Re: [gtld-tech] ICANN monitoring system API
Speaking of IPs .. Ideally being able to provide blocks, rather than lists of IPs .. -- Mr Michele Neylon Blacknight Solutions Hosting, Colocation & Domains https://www.blacknight.com/ http://blacknight.blog/ Intl. +353 (0) 59 9183072 Direct Dial: +353 (0)59 9183090 Personal blog: https://michele.blog/ Some thoughts: https://ceo.hosting/ ------------------------------- Blacknight Internet Solutions Ltd, Unit 12A,Barrowside Business Park,Sleaty Road,Graiguecullen,Carlow,R93 X265,Ireland Company No.: 370845 From: <gtld-tech-bounces@icann.org> on behalf of Scott Hollenbeck <shollenbeck@verisign.com> Date: Friday 17 February 2017 at 13:05 To: "'gustavo.lozano@icann.org'" <gustavo.lozano@icann.org>, "'gtld-tech@icann.org'" <gtld-tech@icann.org> Subject: Re: [gtld-tech] ICANN monitoring system API Thanks for the opportunity to provide comments, Gustavo. It would be helpful to add more introductory text (perhaps in a section titled something like “Operational Assumptions”) to explicitly note several implied functional points. Here are a few that I found: In Section 3, the document says that HTTP Basic authentication is used. Without additional information, that means that credentials are exchanged in plaintext form. Encryption service is hidden in the description of the base URL mentioned in Section 2. I think it would be helpful to note somewhere that TLS protection is required, and that the credentials are protected using TLS. Have you thought about using TLS with mutual authentication of both clients and servers? That would add an extra layer of protection to ensure that only authorized clients have access to TLD-specific data. It would also be helpful to explicitly state that login credentials are provided by ICANN (how are they requested and delivered?), or at least provide a link to some other document that explains the process. It would also be helpful to note that the client must provide (how?) ICANN with a list of IP addresses to be added to a per-TLD white list. Are both IPv4 and IPv6 addresses acceptable? If not, why? Scott From: gtld-tech-bounces@icann.org [mailto:gtld-tech-bounces@icann.org] On Behalf Of Gustavo Lozano Sent: Saturday, February 11, 2017 12:17 AM To: gtld-tech@icann.org Subject: [EXTERNAL] [gtld-tech] ICANN monitoring system API Hello Colleagues, Specification 10 of the base registry agreement (https://newgtlds.icann.org/sites/default/files/agreements/agreement-approved...) describes the Service Level Requirements and emergency thresholds that a Registry Operator has to comply related to the Registry Services. ICANN has been monitoring compliance of new gTLDs following the algorithms defined in this specification. ICANN provides access to Registry Operators to the incident information of its TLDs through an API currently in beta, and we are planning on releasing the production version in the future. The Registry Operators using the beta API had provided valuable feedback, and the specification to be implemented in the production version has been modified accordingly. Attached you will find the latest draft of this specification. I appreciate your feedback no later than February 24, 2017. Regards, Gustavo
Thank you for your feedback, Scott, and Michele, @Scott, I think it would be helpful to note somewhere that TLS protection is required, and that the credentials are protected using TLS. [Gustavo Lozano] - OK, I will add text in this regard. Have you thought about using TLS with mutual authentication of both clients and servers? That would add an extra layer of protection to ensure that only authorized clients have access to TLD-specific data. [Gustavo Lozano] - Thank you for the suggestion, we have it in our to-do list. It would also be helpful to explicitly state that login credentials are provided by ICANN (how are they requested and delivered?), or at least provide a link to some other document that explains the process. [Gustavo Lozano] - OK, I will add text in this regard. It would also be helpful to note that the client must provide (how?) ICANN with a list of IP addresses to be added to a per-TLD white list. Are both IPv4 and IPv6 addresses acceptable? If not, why? [Gustavo Lozano] - OK, I will add text in this regard. The input mechanism for IP address blocks supports IPv4 and IPv6, however in the beta of the Monitoring System API, we only have IPv4 transport support. @Michele, Speaking of IPs .. Ideally being able to provide blocks, rather than lists of IPs .. [Gustavo Lozano] - In the GDD Portal, the Registry Operator can set the list of IP address blocks to be allowed to access the RRI (Registry Reporting Interface). The Monitoring System API uses the same credentials. Regards, Gustavo From: Michele Neylon - Blacknight [mailto:michele@blacknight.com] Sent: Friday, February 17, 2017 5:15 AM To: Hollenbeck, Scott <shollenbeck@verisign.com>; Gustavo Lozano <gustavo.lozano@icann.org>; 'gtld-tech@icann.org' <gtld-tech@icann.org> Subject: [Ext] Re: [gtld-tech] ICANN monitoring system API Speaking of IPs .. Ideally being able to provide blocks, rather than lists of IPs .. -- Mr Michele Neylon Blacknight Solutions Hosting, Colocation & Domains https://www.blacknight.com/ http://blacknight.blog/ Intl. +353 (0) 59 9183072 Direct Dial: +353 (0)59 9183090 Personal blog: https://michele.blog/ Some thoughts: https://ceo.hosting/ ------------------------------- Blacknight Internet Solutions Ltd, Unit 12A,Barrowside Business Park,Sleaty Road,Graiguecullen,Carlow,R93 X265,Ireland Company No.: 370845 From: <gtld-tech-bounces@icann.org<mailto:gtld-tech-bounces@icann.org>> on behalf of Scott Hollenbeck <shollenbeck@verisign.com<mailto:shollenbeck@verisign.com>> Date: Friday 17 February 2017 at 13:05 To: "'gustavo.lozano@icann.org'" <gustavo.lozano@icann.org<mailto:gustavo.lozano@icann.org>>, "'gtld-tech@icann.org'" <gtld-tech@icann.org<mailto:gtld-tech@icann.org>> Subject: Re: [gtld-tech] ICANN monitoring system API Thanks for the opportunity to provide comments, Gustavo. It would be helpful to add more introductory text (perhaps in a section titled something like “Operational Assumptions”) to explicitly note several implied functional points. Here are a few that I found: In Section 3, the document says that HTTP Basic authentication is used. Without additional information, that means that credentials are exchanged in plaintext form. Encryption service is hidden in the description of the base URL mentioned in Section 2. I think it would be helpful to note somewhere that TLS protection is required, and that the credentials are protected using TLS. Have you thought about using TLS with mutual authentication of both clients and servers? That would add an extra layer of protection to ensure that only authorized clients have access to TLD-specific data. It would also be helpful to explicitly state that login credentials are provided by ICANN (how are they requested and delivered?), or at least provide a link to some other document that explains the process. It would also be helpful to note that the client must provide (how?) ICANN with a list of IP addresses to be added to a per-TLD white list. Are both IPv4 and IPv6 addresses acceptable? If not, why? Scott From: gtld-tech-bounces@icann.org<mailto:gtld-tech-bounces@icann.org> [mailto:gtld-tech-bounces@icann.org] On Behalf Of Gustavo Lozano Sent: Saturday, February 11, 2017 12:17 AM To: gtld-tech@icann.org<mailto:gtld-tech@icann.org> Subject: [EXTERNAL] [gtld-tech] ICANN monitoring system API Hello Colleagues, Specification 10 of the base registry agreement (https://newgtlds.icann.org/sites/default/files/agreements/agreement-approved-09jan14-en.htm[newgtlds.icann.org]<https://urldefense.proofpoint.com/v2/url?u=https-3A__newgtlds.icann.org_sites_default_files_agreements_agreement-2Dapproved-2D09jan14-2Den.htm&d=DwMGaQ&c=FmY1u3PJp6wrcrwll3mSVzgfkbPSS6sJms7xcl4I5cM&r=VbweciUcwYQpIOZDSxl0ezGd1hGDtd-0BvgAgfmwfE0&m=cTdHSr5Ru2vE9oxoRasvA_FP8b5lxG_LgBzPtUN6cuc&s=cN9Uyg3mU-hTu7dDU3f-oCpzmJG_1sKiAvIoKReQo28&e=>) describes the Service Level Requirements and emergency thresholds that a Registry Operator has to comply related to the Registry Services. ICANN has been monitoring compliance of new gTLDs following the algorithms defined in this specification. ICANN provides access to Registry Operators to the incident information of its TLDs through an API currently in beta, and we are planning on releasing the production version in the future. The Registry Operators using the beta API had provided valuable feedback, and the specification to be implemented in the production version has been modified accordingly. Attached you will find the latest draft of this specification. I appreciate your feedback no later than February 24, 2017. Regards, Gustavo
Hi, I am re-opening this thread to inform about any progress that has been made on specifying or even rolling out this API. We would be interested in using this as an additional monitoring service but I cannot find a more recent update than this mail thread from February. Best regards, Ron Geens DNS Belgium On 25 Feb 2017, at 01:48, Gustavo Lozano <gustavo.lozano@icann.org<mailto:gustavo.lozano@icann.org>> wrote: Thank you for your feedback, Scott, and Michele, @Scott, I think it would be helpful to note somewhere that TLS protection is required, and that the credentials are protected using TLS. [Gustavo Lozano] - OK, I will add text in this regard. Have you thought about using TLS with mutual authentication of both clients and servers? That would add an extra layer of protection to ensure that only authorized clients have access to TLD-specific data. [Gustavo Lozano] - Thank you for the suggestion, we have it in our to-do list. It would also be helpful to explicitly state that login credentials are provided by ICANN (how are they requested and delivered?), or at least provide a link to some other document that explains the process. [Gustavo Lozano] - OK, I will add text in this regard. It would also be helpful to note that the client must provide (how?) ICANN with a list of IP addresses to be added to a per-TLD white list. Are both IPv4 and IPv6 addresses acceptable? If not, why? [Gustavo Lozano] - OK, I will add text in this regard. The input mechanism for IP address blocks supports IPv4 and IPv6, however in the beta of the Monitoring System API, we only have IPv4 transport support. @Michele, Speaking of IPs .. Ideally being able to provide blocks, rather than lists of IPs .. [Gustavo Lozano] - In the GDD Portal, the Registry Operator can set the list of IP address blocks to be allowed to access the RRI (Registry Reporting Interface). The Monitoring System API uses the same credentials. Regards, Gustavo From: Michele Neylon - Blacknight [mailto:michele@blacknight.com] Sent: Friday, February 17, 2017 5:15 AM To: Hollenbeck, Scott <shollenbeck@verisign.com<mailto:shollenbeck@verisign.com>>; Gustavo Lozano <gustavo.lozano@icann.org<mailto:gustavo.lozano@icann.org>>; 'gtld-tech@icann.org<mailto:gtld-tech@icann.org>' <gtld-tech@icann.org<mailto:gtld-tech@icann.org>> Subject: [Ext] Re: [gtld-tech] ICANN monitoring system API Speaking of IPs .. Ideally being able to provide blocks, rather than lists of IPs .. -- Mr Michele Neylon Blacknight Solutions Hosting, Colocation & Domains https://www.blacknight.com/ http://blacknight.blog/ Intl. +353 (0) 59 9183072 Direct Dial: +353 (0)59 9183090 Personal blog: https://michele.blog/ Some thoughts: https://ceo.hosting/ ------------------------------- Blacknight Internet Solutions Ltd, Unit 12A,Barrowside Business Park,Sleaty Road,Graiguecullen,Carlow,R93 X265,Ireland Company No.: 370845 From: <gtld-tech-bounces@icann.org<mailto:gtld-tech-bounces@icann.org>> on behalf of Scott Hollenbeck <shollenbeck@verisign.com<mailto:shollenbeck@verisign.com>> Date: Friday 17 February 2017 at 13:05 To: "'gustavo.lozano@icann.org<mailto:gustavo.lozano@icann.org>'" <gustavo.lozano@icann.org<mailto:gustavo.lozano@icann.org>>, "'gtld-tech@icann.org<mailto:gtld-tech@icann.org>'" <gtld-tech@icann.org<mailto:gtld-tech@icann.org>> Subject: Re: [gtld-tech] ICANN monitoring system API Thanks for the opportunity to provide comments, Gustavo. It would be helpful to add more introductory text (perhaps in a section titled something like “Operational Assumptions”) to explicitly note several implied functional points. Here are a few that I found: In Section 3, the document says that HTTP Basic authentication is used. Without additional information, that means that credentials are exchanged in plaintext form. Encryption service is hidden in the description of the base URL mentioned in Section 2. I think it would be helpful to note somewhere that TLS protection is required, and that the credentials are protected using TLS. Have you thought about using TLS with mutual authentication of both clients and servers? That would add an extra layer of protection to ensure that only authorized clients have access to TLD-specific data. It would also be helpful to explicitly state that login credentials are provided by ICANN (how are they requested and delivered?), or at least provide a link to some other document that explains the process. It would also be helpful to note that the client must provide (how?) ICANN with a list of IP addresses to be added to a per-TLD white list. Are both IPv4 and IPv6 addresses acceptable? If not, why? Scott From: gtld-tech-bounces@icann.org<mailto:gtld-tech-bounces@icann.org> [mailto:gtld-tech-bounces@icann.org] On Behalf Of Gustavo Lozano Sent: Saturday, February 11, 2017 12:17 AM To: gtld-tech@icann.org<mailto:gtld-tech@icann.org> Subject: [EXTERNAL] [gtld-tech] ICANN monitoring system API Hello Colleagues, Specification 10 of the base registry agreement (https://newgtlds.icann.org/sites/default/files/agreements/agreement-approved-09jan14-en.htm[newgtlds.icann.org]<https://urldefense.proofpoint.com/v2/url?u=https-3A__newgtlds.icann.org_sites_default_files_agreements_agreement-2Dapproved-2D09jan14-2Den.htm&d=DwMGaQ&c=FmY1u3PJp6wrcrwll3mSVzgfkbPSS6sJms7xcl4I5cM&r=VbweciUcwYQpIOZDSxl0ezGd1hGDtd-0BvgAgfmwfE0&m=cTdHSr5Ru2vE9oxoRasvA_FP8b5lxG_LgBzPtUN6cuc&s=cN9Uyg3mU-hTu7dDU3f-oCpzmJG_1sKiAvIoKReQo28&e=>) describes the Service Level Requirements and emergency thresholds that a Registry Operator has to comply related to the Registry Services. ICANN has been monitoring compliance of new gTLDs following the algorithms defined in this specification. ICANN provides access to Registry Operators to the incident information of its TLDs through an API currently in beta, and we are planning on releasing the production version in the future. The Registry Operators using the beta API had provided valuable feedback, and the specification to be implemented in the production version has been modified accordingly. Attached you will find the latest draft of this specification. I appreciate your feedback no later than February 24, 2017. Regards, Gustavo
