July 2022 - GNSO-TPR - lists.icann.org

Meeting Invitation | Transfer Policy Review PDP WG call | Tuesday, 12 July 2022
by Julie Bisland July 5, 2022

July 5, 2022

Dear all, The next Transfer Policy Review PDP WG call is scheduled for Tuesday, 12 July 2022 at 16:00 UTC for 90 minutes. Zoom Room Information: Main Zoom Webinar link: https://icann.zoom.us/j/95363727469?pwd=N3A3OWFSaTlUME9wZzlGajk5VUI3QT09 <https://urldefense.com/v3/__https:/icann.zoom.us/j/95363727469?pwd=N3A3OWFS…> Passcode: @TP/^*4wg# If you are joining via audio only: One tap mobile: US: +19294362866,,95363727469#,,,,*7490739013# or +13017158592,,95363727469#,,,,*7490739013# Telephone: Dial (for higher quality, dial a number based on your current location): US: +1 929 436 2866 or +1 301 715 8592 or +1 312 626 6799 or +1 669 900 6833 or +1 253 215 8782 or +1 346 248 7799 or 888 788 0099 (Toll Free) or 877 853 5247 (Toll Free) Webinar ID: 953 6372 7469 Passcode: 7490739013 International numbers available: https://icann.zoom.us/u/acdLFXPLp6 <https://urldefense.com/v3/__https:/icann.zoom.us/u/acdLFXPLp6__;!!PtGJab4!v…> Members, alternates, and observers all have different access and participation directions, please read below! ALL: Before joining the call: * Please send apologies and dial out requests to gnso-secs(a)icann.org<mailto:gnso-secs@icann.org> only * Please be sure you have read the ICANN Expected Standards of Behavior<https://www.icann.org/resources/pages/expected-standards-2016-06-28-en> * Visit the Wiki Agenda meeting page: https://community.icann.org/x/3wIVD * Check your time zone: https://tinyurl.com/2sjukenb ONLY FOR MEMBERS & ALTERNATES: * Please join via the Main Zoom Webinar link above; staff will promote you to panelist. * Chat: Members (and alternates replacing members), please select Everyone so everyone can see and so it’s captured afterwards. * Alternate replacement confirmations – For tracking alternate replacements, use the google form [docs.google.com]<https://urldefense.com/v3/__https:/docs.google.com/forms/d/e/1FAIpQLScXP3-H…> to communicate the replacement (alternate) and the duration. This information will be publicly posted to the Alternate Log-Transfer Policy Review PDP<https://community.icann.org/x/V4aUCQ> wiki page. * Alternates (not replacing a member): Rename your line by adding THREE Zs (zzz) before your name and add, in parentheses (your affiliation - alternate) after your name. To rename in Zoom, hover over your name and click ‘rename’. * Alternates (not replacing a member) are not allowed to engage in the chat or use any of the other zoom room functionalities such as raising hands or agreeing/disagreeing. ONLY FOR OBSERVERS: * Observers will have ability to view member chat and information shared in the zoom webinar room. Observers will not be able to use chat or raise hands. Thank you. Kind regards, Julie

1 0

Post Call | Transfer Policy Review PDP WG | Tuesday, 05 July 2022
by Julie Bisland July 5, 2022

July 5, 2022

Dear all, All recordings for the Transfer Policy Review PDP WG call held on Tuesday, 05 July 2022 at 16:00 UTC can be found on the agenda wiki page <https://community.icann.org/x/3AIVD> (attendance included) and the GNSO Master calendar <https://urldefense.com/v3/__https:/gnso.icann.org/en/group-activities/calen…> . These include: * Attendance * Audio recording * Zoom chat archive * Zoom recording (including audio, visual, rough transcript) * Transcript As a reminder only members and alternates can join the call as a Panelist, observers can join as an Attendee to listen. For additional information, you may consult the mailing list archives <https://mm.icann.org/pipermail/gnso-tpr/> and the main wiki page<https://community.icann.org/x/P4aUCQ>. Thank you. With kind regards, Julie

