February 2019 - Ssr2-review

Clarification request: Privacy protections question
by Jennifer Bryce Feb. 22, 2019

Feb. 22, 2019

Dear SSR2 Review Team, Some clarification is sought on the below question. Would volunteers from the group asking the question please review the below request and provide further guidance? Review Team volunteers: Eric, Norm, Laurin, Kerry-Ann, Noorul Workstream: Future Challenges Topic: Privacy protections (DNS over TLS / over HTTPS; Circular dependencies between WebPKI and DNSSEC; Impact on Proactive anti-abuse and investigations) Q: How will ICANN continue to follow up on the GDPR and related decisions? Clarification requested from ICANN org: In providing our response: 1. Is there an expectation for us to look into each of the technical topics, i.e.: · DNS over TLS/over HTTPS; · Circular dependencies between WebPKI and DNNSEC; and · Impact on Proactive anti-abuse and investigations. OR 1. Is the SSR2 RT looking for a more general, broad response i.e. what ICANN is doing re: GDPR; and how ICANN will continue to follow up/keep abreast on GDPR developments. 1. What does GDPR and “related decisions” specifically mean in this context? Thank you, Jennifer -- Jennifer Bryce Senior Reviews Coordinator Internet Corporation for Assigned Names and Numbers (ICANN) Email: jennifer.bryce(a)icann.org Skype: jennifer.bryce.icann www.icann.org

1 0

Re: [Ssr2-review] [EXT] Re: SSR2 agenda: 21 February 2019
by Barrett, Kerry-Ann Feb. 21, 2019

Feb. 21, 2019

Hi Team I am in meetings all day today because of the snow storm in DC yesterday that had needed to be postponed. Apologies Sincerely, Kerry-Ann Barrett Cybersecurity Policy Specialist Organization of American States On Feb 21, 2019, at 9:50 AM, Matogoro Jabera <jaberamatogoro(a)gmail.com<mailto:jaberamatogoro@gmail.com>> wrote: Dear Jennifer, I am writing to report that I have received an email from ICANN Travel Support Team and will review later this week visa requirement to Brussel. Regards, MATOGORO Jabhera Assistant Lecturer College of Informatics and Virtual Education The University of Dodoma P.O Box 490, Dodoma. Website: www.udom.ac.tz<http://www.udom.ac.tz/> IEEE Membership ID: 93934185 On Thu, Feb 21, 2019 at 1:16 PM Jennifer Bryce <jennifer.bryce(a)icann.org<mailto:jennifer.bryce@icann.org>> wrote: Dear SSR2 RT members, Please see below for the agenda for the plenary meeting today, 21 February at 15:00 UTC. 1. Welcome, roll call, SOI updates * May face-to-face meeting in Brussels: Team members to advise staff of any visa requirements and look out for welcome email from ICANN travel 1. DNS SSR workstream - walkthrough topics that don't have questions (see questions<https://docs.google.com/document/d/14eJwDGP-LvS9ltTmZoh1i19Fi0_pB2nJ4JYMsS7…> here from p10) 2. AOB 3. Confirm action items / decisions reached Best, Jennifer -- Jennifer Bryce Senior Reviews Coordinator Internet Corporation for Assigned Names and Numbers (ICANN) Email: jennifer.bryce(a)icann.org<mailto:jennifer.bryce@icann.org> Skype: jennifer.bryce.icann www.icann.org<http://www.icann.org> _______________________________________________ Ssr2-review mailing list Ssr2-review(a)icann.org<mailto:Ssr2-review@icann.org> https://mm.icann.org/mailman/listinfo/ssr2-review _______________________________________________ Ssr2-review mailing list Ssr2-review(a)icann.org<mailto:Ssr2-review@icann.org> https://mm.icann.org/mailman/listinfo/ssr2-review

1 0

Technical Writer
by Russ Housley Feb. 21, 2019

Feb. 21, 2019

Dear Team: We talked about getting a technical writer to help us. Attached is a job description. Staff made the first draft, and then the leadership team made edits. Now, we want your comments. Please send them to the list ASAP. Russ

3 3

SSR2 agenda: 21 February 2019
by Jennifer Bryce Feb. 21, 2019

Feb. 21, 2019

Dear SSR2 RT members, Please see below for the agenda for the plenary meeting today, 21 February at 15:00 UTC. 1. Welcome, roll call, SOI updates * May face-to-face meeting in Brussels: Team members to advise staff of any visa requirements and look out for welcome email from ICANN travel 2. DNS SSR workstream - walkthrough topics that don't have questions (see questions<https://docs.google.com/document/d/14eJwDGP-LvS9ltTmZoh1i19Fi0_pB2nJ4JYMsS7…> here from p10) 3. AOB 4. Confirm action items / decisions reached Best, Jennifer -- Jennifer Bryce Senior Reviews Coordinator Internet Corporation for Assigned Names and Numbers (ICANN) Email: jennifer.bryce(a)icann.org Skype: jennifer.bryce.icann www.icann.org