Hello Ron Geens, ICANN is currently working on the development of the production version of the Monitoring System API (MoSAPI). There is no date yet for the release of this version. We plan to notify registries in advance of the release. In the meantime, the MoSAPI beta version is available. Registries can request access to the MoSAPI beta through ICANN's Global Support Center, please see https://www.icann.org/resources/pages/customer-support-2015-06-22-en. Regards, Victor Figueroa Technical Services Senior Manager ICANN From: <gtld-tech-bounces@icann.org> on behalf of Ronald Geens <ronald.geens@dnsbelgium.be> Date: Thursday, May 4, 2017 at 1:33 AM To: "gtld-tech@icann.org" <gtld-tech@icann.org> Subject: Re: [gtld-tech] ICANN monitoring system API Hi, I am re-opening this thread to inform about any progress that has been made on specifying or even rolling out this API. We would be interested in using this as an additional monitoring service but I cannot find a more recent update than this mail thread from February. Best regards, Ron Geens DNS Belgium On 25 Feb 2017, at 01:48, Gustavo Lozano <gustavo.lozano@icann.org> wrote: Thank you for your feedback, Scott, and Michele, @Scott, I think it would be helpful to note somewhere that TLS protection is required, and that the credentials are protected using TLS. [Gustavo Lozano] - OK, I will add text in this regard. Have you thought about using TLS with mutual authentication of both clients and servers? That would add an extra layer of protection to ensure that only authorized clients have access to TLD-specific data. [Gustavo Lozano] - Thank you for the suggestion, we have it in our to-do list. It would also be helpful to explicitly state that login credentials are provided by ICANN (how are they requested and delivered?), or at least provide a link to some other document that explains the process. [Gustavo Lozano] - OK, I will add text in this regard. It would also be helpful to note that the client must provide (how?) ICANN with a list of IP addresses to be added to a per-TLD white list. Are both IPv4 and IPv6 addresses acceptable? If not, why? [Gustavo Lozano] - OK, I will add text in this regard. The input mechanism for IP address blocks supports IPv4 and IPv6, however in the beta of the Monitoring System API, we only have IPv4 transport support. @Michele, Speaking of IPs .. Ideally being able to provide blocks, rather than lists of IPs .. [Gustavo Lozano] - In the GDD Portal, the Registry Operator can set the list of IP address blocks to be allowed to access the RRI (Registry Reporting Interface). The Monitoring System API uses the same credentials. Regards, Gustavo From: Michele Neylon - Blacknight [mailto:michele@blacknight.com] Sent: Friday, February 17, 2017 5:15 AM To: Hollenbeck, Scott <shollenbeck@verisign.com>; Gustavo Lozano <gustavo.lozano@icann.org>; 'gtld-tech@icann.org' <gtld-tech@icann.org> Subject: [Ext] Re: [gtld-tech] ICANN monitoring system API Speaking of IPs .. Ideally being able to provide blocks, rather than lists of IPs .. -- Mr Michele Neylon Blacknight Solutions Hosting, Colocation & Domains https://www.blacknight.com/ http://blacknight.blog/ Intl. +353 (0) 59 9183072 Direct Dial: +353 (0)59 9183090 Personal blog: https://michele.blog/ Some thoughts: https://ceo.hosting/ ------------------------------- Blacknight Internet Solutions Ltd, Unit 12A,Barrowside Business Park,Sleaty Road,Graiguecullen,Carlow,R93 X265,Ireland Company No.: 370845 From: <gtld-tech-bounces@icann.org> on behalf of Scott Hollenbeck <shollenbeck@verisign.com> Date: Friday 17 February 2017 at 13:05 To: "'gustavo.lozano@icann.org'" <gustavo.lozano@icann.org>, "'gtld-tech@icann.org'" <gtld-tech@icann.org> Subject: Re: [gtld-tech] ICANN monitoring system API Thanks for the opportunity to provide comments, Gustavo. It would be helpful to add more introductory text (perhaps in a section titled something like “Operational Assumptions”) to explicitly note several implied functional points. Here are a few that I found: In Section 3, the document says that HTTP Basic authentication is used. Without additional information, that means that credentials are exchanged in plaintext form. Encryption service is hidden in the description of the base URL mentioned in Section 2. I think it would be helpful to note somewhere that TLS protection is required, and that the credentials are protected using TLS. Have you thought about using TLS with mutual authentication of both clients and servers? That would add an extra layer of protection to ensure that only authorized clients have access to TLD-specific data. It would also be helpful to explicitly state that login credentials are provided by ICANN (how are they requested and delivered?), or at least provide a link to some other document that explains the process. It would also be helpful to note that the client must provide (how?) ICANN with a list of IP addresses to be added to a per-TLD white list. Are both IPv4 and IPv6 addresses acceptable? If not, why? Scott From: gtld-tech-bounces@icann.org [mailto:gtld-tech-bounces@icann.org] On Behalf Of Gustavo Lozano Sent: Saturday, February 11, 2017 12:17 AM To: gtld-tech@icann.org Subject: [EXTERNAL] [gtld-tech] ICANN monitoring system API Hello Colleagues, Specification 10 of the base registry agreement (https://newgtlds.icann.org/sites/default/files/agreements/agreement-approved-09jan14-en.htm[newgtlds.icann.org]) describes the Service Level Requirements and emergency thresholds that a Registry Operator has to comply related to the Registry Services. ICANN has been monitoring compliance of new gTLDs following the algorithms defined in this specification. ICANN provides access to Registry Operators to the incident information of its TLDs through an API currently in beta, and we are planning on releasing the production version in the future. The Registry Operators using the beta API had provided valuable feedback, and the specification to be implemented in the production version has been modified accordingly. Attached you will find the latest draft of this specification. I appreciate your feedback no later than February 24, 2017. Regards, Gustavo
Hi, Will this API be available to ccTLD as well? Jacques On 2017-05-12, 6:12 PM, "Victor Figueroa" <gtld-tech-bounces@icann.org<mailto:gtld-tech-bounces@icann.org> on behalf of victor.figueroa@icann.org<mailto:victor.figueroa@icann.org>> wrote: Hello Ron Geens, ICANN is currently working on the development of the production version of the Monitoring System API (MoSAPI). There is no date yet for the release of this version. We plan to notify registries in advance of the release. In the meantime, the MoSAPI beta version is available. Registries can request access to the MoSAPI beta through ICANN's Global Support Center, please see https://www.icann.org/resources/pages/customer-support-2015-06-22-en. Regards, Victor Figueroa Technical Services Senior Manager ICANN From: <gtld-tech-bounces@icann.org<mailto:gtld-tech-bounces@icann.org>> on behalf of Ronald Geens <ronald.geens@dnsbelgium.be<mailto:ronald.geens@dnsbelgium.be>> Date: Thursday, May 4, 2017 at 1:33 AM To: "gtld-tech@icann.org<mailto:gtld-tech@icann.org>" <gtld-tech@icann.org<mailto:gtld-tech@icann.org>> Subject: Re: [gtld-tech] ICANN monitoring system API Hi, I am re-opening this thread to inform about any progress that has been made on specifying or even rolling out this API. We would be interested in using this as an additional monitoring service but I cannot find a more recent update than this mail thread from February. Best regards, Ron Geens DNS Belgium On 25 Feb 2017, at 01:48, Gustavo Lozano <gustavo.lozano@icann.org<mailto:gustavo.lozano@icann.org>> wrote: Thank you for your feedback, Scott, and Michele, @Scott, I think it would be helpful to note somewhere that TLS protection is required, and that the credentials are protected using TLS. [Gustavo Lozano] - OK, I will add text in this regard. Have you thought about using TLS with mutual authentication of both clients and servers? That would add an extra layer of protection to ensure that only authorized clients have access to TLD-specific data. [Gustavo Lozano] - Thank you for the suggestion, we have it in our to-do list. It would also be helpful to explicitly state that login credentials are provided by ICANN (how are they requested and delivered?), or at least provide a link to some other document that explains the process. [Gustavo Lozano] - OK, I will add text in this regard. It would also be helpful to note that the client must provide (how?) ICANN with a list of IP addresses to be added to a per-TLD white list. Are both IPv4 and IPv6 addresses acceptable? If not, why? [Gustavo Lozano] - OK, I will add text in this regard. The input mechanism for IP address blocks supports IPv4 and IPv6, however in the beta of the Monitoring System API, we only have IPv4 transport support. @Michele, Speaking of IPs .. Ideally being able to provide blocks, rather than lists of IPs .. [Gustavo Lozano] - In the GDD Portal, the Registry Operator can set the list of IP address blocks to be allowed to access the RRI (Registry Reporting Interface). The Monitoring System API uses the same credentials. Regards, Gustavo From: Michele Neylon - Blacknight [mailto:michele@blacknight.com] Sent: Friday, February 17, 2017 5:15 AM To: Hollenbeck, Scott <shollenbeck@verisign.com<mailto:shollenbeck@verisign.com>>; Gustavo Lozano <gustavo.lozano@icann.org<mailto:gustavo.lozano@icann.org>>; 'gtld-tech@icann.org<mailto:gtld-tech@icann.org>' <gtld-tech@icann.org<mailto:gtld-tech@icann.org>> Subject: [Ext] Re: [gtld-tech] ICANN monitoring system API Speaking of IPs .. Ideally being able to provide blocks, rather than lists of IPs .. -- Mr Michele Neylon Blacknight Solutions Hosting, Colocation & Domains https://www.blacknight.com/ http://blacknight.blog/ Intl. +353 (0) 59 9183072 Direct Dial: +353 (0)59 9183090 Personal blog: https://michele.blog/ Some thoughts: https://ceo.hosting/ ------------------------------- Blacknight Internet Solutions Ltd, Unit 12A,Barrowside Business Park,Sleaty Road,Graiguecullen,Carlow,R93 X265,Ireland Company No.: 370845 From: <gtld-tech-bounces@icann.org<mailto:gtld-tech-bounces@icann.org>> on behalf of Scott Hollenbeck <shollenbeck@verisign.com<mailto:shollenbeck@verisign.com>> Date: Friday 17 February 2017 at 13:05 To: "'gustavo.lozano@icann.org<mailto:gustavo.lozano@icann.org>'" <gustavo.lozano@icann.org<mailto:gustavo.lozano@icann.org>>, "'gtld-tech@icann.org<mailto:gtld-tech@icann.org>'" <gtld-tech@icann.org<mailto:gtld-tech@icann.org>> Subject: Re: [gtld-tech] ICANN monitoring system API Thanks for the opportunity to provide comments, Gustavo. It would be helpful to add more introductory text (perhaps in a section titled something like “Operational Assumptions”) to explicitly note several implied functional points. Here are a few that I found: In Section 3, the document says that HTTP Basic authentication is used. Without additional information, that means that credentials are exchanged in plaintext form. Encryption service is hidden in the description of the base URL mentioned in Section 2. I think it would be helpful to note somewhere that TLS protection is required, and that the credentials are protected using TLS. Have you thought about using TLS with mutual authentication of both clients and servers? That would add an extra layer of protection to ensure that only authorized clients have access to TLD-specific data. It would also be helpful to explicitly state that login credentials are provided by ICANN (how are they requested and delivered?), or at least provide a link to some other document that explains the process. It would also be helpful to note that the client must provide (how?) ICANN with a list of IP addresses to be added to a per-TLD white list. Are both IPv4 and IPv6 addresses acceptable? If not, why? Scott From: gtld-tech-bounces@icann.org<mailto:gtld-tech-bounces@icann.org> [mailto:gtld-tech-bounces@icann.org] On Behalf Of Gustavo Lozano Sent: Saturday, February 11, 2017 12:17 AM To: gtld-tech@icann.org<mailto:gtld-tech@icann.org> Subject: [EXTERNAL] [gtld-tech] ICANN monitoring system API Hello Colleagues, Specification 10 of the base registry agreement (https://newgtlds.icann.org/sites/default/files/agreements/agreement-approved-09jan14-en.htm[newgtlds.icann.org]<https://urldefense.proofpoint.com/v2/url?u=https-3A__newgtlds.icann.org_sites_default_files_agreements_agreement-2Dapproved-2D09jan14-2Den.htm&d=DwMGaQ&c=FmY1u3PJp6wrcrwll3mSVzgfkbPSS6sJms7xcl4I5cM&r=VbweciUcwYQpIOZDSxl0ezGd1hGDtd-0BvgAgfmwfE0&m=cTdHSr5Ru2vE9oxoRasvA_FP8b5lxG_LgBzPtUN6cuc&s=cN9Uyg3mU-hTu7dDU3f-oCpzmJG_1sKiAvIoKReQo28&e=>) describes the Service Level Requirements and emergency thresholds that a Registry Operator has to comply related to the Registry Services. ICANN has been monitoring compliance of new gTLDs following the algorithms defined in this specification. ICANN provides access to Registry Operators to the incident information of its TLDs through an API currently in beta, and we are planning on releasing the production version in the future. The Registry Operators using the beta API had provided valuable feedback, and the specification to be implemented in the production version has been modified accordingly. Attached you will find the latest draft of this specification. I appreciate your feedback no later than February 24, 2017. Regards, Gustavo
Jacques, I was thinking the same thing, or rather, would that not be a good topic for TechDay? el -- Sent from Dr Lisse's iPad mini 4
On 13 May 2017, at 11:02, Jacques Latour <jacques.latour@cira.ca> wrote:
Hi, Will this API be available to ccTLD as well? Jacques
On 2017-05-12, 6:12 PM, "Victor Figueroa" <gtld-tech-bounces@icann.org on behalf of victor.figueroa@icann.org> wrote:
Hello Ron Geens,
ICANN is currently working on the development of the production version of the Monitoring System API (MoSAPI). There is no date yet for the release of this version. We plan to notify registries in advance of the release.
