder to provide your input as requested below. If you wish to weigh in on which DNS Abuse gaps the GNSO should try to tackle first, then this is your chance to inform them accordingly.
The present poll will *close on *15 July* 2025 at 23:59 UTC*. Apologies for any confusion caused earlier.
Thanks, Justine
---------- Forwarded message --------- From: Justine Chew <justine.chew.icann@gmail.com> Date: Thu, 10 Jul 2025 at 16:50 Subject: [Input Requested] At-Large CPWG Poll on DNS Abuse Gaps - respond by 15 July 2025 at 23:59 UTC To: CPWG <cpwg@icann.org>
Dear CPWG Members,
Thank you for participating in the CPWG discussion on DNS Abuse of 9 July (and the earlier survey of 25 June). As mentioned during the call, I am making a call for input to a poll in order to establish the order of priority for all the gaps that had been selected for addressing through the earlier survey. The present poll will *close on 15 July 2025 at 23:59 UTC.*
*Link to Poll* https://forms.gle/zkFQR9beLCCVB7ADA
*Next Steps *The results of this poll will be shared during the next CPWG call on 16 July 2025. The results will also be relayed to the GNSO Council DNS Abuse Small Team.
Thanks, Justine
_______________________________________________ CPWG mailing list -- cpwg@icann.org To unsubscribe send an email to cpwg-leave@icann.org
_______________________________________________ By submitting your personal data, you consent to the processing of your personal data for purposes of subscribing to this mailing list accordance with the ICANN Privacy Policy (https://www.icann.org/privacy/policy) and the website Terms of Service (https://www.icann.org/privacy/tos). You can visit the Mailman link above to change your membership status or configuration, including unsubscribing, setting digest-style delivery or disabling delivery altogether (e.g., for a vacation), and so on.
_______________________________________________ CPWG mailing list -- cpwg@icann.org To unsubscribe send an email to cpwg-leave@icann.org
_______________________________________________ By submitting your personal data, you consent to the processing of your personal data for purposes of subscribing to this mailing list accordance with the ICANN Privacy Policy (https://www.icann.org/privacy/policy) and the website Terms of Service (https://www.icann.org/privacy/tos). You can visit the Mailman link above to change your membership status or configuration, including unsubscribing, setting digest-style delivery or disabling delivery altogether (e.g., for a vacation), and so on.
Dear CPWG Members, As indicated during the CPWG call of 16 July 2025, I was unable to present the results of the At-Large CPWG Poll on prioritizing identified DNS Abuse Gaps at the call itself. With the short extension of time given, we got a few more responses. I am now sharing the results of the poll which was closed on 16 July at 23:59 UTC. [image: image.png] [image: image.png] These 2 screenshots are drawn from the slide deck <https://icann-community.atlassian.net/wiki/download/attachments/370246404/20...> posted on the CPWG 16 July agenda wiki <https://icann-community.atlassian.net/wiki/x/BIMRFg>. I will be sharing the results of the At-Large High Priority Gaps in order of prioritization (i.e. the first screenshot) with the GNSO Council DNS Abuse Small Team shortly. Thank you to the respondents of this poll and the earlier survey on these DNS Abuse Gaps. Kind regards, Justine On Wed, 16 Jul 2025 at 23:27, Justine Chew <justine.chew.icann@gmail.com> wrote:
Dear CPWG Members,
I'm extending availability of this poll and making a last call for input. Please participate if you wish to *before 16 July 2025, 23:59 UTC *and ignore the 15 July closing date stamped on the poll introduction.
*Link to Poll* https://forms.gle/zkFQR9beLCCVB7ADA
*Next Steps* I will share the results of this poll on this mail list asap on 17 July and promptly relay results to the GNSO Council DNS Abuse Small Team (also due on 17 July).
Kind regards, Justine
On Tue, 15 Jul 2025 at 15:08, Olivier MJ Crépin-Leblond via CPWG < cpwg@icann.org> wrote:
Thanks for the reminder, Justine.
