August 2022 - GNSO-TPR - lists.icann.org

Canceled: Transfer Policy Review PDP WG
by ICANN Policy Calendar Aug. 5, 2022

Aug. 5, 2022

Meeting: Transfer Policy Review PDP WG Date/Time: Every Tuesday at 16:00 UTC for 90 minutes, 06 September 2022 - 25 October 2022 (CANCELLED: 20 Sept, 27 Sept) Join the Zoom Webinar: https://icann.zoom.us/j/95363727469?pwd=N3A3OWFSaTlUME9wZzlGajk5VUI3QT09 Passcode: @TP/^*4wg# ALL: Before joining the call: * Please send apologies and dial out requests to gnso-secs(a)icann.org<mailto:gnso-secs@icann.org> only * Please be sure you have read the ICANN Expected Standards of Behavior<https://www.icann.org/resources/pages/expected-standards-2016-06-28-en> * Wiki agenda page (6 September): https://community.icann.org/x/BwVpD * Time conversion link: https://tinyurl.com/2p9dervv ONLY for Members & Alternates: * Please join via the above Zoom Webinar link and staff will promote you to Panelist * Alternate replacement confirmations – In order to keep track of alternate replacements, use the google form<https://docs.google.com/forms/d/e/1FAIpQLScXP3-H595xH4EFgaR3ydOr-1o9BLAVGUI…> to communicate who the alternate is replacing and for which period. This information will be posted to the Alternate Log-Transfer Policy Review PDP wiki page<https://community.icann.org/x/V4aUCQ>. * Members and alternates replacing members, please select Everyone when posting to the chat in order for everyone to see and to be captured afterwards. * Alternates (not replacing a member): Please rename your line in Zoom by adding THREE Zs “zzz” before your name, and in parentheses, (your affiliation - alternate), after your name. To rename in Zoom, hover over your name and click ‘rename’. * Alternates (not replacing a member) are not allowed to engage in the chat or use any of the other zoom room functionalities such as raising hands or agreeing/disagreeing. ONLY for Observers: * Observers will have ability to view member chat and information shared in the zoom webinar room. Observers will not be able to use chat or raise hands. For Audio only: One tap mobile: US: +19294362866,,95363727469#,,,,*7490739013# or +13017158592,,95363727469#,,,,*7490739013# Webinar ID: 953 6372 7469 Passcode: 7490739013 International numbers available: https://icann.zoom.us/u/acdLFXPLp6

1 0

Canceled: Transfer Policy Review PDP WG
by ICANN Policy Calendar Aug. 5, 2022

Aug. 5, 2022

Meeting: Transfer Policy Review PDP WG Date/Time: Every Tuesday at 16:00 UTC for 90 minutes, 06 September 2022 - 25 October 2022 (CANCELLED: 20 Sept, 27 Sept) Join the Zoom Webinar: https://icann.zoom.us/j/95363727469?pwd=N3A3OWFSaTlUME9wZzlGajk5VUI3QT09 Passcode: @TP/^*4wg# ALL: Before joining the call: * Please send apologies and dial out requests to gnso-secs(a)icann.org<mailto:gnso-secs@icann.org> only * Please be sure you have read the ICANN Expected Standards of Behavior<https://www.icann.org/resources/pages/expected-standards-2016-06-28-en> * Wiki agenda page (6 September): https://community.icann.org/x/BwVpD * Time conversion link: https://tinyurl.com/2p9dervv ONLY for Members & Alternates: * Please join via the above Zoom Webinar link and staff will promote you to Panelist * Alternate replacement confirmations – In order to keep track of alternate replacements, use the google form<https://docs.google.com/forms/d/e/1FAIpQLScXP3-H595xH4EFgaR3ydOr-1o9BLAVGUI…> to communicate who the alternate is replacing and for which period. This information will be posted to the Alternate Log-Transfer Policy Review PDP wiki page<https://community.icann.org/x/V4aUCQ>. * Members and alternates replacing members, please select Everyone when posting to the chat in order for everyone to see and to be captured afterwards. * Alternates (not replacing a member): Please rename your line in Zoom by adding THREE Zs “zzz” before your name, and in parentheses, (your affiliation - alternate), after your name. To rename in Zoom, hover over your name and click ‘rename’. * Alternates (not replacing a member) are not allowed to engage in the chat or use any of the other zoom room functionalities such as raising hands or agreeing/disagreeing. ONLY for Observers: * Observers will have ability to view member chat and information shared in the zoom webinar room. Observers will not be able to use chat or raise hands. For Audio only: One tap mobile: US: +19294362866,,95363727469#,,,,*7490739013# or +13017158592,,95363727469#,,,,*7490739013# Webinar ID: 953 6372 7469 Passcode: 7490739013 International numbers available: https://icann.zoom.us/u/acdLFXPLp6