In the meantime, the MoSAPI beta version is available. Registries can request access to the MoSAPI beta through ICANN's Global Support Center, please see https://www.icann.org/resources/pages/customer-support-2015-06-22-en.
Regards, Victor Figueroa Technical Services Senior Manager ICANN
From: <gtld-tech-bounces@icann.org> on behalf of Ronald Geens <ronald.geens@dnsbelgium.be> Date: Thursday, May 4, 2017 at 1:33 AM To: "gtld-tech@icann.org" <gtld-tech@icann.org> Subject: Re: [gtld-tech] ICANN monitoring system API
Hi,
I am re-opening this thread to inform about any progress that has been made on specifying or even rolling out this API. We would be interested in using this as an additional monitoring service but I cannot find a more recent update than this mail thread from February.
Best regards,
Ron Geens DNS Belgium
On 25 Feb 2017, at 01:48, Gustavo Lozano <gustavo.lozano@icann.org> wrote:
Thank you for your feedback, Scott, and Michele,
@Scott,
I think it would be helpful to note somewhere that TLS protection is required, and that the credentials are protected using TLS.
[Gustavo Lozano] - OK, I will add text in this regard.
Have you thought about using TLS with mutual authentication of both clients and servers? That would add an extra layer of protection to ensure that only authorized clients have access to TLD-specific data.
[Gustavo Lozano] - Thank you for the suggestion, we have it in our to-do list.
It would also be helpful to explicitly state that login credentials are provided by ICANN (how are they requested and delivered?), or at least provide a link to some other document that explains the process.
[Gustavo Lozano] - OK, I will add text in this regard.
It would also be helpful to note that the client must provide (how?) ICANN with a list of IP addresses to be added to a per-TLD white list. Are both IPv4 and IPv6 addresses acceptable? If not, why?
[Gustavo Lozano] - OK, I will add text in this regard. The input mechanism for IP address blocks supports IPv4 and IPv6, however in the beta of the Monitoring System API, we only have IPv4 transport support.
@Michele,
Speaking of IPs .. Ideally being able to provide blocks, rather than lists of IPs ..
[Gustavo Lozano] - In the GDD Portal, the Registry Operator can set the list of IP address blocks to be allowed to access the RRI (Registry Reporting Interface). The Monitoring System API uses the same credentials.
Regards, Gustavo
From: Michele Neylon - Blacknight [mailto:michele@blacknight.com] Sent: Friday, February 17, 2017 5:15 AM To: Hollenbeck, Scott <shollenbeck@verisign.com>; Gustavo Lozano <gustavo.lozano@icann.org>; 'gtld-tech@icann.org' <gtld-tech@icann.org> Subject: [Ext] Re: [gtld-tech] ICANN monitoring system API
Speaking of IPs .. Ideally being able to provide blocks, rather than lists of IPs ..
-- Mr Michele Neylon Blacknight Solutions Hosting, Colocation & Domains https://www.blacknight.com/ http://blacknight.blog/ Intl. +353 (0) 59 9183072 Direct Dial: +353 (0)59 9183090 Personal blog: https://michele.blog/ Some thoughts: https://ceo.hosting/ ------------------------------- Blacknight Internet Solutions Ltd, Unit 12A,Barrowside Business Park,Sleaty Road,Graiguecullen,Carlow,R93 X265,Ireland Company No.: 370845
From: <gtld-tech-bounces@icann.org> on behalf of Scott Hollenbeck <shollenbeck@verisign.com> Date: Friday 17 February 2017 at 13:05 To: "'gustavo.lozano@icann.org'" <gustavo.lozano@icann.org>, "'gtld-tech@icann.org'" <gtld-tech@icann.org> Subject: Re: [gtld-tech] ICANN monitoring system API
Thanks for the opportunity to provide comments, Gustavo. It would be helpful to add more introductory text (perhaps in a section titled something like “Operational Assumptions”) to explicitly note several implied functional points. Here are a few that I found:
In Section 3, the document says that HTTP Basic authentication is used. Without additional information, that means that credentials are exchanged in plaintext form. Encryption service is hidden in the description of the base URL mentioned in Section 2. I think it would be helpful to note somewhere that TLS protection is required, and that the credentials are protected using TLS.
Have you thought about using TLS with mutual authentication of both clients and servers? That would add an extra layer of protection to ensure that only authorized clients have access to TLD-specific data.
It would also be helpful to explicitly state that login credentials are provided by ICANN (how are they requested and delivered?), or at least provide a link to some other document that explains the process.
It would also be helpful to note that the client must provide (how?) ICANN with a list of IP addresses to be added to a per-TLD white list. Are both IPv4 and IPv6 addresses acceptable? If not, why?
Scott
From: gtld-tech-bounces@icann.org [mailto:gtld-tech-bounces@icann.org] On Behalf Of Gustavo Lozano Sent: Saturday, February 11, 2017 12:17 AM To: gtld-tech@icann.org Subject: [EXTERNAL] [gtld-tech] ICANN monitoring system API
Hello Colleagues,
Specification 10 of the base registry agreement (https://newgtlds.icann.org/sites/default/files/agreements/agreement-approved-09jan14-en.htm[newgtlds.icann.org]) describes the Service Level Requirements and emergency thresholds that a Registry Operator has to comply related to the Registry Services.
ICANN has been monitoring compliance of new gTLDs following the algorithms defined in this specification.
ICANN provides access to Registry Operators to the incident information of its TLDs through an API currently in beta, and we are planning on releasing the production version in the future.
The Registry Operators using the beta API had provided valuable feedback, and the specification to be implemented in the production version has been modified accordingly.
Attached you will find the latest draft of this specification. I appreciate your feedback no later than February 24, 2017.
Regards, Gustavo
For sure, if available to ccTLD the we could do a "how to to use and integrate the API into operations." Need someone in the know to present? Any volunteers? Jacques On 2017-05-13, 12:08 PM, "Dr Eberhard W Lisse" <el@lisse.na<mailto:el@lisse.na>> wrote: Jacques, I was thinking the same thing, or rather, would that not be a good topic for TechDay? el -- Sent from Dr Lisse's iPad mini 4 On 13 May 2017, at 11:02, Jacques Latour <jacques.latour@cira.ca<mailto:jacques.latour@cira.ca>> wrote: Hi, Will this API be available to ccTLD as well? Jacques On 2017-05-12, 6:12 PM, "Victor Figueroa" <gtld-tech-bounces@icann.org<mailto:gtld-tech-bounces@icann.org> on behalf of victor.figueroa@icann.org<mailto:victor.figueroa@icann.org>> wrote: Hello Ron Geens, ICANN is currently working on the development of the production version of the Monitoring System API (MoSAPI). There is no date yet for the release of this version. We plan to notify registries in advance of the release. In the meantime, the MoSAPI beta version is available. Registries can request access to the MoSAPI beta through ICANN's Global Support Center, please see https://www.icann.org/resources/pages/customer-support-2015-06-22-en. Regards, Victor Figueroa Technical Services Senior Manager ICANN From: <gtld-tech-bounces@icann.org<mailto:gtld-tech-bounces@icann.org>> on behalf of Ronald Geens <ronald.geens@dnsbelgium.be<mailto:ronald.geens@dnsbelgium.be>> Date: Thursday, May 4, 2017 at 1:33 AM To: "gtld-tech@icann.org<mailto:gtld-tech@icann.org>" <gtld-tech@icann.org<mailto:gtld-tech@icann.org>> Subject: Re: [gtld-tech] ICANN monitoring system API Hi, I am re-opening this thread to inform about any progress that has been made on specifying or even rolling out this API. We would be interested in using this as an additional monitoring service but I cannot find a more recent update than this mail thread from February. Best regards, Ron Geens DNS Belgium On 25 Feb 2017, at 01:48, Gustavo Lozano <gustavo.lozano@icann.org<mailto:gustavo.lozano@icann.org>> wrote: Thank you for your feedback, Scott, and Michele, @Scott, I think it would be helpful to note somewhere that TLS protection is required, and that the credentials are protected using TLS. [Gustavo Lozano] - OK, I will add text in this regard. Have you thought about using TLS with mutual authentication of both clients and servers? That would add an extra layer of protection to ensure that only authorized clients have access to TLD-specific data. [Gustavo Lozano] - Thank you for the suggestion, we have it in our to-do list. It would also be helpful to explicitly state that login credentials are provided by ICANN (how are they requested and delivered?), or at least provide a link to some other document that explains the process. [Gustavo Lozano] - OK, I will add text in this regard. It would also be helpful to note that the client must provide (how?) ICANN with a list of IP addresses to be added to a per-TLD white list. Are both IPv4 and IPv6 addresses acceptable? If not, why? [Gustavo Lozano] - OK, I will add text in this regard. The input mechanism for IP address blocks supports IPv4 and IPv6, however in the beta of the Monitoring System API, we only have IPv4 transport support. @Michele, Speaking of IPs .. Ideally being able to provide blocks, rather than lists of IPs .. [Gustavo Lozano] - In the GDD Portal, the Registry Operator can set the list of IP address blocks to be allowed to access the RRI (Registry Reporting Interface). The Monitoring System API uses the same credentials. Regards, Gustavo From: Michele Neylon - Blacknight [mailto:michele@blacknight.com] Sent: Friday, February 17, 2017 5:15 AM To: Hollenbeck, Scott <shollenbeck@verisign.com<mailto:shollenbeck@verisign.com>>; Gustavo Lozano <gustavo.lozano@icann.org<mailto:gustavo.lozano@icann.org>>; 'gtld-tech@icann.org<mailto:gtld-tech@icann.org>' <gtld-tech@icann.org<mailto:gtld-tech@icann.org>> Subject: [Ext] Re: [gtld-tech] ICANN monitoring system API Speaking of IPs .. Ideally being able to provide blocks, rather than lists of IPs .. -- Mr Michele Neylon Blacknight Solutions Hosting, Colocation & Domains https://www.blacknight.com/ http://blacknight.blog/ Intl. +353 (0) 59 9183072 Direct Dial: +353 (0)59 9183090 Personal blog: https://michele.blog/ Some thoughts: https://ceo.hosting/ ------------------------------- Blacknight Internet Solutions Ltd, Unit 12A,Barrowside Business Park,Sleaty Road,Graiguecullen,Carlow,R93 