Dear all, Please find below the Adobe Connect recording, chat and attendance from the Next-Gen RDS drafting team #7:Criminal Investigation or DNS Abuse Mitigation call on Tuesday, 07 November 2017 at 16:00 UTC. Adobe Connect recording: https://participate.icann.org/p9qxcaro729/ Attendance: Dick Leaning, Rod Rasmussen, Marc Anderson Apologies: Kiran Malancharuvil Staff: Marika Konings, Michelle DeSmyter Thank you. Kind regards, Michelle Adobe Connect Chat: Michelle DeSmyter:Welcome to the Next-Gen RDS Drafting team #7: Criminal Investigation or DNS Abuse Mitigation on Tuesday, 07 November 2017 at 16:00 UTC. Dick Leaning:afternoon guys Dick Leaning:do we ever get a day off ;-( Michelle DeSmyter:Hi there Dick, welcome! Marika Konings:Not at ICANN! ;-) Dick Leaning:lol Dick Leaning:its just not the ICANN way, right Marika Konings:Sorry for being late - am waiting for my dial out to come through. Marika Konings:For some reason there is no dial in number for Costa Rica with Verizon. Rod Rasmussen:Still waiting for an operator to let me on the call Marc Anderson:Still dialing in here as well Michelle DeSmyter:I will alert them. that you are both dialing in, Dick Leaning:ok - get it Rod Rasmussen:I don't think we have just one - at least 3, but probably more. Dick Leaning:investigation? rod Dick Leaning:where would that sort of fall Dick Leaning:in the bundle Dick Leaning:Notification? Marika Konings:I've noted them on the right hand side Marika Konings:At least 3, but probably more: identification of a domain name has been registered maliciously, notification of certain action associated with abuse, risk assessment of domains. Rod Rasmussen:Investigate, notify, automate reputation Dick Leaning:ok Rod Rasmussen:Investigate is ALL investigation, not just criminal Dick Leaning:i was just about to say that Rod Rasmussen:notify is notify the appropriate party (registrant, hoster, registrar, etc.) Rod Rasmussen:You can argue that identify is part of investigate Dick Leaning:lets not use criminal as word Dick Leaning:in this Marika Konings:"The following information is collected for the purpose of enabling notification by law enforcement, cybersecurity professionals and IT administrators of the appropriate party (registrant, hoster, registrar, etc), of abuse linked to a certain domain name registration to allow for mitigation and resolution of the abuse identified: [add data elements] Dick Leaning:we need capture the spirt tha there are others Dick Leaning:yes Rod Rasmussen:Instead of "hoster" use "providers of associated services" Rod Rasmussen:That would cover hosting, email, DNS, and other things that may be being abused. Rod Rasmussen:Yes Marc - for example, DNS contact Rod Rasmussen:SSAC is likely to propose that a future RDS have that for operational issues around DNSSEC for example but would also be applicable for some abuse issues. Marika Konings:Present the consequences of not giving consent? Dick Leaning:yep Dick Leaning:great Dick Leaning:bye buye