1 0

Transfer Policy Review PDP WG
by ICANN Policy Calendar Aug. 5, 2022

Aug. 5, 2022

Meeting: Transfer Policy Review PDP WG Date/Time: Every Tuesday at 16:00 UTC for 90 minutes, 06 September 2022 - 25 October 2022 (CANCELLED: 20 Sept, 27 Sept) Join the Zoom Webinar: https://icann.zoom.us/j/95363727469?pwd=N3A3OWFSaTlUME9wZzlGajk5VUI3QT09 Passcode: @TP/^*4wg# ALL: Before joining the call: * Please send apologies and dial out requests to gnso-secs(a)icann.org<mailto:gnso-secs@icann.org> only * Please be sure you have read the ICANN Expected Standards of Behavior<https://www.icann.org/resources/pages/expected-standards-2016-06-28-en> * Wiki agenda page (6 September): https://community.icann.org/x/BwVpD * Time conversion link: https://tinyurl.com/2p9dervv ONLY for Members & Alternates: * Please join via the above Zoom Webinar link and staff will promote you to Panelist * Alternate replacement confirmations – In order to keep track of alternate replacements, use the google form<https://docs.google.com/forms/d/e/1FAIpQLScXP3-H595xH4EFgaR3ydOr-1o9BLAVGUI…> to communicate who the alternate is replacing and for which period. This information will be posted to the Alternate Log-Transfer Policy Review PDP wiki page<https://community.icann.org/x/V4aUCQ>. * Members and alternates replacing members, please select Everyone when posting to the chat in order for everyone to see and to be captured afterwards. * Alternates (not replacing a member): Please rename your line in Zoom by adding THREE Zs “zzz” before your name, and in parentheses, (your affiliation - alternate), after your name. To rename in Zoom, hover over your name and click ‘rename’. * Alternates (not replacing a member) are not allowed to engage in the chat or use any of the other zoom room functionalities such as raising hands or agreeing/disagreeing. ONLY for Observers: * Observers will have ability to view member chat and information shared in the zoom webinar room. Observers will not be able to use chat or raise hands. For Audio only: One tap mobile: US: +19294362866,,95363727469#,,,,*7490739013# or +13017158592,,95363727469#,,,,*7490739013# Webinar ID: 953 6372 7469 Passcode: 7490739013 International numbers available: https://icann.zoom.us/u/acdLFXPLp6

1 0

Proposed agenda for meeting #57 on Tuesday 9 August at 16:00 UTC
by Emily Barabas Aug. 4, 2022

Aug. 4, 2022

Dear Working Group members, Please find below the proposed agenda for the next meeting scheduled to take place on Tuesday 9 August 2022 at 16:00 UTC. Prior to the call please review the contents of the aggregate matrix spreadsheet here<https://docs.google.com/spreadsheets/d/1eB3cowSoEp4ERoqQmlc3hc5dpV4g5NzP/ed…>. Please pay particular attention to tab 5, which focuses on a change to Prior Registrant email address (Transfer Policy section II.A.1.1.3 + II.A.1.3.3). As a reminder, if you have not yet done so, there is still an opportunity to complete the matrix assignment and submit responses to staff prior to the next call. See template attached. Kind regards, Julie, Berry, Caitlin, and Emily Transfer Policy Review Phase 1(b) - Meeting #57 Proposed Agenda 9 August 2022 1. Roll Call & SOI updates 2. Welcome and Chair Updates 3. CoR Triggers and Actions Matrix – focus on primary method of contact (currently email) (Transfer Policy section II.A.1.1.3 + II.A.1.3.3), and secondary method of contact (phone number) 4. Preview: Phase 1(a) Initial Report public comment review 5. AOB * Next session: Tuesday 6 September at 16:00 UTC