X265,Ireland Company No.: 370845 From: <gtld-tech-bounces@icann.org<mailto:gtld-tech-bounces@icann.org>> on behalf of Scott Hollenbeck <shollenbeck@verisign.com<mailto:shollenbeck@verisign.com>> Date: Friday 17 February 2017 at 13:05 To: "'gustavo.lozano@icann.org<mailto:gustavo.lozano@icann.org>'" <gustavo.lozano@icann.org<mailto:gustavo.lozano@icann.org>>, "'gtld-tech@icann.org<mailto:gtld-tech@icann.org>'" <gtld-tech@icann.org<mailto:gtld-tech@icann.org>> Subject: Re: [gtld-tech] ICANN monitoring system API Thanks for the opportunity to provide comments, Gustavo. It would be helpful to add more introductory text (perhaps in a section titled something like “Operational Assumptions”) to explicitly note several implied functional points. Here are a few that I found: In Section 3, the document says that HTTP Basic authentication is used. Without additional information, that means that credentials are exchanged in plaintext form. Encryption service is hidden in the description of the base URL mentioned in Section 2. I think it would be helpful to note somewhere that TLS protection is required, and that the credentials are protected using TLS. Have you thought about using TLS with mutual authentication of both clients and servers? That would add an extra layer of protection to ensure that only authorized clients have access to TLD-specific data. It would also be helpful to explicitly state that login credentials are provided by ICANN (how are they requested and delivered?), or at least provide a link to some other document that explains the process. It would also be helpful to note that the client must provide (how?) ICANN with a list of IP addresses to be added to a per-TLD white list. Are both IPv4 and IPv6 addresses acceptable? If not, why? Scott From: gtld-tech-bounces@icann.org<mailto:gtld-tech-bounces@icann.org> [mailto:gtld-tech-bounces@icann.org] On Behalf Of Gustavo Lozano Sent: Saturday, February 11, 2017 12:17 AM To: gtld-tech@icann.org<mailto:gtld-tech@icann.org> Subject: [EXTERNAL] [gtld-tech] ICANN monitoring system API Hello Colleagues, Specification 10 of the base registry agreement (https://newgtlds.icann.org/sites/default/files/agreements/agreement-approved-09jan14-en.htm[newgtlds.icann.org]<https://urldefense.proofpoint.com/v2/url?u=https-3A__newgtlds.icann.org_sites_default_files_agreements_agreement-2Dapproved-2D09jan14-2Den.htm&d=DwMGaQ&c=FmY1u3PJp6wrcrwll3mSVzgfkbPSS6sJms7xcl4I5cM&r=VbweciUcwYQpIOZDSxl0ezGd1hGDtd-0BvgAgfmwfE0&m=cTdHSr5Ru2vE9oxoRasvA_FP8b5lxG_LgBzPtUN6cuc&s=cN9Uyg3mU-hTu7dDU3f-oCpzmJG_1sKiAvIoKReQo28&e=>) describes the Service Level Requirements and emergency thresholds that a Registry Operator has to comply related to the Registry Services. ICANN has been monitoring compliance of new gTLDs following the algorithms defined in this specification. ICANN provides access to Registry Operators to the incident information of its TLDs through an API currently in beta, and we are planning on releasing the production version in the future. The Registry Operators using the beta API had provided valuable feedback, and the specification to be implemented in the production version has been modified accordingly. Attached you will find the latest draft of this specification. I appreciate your feedback no later than February 24, 2017. Regards, Gustavo
It might be a helpful internal tool, especially if the infrastructure for a particular ccTLD is designed for gTLDs as well. But, even if not, we are trying to broaden the interest anyway... el -- Sent from Dr Lisse's iPad mini 4
On 13 May 2017, at 11:10, Jacques Latour <jacques.latour@cira.ca> wrote:
For sure, if available to ccTLD the we could do a "how to to use and integrate the API into operations."
Need someone in the know to present? Any volunteers?
Jacques
On 2017-05-13, 12:08 PM, "Dr Eberhard W Lisse" <el@lisse.na> wrote:
Jacques,
I was thinking the same thing, or rather, would that not be a good topic for TechDay?
el
-- Sent from Dr Lisse's iPad mini 4
On 13 May 2017, at 11:02, Jacques Latour <jacques.latour@cira.ca> wrote:
Hi, Will this API be available to ccTLD as well? Jacques
On 2017-05-12, 6:12 PM, "Victor Figueroa" <gtld-tech-bounces@icann.org on behalf of victor.figueroa@icann.org> wrote:
Hello Ron Geens,
ICANN is currently working on the development of the production version of the Monitoring System API (MoSAPI). There is no date yet for the release of this version. We plan to notify registries in advance of the release.
In the meantime, the MoSAPI beta version is available. Registries can request access to the MoSAPI beta through ICANN's Global Support Center, please see https://www.icann.org/resources/pages/customer-support-2015-06-22-en.
Regards, Victor Figueroa Technical Services Senior Manager ICANN
From: <gtld-tech-bounces@icann.org> on behalf of Ronald Geens <ronald.geens@dnsbelgium.be> Date: Thursday, May 4, 2017 at 1:33 AM To: "gtld-tech@icann.org" <gtld-tech@icann.org> Subject: Re: [gtld-tech] ICANN monitoring system API
Hi,
I am re-opening this thread to inform about any progress that has been made on specifying or even rolling out this API. We would be interested in using this as an additional monitoring service but I cannot find a more recent update than this mail thread from February.
Best regards,
Ron Geens DNS Belgium
On 25 Feb 2017, at 01:48, Gustavo Lozano <gustavo.lozano@icann.org> wrote:
Thank you for your feedback, Scott, and Michele,
@Scott,
I think it would be helpful to note somewhere that TLS protection is required, and that the credentials are protected using TLS.
[Gustavo Lozano] - OK, I will add text in this regard.
Have you thought about using TLS with mutual authentication of both clients and servers? That would add an extra layer of protection to ensure that only authorized clients have access to TLD-specific data.
[Gustavo Lozano] - Thank you for the suggestion, we have it in our to-do list.
It would also be helpful to explicitly state that login credentials are provided by ICANN (how are they requested and delivered?), or at least provide a link to some other document that explains the process.
[Gustavo Lozano] - OK, I will add text in this regard.
It would also be helpful to note that the client must provide (how?) ICANN with a list of IP addresses to be added to a per-TLD white list. Are both IPv4 and IPv6 addresses acceptable? If not, why?
[Gustavo Lozano] - OK, I will add text in this regard. The input mechanism for IP address blocks supports IPv4 and IPv6, however in the beta of the Monitoring System API, we only have IPv4 transport support.
@Michele,
Speaking of IPs .. Ideally being able to provide blocks, rather than lists of IPs ..
[Gustavo Lozano] - In the GDD Portal, the Registry Operator can set the list of IP address blocks to be allowed to access the RRI (Registry Reporting Interface). The Monitoring System API uses the same credentials.
Regards, Gustavo
From: Michele Neylon - Blacknight [mailto:michele@blacknight.com] Sent: Friday, February 17, 2017 5:15 AM To: Hollenbeck, Scott <shollenbeck@verisign.com>; Gustavo Lozano <gustavo.lozano@icann.org>; 'gtld-tech@icann.org' <gtld-tech@icann.org> Subject: [Ext] Re: [gtld-tech] ICANN monitoring system API
Speaking of IPs .. Ideally being able to provide blocks, rather than lists of IPs ..
-- Mr Michele Neylon Blacknight Solutions Hosting, Colocation & Domains https://www.blacknight.com/ http://blacknight.blog/ Intl. +353 (0) 59 9183072 Direct Dial: +353 (0)59 9183090 Personal blog: https://michele.blog/ Some thoughts: https://ceo.hosting/ ------------------------------- Blacknight Internet Solutions Ltd, Unit 12A,Barrowside Business Park,Sleaty Road,Graiguecullen,Carlow,R93 X265,Ireland Company No.: 370845
From: <gtld-tech-bounces@icann.org> on behalf of Scott Hollenbeck <shollenbeck@verisign.com> Date: Friday 17 February 2017 at 13:05 To: "'gustavo.lozano@icann.org'" <gustavo.lozano@icann.org>, "'gtld-tech@icann.org'" <gtld-tech@icann.org> Subject: Re: [gtld-tech] ICANN monitoring system API
Thanks for the opportunity to provide comments, Gustavo. It would be helpful to add more introductory text (perhaps in a section titled something like “Operational Assumptions”) to explicitly note several implied functional points. Here are a few that I found:
In Section 3, the document says that HTTP Basic authentication is used. Without additional information, that means that credentials are exchanged in plaintext form. Encryption service is hidden in the description of the base URL mentioned in Section 2. I think it would be helpful to note somewhere that TLS protection is required, and that the credentials are protected using TLS.
Have you thought about using TLS with mutual authentication of both clients and servers? That would add an extra layer of protection to ensure that only authorized clients have access to TLD-specific data.
It would also be helpful to explicitly state that login credentials are provided by ICANN (how are they requested and delivered?), or at least provide a link to some other document that explains the process.
It would also be helpful to note that the client must provide (how?) ICANN with a list of IP addresses to be added to a per-TLD white list. Are both IPv4 and IPv6 addresses acceptable? If not, why?
Scott
From: gtld-tech-bounces@icann.org [mailto:gtld-tech-bounces@icann.org] On Behalf Of Gustavo Lozano Sent: Saturday, February 11, 2017 12:17 AM To: gtld-tech@icann.org Subject: [EXTERNAL] [gtld-tech] ICANN monitoring system API
Hello Colleagues,
Specification 10 of the base registry agreement (https://newgtlds.icann.org/sites/default/files/agreements/agreement-approved-09jan14-en.htm[newgtlds.icann.org]) describes the Service Level Requirements and emergency thresholds that a Registry Operator has to comply related to the Registry Services.
ICANN has been monitoring compliance of new gTLDs following the algorithms defined in this specification.
ICANN provides access to Registry Operators to the incident information of its TLDs through an API currently in beta, and we are planning on releasing the production version in the future.
The Registry Operators using the beta API had provided valuable feedback, and the specification to be implemented in the production version has been modified accordingly.
Attached you will find the latest draft of this specification. I appreciate your feedback no later than February 24, 2017.