All -- takes 5 to 10 minutes at most to complete and would really help out with priorities, so please consider spending the little time on this to make an impact.
Kindest regards,
Olivier
On 14/07/2025 03:49, Justine Chew via CPWG wrote:
Dear CPWG Members,
A gentle reminder to provide your input as requested below. If you wish to weigh in on which DNS Abuse gaps the GNSO should try to tackle first, then this is your chance to inform them accordingly.
The present poll will *close on *15 July* 2025 at 23:59 UTC*. Apologies for any confusion caused earlier.
Thanks, Justine
---------- Forwarded message --------- From: Justine Chew <justine.chew.icann@gmail.com> Date: Thu, 10 Jul 2025 at 16:50 Subject: [Input Requested] At-Large CPWG Poll on DNS Abuse Gaps - respond by 15 July 2025 at 23:59 UTC To: CPWG <cpwg@icann.org>
Dear CPWG Members,
Thank you for participating in the CPWG discussion on DNS Abuse of 9 July (and the earlier survey of 25 June). As mentioned during the call, I am making a call for input to a poll in order to establish the order of priority for all the gaps that had been selected for addressing through the earlier survey. The present poll will *close on 15 July 2025 at 23:59 UTC.*
*Link to Poll* https://forms.gle/zkFQR9beLCCVB7ADA
*Next Steps *The results of this poll will be shared during the next CPWG call on 16 July 2025. The results will also be relayed to the GNSO Council DNS Abuse Small Team.
Thanks, Justine
_______________________________________________ CPWG mailing list -- cpwg@icann.org To unsubscribe send an email to cpwg-leave@icann.org
_______________________________________________ By submitting your personal data, you consent to the processing of your personal data for purposes of subscribing to this mailing list accordance with the ICANN Privacy Policy (https://www.icann.org/privacy/policy) and the website Terms of Service (https://www.icann.org/privacy/tos). You can visit the Mailman link above to change your membership status or configuration, including unsubscribing, setting digest-style delivery or disabling delivery altogether (e.g., for a vacation), and so on.
_______________________________________________ CPWG mailing list -- cpwg@icann.org To unsubscribe send an email to cpwg-leave@icann.org
_______________________________________________ By submitting your personal data, you consent to the processing of your personal data for purposes of subscribing to this mailing list accordance with the ICANN Privacy Policy (https://www.icann.org/privacy/policy) and the website Terms of Service (https://www.icann.org/privacy/tos). You can visit the Mailman link above to change your membership status or configuration, including unsubscribing, setting digest-style delivery or disabling delivery altogether (e.g., for a vacation), and so on.
Dear CPWG Members, I just wanted to provide a brief update on the work of the GNSO Council DNS Abuse Small Team, to whom the recent series of At-Large input (i.e. DNS Abuse gaps, gaps amongst gaps, and prioritization of all such gaps) has been relayed. Cutting through the clutter, based on all input received to-date from SG/C/At-Large, that Small Team intends to recommend to the GNSO Council the following: *Recommendation 1: Initiate a comprehensive Issue Report on DNS Abuse Mitigation Gaps.* The DNS Abuse Small Team recommends that the GNSO Council initiate an Issue Report to further investigate the identified DNS abuse mitigation gaps and to support informed policy action. The aim/purpose of the Issue Report would be: - To confirm a given issue is within ICANN's mission, - To explain what the issue is, who it affects, what support there is to address the issue - To recommend whether the issue(s) is within the scope of ICANN’s Mission and properly within the scope of the GNSO policy development process - To suggest, via the development of a draft charter, whether the PDP needs to be modular, allowing for separately scoped and phased work, depending on the topic’s complexity and interdependence, - To identify when a gap/issue is better addressed in a mechanism other than a PDP. *Recommendation 2: Structure the Issue Report around Three Primary Gaps while maintaining flexibility for broader coverage.