Hello all,

Thank you for a productive meeting today. 

Re the topic of §1.4, I think the whole section including the sub-points (1.4.1 - 1.4.4) should be moved from Implementation Notes to Policy, and we may need a note similar to the one there (about implementation) but the specifics of the note may need to change. 

Most of the requirements we need in 1.4 are already there, but there are a few more things we should work through, and areas where this will connect in to other recs: 

• The responding party needs to know a requestor really is authenticated - is there a way to look them up or confirm a token or something else? Can the responding party view the existing accredited users? (This may be covered by 1.4.2)
• Does (should) the system track data on how the authentication is used in relation to disclosure requests? Who has access to that data?
• What public reporting is done? What private reporting is done, and to whom? - This ties to Rec 17 but we may need to include relevant requirements here. 
• Who audits the system operator to ensure adherence to requirements? What happens if the system operator does not adhere to requirements? - This is tied to Rec 16 but again may need groundwork laid here.

Thank you,

Dear SRT Members,

 

Thank you for your engaged participation in today’s Day 0 meeting.  Please find linked a pdf copy of the key points and flowchart discussed during today’s meeting.

 

Please see below for our discussion questions for tomorrow’s face to face meeting. These discussion questions aim to build on the key points that were discussed today.

 

Discussion questions for tomorrow’s meeting

• What aspects of Section 1.4 should move from Implementation Guidance to Policy Recommendation?
• What is the minimum information a data controller needs from an authenticated user in order to evaluate and make a disclosure decision?  
• Can we agree to combine recommendations 1 and 2. If yes, what information from recommendation 2 needs to be moved to recommendation 1?

 

Please see below for tomorrow’s meeting time and location:

Date and Time : 10:00am - 11:15am CEST

Location: FIBES Conference and Exhibition Centre in Madrid (GNSO) - Floor 3 or via zoom (see sched schedule for zoom link)

 

We look forward to seeing you all tomorrow.

 

Sincerely, 

Andrew

 

-- 

Andrew Chen

Policy Development Support Sr. Specialist, Policy Development Support

Internet Corporation for Assigned Names and Numbers (ICANN)

https://www.icann.org/

 

 

_______________________________________________
Gnso-ssad mailing list -- gnso-ssad@icann.org
To unsubscribe send an email to gnso-ssad-leave@icann.org