Regards, Gustavo
_______________________________________________ Ccnso-techwg mailing list Ccnso-techwg@icann.org https://mm.icann.org/mailman/listinfo/ccnso-techwg
Similarly, Dave Piscitello gave a briefing here at the DNS Symposium in Madrid on a Domain Abuse Reporting Tool that the OCTO team is working on. He said he could do a briefing in Abu Dhabi as part of Tech Day if there is interest (he won't be in Joburg). Patrick Sent from my mobile device, apologies for any typos. On May 13, 2017, at 12:35 PM, Dr Eberhard W Lisse <el@lisse.na<mailto:el@lisse.na>> wrote: It might be a helpful internal tool, especially if the infrastructure for a particular ccTLD is designed for gTLDs as well. But, even if not, we are trying to broaden the interest anyway... el -- Sent from Dr Lisse's iPad mini 4 On 13 May 2017, at 11:10, Jacques Latour <jacques.latour@cira.ca<mailto:jacques.latour@cira.ca>> wrote: For sure, if available to ccTLD the we could do a "how to to use and integrate the API into operations." Need someone in the know to present? Any volunteers? Jacques On 2017-05-13, 12:08 PM, "Dr Eberhard W Lisse" <el@lisse.na<mailto:el@lisse.na>> wrote: Jacques, I was thinking the same thing, or rather, would that not be a good topic for TechDay? el -- Sent from Dr Lisse's iPad mini 4 On 13 May 2017, at 11:02, Jacques Latour <jacques.latour@cira.ca<mailto:jacques.latour@cira.ca>> wrote: Hi, Will this API be available to ccTLD as well? Jacques On 2017-05-12, 6:12 PM, "Victor Figueroa" <gtld-tech-bounces@icann.org<mailto:gtld-tech-bounces@icann.org> on behalf of victor.figueroa@icann.org<mailto:victor.figueroa@icann.org>> wrote: Hello Ron Geens, ICANN is currently working on the development of the production version of the Monitoring System API (MoSAPI). There is no date yet for the release of this version. We plan to notify registries in advance of the release. In the meantime, the MoSAPI beta version is available. Registries can request access to the MoSAPI beta through ICANN's Global Support Center, please see https://www.icann.org/resources/pages/customer-support-2015-06-22-en[icann.org]<https://urldefense.proofpoint.com/v2/url?u=https-3A__www.icann.org_resources_pages_customer-2Dsupport-2D2015-2D06-2D22-2Den&d=DwMFaQ&c=FmY1u3PJp6wrcrwll3mSVzgfkbPSS6sJms7xcl4I5cM&r=AWv8FHHj-8_C-gm8Tsewo17lKvbCMlZWTwJISLWOUaQ&m=mN_SZIT_MpmUGMumR-spA-x8goiH0hp67syk862F77c&s=kbWpo7sxdX-dw-K6b1Wzr316YHdtd5_91tiShhop2bc&e=>. Regards, Victor Figueroa Technical Services Senior Manager ICANN From: <gtld-tech-bounces@icann.org<mailto:gtld-tech-bounces@icann.org>> on behalf of Ronald Geens <ronald.geens@dnsbelgium.be<mailto:ronald.geens@dnsbelgium.be>> Date: Thursday, May 4, 2017 at 1:33 AM To: "gtld-tech@icann.org<mailto:gtld-tech@icann.org>" <gtld-tech@icann.org<mailto:gtld-tech@icann.org>> Subject: Re: [gtld-tech] ICANN monitoring system API Hi, I am re-opening this thread to inform about any progress that has been made on specifying or even rolling out this API. We would be interested in using this as an additional monitoring service but I cannot find a more recent update than this mail thread from February. Best regards, Ron Geens DNS Belgium On 25 Feb 2017, at 01:48, Gustavo Lozano <gustavo.lozano@icann.org<mailto:gustavo.lozano@icann.org>> wrote: Thank you for your feedback, Scott, and Michele, @Scott, I think it would be helpful to note somewhere that TLS protection is required, and that the credentials are protected using TLS. [Gustavo Lozano] - OK, I will add text in this regard. Have you thought about using TLS with mutual authentication of both clients and servers? That would add an extra layer of protection to ensure that only authorized clients have access to TLD-specific data. [Gustavo Lozano] - Thank you for the suggestion, we have it in our to-do list. It would also be helpful to explicitly state that login credentials are provided by ICANN (how are they requested and delivered?), or at least provide a link to some other document that explains the process. [Gustavo Lozano] - OK, I will add text in this regard. It would also be helpful to note that the client must provide (how?) ICANN with a list of IP addresses to be added to a per-TLD white list. Are both IPv4 and IPv6 addresses acceptable? If not, why? [Gustavo Lozano] - OK, I will add text in this regard. The input mechanism for IP address blocks supports IPv4 and IPv6, however in the beta of the Monitoring System API, we only have IPv4 transport support. @Michele, Speaking of IPs .. Ideally being able to provide blocks, rather than lists of IPs .. [Gustavo Lozano] - In the GDD Portal, the Registry Operator can set the list of IP address blocks to be allowed to access the RRI (Registry Reporting Interface). The Monitoring System API uses the same credentials. Regards, Gustavo From: Michele Neylon - Blacknight [mailto:michele@blacknight.com] Sent: Friday, February 17, 2017 5:15 AM To: Hollenbeck, Scott <shollenbeck@verisign.com<mailto:shollenbeck@verisign.com>>; Gustavo Lozano <gustavo.lozano@icann.org<mailto:gustavo.lozano@icann.org>>; 'gtld-tech@icann.org<mailto:gtld-tech@icann.org>' <gtld-tech@icann.org<mailto:gtld-tech@icann.org>> Subject: [Ext] Re: [gtld-tech] ICANN monitoring system API Speaking of IPs .. Ideally being able to provide blocks, rather than lists of IPs .. -- Mr Michele Neylon Blacknight Solutions Hosting, Colocation & Domains https://www.blacknight.com/[blacknight.com]<https://urldefense.proofpoint.com/v2/url?u=https-3A__www.blacknight.com_&d=DwMFaQ&c=FmY1u3PJp6wrcrwll3mSVzgfkbPSS6sJms7xcl4I5cM&r=AWv8FHHj-8_C-gm8Tsewo17lKvbCMlZWTwJISLWOUaQ&m=mN_SZIT_MpmUGMumR-spA-x8goiH0hp67syk862F77c&s=Q1vjv20phxFwJVr-m3wa4Km6zlKAIw9dnJP6xy4B7YQ&e=> http://blacknight.blog/[blacknight.blog]<https://urldefense.proofpoint.com/v2/url?u=http-3A__blacknight.blog_&d=DwMFaQ&c=FmY1u3PJp6wrcrwll3mSVzgfkbPSS6sJms7xcl4I5cM&r=AWv8FHHj-8_C-gm8Tsewo17lKvbCMlZWTwJISLWOUaQ&m=mN_SZIT_MpmUGMumR-spA-x8goiH0hp67syk862F77c&s=kEEw_1fyJd5z3d_LSNVnNyshJPN3K1SohZ-vOj7e5jo&e=> Intl. +353 (0) 59 9183072 Direct Dial: +353 (0)59 9183090 Personal blog: https://michele.blog/[michele.blog]<https://urldefense.proofpoint.com/v2/url?u=https-3A__michele.blog_&d=DwMFaQ&c=FmY1u3PJp6wrcrwll3mSVzgfkbPSS6sJms7xcl4I5cM&r=AWv8FHHj-8_C-gm8Tsewo17lKvbCMlZWTwJISLWOUaQ&m=mN_SZIT_MpmUGMumR-spA-x8goiH0hp67syk862F77c&s=Vwwovg7aBmVq2dofIArcZd_p6DFgdK-rb7Xh7K1Eheg&e=> Some thoughts: https://ceo.hosting/[ceo.hosting]<https://urldefense.proofpoint.com/v2/url?u=https-3A__ceo.hosting_&d=DwMFaQ&c=FmY1u3PJp6wrcrwll3mSVzgfkbPSS6sJms7xcl4I5cM&r=AWv8FHHj-8_C-gm8Tsewo17lKvbCMlZWTwJISLWOUaQ&m=mN_SZIT_MpmUGMumR-spA-x8goiH0hp67syk862F77c&s=yKid8gku_oV3CuzpmJAajywMlkSLn6ERbs6EBwiUDfE&e=> ------------------------------- Blacknight Internet Solutions Ltd, Unit 12A,Barrowside Business Park,Sleaty Road,Graiguecullen,Carlow,R93 X265,Ireland Company No.: 370845 From: <gtld-tech-bounces@icann.org<mailto:gtld-tech-bounces@icann.org>> on behalf of Scott Hollenbeck <shollenbeck@verisign.com<mailto:shollenbeck@verisign.com>> Date: Friday 17 February 2017 at 13:05 To: "'gustavo.lozano@icann.org<mailto:gustavo.lozano@icann.org>'" <gustavo.lozano@icann.org<mailto:gustavo.lozano@icann.org>>, "'gtld-tech@icann.org<mailto:gtld-tech@icann.org>'" <gtld-tech@icann.org<mailto:gtld-tech@icann.org>> Subject: Re: [gtld-tech] ICANN monitoring system API Thanks for the opportunity to provide comments, Gustavo. It would be helpful to add more introductory text (perhaps in a section titled something like "Operational Assumptions") to explicitly note several implied functional points. Here are a few that I found: In Section 3, the document says that HTTP Basic authentication is used. Without additional information, that means that credentials are exchanged in plaintext form. Encryption service is hidden in the description of the base URL mentioned in Section 2. I think it would be helpful to note somewhere that TLS protection is required, and that the credentials are protected using TLS. Have you thought about using TLS with mutual authentication of both clients and servers? That would add an extra layer of protection to ensure that only authorized clients have access to TLD-specific data. It would also be helpful to explicitly state that login credentials are provided by ICANN (how are they requested and delivered?), or at least provide a link to some other document that explains the process. It would also be helpful to note that the client must provide (how?) ICANN with a list of IP addresses to be added to a per-TLD white list. Are both IPv4 and IPv6 addresses acceptable? If not, why? Scott From: gtld-tech-bounces@icann.org<mailto:gtld-tech-bounces@icann.org> [mailto:gtld-tech-bounces@icann.org] On Behalf Of Gustavo Lozano Sent: Saturday, February 11, 2017 12:17 AM To: gtld-tech@icann.org<mailto:gtld-tech@icann.org> Subject: [EXTERNAL] [gtld-tech] ICANN monitoring system API Hello Colleagues, Specification 10 of the base registry agreement (https://newgtlds.icann.org/sites/default/files/agreements/agreement-approved-09jan14-en.htm[newgtlds.icann.org]<https://urldefense.proofpoint.com/v2/url?u=https-3A__newgtlds.icann.org_sites_default_files_agreements_agreement-2Dapproved-2D09jan14-2Den.htm&d=DwMGaQ&c=FmY1u3PJp6wrcrwll3mSVzgfkbPSS6sJms7xcl4I5cM&r=VbweciUcwYQpIOZDSxl0ezGd1hGDtd-0BvgAgfmwfE0&m=cTdHSr5Ru2vE9oxoRasvA_FP8b5lxG_LgBzPtUN6cuc&s=cN9Uyg3mU-hTu7dDU3f-oCpzmJG_1sKiAvIoKReQo28&e=>) describes the Service Level Requirements and emergency thresholds that a Registry Operator has to comply related to the Registry Services. ICANN has been monitoring compliance of new gTLDs following the algorithms defined in this specification. ICANN provides access to Registry Operators to the incident information of its TLDs through an API currently in beta, and we are planning on releasing the production version in the future. The Registry Operators using the beta API had provided valuable feedback, and the specification to be implemented in the production version has been modified accordingly. Attached you will find the latest draft of this specification. I appreciate your feedback no later than February 24, 2017. Regards, Gustavo _______________________________________________ Ccnso-techwg mailing list Ccnso-techwg@icann.org<mailto:Ccnso-techwg@icann.org> https://mm.icann.org/mailman/listinfo/ccnso-techwg _______________________________________________ Ccnso-techwg mailing list Ccnso-techwg@icann.org<mailto:Ccnso-techwg@icann.org> https://mm.icann.org/mailman/listinfo/ccnso-techwg
I like this. el -- Sent from Dr Lisse's iPad mini 4
On 13 May 2017, at 12:02, Patrick Jones <patrick.jones@icann.org> wrote:
Similarly, Dave Piscitello gave a briefing here at the DNS Symposium in Madrid on a Domain Abuse Reporting Tool that the OCTO team is working on. He said he could do a briefing in Abu Dhabi as part of Tech Day if there is interest (he won't be in Joburg).
Patrick
Sent from my mobile device, apologies for any typos.
On May 13, 2017, at 12:35 PM, Dr Eberhard W Lisse <el@lisse.na> wrote:
It might be a helpful internal tool, especially if the infrastructure for a particular ccTLD is designed for gTLDs as well.
But, even if not, we are trying to broaden the interest anyway...
el
-- Sent from Dr Lisse's iPad mini 4
On 13 May 2017, at 11:10, Jacques Latour <jacques.latour@cira.ca> wrote:
For sure, if available to ccTLD the we could do a "how to to use and integrate the API into operations."
Need someone in the know to present? Any volunteers?
Jacques
On 2017-05-13, 12:08 PM, "Dr Eberhard W Lisse" <el@lisse.na> wrote:
Jacques,
I was thinking the same thing, or rather, would that not be a good topic for TechDay?
el
-- Sent from Dr Lisse's iPad mini 4
On 13 May 2017, at 11:02, Jacques Latour <jacques.latour@cira.ca> wrote:
Hi, Will this API be available to ccTLD as well? Jacques
On 2017-05-12, 6:12 PM, "Victor Figueroa" <gtld-tech-bounces@icann.org on behalf of victor.figueroa@icann.org> wrote:
Hello Ron Geens,
ICANN is currently working on the development of the production version of the Monitoring System API (MoSAPI). There is no date yet for the release of this version. We plan to notify registries in advance of the release.
In the meantime, the MoSAPI beta version is available. Registries can request access to the MoSAPI beta through ICANN's Global Support Center, please see https://www.icann.org/resources/pages/customer-support-2015-06-22-en[icann.org].