1 0

Notes and action items - TPR WG Meeting #52 - 05 July 2022 at 16:00 UTC
by Julie Hedlund July 5, 2022

July 5, 2022

Dear TPR WG members, Please find below the notes and action items from today’s meeting. The next meeting will be Tuesday, 12 July at 16:00 UTC. Best regards, Emily, Julie, Berry, and Caitlin Action Items: WG members are encouraged to provide additional inputs in the working document at: https://docs.google.com/document/d/1gu4sXGvyJeWJIfvaK_I7GKA6lAdfKFPQKaN4UMg… (table on page 8) prior to the next meeting on 12 July. Notes: Transfer Policy Review Phase 1(b) - Meeting #52 Proposed Agenda 12 July 2022 1. Roll Call & SOI updates SOI Update from Catherine Merdinger: https://community.icann.org/display/gnsosoi/Catherine+Merdinger+SOI 2. Welcome and Chair Updates * Reminder that the Phase 1(a) Initial Report is out for public comment. Closes on 02 August. * Reminder that we will take a few weeks off at the end of August – 6 more sessions before the break. During the break would be a good time to review the public comments. 3. WG Analysis of Key Elements of CoR See: https://docs.google.com/document/d/1gu4sXGvyJeWJIfvaK_I7GKA6lAdfKFPQKaN4UMg…, table on page 8 For reference, here is the Transfer Policy: https://www.icann.org/resources/pages/transfer-policy-2016-06-01-en Overview: * In Phase 1(a) we found that this was a helpful exercise to look at the high-level elements and the functions that they serve. Make sure everyone understands them and think about whether or not they make sense. We’ve heard that people want to make changes but drilling down on the elements will help us to focus the discussion. * CoR policy is pretty compact. Think with this table we’ll hit on all of the topics of the policy. The first element is key – to confirm that the domain name is eligible for CoR. Policy Elements: Confirm the domain name is eligible for Change of Registrant (Section II.C.1.1). WG Notes: * Thinking through the reasons we might not allow CoR, section 2.1 still seems reasonable. 2.2 may need to change. 2.3 also reasonable. * Wonder if there should be something in here where the name is in violation of the registrar’s policies as a reason why the registrar could hold up a CoR. It’s not really a dispute and wouldn’t be a court order. * I like 3; we might put a placeholder that we might need to expand these reasons. * Could consider carrying over language from Phase 1(a). Obtain confirmation of the Change of Registrant request from the New Registrant, or a Designated Agent of the New Registrant, and provide certain required notifications (Section II.C.1.2). WG Notes: * This section is confusing and doesn’t add much. * Would it make sense if it as a notification instead of a confirmation? * Don’t think we need a confirmation at this stage – maybe a notification. Something that allows a person to quickly flag it’s a problem or to undo it. Replace confirmation with notification. * A point from a prior call: CoR in combination with change of registrar, why having these intertwined muddles the policy. CoR looks to the registry like a change of registrar but usually isn’t. These are two very different situations. * Seems like there is good support for changing confirmation to notification – any objections? (none) Inform the Prior Registrant or its Designated Agent that if its final goal is to transfer the domain name to a different registrar, the Prior Registrant is advised to request the inter-registrar transfer before the Change of Registrant to avoid triggering the 60-day lock (Section II.C.1.3) WG Notes: * This is the next stage, that there are two parts to this – warn them that this has an impact if there also is a change of registrar. * There are a couple of ways today to avoid a 60-day lock. * Does a 60-day lock make sense? Is 60 days the right number? Is there a way to opt out? * Not sure why we went with 60 days, maybe just mirroring other lock time periods. Maybe say that the registrar must remove the lock if requested (instead of MAY). * Maybe we drop to 30 days to mirror what we decided in Phase 1(a). * From the IRTP-C Final Report: “The 60-day lock is used to “contain” the changes of Registrants within a single Registrar in order to facilitate recovery of domains that have been hijacked.” * Don’t think we need it, but if we have it, it should follow the timing of the registrar transfer. * At least all registrar should have the same policy. * Maybe leave it for the registrar to decide and remove it from the policy. * Sounds like there is support for removing the lock. * Should the policy state that there should not be a lock? * Maybe we fix this by considering how to address this in the transfer reversal process. * Could keep it but reduce it to 30 days. If we remove it that is a security vulnerability. We