Dear All, Please see below the action items captured by staff from the RPM PDP Working Group call held on 04 December 2019 at 17:00 UTC. Staff will post these to the wiki space. Please note that these are high-level notes and are not meant as a substitute for the recording, chat room, or transcript. The recording, Zoom chat, transcript and attendance records are posted on the wiki at: https://community.icann.org/display/RARPMRIAGPWG/2019-12-04+Review+of+all+Ri.... Best Regards, Julie Julie Hedlund, Policy Director == NOTES & ACTION ITEMS Actions: Page 10 (bottom of page): F. REMEDIES - 2. Duration of suspension period; 3. Review of implementation, POLICY RECOMMENDATION (Providers ST): ACTION: Staff to provide revised text for WG review. See: “The Providers Sub Team discovered issues with respect to implementing the outcomes of a URS proceeding (e.g. relief awarded following a URS decision, or where the parties settle the case prior to Determination and a transfer at the registrar level is required, or where a Complainant’s requests to extend a suspension.” Page 15 (top of the page): F. REMEDIES - 4. Other topics: ACTIONS: 1) Add a bullet: “What would need to be done to help resolve the issues you have encountered?” 2) Note in the table that the following text should be added as a footnote in the Initial Report and vet by GDD (done). Also, in the initial report provide the context for why this remedy is relevant to a URS suspension: “HSTS preloading is a function built into the browser whereby a global list of hosts enforce the use of HTTPS ONLY on their site. This removes the opportunity an attacker has to intercept and tamper with redirects over HTTP. The aforementioned remedy is to suspend the HSTS preloading function of a domain name.” Page 20 (bottom of the page): J. LANGUAGE ISSUES - 1. Language issues, including current requirements for complaint, notice of complaint, response, determination ACTION ITEM: Rewrite the text to avoid the use of the term “privacy shield”. See: “Such guidance should take into account the fact that domains subject to a URS complaint may have been registered via a privacy or proxy service.” Notes: 1. Updates to Statements of Interest: -- Zak Muscovitch joined the At-Large Advisory Committee as an individual member. -- Susan Payne was re-elected as IPC Secretary. 2. Working Group to complete discussions regarding the recommendations of the URS Sub Teams’ to go into the Initial Report, see: https://docs.google.com/document/d/1jlsM6yl3A9ssPdHymjZwoSQXsncsl8h_9oOE1vFY... [docs.google.com] [docs.google.com]<https://urldefense.proofpoint.com/v2/url?u=https-3A__docs.google.com_documen...> (page 4) Page 10 (bottom of page): F. REMEDIES - 2. Duration of suspension period; 3. Review of implementation, POLICY RECOMMENDATION (Providers ST): ACTION: Staff to provide revised text for WG review. See: “The Providers Sub Team discovered issues with respect to implementing the outcomes of a URS proceeding (e.g. relief awarded following a URS decision, or where the parties settle the case prior to Determination and a transfer at the registrar level is required, or where a Complainant’s requests to extend a suspension.” Page 15 (top of the page): F. REMEDIES - 4. Other topics: ACTIONS: Add a bullet: “What would need to be done to help resolve the issues you have encountered?” Note in the table that the following text should be added as a footnote in the Initial Report and vet by GDD (done). Also, in the initial report provide the context for why this remedy is relevant to a URS suspension: “HSTS preloading is a function built into the browser whereby a global list of hosts enforce the use of HTTPS ONLY on their site. This removes the opportunity an attacker has to intercept and tamper with redirects over HTTP. The aforementioned remedy is to suspend the HSTS preloading function of a domain name.” Page 20 (bottom of the page): J. LANGUAGE ISSUES - 1. Language issues, including current requirements for complaint, notice of complaint, response, determination ACTION ITEM: Rewrite the text to avoid the use of the term “privacy shield”. See: “Such guidance should take into account the fact that domains subject to a URS complaint may have been registered via a privacy or proxy service.”