Regards, Victor Figueroa Technical Services Senior Manager ICANN
From: <gtld-tech-bounces@icann.org> on behalf of Ronald Geens <ronald.geens@dnsbelgium.be> Date: Thursday, May 4, 2017 at 1:33 AM To: "gtld-tech@icann.org" <gtld-tech@icann.org> Subject: Re: [gtld-tech] ICANN monitoring system API
Hi,
I am re-opening this thread to inform about any progress that has been made on specifying or even rolling out this API. We would be interested in using this as an additional monitoring service but I cannot find a more recent update than this mail thread from February.
Best regards,
Ron Geens DNS Belgium
On 25 Feb 2017, at 01:48, Gustavo Lozano <gustavo.lozano@icann.org> wrote:
Thank you for your feedback, Scott, and Michele,
@Scott,
I think it would be helpful to note somewhere that TLS protection is required, and that the credentials are protected using TLS.
[Gustavo Lozano] - OK, I will add text in this regard.
Have you thought about using TLS with mutual authentication of both clients and servers? That would add an extra layer of protection to ensure that only authorized clients have access to TLD-specific data.
[Gustavo Lozano] - Thank you for the suggestion, we have it in our to-do list.
It would also be helpful to explicitly state that login credentials are provided by ICANN (how are they requested and delivered?), or at least provide a link to some other document that explains the process.
[Gustavo Lozano] - OK, I will add text in this regard.
It would also be helpful to note that the client must provide (how?) ICANN with a list of IP addresses to be added to a per-TLD white list. Are both IPv4 and IPv6 addresses acceptable? If not, why?
[Gustavo Lozano] - OK, I will add text in this regard. The input mechanism for IP address blocks supports IPv4 and IPv6, however in the beta of the Monitoring System API, we only have IPv4 transport support.
@Michele,
Speaking of IPs .. Ideally being able to provide blocks, rather than lists of IPs ..
[Gustavo Lozano] - In the GDD Portal, the Registry Operator can set the list of IP address blocks to be allowed to access the RRI (Registry Reporting Interface). The Monitoring System API uses the same credentials.
Regards, Gustavo
From: Michele Neylon - Blacknight [mailto:michele@blacknight.com] Sent: Friday, February 17, 2017 5:15 AM To: Hollenbeck, Scott <shollenbeck@verisign.com>; Gustavo Lozano <gustavo.lozano@icann.org>; 'gtld-tech@icann.org' <gtld-tech@icann.org> Subject: [Ext] Re: [gtld-tech] ICANN monitoring system API
Speaking of IPs .. Ideally being able to provide blocks, rather than lists of IPs ..
-- Mr Michele Neylon Blacknight Solutions Hosting, Colocation & Domains https://www.blacknight.com/[blacknight.com] http://blacknight.blog/[blacknight.blog] Intl. +353 (0) 59 9183072 Direct Dial: +353 (0)59 9183090 Personal blog: https://michele.blog/[michele.blog] Some thoughts: https://ceo.hosting/[ceo.hosting] ------------------------------- Blacknight Internet Solutions Ltd, Unit 12A,Barrowside Business Park,Sleaty Road,Graiguecullen,Carlow,R93 X265,Ireland Company No.: 370845
From: <gtld-tech-bounces@icann.org> on behalf of Scott Hollenbeck <shollenbeck@verisign.com> Date: Friday 17 February 2017 at 13:05 To: "'gustavo.lozano@icann.org'" <gustavo.lozano@icann.org>, "'gtld-tech@icann.org'" <gtld-tech@icann.org> Subject: Re: [gtld-tech] ICANN monitoring system API
Thanks for the opportunity to provide comments, Gustavo. It would be helpful to add more introductory text (perhaps in a section titled something like “Operational Assumptions”) to explicitly note several implied functional points. Here are a few that I found:
In Section 3, the document says that HTTP Basic authentication is used. Without additional information, that means that credentials are exchanged in plaintext form. Encryption service is hidden in the description of the base URL mentioned in Section 2. I think it would be helpful to note somewhere that TLS protection is required, and that the credentials are protected using TLS.
Have you thought about using TLS with mutual authentication of both clients and servers? That would add an extra layer of protection to ensure that only authorized clients have access to TLD-specific data.
It would also be helpful to explicitly state that login credentials are provided by ICANN (how are they requested and delivered?), or at least provide a link to some other document that explains the process.
It would also be helpful to note that the client must provide (how?) ICANN with a list of IP addresses to be added to a per-TLD white list. Are both IPv4 and IPv6 addresses acceptable? If not, why?
Scott
From: gtld-tech-bounces@icann.org [mailto:gtld-tech-bounces@icann.org] On Behalf Of Gustavo Lozano Sent: Saturday, February 11, 2017 12:17 AM To: gtld-tech@icann.org Subject: [EXTERNAL] [gtld-tech] ICANN monitoring system API
Hello Colleagues,
Specification 10 of the base registry agreement (https://newgtlds.icann.org/sites/default/files/agreements/agreement-approved-09jan14-en.htm[newgtlds.icann.org]) describes the Service Level Requirements and emergency thresholds that a Registry Operator has to comply related to the Registry Services.
ICANN has been monitoring compliance of new gTLDs following the algorithms defined in this specification.
ICANN provides access to Registry Operators to the incident information of its TLDs through an API currently in beta, and we are planning on releasing the production version in the future.
The Registry Operators using the beta API had provided valuable feedback, and the specification to be implemented in the production version has been modified accordingly.
Attached you will find the latest draft of this specification. I appreciate your feedback no later than February 24, 2017.
Regards, Gustavo
_______________________________________________ Ccnso-techwg mailing list Ccnso-techwg@icann.org https://mm.icann.org/mailman/listinfo/ccnso-techwg
Ccnso-techwg mailing list Ccnso-techwg@icann.org https://mm.icann.org/mailman/listinfo/ccnso-techwg
Jacques, there are no immediate plans to give the ccTLDs access to the MoSAPI. However, if there is enough interest we could reconsider. Regards, -- Francisco On 5/13/17, 12:02 PM, "gtld-tech-bounces@icann.org<mailto:gtld-tech-bounces@icann.org> on behalf of Jacques Latour" <gtld-tech-bounces@icann.org<mailto:gtld-tech-bounces@icann.org> on behalf of jacques.latour@cira.ca<mailto:jacques.latour@cira.ca>> wrote: Hi, Will this API be available to ccTLD as well? Jacques On 2017-05-12, 6:12 PM, "Victor Figueroa" <gtld-tech-bounces@icann.org<mailto:gtld-tech-bounces@icann.org> on behalf of victor.figueroa@icann.org<mailto:victor.figueroa@icann.org>> wrote: Hello Ron Geens, ICANN is currently working on the development of the production version of the Monitoring System API (MoSAPI). There is no date yet for the release of this version. We plan to notify registries in advance of the release. In the meantime, the MoSAPI beta version is available. Registries can request access to the MoSAPI beta through ICANN's Global Support Center, please see https://www.icann.org/resources/pages/customer-support-2015-06-22-en. Regards, Victor Figueroa Technical Services Senior Manager ICANN From: <gtld-tech-bounces@icann.org<mailto:gtld-tech-bounces@icann.org>> on behalf of Ronald Geens <ronald.geens@dnsbelgium.be<mailto:ronald.geens@dnsbelgium.be>> Date: Thursday, May 4, 2017 at 1:33 AM To: "gtld-tech@icann.org<mailto:gtld-tech@icann.org>" <gtld-tech@icann.org<mailto:gtld-tech@icann.org>> Subject: Re: [gtld-tech] ICANN monitoring system API Hi, I am re-opening this thread to inform about any progress that has been made on specifying or even rolling out this API. We would be interested in using this as an additional monitoring service but I cannot find a more recent update than this mail thread from February. Best regards, Ron Geens DNS Belgium On 25 Feb 2017, at 01:48, Gustavo Lozano <gustavo.lozano@icann.org<mailto:gustavo.lozano@icann.org>> wrote: Thank you for your feedback, Scott, and Michele, @Scott, I think it would be helpful to note somewhere that TLS protection is required, and that the credentials are protected using TLS. [Gustavo Lozano] - OK, I will add text in this regard. Have you thought about using TLS with mutual authentication of both clients and servers? That would add an extra layer of protection to ensure that only authorized clients have access to TLD-specific data. [Gustavo Lozano] - Thank you for the suggestion, we have it in our to-do list. It would also be helpful to explicitly state that login credentials are provided by ICANN (how are they requested and delivered?), or at least provide a link to some other document that explains the process. [Gustavo Lozano] - OK, I will add text in this regard. It would also be helpful to note that the client must provide (how?) ICANN with a list of IP addresses to be added to a per-TLD white list. Are both IPv4 and IPv6 addresses acceptable? If not, why? [Gustavo Lozano] - OK, I will add text in this regard. The input mechanism for IP address blocks supports IPv4 and IPv6, however in the beta of the Monitoring System API, we only have IPv4 transport support. @Michele, Speaking of IPs .. Ideally being able to provide blocks, rather than lists of IPs .. [Gustavo Lozano] - In the GDD Portal, the Registry Operator can set the list of IP address blocks to be allowed to access the RRI (Registry Reporting Interface). The Monitoring System API uses the same credentials. Regards, Gustavo From: Michele Neylon - Blacknight [mailto:michele@blacknight.com] Sent: Friday, February 17, 2017 5:15 AM To: Hollenbeck, Scott <shollenbeck@verisign.com<mailto:shollenbeck@verisign.com>>; Gustavo Lozano <gustavo.lozano@icann.org<mailto:gustavo.lozano@icann.org>>; 'gtld-tech@icann.org<mailto:gtld-tech@icann.org>' <gtld-tech@icann.org<mailto:gtld-tech@icann.org>> Subject: [Ext] Re: [gtld-tech] ICANN monitoring system API Speaking of IPs .. Ideally being able to provide blocks, rather than lists of IPs .. -- Mr Michele Neylon Blacknight Solutions Hosting, Colocation & Domains https://www.blacknight.com/ http://blacknight.blog/ Intl. +353 (0) 59 9183072 Direct Dial: +353 (0)59 9183090 Personal blog: https://michele.blog/ Some thoughts: https://ceo.hosting/ ------------------------------- Blacknight Internet Solutions Ltd, Unit 12A,Barrowside Business Park,Sleaty Road,Graiguecullen,Carlow,R93 X265,Ireland Company No.: 370845 From: <gtld-tech-bounces@icann.org<mailto:gtld-tech-bounces@icann.org>> on behalf of Scott Hollenbeck <shollenbeck@verisign.com<mailto:shollenbeck@verisign.com>> Date: Friday 17 February 2017 at 13:05 To: "'gustavo.lozano@icann.org<mailto:gustavo.lozano@icann.org>'" <gustavo.lozano@icann.org<mailto:gustavo.lozano@icann.org>>, "'gtld-tech@icann.org<mailto:gtld-tech@icann.org>'" <gtld-tech@icann.org<mailto:gtld-tech@icann.org>> Subject: Re: [gtld-tech] ICANN monitoring system API Thanks for the opportunity to provide comments, Gustavo. It would be helpful to add more introductory text (perhaps in a section titled something like “Operational Assumptions”) to explicitly note several implied functional points. Here are a few that I found: In Section 3, the document says that HTTP Basic authentication is used. Without additional information, that means that credentials are exchanged in plaintext form. Encryption service is hidden in the description of the base URL mentioned in Section 2. I think it would be helpful to note somewhere that TLS protection is required, and that the credentials are protected using TLS. Have you thought about using TLS with mutual authentication of both clients and servers? That would add an extra layer of protection to ensure that only authorized clients have access to TLD-specific data. It would also be helpful to explicitly state that login credentials are provided by ICANN (how are they requested and delivered?), or at least provide a link to some other document that explains the process. It would also be helpful to note that the client must provide (how?) ICANN with a list of IP addresses to be added to a per-TLD white list. Are both IPv4 and IPv6 addresses acceptable? If not, why? Scott From: gtld-tech-bounces@icann.org<mailto:gtld-tech-bounces@icann.org> [mailto:gtld-tech-bounces@icann.org] On Behalf Of Gustavo Lozano Sent: Saturday, February 11, 2017 12:17 AM To: gtld-tech@icann.org<mailto:gtld-tech@icann.org> Subject: [EXTERNAL] [gtld-tech] ICANN monitoring system API Hello Colleagues, Specification 10 of the base registry agreement (https://newgtlds.icann.org/sites/default/files/agreements/agreement-approved-09jan14-en.htm[newgtlds.icann.org]<https://urldefense.proofpoint.com/v2/url?u=https-3A__newgtlds.icann.org_sites_default_files_agreements_agreement-2Dapproved-2D09jan14-2Den.htm&d=DwMGaQ&c=FmY1u3PJp6wrcrwll3mSVzgfkbPSS6sJms7xcl4I5cM&r=VbweciUcwYQpIOZDSxl0ezGd1hGDtd-0BvgAgfmwfE0&m=cTdHSr5Ru2vE9oxoRasvA_FP8b5lxG_LgBzPtUN6cuc&s=cN9Uyg3mU-hTu7dDU3f-oCpzmJG_1sKiAvIoKReQo28&e=>) describes the Service Level Requirements and emergency thresholds that a Registry Operator has to comply related to the Registry Services. ICANN has been monitoring compliance of new gTLDs following the algorithms defined in this specification. ICANN provides access to Registry Operators to the incident information of its TLDs through an API currently in beta, and we are planning on releasing the production version in the future. The Registry Operators using the beta API had provided valuable feedback, and the specification to be implemented in the production version has been modified accordingly. Attached you will find the latest draft of this specification. I appreciate your feedback no later than February 24, 2017. Regards, Gustavo