should not compromise security. * Need a rationale for keeping it. Could be helpful to have numbers to support both arguments. Maybe from ICANN Compliance? * You can opt out of the lock currently, if the registrar offers that option. Not all registrar offer this. * Suggest including in the policy the ability to remove the lock – it’s not currently there or unclear. * Three proposals: 1) remove the lock; 2) keep but shorten the timeframe; 3) keeping it but allowing a registrant to get the lock removed. Obtain confirmation of the Change of Registrant request from the Prior Registrant, or the Designated Agent of the Prior Registrant (Section II.C.1.4). WG Notes: * Similar to the confirmation of the new registrant, this is the confirmation of the Prior Registrant. Big question is whether you need a confirmation or is a notification sufficient. * Doesn’t really serve a purpose to prevent domain name hijacking. * Changing from confirmation to notification is a suggestion. * Maybe have the option for a fast undo. * Wonder if there are good examples of a secure method of communication that is more secure than the current practice? * Could be notification only with an option to dispute. * Needs to be a balance of level of security. * Could we at least simplify the language in the policy? * In Phase 1(a) we talked about the importance of the TAC for security. Is there something that we can have that the notification between the prior and new registrant is secure? * We do need to be mindful of the difference between notification and confirmation. There is ambiguity in the definition of “secure” in this context/language. Not sure if “secure” is the right way to word this. * Sorry, the formatting of that is terrible, but secure mechanism is discussed in the implementation notes and was designed to provide some flexibility for implementation. * Do we need something more that the change request is valid? Just need the appropriate level of security. * Can we do something better here? Probably not at the cost of flexibility. * Good point... Sarah brings up the difference between changing data WITHIN a particular account (at a registrar) and moving a registration ACROSS accounts (at a registrar). Maybe the policy needs to accommodate these two very different actions. * We should look at what other companies do for account management accuracy. * Going back to an earlier point: changing account information irrespective of industry. Under GDPR data subjects have certain rights to accuracy, but that doesn’t preclude security. If you are doing industry practices in a secure manner that would not violate GDPR. Having an out-of-bound authentication as a security policy shouldn’t violate GDPR. * Think that the push here was to remove the confirmation and changing it to notification. Process the Change of Registrant within one (1) day of obtaining the confirmations (Section II.C.1.5). WG Notes: * If we change confirmations to notifications how does that affect this part of the policy? Does it still apply? No longer than 1 day from notification of both parties? * The key to this is to make sure the process continues and is completed. But when does the 1-day period start? * Because there is no confirmation don’t think there is a place for this 1-day timeframe. * The key is that they wanted to get the updates done at the registrar within a reasonable time. * If this CoR is on the registry level there is no way to verify that. * The 1 day was meant to be at the registrar level. * Section 1.5 was the mechanism to force the change to happen. * 1.5 needs to be updated that when those notification are sent (if we change from confirmation) that happens within 1 day. * If we are moving to notification from confirmation we don’t need 1.5. Notify the Prior Registrant and New Registrant before or within one day of the completion of the Change of Registrant (Section II.C.1.6). This notification includes informing the Prior Registrant and New Registrant of the 60-day inter-registrar transfer lock or informing the Prior Registrant that it previously opted out of the 60-day inter-registrar transfer lock (Section II.C.1.6.4). WG Notes: * Seems to be okay when talking about notifications (versus confirmations). Seems to still be appropriate. * Should add in the dispute process, which we need to create. Impose a 60-day inter-registrar transfer lock, unless the Registered Name Holder had previously opted out (Section II.C.2). WG Notes: * Do we remove it, shorten it, have a way to opt out? Think about these questions for the next call, also in the context of moving to notifications instead of confirmations. * Any additional inputs will be welcome in the working doc between then and next week's call. 4. AOB: Next meeting, Tuesday, 12 July at 16:00 UTC.

