November 2019 - Ssr2-review

FW: ICANN activity on DoH and other encrypted DNS transports
by Jennifer Bryce Nov. 7, 2019

Nov. 7, 2019

FYI -----Original Message----- From: Input-to-ssr2rt <input-to-ssr2rt-bounces(a)icann.org> on behalf of Paul Hoffman <paul.hoffman(a)icann.org> Date: Wednesday, November 6, 2019 at 5:39 PM To: "input-to-ssr2rt(a)icann.org" <input-to-ssr2rt(a)icann.org> Subject: [Input-to-SSR2RT] ICANN activity on DoH and other encrypted DNS transports Greetings. At Russ' suggestion, I looked at the slides from your public engagement session earlier in the week, particularly with respect to DoH. Last week, ICANN's Office of the CTO published an overview of encrypted DNS to help the policy community understand the issues that are being widely discussed in the technical community. If you haven't seen "Local and Internet Policy Implications of Encrypted DNS" already, it is at: https://www.icann.org/en/system/files/files/octo-003-en.pdf The document outlines (but purposely does not go into detail) the concerns from many parties, particularly about security. It also covers the adoption of DoH by two major browsers, including an analysis of their stated plans for deployment to their customers. One point I would make about the slide given: it appears that the review team is only concerned about DoH, not DoT. Some proposed uses of DoT causes most of the same ecosystem and security concerns as DoH does, so you might consider expanding that to "encrypted DNS". The same concern will come up again in a few years if DoH over Quic or DNS over QUIC is adopted. Please let me know if I can assist more on this. --Paul Hoffman _______________________________________________ Input-to-ssr2rt mailing list Input-to-ssr2rt(a)icann.org https://mm.icann.org/mailman/listinfo/input-to-ssr2rt _______________________________________________ By submitting your personal data, you consent to the processing of your personal data for purposes of subscribing to this mailing list accordance with the ICANN Privacy Policy (https://www.icann.org/privacy/policy) and the website Terms of Service (https://www.icann.org/privacy/tos) You can visit the Mailman link above to change your membership status or configuration, including unsubscribing, setting digest-style delivery or disabling delivery altogether (e.g., for a vacation), and so on.

1 0

Email update
by Scott McCormick Nov. 5, 2019

Nov. 5, 2019

Hey Jennifer, Can you please update my email to scott.mccormick(a)reciprocitylabs.com. I've been getting what looks like some of the SSR2-RT emails here as of Oct 16th, but not all of them. Thanks, -Scott Scott McCormick Reciprocity <http://reciprocitylabs.com/> | What is ZenGRC? <https://vimeo.com/243365165> M: (443) 691-2013 | scott.mccormick(a)reciprocitylabs.com

2 1

Query: findings document(s)
by Heather Flanagan Nov. 4, 2019

Nov. 4, 2019

Hola a todos! I was hoping to start looking at the various findings created by the review team, and while I have the ones for SSR1 and for the Abuse/Compliance sub-team, I do not have them for any of the other areas. I have heard rumors of one or more documents called “Findings” but for the life of me I can’t find them in the Review Team folder. Jennifer has been digging as well, and we’re not sure where this material might be. Does anyone have a link to the doc(s) in question? Thanks! Heather

1 1

Engagement session slides
by Jennifer Bryce Nov. 3, 2019

Nov. 3, 2019

Attached here. Best, Jennifer

1 0

A copy of the SSR2 Community Engagement slides for ICANN 66
by Heather Flanagan Nov. 3, 2019

Nov. 3, 2019

Final slide deck is now available in the SSR2 RT folder: https://drive.google.com/drive/u/1/folders/0AJI3XVmMtdtdUk9PVA <https://drive.google.com/drive/u/1/folders/0AJI3XVmMtdtdUk9PVA> See “SSR2 Montreal.pptx" -Heather

1 0

Re: [Ssr2-review] [EXT] Enhancing the Effectiveness of Review Recommendations and Their Implementation
by Barrett, Kerry-Ann Nov. 3, 2019