1 0

Post Call | Transfer Policy Review PDP WG | Tuesday, 02 August 2022
by Julie Bisland Aug. 2, 2022

Aug. 2, 2022

Dear all, All recordings for the Transfer Policy Review PDP WG call held on Tuesday, 02 August 2022 at 16:00 UTC can be found on the agenda wiki page <https://community.icann.org/x/5wIVD> (attendance included) and the GNSO Master calendar <https://urldefense.com/v3/__https:/gnso.icann.org/en/group-activities/calen…> . These include: * Attendance * Audio recording * Zoom chat archive * Zoom recording (including audio, visual, rough transcript) * Transcript As a reminder only members and alternates can join the call as a Panelist, observers can join as an Attendee to listen. For additional information, you may consult the mailing list archives <https://mm.icann.org/pipermail/gnso-tpr/> and the main wiki page<https://community.icann.org/x/P4aUCQ>. Thank you. With kind regards, Julie

1 0

Meeting Invitation | Transfer Policy Review PDP WG call | Tuesday, 09 August 2022
by Julie Bisland Aug. 2, 2022

Aug. 2, 2022

Dear all, The next Transfer Policy Review PDP WG call is scheduled for Tuesday, 09 August 2022 at 16:00 UTC for 90 minutes. Zoom Room Information: Main Zoom Webinar link: https://icann.zoom.us/j/95363727469?pwd=N3A3OWFSaTlUME9wZzlGajk5VUI3QT09 <https://urldefense.com/v3/__https:/icann.zoom.us/j/95363727469?pwd=N3A3OWFS…> Passcode: @TP/^*4wg# If you are joining via audio only: One tap mobile: US: +19294362866,,95363727469#,,,,*7490739013# or +13017158592,,95363727469#,,,,*7490739013# Telephone: Dial (for higher quality, dial a number based on your current location): US: +1 929 436 2866 or +1 301 715 8592 or +1 312 626 6799 or +1 669 900 6833 or +1 253 215 8782 or +1 346 248 7799 or 888 788 0099 (Toll Free) or 877 853 5247 (Toll Free) Webinar ID: 953 6372 7469 Passcode: 7490739013 International numbers available: https://icann.zoom.us/u/acdLFXPLp6 <https://urldefense.com/v3/__https:/icann.zoom.us/u/acdLFXPLp6__;!!PtGJab4!v…> Members, alternates, and observers all have different access and participation directions, please read below! ALL: Before joining the call: * Please send apologies and dial out requests to gnso-secs(a)icann.org<mailto:gnso-secs@icann.org> only * Please be sure you have read the ICANN Expected Standards of Behavior<https://www.icann.org/resources/pages/expected-standards-2016-06-28-en> * Visit the Wiki Agenda meeting page: https://community.icann.org/x/6QIVD * Check your time zone: https://tinyurl.com/yc2debrt ONLY FOR MEMBERS & ALTERNATES: * Please join via the Main Zoom Webinar link above; staff will promote you to panelist. * Chat: Members (and alternates replacing members), please select Everyone so everyone can see and so it’s captured afterwards. * Alternate replacement confirmations – For tracking alternate replacements, use the google form [docs.google.com]<https://urldefense.com/v3/__https:/docs.google.com/forms/d/e/1FAIpQLScXP3-H…> to communicate the replacement (alternate) and the duration. This information will be publicly posted to the Alternate Log-Transfer Policy Review PDP<https://community.icann.org/x/V4aUCQ> wiki page. * Alternates (not replacing a member): Rename your line by adding THREE Zs (zzz) before your name and add, in parentheses (your affiliation - alternate) after your name. To rename in Zoom, hover over your name and click ‘rename’. * Alternates (not replacing a member) are not allowed to engage in the chat or use any of the other zoom room functionalities such as raising hands or agreeing/disagreeing. ONLY FOR OBSERVERS: * Observers will have ability to view member chat and information shared in the zoom webinar room. Observers will not be able to use chat or raise hands. Thank you. Kind regards, Julie

1 0

Notes and action items - TPR WG Meeting #56 - 02 August 2022 at 16:00 UTC
by Julie Hedlund Aug. 2, 2022