* The ST recommends that the Issue Report focus on three gaps identified through the Small Team’s review of compliance/research data, community input, and gap matrix analysis. The ST suggests to only narrowly charter a PDP on three gaps and complete that work expeditiously. Subsequent PDPs could then be initiated from the original Issue Report, when the initial PDP completes its work. *Recommendation 3: Prioritize the following Three Identified Gaps.* Based on data analysis, community consultation, and input from stakeholder groups, the Small Team recommends the following three gaps be prioritized for early scoping and possible PDP initiation under the Issue Report: - *Unrestricted API access for new customers:* The INFERMAL study and other community inputs indicate a strong correlation between abuse and unrestricted API-enabled bulk registrations. - *Associated Domain Checks: *The CPH update during ICANN83 indicated that there is currently no contractual requirement or best practice standard requiring contracted parties to investigate domains associated with known malicious actors. - *Limited coordination on DGA-based abuse:* The current system for responding to Domain Generation Algorithm (DGA)-based threats commonly used in botnets and malware campaigns seems to be fragmented. No single trusted platform or protocol for real-time information sharing between registries, registrars, hosting providers, and law enforcement means fragmentation causing delays and inconsistent responses. I note that these somewhat align with At-Large's input of: 12. Gap 2 Withhold unrestricted API access for new customers 08. Gap 1: Investigate associated domains 13. Gap 5: Inefficient coordination on DGA-based abuse to support LEA I will report on any further progress post GNSO Council's August 2025 meeting. Kind regards, Justine On Thu, 17 Jul 2025 at 15:40, Justine Chew <justine.chew.icann@gmail.com> wrote:
Dear CPWG Members,
As indicated during the CPWG call of 16 July 2025, I was unable to present the results of the At-Large CPWG Poll on prioritizing identified DNS Abuse Gaps at the call itself.
With the short extension of time given, we got a few more responses.
I am now sharing the results of the poll which was closed on 16 July at 23:59 UTC. [image: image.png]
[image: image.png]
These 2 screenshots are drawn from the slide deck <https://icann-community.atlassian.net/wiki/download/attachments/370246404/20...> posted on the CPWG 16 July agenda wiki <https://icann-community.atlassian.net/wiki/x/BIMRFg>.
I will be sharing the results of the At-Large High Priority Gaps in order of prioritization (i.e. the first screenshot) with the GNSO Council DNS Abuse Small Team shortly.
Thank you to the respondents of this poll and the earlier survey on these DNS Abuse Gaps.
Kind regards, Justine
_______________________________________________ CPWG mailing list -- cpwg@icann.org To unsubscribe send an email to cpwg-leave@icann.org
_______________________________________________ By submitting your personal data, you consent to the processing of your personal data for purposes of subscribing to this mailing list accordance with the ICANN Privacy Policy (https://www.icann.org/privacy/policy) and the website Terms of Service (https://www.icann.org/privacy/tos). You can visit the Mailman link above to change your membership status or configuration, including unsubscribing, setting digest-style delivery or disabling delivery altogether (e.g., for a vacation), and so on.
Please find attached, the Report to the ICANN83 CPH DNS Abuse Community Update session. It more or less supports the top 3 priority gaps suggested by the GNSO Council DNS Abuse Small Team to be considered under its proposed Recommendation 3 below. Kind regards, Justine On Wed, 23 Jul 2025 at 12:32, Justine Chew <justine.chew.icann@gmail.com> wrote:
Dear CPWG Members,
I just wanted to provide a brief update on the work of the GNSO Council DNS Abuse Small Team, to whom the recent series of At-Large input (i.e. DNS Abuse gaps, gaps amongst gaps, and prioritization of all such gaps) has been relayed.
Cutting through the clutter, based on all input received to-date from SG/C/At-Large, that Small Team intends to recommend to the GNSO Council the following:
*Recommendation 1: Initiate a comprehensive Issue Report on DNS Abuse Mitigation Gaps.* The DNS Abuse Small Team recommends that the GNSO Council initiate an Issue Report to further investigate the identified DNS abuse mitigation gaps and to support informed policy action.