1 0

**AT THE TOP OF THE HOUR** Meeting Invitation | Transfer Policy Review PDP WG call | Tuesday, 05 July 2022
by Julie Bisland July 5, 2022

July 5, 2022

**AT THE TOP OF THE HOUR** Dear all, The next Transfer Policy Review PDP WG call is scheduled for Tuesday, 05 July 2022 at 16:00 UTC for 90 minutes. Zoom Room Information: Main Zoom Webinar link: https://icann.zoom.us/j/95363727469?pwd=N3A3OWFSaTlUME9wZzlGajk5VUI3QT09 <https://urldefense.com/v3/__https:/icann.zoom.us/j/95363727469?pwd=N3A3OWFS…> Passcode: @TP/^*4wg# If you are joining via audio only: One tap mobile: US: +19294362866,,95363727469#,,,,*7490739013# or +13017158592,,95363727469#,,,,*7490739013# Telephone: Dial (for higher quality, dial a number based on your current location): US: +1 929 436 2866 or +1 301 715 8592 or +1 312 626 6799 or +1 669 900 6833 or +1 253 215 8782 or +1 346 248 7799 or 888 788 0099 (Toll Free) or 877 853 5247 (Toll Free) Webinar ID: 953 6372 7469 Passcode: 7490739013 International numbers available: https://icann.zoom.us/u/acdLFXPLp6 <https://urldefense.com/v3/__https:/icann.zoom.us/u/acdLFXPLp6__;!!PtGJab4!v…> Members, alternates, and observers all have different access and participation directions, please read below! ALL: Before joining the call: * Please send apologies and dial out requests to gnso-secs(a)icann.org<mailto:gnso-secs@icann.org> only * Please be sure you have read the ICANN Expected Standards of Behavior<https://www.icann.org/resources/pages/expected-standards-2016-06-28-en> * Visit the Wiki Agenda meeting page: https://community.icann.org/x/3AIVD * Check your time zone: https://tinyurl.com/yckz6c6a [tinyurl.com]<https://urldefense.com/v3/__https:/tinyurl.com/yckz6c6a__;!!PtGJab4!7Hck3qr…> ONLY FOR MEMBERS & ALTERNATES: * Please join via the Main Zoom Webinar link above; staff will promote you to panelist. * Chat: Members (and alternates replacing members), please select Everyone so everyone can see and so it’s captured afterwards. * Alternate replacement confirmations – For tracking alternate replacements, use the google form [docs.google.com]<https://urldefense.com/v3/__https:/docs.google.com/forms/d/e/1FAIpQLScXP3-H…> to communicate the replacement (alternate) and the duration. This information will be publicly posted to the Alternate Log-Transfer Policy Review PDP<https://community.icann.org/x/V4aUCQ> wiki page. * Alternates (not replacing a member): Rename your line by adding THREE Zs (zzz) before your name and add, in parentheses (your affiliation - alternate) after your name. To rename in Zoom, hover over your name and click ‘rename’. * Alternates (not replacing a member) are not allowed to engage in the chat or use any of the other zoom room functionalities such as raising hands or agreeing/disagreeing. ONLY FOR OBSERVERS: * Observers will have ability to view member chat and information shared in the zoom webinar room. Observers will not be able to use chat or raise hands. Thank you. Kind regards, Julie