Aug. 2, 2022

Dear TPR WG members, Please find below the notes and action items from today’s meeting. The next meeting will be Tuesday, 09 August at 16:00 UTC. Best regards, Emily, Julie, Berry, and Caitlin Action Items: HOMEWORK/ACTION ITEMS: REMINDER – For those WG members who have not already done so, please find attached the analysis matrix to complete either individually or in a small group of your choosing. As you work through the sheet, please feel free to refer to the Google Doc version [docs.google.com]<https://urldefense.com/v3/__https:/docs.google.com/spreadsheets/d/1eB3cowSo…>, which includes example text in italics. Please fill in the full sheet, from your own perspective, and send to emily.barabas(a)icann.org<mailto:emily.barabas@icann.org> no later than Monday, 08 August 2022. This will allow us to discuss any new aggregate responses on our next call scheduled for Tuesday, 09 August. Notes: Transfer Policy Review Phase 1(b) - Meeting #56 Proposed Agenda 02 August 2022 1. Roll Call & SOI updates 2. Welcome and Chair Updates * There were a couple of requests for extension of the public comment period, which was due to close today. It has been extended two weeks until 16 August. * No meetings on the 16th, 23rd, and 30th of August. 3. Review Responses: CoR Triggers and Actions Matrix – see: https://docs.google.com/spreadsheets/d/1eB3cowSoEp4ERoqQmlc3hc5dpV4g5NzP/ed… Overview of the consolidated spreadsheet: * There is a column focused on triggers (column A) and a series of actions. * Received 6 responses: 5 from registrars and 1 from Zak in his personal capacity. * Last set of tabs are complete responses we received. All of these are not on behalf of a particular SG. Useful to look at to see distinct patterns and what might be appropriate for future action. * Get a high-level overview from the respondents. * Deeper dive into some of the actions, without immediately focusing on solutions. * There are some big definitional questions, around change of control for example. Hope these definitions will be teased out. * Other tab is responses by trigger – so starting in the first column with the respondent’s name. * First sheet is all responses related to an update to a registrant’s name that is not a typographical error, for example. * When we are going through some of the responses, this is the first round – these are not to the level of constituency or stakeholder group. At this point it’s important to focus on whether the existing requirements are fit for purpose and the rationale around why or why not. This will translate into the rationale for the Initial Report. Input from Sarah Wyld (summary): * Answers speak for themselves. Column B: If the action is legitimate – we have to assume that the registrar doesn’t know because the action occurs automatically. * On the the question of whether current policies are fit for purpose, we really had to think about what the purpose is – preventing theft of the domain name or allowing the registrant to transfer the domain name. For most of these triggers, the problem is not the change but that someone else is able to make the change fraudulently – change of or lack of control. Not sure the policy is fit for purpose. Input from Catherine Merdinger (summary): * Felt that the designated agent process eliminates a lot of the contacts with registrants. * If the method of contact hasn’t changed then there is no issue for the designated agent even if other things change in the account. Where it might matter when someone owns the domain name but doesn’t have access to the email – but that is a support/admin issue. Only care how I am going to reach you. Don’t think there is a way to design a policy to mitigate any of these changes. Input from Erik Rokobauer (summary): * High-level: agreeing with most people’s comments. * When are we ready to get some recommendations developed. * Biggest confusion was columns G/H – what does it mean when it is close proximity to or part of change of control? * At our registry we have a support function where people can call and verify – this can be nuanced by registrar. It comes down to what the registrar is doing to verify requests or account for changes. Input from Zak Muskovitch (summary): * We are looking at this is for security – minimum standards for transfers. But must all registrar be treated the same? Some registrars have their own security protocols. If some registrars are using mechanisms to verify transfers, then why shouldn’t they be able to follow their own models with respect to transfers (say without having locks)? * These are evolving thoughts and not representative of the BC. Discussion: * We (At-Large) found it difficult to respond to the questions in the matrix due to more registrar focused questioned (no problem with