The aim/purpose of the Issue Report would be:
- To confirm a given issue is within ICANN's mission, - To explain what the issue is, who it affects, what support there is to address the issue - To recommend whether the issue(s) is within the scope of ICANN’s Mission and properly within the scope of the GNSO policy development process - To suggest, via the development of a draft charter, whether the PDP needs to be modular, allowing for separately scoped and phased work, depending on the topic’s complexity and interdependence, - To identify when a gap/issue is better addressed in a mechanism other than a PDP.
*Recommendation 2: Structure the Issue Report around Three Primary Gaps while maintaining flexibility for broader coverage.* The ST recommends that the Issue Report focus on three gaps identified through the Small Team’s review of compliance/research data, community input, and gap matrix analysis. The ST suggests to only narrowly charter a PDP on three gaps and complete that work expeditiously. Subsequent PDPs could then be initiated from the original Issue Report, when the initial PDP completes its work.
*Recommendation 3: Prioritize the following Three Identified Gaps.* Based on data analysis, community consultation, and input from stakeholder groups, the Small Team recommends the following three gaps be prioritized for early scoping and possible PDP initiation under the Issue Report:
- *Unrestricted API access for new customers:* The INFERMAL study and other community inputs indicate a strong correlation between abuse and unrestricted API-enabled bulk registrations. - *Associated Domain Checks: *The CPH update during ICANN83 indicated that there is currently no contractual requirement or best practice standard requiring contracted parties to investigate domains associated with known malicious actors. - *Limited coordination on DGA-based abuse:* The current system for responding to Domain Generation Algorithm (DGA)-based threats commonly used in botnets and malware campaigns seems to be fragmented. No single trusted platform or protocol for real-time information sharing between registries, registrars, hosting providers, and law enforcement means fragmentation causing delays and inconsistent responses.
I note that these somewhat align with At-Large's input of:
12. Gap 2 Withhold unrestricted API access for new customers 08. Gap 1: Investigate associated domains 13. Gap 5: Inefficient coordination on DGA-based abuse to support LEA
I will report on any further progress post GNSO Council's August 2025 meeting.
Kind regards, Justine
On Thu, 17 Jul 2025 at 15:40, Justine Chew <justine.chew.icann@gmail.com> wrote:
Dear CPWG Members,
As indicated during the CPWG call of 16 July 2025, I was unable to present the results of the At-Large CPWG Poll on prioritizing identified DNS Abuse Gaps at the call itself.
With the short extension of time given, we got a few more responses.
I am now sharing the results of the poll which was closed on 16 July at 23:59 UTC. [image: image.png]
[image: image.png]
These 2 screenshots are drawn from the slide deck <https://icann-community.atlassian.net/wiki/download/attachments/370246404/20...> posted on the CPWG 16 July agenda wiki <https://icann-community.atlassian.net/wiki/x/BIMRFg>.
I will be sharing the results of the At-Large High Priority Gaps in order of prioritization (i.e. the first screenshot) with the GNSO Council DNS Abuse Small Team shortly.
Thank you to the respondents of this poll and the earlier survey on these DNS Abuse Gaps.
Kind regards, Justine
_______________________________________________ CPWG mailing list -- cpwg@icann.org To unsubscribe send an email to cpwg-leave@icann.org
_______________________________________________ By submitting your personal data, you consent to the processing of your personal data for purposes of subscribing to this mailing list accordance with the ICANN Privacy Policy (https://www.icann.org/privacy/policy) and the website Terms of Service (https://www.icann.org/privacy/tos). You can visit the Mailman link above to change your membership status or configuration, including unsubscribing, setting digest-style delivery or disabling delivery altogether (e.g., for a vacation), and so on.
participants (2)
-
Justine Chew -
Olivier MJ Crépin-Leblond