1 0

Reminder: Meeting Invitation | Transfer Policy Review PDP WG call | Tuesday, 05 July 2022
by Nathalie Peregrine July 4, 2022

July 4, 2022

Dear all, The next Transfer Policy Review PDP WG call is scheduled for Tuesday, 05 July 2022 at 16:00 UTC for 90 minutes. Zoom Room Information: Main Zoom Webinar link: https://icann.zoom.us/j/95363727469?pwd=N3A3OWFSaTlUME9wZzlGajk5VUI3QT09 <https://urldefense.com/v3/__https:/icann.zoom.us/j/95363727469?pwd=N3A3OWFS…> Passcode: @TP/^*4wg# If you are joining via audio only: One tap mobile: US: +19294362866,,95363727469#,,,,*7490739013# or +13017158592,,95363727469#,,,,*7490739013# Telephone: Dial (for higher quality, dial a number based on your current location): US: +1 929 436 2866 or +1 301 715 8592 or +1 312 626 6799 or +1 669 900 6833 or +1 253 215 8782 or +1 346 248 7799 or 888 788 0099 (Toll Free) or 877 853 5247 (Toll Free) Webinar ID: 953 6372 7469 Passcode: 7490739013 International numbers available: https://icann.zoom.us/u/acdLFXPLp6 <https://urldefense.com/v3/__https:/icann.zoom.us/u/acdLFXPLp6__;!!PtGJab4!v…> Members, alternates, and observers all have different access and participation directions, please read below! ALL: Before joining the call: * Please send apologies and dial out requests to gnso-secs(a)icann.org<mailto:gnso-secs@icann.org> only * Please be sure you have read the ICANN Expected Standards of Behavior<https://www.icann.org/resources/pages/expected-standards-2016-06-28-en> * Visit the Wiki Agenda meeting page: https://community.icann.org/x/3AIVD * Check your time zone: https://tinyurl.com/yckz6c6a [tinyurl.com]<https://urldefense.com/v3/__https:/tinyurl.com/yckz6c6a__;!!PtGJab4!7Hck3qr…> ONLY FOR MEMBERS & ALTERNATES: * Please join via the Main Zoom Webinar link above; staff will promote you to panelist. * Chat: Members (and alternates replacing members), please select Everyone so everyone can see and so it’s captured afterwards. * Alternate replacement confirmations – For tracking alternate replacements, use the google form [docs.google.com]<https://urldefense.com/v3/__https:/docs.google.com/forms/d/e/1FAIpQLScXP3-H…> to communicate the replacement (alternate) and the duration. This information will be publicly posted to the Alternate Log-Transfer Policy Review PDP<https://community.icann.org/x/V4aUCQ> wiki page. * Alternates (not replacing a member): Rename your line by adding THREE Zs (zzz) before your name and add, in parentheses (your affiliation - alternate) after your name. To rename in Zoom, hover over your name and click ‘rename’. * Alternates (not replacing a member) are not allowed to engage in the chat or use any of the other zoom room functionalities such as raising hands or agreeing/disagreeing. ONLY FOR OBSERVERS: * Observers will have ability to view member chat and information shared in the zoom webinar room. Observers will not be able to use chat or raise hands. Thank you. Kind regards, Julie

1 0

Proposed agenda for meeting #52 on Tuesday 5 July at 16:00 UTC
by Emily Barabas July 1, 2022

July 1, 2022

Dear Working Group members, Please find below the proposed agenda for the next meeting scheduled to take place on Tuesday 5 July 2022 at 16:00 UTC. Kind regards, Julie, Berry, Caitlin, and Emily Transfer Policy Review Phase 1(b) - Meeting #52 Proposed Agenda 5 July 2022 1. Roll Call & SOI updates 2. Welcome and Chair Updates 3. WG Analysis of Key Elements of CoR 4. AOB * Next session: Tuesday 12 July at 16:00 UTC

1 0