that). * Question Re: Trigger from the Transfer Policy: II.A.1.1.4 Administrative Contact email address, if there is no Prior Registrant email address – this doesn’t seem to make sense with how things are done today. Where does this come from? How could we not have a Prior Registrant email address? Answer: Sarah -- Looked at it as though it could happen – didn’t ask why it could happen. Theo – Back in 2014 discussed that there might be data missing from old data – if there was this unlikely scenario we could rely on the Admin Contact. But now this will no longer be feasible. Maybe there was some evidence of this originally. * Re: Column B – if an action was found to be illegitimate did the resulting action mitigate it? What are the available mechanisms after that? Don’t think there is a specific dispute mechanism. Does it go to a court of law? Columns B, C, and D are there to tease out whether the resulting action is fit for purpose. * In the design of the policy, change of control was a key factor. If the fit for purpose was about mitigating hijacking do these actions accomplish that? * It’s all about balance – does the process help more than it hinders? * The security enhancements in Phase 1A help to address some of these problems. * Columns E/F and G/H because if the original intent was to mitigate domain hijacking, is the name change alone to move into Columns G/H, for example? Not sure a name change is even a theft. If there is a name theft, there probably is a move to another registrar, where Phase 1A security will apply. * In Phase 1A there were two entities – gaining and losing registrar. In CoR there is one entity, the registrant, and actions happening in the same registrar. Not sure why we are spending time on things that are not a problem outside of that registrar. * Thought experiment re: what problem we are trying to solve: depends on your perspective. For a registry, change of control is change of registrar, as in Phase 1A. If it is within a registrar the registry doesn’t care what the registrar does. Moving from one account holder to another account holder is a change of control. Inside of the same account it’s not. Just because an account is changed it’s not necessarily a change of ownership. Even a change in registrar is not necessarily a change in ownership. * What we are concerned about is change of control. * Change of control - between registrars you "sign" a new contract. Even with a registrar, if you create a new account (or whatever the model is at the registrar) there must be a point of "signing a contract”, which from the point of view of a registrar is change of control. it's not about data element comparison. * We should ask whether the solutions in the policy actually worked. * Would change of registrant exist in its current form today if we had some of the security requirements in Phase 1A? * We do need to develop the rationale for any changes to the current policy. * "inter" by definition means between, so changing the registrant within one registrar is not an inter-registrar transfer. * If you think about the primary method of communication with the registered name holder – such as email – that may well be a material change that has some required mitigating action. * Re: Catherine’s input, the way you contact someone is the most important thing – the anchor contact method. * Would like to see that any material change should trigger notification and no other action; if there is any lock it should be a consistent time – such as 30 days. * Before we can get to recommendations we still have to provide a rationale for why the current policy isn’t fit for purpose. * We need to look at what is actually happening today, particularly with locks. * Most registrar will place a lock but some will NACK, not necessarily visible. * Question: When the CoR is invoked, there have been several mentions of the confusion that it causes. Where is this confusion happening and why? Answer: Many registrants don’t realize that they have to opt out of the lock and then are frustrated when they are locked from transferring. Question is how much you explain. Ultimately it because a customer support issue. * Right - and we don’t want to hinder offering additional security features on top of the mandatory policy requirements. * Yes, that is correct I believe. but if those services prevent unauthorized transfers more effectively than without them, why would such registrars need to abide by locks which result at registrars without such additional mechanism? Just a question I have been pondering. * Registrars want to offer value-added security services, but these are not the default. * Next week start getting into the specifics. There are a lot of patterns here. 4. AOB -- Next session: Tuesday 9 August at 16:00 UTC