Nov. 3, 2019

Thanks Jen Sincerely, Kerry-Ann Barrett Cybersecurity Policy Specialist Organization of American States On Nov 3, 2019, at 1:40 PM, Jennifer Bryce <jennifer.bryce(a)icann.org> wrote: CAUTION: EXTERNAL SENDER Dear SSR2 RT members, ‘Enhancing the Effectiveness of Review Recommendations and Their Implementation’ FYI, the above session will take place on Monday 4 November at 15:15 - 16:45 ET in Room 517D. We encourage you to attend if you are able. You may find it useful to review the below materials in advance: The draft proposal for discussion is here: https://www.icann.org/en/system/files/files/draft-proposal-resourcing-commu… [icann.org]<https://urldefense.proofpoint.com/v2/url?u=https-3A__www.icann.org_en_syste…>. The slides are posted to the session page here: https://66.schedule.icann.org/meetings/1116749 [66.schedule.icann.org]<https://urldefense.proofpoint.com/v2/url?u=https-3A__66.schedule.icann.org_…> A recent blog including this topic is here: https://www.icann.org/news/blog/enhancing-and-streamlining-icann-s-reviews-… [icann.org]<https://urldefense.proofpoint.com/v2/url?u=https-3A__www.icann.org_news_blo…> Best, Jennifer -- Jennifer Bryce MSSI Associate Project Manager Internet Corporation for Assigned Names and Numbers (ICANN) Email: jennifer.bryce(a)icann.org Skype: jennifer.bryce.icann www.icann.org _______________________________________________ Ssr2-review mailing list Ssr2-review(a)icann.org https://mm.icann.org/mailman/listinfo/ssr2-review _______________________________________________ By submitting your personal data, you consent to the processing of your personal data for purposes of subscribing to this mailing list accordance with the ICANN Privacy Policy (https://www.icann.org/privacy/policy) and the website Terms of Service (https://www.icann.org/privacy/tos) You can visit the Mailman link above to change your membership status or configuration, including unsubscribing, setting digest-style delivery or disabling delivery altogether (e.g., for a vacation), and so on.

1 0

Enhancing the Effectiveness of Review Recommendations and Their Implementation
by Jennifer Bryce Nov. 3, 2019

Nov. 3, 2019

Dear SSR2 RT members, ‘Enhancing the Effectiveness of Review Recommendations and Their Implementation’ FYI, the above session will take place on Monday 4 November at 15:15 - 16:45 ET in Room 517D. We encourage you to attend if you are able. You may find it useful to review the below materials in advance: The draft proposal for discussion is here: https://www.icann.org/en/system/files/files/draft-proposal-resourcing-commu… [icann.org]<https://urldefense.proofpoint.com/v2/url?u=https-3A__www.icann.org_en_syste…>. The slides are posted to the session page here: https://66.schedule.icann.org/meetings/1116749 [66.schedule.icann.org]<https://urldefense.proofpoint.com/v2/url?u=https-3A__66.schedule.icann.org_…> A recent blog including this topic is here: https://www.icann.org/news/blog/enhancing-and-streamlining-icann-s-reviews-… [icann.org]<https://urldefense.proofpoint.com/v2/url?u=https-3A__www.icann.org_news_blo…> Best, Jennifer -- Jennifer Bryce MSSI Associate Project Manager Internet Corporation for Assigned Names and Numbers (ICANN) Email: jennifer.bryce(a)icann.org Skype: jennifer.bryce.icann www.icann.org

1 0

attempt at prioritization (and rationale) of recs required by bylaws
by k claffy Nov. 3, 2019

Nov. 3, 2019

jennifer did remind us of this on 3 oct: ICANN Bylaws text regarding recommendations Section 4.6(a)(vii)(A) of the ICANN Bylaws<https://www.icann.org/resources/pages/governance/bylaws-en> states the following: (A) Each report of the review team shall describe the degree of consensus or agreement reached by the review team on each recommendation contained in such report. Any member of a review team not in favor of a recommendation of its review team (whether as a result of voting against a matter or objecting to the consensus position) may record a minority dissent to such recommendation, which shall be included in the report of the review team. The review team shall attempt to prioritize each of its recommendations and provide a rationale for such prioritization. it's interesting that it's tacked on to the end of the consensus transparency requirement, because i suspect we are likely to get consensus on the recommendations but not on their prioritization.. i share eric's concern that given our lack of resources to base any approach approach on trustworthy analysis of data on risks and harms to users, it will be subjective which could mislead the Board about what is most important by the time they read the report. i still suspect we should identify the risks we mean to mitigate/prevent with each recommendation, and leave it to the Board to sort these risks. when we send our draft report out for public comment, we could also explicitly solicit feedback on this issue, and even solicit pointers to sources of data/analysis on the risks we identify, to add to the report. k

1 0

Slides for review
by Jennifer Bryce Nov. 3, 2019

Nov. 3, 2019

Dear SSR2 RT members, The slides for the engagement session are here: https://docs.google.com/presentation/d/1ysyZpH0htHkeHytCZMwl70XSyMsCO3tV4mi… Please review and share any comments to the list, by referencing the slide header (the slide #s are likely to change as Heather continues to work on the slides). Best, Jennifer -- Jennifer Bryce MSSI Associate Project Manager Internet Corporation for Assigned Names and Numbers (ICANN) Email: jennifer.bryce(a)icann.org Skype: jennifer.bryce.icann www.icann.org

3 2

SSR2 Work Session
by Jennifer Bryce Nov. 2, 2019

Nov. 2, 2019

1 0