Dear all,
Please find below the Adobe Connect recording, chat and attendance from the Next-Gen RDS drafting team #7:Criminal Investigation or DNS Abuse Mitigation call on
Tuesday, 07 November 2017 at 16:00 UTC.
Adobe Connect recording: https://participate.icann.org/p9qxcaro729/
Attendance:
Dick Leaning, Rod Rasmussen, Marc Anderson
Apologies:
Kiran Malancharuvil
Staff: Marika Konings, Michelle DeSmyter
Thank you.
Kind regards,
Michelle
Adobe Connect Chat:
Michelle DeSmyter:Welcome to the Next-Gen RDS Drafting team #7: Criminal Investigation or DNS Abuse Mitigation on Tuesday, 07 November 2017 at 16:00 UTC.
Dick Leaning:afternoon guys
Dick Leaning:do we ever get a day off ;-(
Michelle DeSmyter:Hi there Dick, welcome!
Marika Konings:Not at ICANN! ;-)
Dick Leaning:lol
Dick Leaning:its just not the ICANN way, right
Marika Konings:Sorry for being late - am waiting for my dial out to come through.
Marika Konings:For some reason there is no dial in number for Costa Rica with Verizon.
Rod Rasmussen:Still waiting for an operator to let me on the call
Marc Anderson:Still dialing in here as well
Michelle DeSmyter:I will alert them. that you are both dialing in,
Dick Leaning:ok - get it
Rod Rasmussen:I don't think we have just one - at least 3, but probably more.
Dick Leaning:investigation? rod
Dick Leaning:where would that sort of fall
Dick Leaning:in the bundle
Dick Leaning:Notification?
Marika Konings:I've noted them on the right hand side
Marika Konings:At least 3, but probably more: identification of a domain name has been registered maliciously, notification of certain action associated with abuse, risk assessment of domains.
Rod Rasmussen:Investigate, notify, automate reputation
Dick Leaning:ok
Rod Rasmussen:Investigate is ALL investigation, not just criminal
Dick Leaning:i was just about to say that
Rod Rasmussen:notify is notify the appropriate party (registrant, hoster, registrar, etc.)
Rod Rasmussen:You can argue that identify is part of investigate
Dick Leaning:lets not use criminal as word
Dick Leaning:in this
Marika Konings:“The following information is collected for the purpose of enabling notification by law enforcement, cybersecurity professionals and IT administrators of the appropriate party (registrant, hoster,
registrar, etc), of abuse linked to a certain domain name registration to allow for mitigation and resolution of the abuse identified: [add data elements]
Dick Leaning:we need capture the spirt tha there are others
Dick Leaning:yes
Rod Rasmussen:Instead of "hoster" use "providers of associated services"
Rod Rasmussen:That would cover hosting, email, DNS, and other things that may be being abused.
Rod Rasmussen:Yes Marc - for example, DNS contact
Rod Rasmussen:SSAC is likely to propose that a future RDS have that for operational issues around DNSSEC for example but would also be applicable for some abuse issues.
Marika Konings:Present the consequences of not giving consent?
Dick Leaning:yep
Dick Leaning:great
Dick Leaning:bye buye