Hi .uk would be very strongly interested in seeing cctld data via this platform. Brett Brett Carr DNS Engineering Lead Nominet U.K. ________________________________ From: gtld-tech-bounces@icann.org <gtld-tech-bounces@icann.org> on behalf of Francisco Arias <francisco.arias@icann.org> Sent: Saturday, May 13, 2017 12:36:11 PM To: Jacques Latour Cc: gtld-tech@icann.org Subject: Re: [gtld-tech] ICANN monitoring system API Jacques, there are no immediate plans to give the ccTLDs access to the MoSAPI. However, if there is enough interest we could reconsider. Regards, -- Francisco On 5/13/17, 12:02 PM, "gtld-tech-bounces@icann.org<mailto:gtld-tech-bounces@icann.org> on behalf of Jacques Latour" <gtld-tech-bounces@icann.org<mailto:gtld-tech-bounces@icann.org> on behalf of jacques.latour@cira.ca<mailto:jacques.latour@cira.ca>> wrote: Hi, Will this API be available to ccTLD as well? Jacques On 2017-05-12, 6:12 PM, "Victor Figueroa" <gtld-tech-bounces@icann.org<mailto:gtld-tech-bounces@icann.org> on behalf of victor.figueroa@icann.org<mailto:victor.figueroa@icann.org>> wrote: Hello Ron Geens, ICANN is currently working on the development of the production version of the Monitoring System API (MoSAPI). There is no date yet for the release of this version. We plan to notify registries in advance of the release. In the meantime, the MoSAPI beta version is available. Registries can request access to the MoSAPI beta through ICANN's Global Support Center, please see https://www.icann.org/resources/pages/customer-support-2015-06-22-en. Regards, Victor Figueroa Technical Services Senior Manager ICANN From: <gtld-tech-bounces@icann.org<mailto:gtld-tech-bounces@icann.org>> on behalf of Ronald Geens <ronald.geens@dnsbelgium.be<mailto:ronald.geens@dnsbelgium.be>> Date: Thursday, May 4, 2017 at 1:33 AM To: "gtld-tech@icann.org<mailto:gtld-tech@icann.org>" <gtld-tech@icann.org<mailto:gtld-tech@icann.org>> Subject: Re: [gtld-tech] ICANN monitoring system API Hi, I am re-opening this thread to inform about any progress that has been made on specifying or even rolling out this API. We would be interested in using this as an additional monitoring service but I cannot find a more recent update than this mail thread from February. Best regards, Ron Geens DNS Belgium On 25 Feb 2017, at 01:48, Gustavo Lozano <gustavo.lozano@icann.org<mailto:gustavo.lozano@icann.org>> wrote: Thank you for your feedback, Scott, and Michele, @Scott, I think it would be helpful to note somewhere that TLS protection is required, and that the credentials are protected using TLS. [Gustavo Lozano] - OK, I will add text in this regard. Have you thought about using TLS with mutual authentication of both clients and servers? That would add an extra layer of protection to ensure that only authorized clients have access to TLD-specific data. [Gustavo Lozano] - Thank you for the suggestion, we have it in our to-do list. It would also be helpful to explicitly state that login credentials are provided by ICANN (how are they requested and delivered?), or at least provide a link to some other document that explains the process. [Gustavo Lozano] - OK, I will add text in this regard. It would also be helpful to note that the client must provide (how?) ICANN with a list of IP addresses to be added to a per-TLD white list. Are both IPv4 and IPv6 addresses acceptable? If not, why? [Gustavo Lozano] - OK, I will add text in this regard. The input mechanism for IP address blocks supports IPv4 and IPv6, however in the beta of the Monitoring System API, we only have IPv4 transport support. @Michele, Speaking of IPs .. Ideally being able to provide blocks, rather than lists of IPs .. [Gustavo Lozano] - In the GDD Portal, the Registry Operator can set the list of IP address blocks to be allowed to access the RRI (Registry Reporting Interface). The Monitoring System API uses the same credentials. Regards, Gustavo From: Michele Neylon - Blacknight [mailto:michele@blacknight.com] Sent: Friday, February 17, 2017 5:15 AM To: Hollenbeck, Scott <shollenbeck@verisign.com<mailto:shollenbeck@verisign.com>>; Gustavo Lozano <gustavo.lozano@icann.org<mailto:gustavo.lozano@icann.org>>; 'gtld-tech@icann.org<mailto:gtld-tech@icann.org>' <gtld-tech@icann.org<mailto:gtld-tech@icann.org>> Subject: [Ext] Re: [gtld-tech] ICANN monitoring system API Speaking of IPs .. Ideally being able to provide blocks, rather than lists of IPs .. -- Mr Michele Neylon Blacknight Solutions Hosting, Colocation & Domains https://www.blacknight.com/ http://blacknight.blog/ Intl. +353 (0) 59 9183072 Direct Dial: +353 (0)59 9183090 Personal blog: https://michele.blog/ Some thoughts: https://ceo.hosting/ ------------------------------- Blacknight Internet Solutions Ltd, Unit 12A,Barrowside Business Park,Sleaty Road,Graiguecullen,Carlow,R93 X265,Ireland Company No.: 370845 From: <gtld-tech-bounces@icann.org<mailto:gtld-tech-bounces@icann.org>> on behalf of Scott Hollenbeck <shollenbeck@verisign.com<mailto:shollenbeck@verisign.com>> Date: Friday 17 February 2017 at 13:05 To: "'gustavo.lozano@icann.org<mailto:gustavo.lozano@icann.org>'" <gustavo.lozano@icann.org<mailto:gustavo.lozano@icann.org>>, "'gtld-tech@icann.org<mailto:gtld-tech@icann.org>'" <gtld-tech@icann.org<mailto:gtld-tech@icann.org>> Subject: Re: [gtld-tech] ICANN monitoring system API Thanks for the opportunity to provide comments, Gustavo. It would be helpful to add more introductory text (perhaps in a section titled something like “Operational Assumptions”) to explicitly note several implied functional points. Here are a few that I found: In Section 3, the document says that HTTP Basic authentication is used. Without additional information, that means that credentials are exchanged in plaintext form. Encryption service is hidden in the description of the base URL mentioned in Section 2. I think it would be helpful to note somewhere that TLS protection is required, and that the credentials are protected using TLS. Have you thought about using TLS with mutual authentication of both clients and servers? That would add an extra layer of protection to ensure that only authorized clients have access to TLD-specific data. It would also be helpful to explicitly state that login credentials are provided by ICANN (how are they requested and delivered?), or at least provide a link to some other document that explains the process. It would also be helpful to note that the client must provide (how?) ICANN with a list of IP addresses to be added to a per-TLD white list. Are both IPv4 and IPv6 addresses acceptable? If not, why? Scott From: gtld-tech-bounces@icann.org<mailto:gtld-tech-bounces@icann.org> [mailto:gtld-tech-bounces@icann.org] On Behalf Of Gustavo Lozano Sent: Saturday, February 11, 2017 12:17 AM To: gtld-tech@icann.org<mailto:gtld-tech@icann.org> Subject: [EXTERNAL] [gtld-tech] ICANN monitoring system API Hello Colleagues, Specification 10 of the base registry agreement (https://newgtlds.icann.org/sites/default/files/agreements/agreement-approved-09jan14-en.htm[newgtlds.icann.org]<https://urldefense.proofpoint.com/v2/url?u=https-3A__newgtlds.icann.org_sites_default_files_agreements_agreement-2Dapproved-2D09jan14-2Den.htm&d=DwMGaQ&c=FmY1u3PJp6wrcrwll3mSVzgfkbPSS6sJms7xcl4I5cM&r=VbweciUcwYQpIOZDSxl0ezGd1hGDtd-0BvgAgfmwfE0&m=cTdHSr5Ru2vE9oxoRasvA_FP8b5lxG_LgBzPtUN6cuc&s=cN9Uyg3mU-hTu7dDU3f-oCpzmJG_1sKiAvIoKReQo28&e=>) describes the Service Level Requirements and emergency thresholds that a Registry Operator has to comply related to the Registry Services. ICANN has been monitoring compliance of new gTLDs following the algorithms defined in this specification. ICANN provides access to Registry Operators to the incident information of its TLDs through an API currently in beta, and we are planning on releasing the production version in the future. The Registry Operators using the beta API had provided valuable feedback, and the specification to be implemented in the production version has been modified accordingly. Attached you will find the latest draft of this specification. I appreciate your feedback no later than February 24, 2017. Regards, Gustavo
+1 for .CA On 2017-05-13, 2:39 PM, "Brett Carr" <brett.carr@nominet.uk<mailto:brett.carr@nominet.uk>> wrote: Hi .uk would be very strongly interested in seeing cctld data via this platform. Brett Brett Carr DNS Engineering Lead Nominet U.K. ________________________________ From: gtld-tech-bounces@icann.org<mailto:gtld-tech-bounces@icann.org> <gtld-tech-bounces@icann.org<mailto:gtld-tech-bounces@icann.org>> on behalf of Francisco Arias <francisco.arias@icann.org<mailto:francisco.arias@icann.org>> Sent: Saturday, May 13, 2017 12:36:11 PM To: Jacques Latour Cc: gtld-tech@icann.org<mailto:gtld-tech@icann.org> Subject: Re: [gtld-tech] ICANN monitoring system API Jacques, there are no immediate plans to give the ccTLDs access to the MoSAPI. However, if there is enough interest we could reconsider. Regards, -- Francisco On 5/13/17, 12:02 PM, "gtld-tech-bounces@icann.org<mailto:gtld-tech-bounces@icann.org> on behalf of Jacques Latour" <gtld-tech-bounces@icann.org<mailto:gtld-tech-bounces@icann.org> on behalf of jacques.latour@cira.ca<mailto:jacques.latour@cira.ca>> wrote: Hi, Will this API be available to ccTLD as well? Jacques On 2017-05-12, 6:12 PM, "Victor Figueroa" <gtld-tech-bounces@icann.org<mailto:gtld-tech-bounces@icann.org> on behalf of victor.figueroa@icann.org<mailto:victor.figueroa@icann.org>> wrote: Hello Ron Geens, ICANN is currently working on the development of the production version of the Monitoring System API (MoSAPI). There is no date yet for the release of this version. We plan to notify registries in advance of the release. In the meantime, the MoSAPI beta version is available. Registries can request access to the MoSAPI beta through ICANN's Global Support Center, please see https://www.icann.org/resources/pages/customer-support-2015-06-22-en. Regards, Victor Figueroa Technical Services Senior Manager ICANN From: <gtld-tech-bounces@icann.org<mailto:gtld-tech-bounces@icann.org>> on behalf of Ronald Geens <ronald.geens@dnsbelgium.be<mailto:ronald.geens@dnsbelgium.be>> Date: Thursday, May 4, 2017 at 1:33 AM To: "gtld-tech@icann.org<mailto:gtld-tech@icann.org>" <gtld-tech@icann.org<mailto:gtld-tech@icann.org>> Subject: Re: [gtld-tech] ICANN monitoring system API Hi, I am re-opening this thread to inform about any progress that has been made on specifying or even rolling out this API. We would be interested in using this as an additional monitoring service but I cannot find a more recent update than this mail thread from February. Best regards, Ron Geens DNS Belgium On 25 Feb 2017, at 01:48, Gustavo Lozano <gustavo.lozano@icann.org<mailto:gustavo.lozano@icann.org>> wrote: Thank you for your feedback, Scott, and Michele, @Scott, I think it would be helpful to note somewhere that TLS protection is required, and that the credentials are protected using TLS. [Gustavo Lozano] - OK, I will add text in this regard. Have you thought about using TLS with mutual authentication of both clients and servers? That would add an extra layer of protection to ensure that only authorized clients have access to TLD-specific data. [Gustavo Lozano] - Thank you for the suggestion, we have it in our to-do list. It would also be helpful to explicitly state that login credentials are provided by ICANN (how are they requested and delivered?), or at