1 0

**AT THE TOP OF THE HOUR** Meeting Invitation | Transfer Policy Review PDP WG call | Tuesday, 02 August 2022
by Julie Bisland Aug. 2, 2022

Aug. 2, 2022

**AT THE TOP OF THE HOUR** Dear all, The next Transfer Policy Review PDP WG call is scheduled for Tuesday, 02 August 2022 at 16:00 UTC for 90 minutes. Zoom Room Information: Main Zoom Webinar link: https://icann.zoom.us/j/95363727469?pwd=N3A3OWFSaTlUME9wZzlGajk5VUI3QT09 <https://urldefense.com/v3/__https:/icann.zoom.us/j/95363727469?pwd=N3A3OWFS…> Passcode: @TP/^*4wg# If you are joining via audio only: One tap mobile: US: +19294362866,,95363727469#,,,,*7490739013# or +13017158592,,95363727469#,,,,*7490739013# Telephone: Dial (for higher quality, dial a number based on your current location): US: +1 929 436 2866 or +1 301 715 8592 or +1 312 626 6799 or +1 669 900 6833 or +1 253 215 8782 or +1 346 248 7799 or 888 788 0099 (Toll Free) or 877 853 5247 (Toll Free) Webinar ID: 953 6372 7469 Passcode: 7490739013 International numbers available: https://icann.zoom.us/u/acdLFXPLp6 <https://urldefense.com/v3/__https:/icann.zoom.us/u/acdLFXPLp6__;!!PtGJab4!v…> Members, alternates, and observers all have different access and participation directions, please read below! ALL: Before joining the call: * Please send apologies and dial out requests to gnso-secs(a)icann.org<mailto:gnso-secs@icann.org> only * Please be sure you have read the ICANN Expected Standards of Behavior<https://www.icann.org/resources/pages/expected-standards-2016-06-28-en> * Visit the Wiki Agenda meeting page: https://community.icann.org/x/5wIVD * Check your time zone: https://tinyurl.com/2p9xevtn [tinyurl.com]<https://urldefense.com/v3/__https:/tinyurl.com/2p9xevtn__;!!PtGJab4!89NNrHr…> ONLY FOR MEMBERS & ALTERNATES: * Please join via the Main Zoom Webinar link above; staff will promote you to panelist. * Chat: Members (and alternates replacing members), please select Everyone so everyone can see and so it’s captured afterwards. * Alternate replacement confirmations – For tracking alternate replacements, use the google form [docs.google.com]<https://urldefense.com/v3/__https:/docs.google.com/forms/d/e/1FAIpQLScXP3-H…> to communicate the replacement (alternate) and the duration. This information will be publicly posted to the Alternate Log-Transfer Policy Review PDP<https://community.icann.org/x/V4aUCQ> wiki page. * Alternates (not replacing a member): Rename your line by adding THREE Zs (zzz) before your name and add, in parentheses (your affiliation - alternate) after your name. To rename in Zoom, hover over your name and click ‘rename’. * Alternates (not replacing a member) are not allowed to engage in the chat or use any of the other zoom room functionalities such as raising hands or agreeing/disagreeing. ONLY FOR OBSERVERS: * Observers will have ability to view member chat and information shared in the zoom webinar room. Observers will not be able to use chat or raise hands. Thank you. Kind regards, Julie

1 0

Proposed agenda for meeting #56 on Tuesday 2 August at 16:00 UTC
by Emily Barabas Aug. 2, 2022

Aug. 2, 2022

Dear Working Group members, Please find below the proposed agenda for the next meeting scheduled to take place on Tuesday 2 August 2022 at 16:00 UTC. As a reminder, please submit your completed analysis matrix by the end of today, Monday 1 August. Kind regards, Julie, Berry, Caitlin, and Emily Transfer Policy Review Phase 1(b) - Meeting #56 Proposed Agenda 2 August 2022 1. Roll Call & SOI updates 2. Welcome and Chair Updates 3. Review Responses: CoR Triggers and Actions Matrix 4. Preview: Phase 1(a) Initial Report public comment review 5. AOB * Next session: Tuesday 9 August at 16:00 UTC

1 1

EXTENDED TO 16 AUGUST: Public comment period on Transfer Policy Review Phase 1(a) Initial Report
by Emily Barabas Aug. 1, 2022

Aug. 1, 2022

Dear all, In response to requests received for additional time, the public comment period on the Initial Report has been extended by two weeks and will now close on 16 August. Please assist with spreading the word to your groups and any other interested parties. Kind regards, Caitlin, Julie, Berry, and Emily From: Emily Barabas <emily.barabas(a)icann.org> Date: Tuesday, 21 June 2022 at 21:55 To: "gnso-tpr(a)icann.org" <gnso-tpr(a)icann.org> Subject: Public comment period on Transfer Policy Review Phase 1(a) Initial Report now open Dear working group members, The TPR Phase 1(a) Initial Report has been published for public comment: https://www.icann.org/en/public-comment/proceeding/initial-report-on-the-tr… Please share information about this public comment opportunity with your groups and any others who may be interested. The public comment period is scheduled to close on 2 August 2022. Kind regards, Caitlin, Berry, Julie, and Emily Emily Barabas Policy Development Support Senior Manager Internet Corporation for Assigned Names and Numbers (ICANN) Phone: +31 (0)6 84507976 www.icann.org<http://www.icann.org/>

1 0