least provide a link to some other document that explains the process. [Gustavo Lozano] - OK, I will add text in this regard. It would also be helpful to note that the client must provide (how?) ICANN with a list of IP addresses to be added to a per-TLD white list. Are both IPv4 and IPv6 addresses acceptable? If not, why? [Gustavo Lozano] - OK, I will add text in this regard. The input mechanism for IP address blocks supports IPv4 and IPv6, however in the beta of the Monitoring System API, we only have IPv4 transport support. @Michele, Speaking of IPs .. Ideally being able to provide blocks, rather than lists of IPs .. [Gustavo Lozano] - In the GDD Portal, the Registry Operator can set the list of IP address blocks to be allowed to access the RRI (Registry Reporting Interface). The Monitoring System API uses the same credentials. Regards, Gustavo From: Michele Neylon - Blacknight [mailto:michele@blacknight.com] Sent: Friday, February 17, 2017 5:15 AM To: Hollenbeck, Scott <shollenbeck@verisign.com<mailto:shollenbeck@verisign.com>>; Gustavo Lozano <gustavo.lozano@icann.org<mailto:gustavo.lozano@icann.org>>; 'gtld-tech@icann.org<mailto:gtld-tech@icann.org>' <gtld-tech@icann.org<mailto:gtld-tech@icann.org>> Subject: [Ext] Re: [gtld-tech] ICANN monitoring system API Speaking of IPs .. Ideally being able to provide blocks, rather than lists of IPs .. -- Mr Michele Neylon Blacknight Solutions Hosting, Colocation & Domains https://www.blacknight.com/ http://blacknight.blog/ Intl. +353 (0) 59 9183072 Direct Dial: +353 (0)59 9183090 Personal blog: https://michele.blog/ Some thoughts: https://ceo.hosting/ ------------------------------- Blacknight Internet Solutions Ltd, Unit 12A,Barrowside Business Park,Sleaty Road,Graiguecullen,Carlow,R93 X265,Ireland Company No.: 370845 From: <gtld-tech-bounces@icann.org<mailto:gtld-tech-bounces@icann.org>> on behalf of Scott Hollenbeck <shollenbeck@verisign.com<mailto:shollenbeck@verisign.com>> Date: Friday 17 February 2017 at 13:05 To: "'gustavo.lozano@icann.org<mailto:gustavo.lozano@icann.org>'" <gustavo.lozano@icann.org<mailto:gustavo.lozano@icann.org>>, "'gtld-tech@icann.org<mailto:gtld-tech@icann.org>'" <gtld-tech@icann.org<mailto:gtld-tech@icann.org>> Subject: Re: [gtld-tech] ICANN monitoring system API Thanks for the opportunity to provide comments, Gustavo. It would be helpful to add more introductory text (perhaps in a section titled something like “Operational Assumptions”) to explicitly note several implied functional points. Here are a few that I found: In Section 3, the document says that HTTP Basic authentication is used. Without additional information, that means that credentials are exchanged in plaintext form. Encryption service is hidden in the description of the base URL mentioned in Section 2. I think it would be helpful to note somewhere that TLS protection is required, and that the credentials are protected using TLS. Have you thought about using TLS with mutual authentication of both clients and servers? That would add an extra layer of protection to ensure that only authorized clients have access to TLD-specific data. It would also be helpful to explicitly state that login credentials are provided by ICANN (how are they requested and delivered?), or at least provide a link to some other document that explains the process. It would also be helpful to note that the client must provide (how?) ICANN with a list of IP addresses to be added to a per-TLD white list. Are both IPv4 and IPv6 addresses acceptable? If not, why? Scott From:gtld-tech-bounces@icann.org<mailto:gtld-tech-bounces@icann.org> [mailto:gtld-tech-bounces@icann.org] On Behalf Of Gustavo Lozano Sent: Saturday, February 11, 2017 12:17 AM To: gtld-tech@icann.org<mailto:gtld-tech@icann.org> Subject: [EXTERNAL] [gtld-tech] ICANN monitoring system API Hello Colleagues, Specification 10 of the base registry agreement (https://newgtlds.icann.org/sites/default/files/agreements/agreement-approved-09jan14-en.htm[newgtlds.icann.org]<https://urldefense.proofpoint.com/v2/url?u=https-3A__newgtlds.icann.org_sites_default_files_agreements_agreement-2Dapproved-2D09jan14-2Den.htm&d=DwMGaQ&c=FmY1u3PJp6wrcrwll3mSVzgfkbPSS6sJms7xcl4I5cM&r=VbweciUcwYQpIOZDSxl0ezGd1hGDtd-0BvgAgfmwfE0&m=cTdHSr5Ru2vE9oxoRasvA_FP8b5lxG_LgBzPtUN6cuc&s=cN9Uyg3mU-hTu7dDU3f-oCpzmJG_1sKiAvIoKReQo28&e=>) describes the Service Level Requirements and emergency thresholds that a Registry Operator has to comply related to the Registry Services. ICANN has been monitoring compliance of new gTLDs following the algorithms defined in this specification. ICANN provides access to Registry Operators to the incident information of its TLDs through an API currently in beta, and we are planning on releasing the production version in the future. The Registry Operators using the beta API had provided valuable feedback, and the specification to be implemented in the production version has been modified accordingly. Attached you will find the latest draft of this specification. I appreciate your feedback no later than February 24, 2017. Regards, Gustavo
I think there is sufficient interest for a presentation in JNB :-)-O el -- Sent from Dr Lisse's iPad mini 4
On 13 May 2017, at 13:57, Jacques Latour <jacques.latour@cira.ca> wrote:
+1 for .CA
On 2017-05-13, 2:39 PM, "Brett Carr" <brett.carr@nominet.uk> wrote:
Hi
.uk would be very strongly interested in seeing cctld data via this platform.
Brett
Brett Carr DNS Engineering Lead Nominet U.K. From: gtld-tech-bounces@icann.org <gtld-tech-bounces@icann.org> on behalf of Francisco Arias <francisco.arias@icann.org> Sent: Saturday, May 13, 2017 12:36:11 PM To: Jacques Latour Cc: gtld-tech@icann.org Subject: Re: [gtld-tech] ICANN monitoring system API
Jacques, there are no immediate plans to give the ccTLDs access to the MoSAPI. However, if there is enough interest we could reconsider.
Regards,
-- Francisco
On 5/13/17, 12:02 PM, "gtld-tech-bounces@icann.org on behalf of Jacques Latour" <gtld-tech-bounces@icann.org on behalf of jacques.latour@cira.ca> wrote:
Hi, Will this API be available to ccTLD as well? Jacques
On 2017-05-12, 6:12 PM, "Victor Figueroa" <gtld-tech-bounces@icann.org on behalf of victor.figueroa@icann.org> wrote:
Hello Ron Geens,
ICANN is currently working on the development of the production version of the Monitoring System API (MoSAPI). There is no date yet for the release of this version. We plan to notify registries in advance of the release.
In the meantime, the MoSAPI beta version is available. Registries can request access to the MoSAPI beta through ICANN's Global Support Center, please see https://www.icann.org/resources/pages/customer-support-2015-06-22-en.
Regards, Victor Figueroa Technical Services Senior Manager ICANN
From: <gtld-tech-bounces@icann.org> on behalf of Ronald Geens <ronald.geens@dnsbelgium.be> Date: Thursday, May 4, 2017 at 1:33 AM To: "gtld-tech@icann.org" <gtld-tech@icann.org> Subject: Re: [gtld-tech] ICANN monitoring system API
Hi,
I am re-opening this thread to inform about any progress that has been made on specifying or even rolling out this API. We would be interested in using this as an additional monitoring service but I cannot find a more recent update than this mail thread from February.
Best regards,
Ron Geens DNS Belgium
On 25 Feb 2017, at 01:48, Gustavo Lozano <gustavo.lozano@icann.org> wrote:
Thank you for your feedback, Scott, and Michele,
@Scott,
I think it would be helpful to note somewhere that TLS protection is required, and that the credentials are protected using TLS.
[Gustavo Lozano] - OK, I will add text in this regard.
Have you thought about using TLS with mutual authentication of both clients and servers? That would add an extra layer of protection to ensure that only authorized clients have access to TLD-specific data.
[Gustavo Lozano] - Thank you for the suggestion, we have it in our to-do list.
It would also be helpful to explicitly state that login credentials are provided by ICANN (how are they requested and delivered?), or at least provide a link to some other document that explains the process.
[Gustavo Lozano] - OK, I will add text in this regard.
It would also be helpful to note that the client must provide (how?) ICANN with a list of IP addresses to be added to a per-TLD white list. Are both IPv4 and IPv6 addresses acceptable? If not, why?
[Gustavo Lozano] - OK, I will add text in this regard. The input mechanism for IP address blocks supports IPv4 and IPv6, however in the beta of the Monitoring System API, we only have IPv4 transport support.
@Michele,
Speaking of IPs .. Ideally being able to provide blocks, rather than lists of IPs ..
[Gustavo Lozano] - In the GDD Portal, the Registry Operator can set the list of IP address blocks to be allowed to access the RRI (Registry Reporting Interface). The Monitoring System API uses the same credentials.
Regards, Gustavo
From: Michele Neylon - Blacknight [mailto:michele@blacknight.com] Sent: Friday, February 17, 2017 5:15 AM To: Hollenbeck, Scott <shollenbeck@verisign.com>; Gustavo Lozano <gustavo.lozano@icann.org>; 'gtld-tech@icann.org' <gtld-tech@icann.org> Subject: [Ext] Re: [gtld-tech] ICANN monitoring system API
Speaking of IPs .. Ideally being able to provide blocks, rather than lists of IPs ..
-- Mr Michele Neylon Blacknight Solutions Hosting, Colocation & Domains https://www.blacknight.com/ http://blacknight.blog/ Intl. +353 (0) 59 9183072 Direct Dial: +353 (0)59 9183090 Personal blog: https://michele.blog/ Some thoughts: https://ceo.hosting/ ------------------------------- Blacknight Internet Solutions Ltd, Unit 12A,Barrowside Business Park,Sleaty Road,Graiguecullen,Carlow,R93 X265,Ireland Company No.: 370845
From: <gtld-tech-bounces@icann.org> on behalf of Scott Hollenbeck <shollenbeck@verisign.com> Date: Friday 17 February 2017 at 13:05 To: "'gustavo.lozano@icann.org'" <gustavo.lozano@icann.org>, "'gtld-tech@icann.org'" <gtld-tech@icann.org> Subject: Re: [gtld-tech] ICANN monitoring system API
Thanks for the opportunity to provide comments, Gustavo. It would be helpful to add more introductory text (perhaps in a section titled something like “Operational Assumptions”) to explicitly note several implied functional points. Here are a few that I found:
In Section 3, the document says that HTTP Basic authentication is used. Without additional information, that means that credentials are exchanged in plaintext form. Encryption service is hidden in the description of the base URL mentioned in Section 2. I think it would be helpful to note somewhere that TLS protection is required, and that the credentials are protected using TLS.
Have you thought about using TLS with mutual authentication of both clients and servers? That would add an extra layer of protection to ensure that only authorized clients have access to TLD-specific data.
It would also be helpful to explicitly state that login credentials are provided by ICANN (how are they requested and delivered?), or at least provide a link to some other document that explains the process.
It would also be helpful to note that the client must provide (how?) ICANN with a list of IP addresses to be added to a per-TLD white list. Are both IPv4 and IPv6 addresses acceptable? If not, why?
Scott
From:gtld-tech-bounces@icann.org [mailto:gtld-tech-bounces@icann.org] On Behalf Of Gustavo Lozano Sent: Saturday, February 11, 2017 12:17 AM To: gtld-tech@icann.org Subject: [EXTERNAL] [gtld-tech] ICANN monitoring system API
Hello Colleagues,
Specification 10 of the base registry agreement (https://newgtlds.icann.org/sites/default/files/agreements/agreement-approved-09jan14-en.htm[newgtlds.icann.org]) describes the Service Level Requirements and emergency thresholds that a Registry Operator has to comply related to the Registry Services.
ICANN has been monitoring compliance of new gTLDs following the algorithms defined in this specification.
ICANN provides access to Registry Operators to the incident information of its TLDs through an API currently in beta, and we are planning on releasing the production version in the future.
The Registry Operators using the beta API had provided valuable feedback, and the specification to be implemented in the production version has been modified accordingly.
Attached you will find the latest draft of this specification. I appreciate your feedback no later than February 24, 2017.
Regards, Gustavo
participants (9)
-
Brett Carr -
Dr Eberhard W Lisse -
Francisco Arias -
Gustavo Lozano -
Jacques Latour -
Michele Neylon - Blacknight -
Patrick Jones -
Ronald Geens -
Victor Figueroa