2 1

DNS SSR answers FAO Boban, Laurin
by Jennifer Bryce Feb. 21, 2019

Feb. 21, 2019

Dear Boban and Laurin, See below regarding the NS/DS record management topic of DNS SSR workstream. There are no remaining questions for this topic. Review Team volunteers: Boban, Laurin Workstream: DNS SSR Topic: NS / DS record management Q: What technologies are used to ensure integrity and authentication? A: For the ICANN Org portfolio of domains (eg icann.org) * The registrar account for ICANN is restricted to key engineering personnel. * The registrar password is of significant length and complexity. * The registrar account for ICANN requires two-factor authentication. * Domain locks are applied on all domains in the ICANN Org portfolio. * All ICANN domains in the ICANN portfolio are DNSSEC signed. Q: What procedures are used to address SSR concerns when it comes to NS/DS record management? A: For the ICANN Org portfolio of domains (eg icann.org) * Changes to the NS/DS records in ICANN Org zones are restricted to a minimal set of personal with valid credentials. * Changes can only be performed from the ICANN network, which can only be accessed via ICANN VPN and that requires valid credentials and two-factor authentication. * The ICANN VPN applies a requisite profile which includes an access control list to permit only the minimal set of personnel access to the system for changing records. * The mechanism for changing DNS records employs version control and logging. Best, Jennifer -- Jennifer Bryce Senior Reviews Coordinator Internet Corporation for Assigned Names and Numbers (ICANN) Email: jennifer.bryce(a)icann.org Skype: jennifer.bryce.icann www.icann.org

1 0

SSR2's May f2f meeting: Brussels
by Jennifer Bryce Feb. 20, 2019

Feb. 20, 2019

Dear SSR2 Review Team, The Review Team’s face-to-face meeting on 17-19 May will be held at the ICANN Brussels office. ICANN travel will be sending a welcome email in due course and calendar invites will be updated with the office location details. Please let us know off-list if you anticipate any visa requirements or difficulties. Best, Jennifer -- Jennifer Bryce Senior Reviews Coordinator Internet Corporation for Assigned Names and Numbers (ICANN) Email: jennifer.bryce(a)icann.org Skype: jennifer.bryce.icann www.icann.org

1 0

DNS SSR answer FAO Eric, Laurin
by Jennifer Bryce Feb. 20, 2019

Feb. 20, 2019

Dear Eric and Laurin, See below regarding the software interop topic of DNS SSR workstream. There are no remaining questions for this topic. Review Team volunteers: Eric, Laurin Workstream: DNS SSR Topic: Software interop: Testbed of software variants (NS / resolver / etc.) for regression testing Q: Has ICANN considered creating a testbed environment for testing purposes? If so, can you inform the team about your activities. If this has been considered and abandoned, please provide the team with your reasoning. A: ICANN’s Office of the CTO (OCTO) is actively working on such a testbed as part of the RSSAC Caucus Work Party<https://www.icann.org/resources/pages/rssac-caucus-work-parties-2017-06-20-…> on resolvers (https://www.icann.org/en/system/files/files/rssac-sow-resolver-behaviors-07…) The testbed is expected to be operational by mid-2019, and instructions on setting up the testbed are open to anyone interested. Best, Jennifer -- Jennifer Bryce Senior Reviews Coordinator Internet Corporation for Assigned Names and Numbers (ICANN) Email: jennifer.bryce(a)icann.org Skype: jennifer.bryce.icann www.icann.org

1 0

SSR2 RT Engagement Session | ICANN64 Kobe | 11 March 2019
by MSSI Secretariat Feb. 20, 2019

Feb. 20, 2019

Engagement Session with SSR2 Review Team at ICANN64 | Kobe<https://64.schedule.icann.org/meetings/962149> Adobe Connect link: https://participate.icann.org/kix64-403 Date: Monday, Mar 11, 2019 Time: 13:30 - 14:45 local Kobe time - additional time zone support here<https://www.timeanddate.com/worldclock/fixedtime.html?msg=SSR2+Engagement+S…> Location: 403 - Kobe International Conference Center (KICC) - venue map here<https://64.schedule.icann.org/floor_maps/3664/shapes/42149> SSR2 Engagement Session wiki page here<https://community.icann.org/x/yos2Bg>

1 0

Large scale DNS hacking
by Norm Ritchie Feb. 20, 2019

Feb. 20, 2019

In case anyone has not been following the large scale DNS hacking of late: https://arstechnica.com/information-technology/2019/02/inside-the-dnspionag… <https://arstechnica.com/information-technology/2019/02/inside-the-dnspionag…> It’s very pertinent to the DNS SSR sub team. … Norm

2 1

ICANN64 sessions and schedule
by Jennifer Bryce Feb. 20, 2019

Feb. 20, 2019

Dear SSR2 RT members, Below, for your information, are the SSR2 RT meetings and sessions at ICANN64 that may be of interest to the RT’s work. Note that some of the sessions below conflict with SSR2 meeting time. However, links are being included as recordings and transcripts will be posted to the session pages, should Review Team members wish to access them at a later date. The full ICANN64 schedule is now available here: https://64.schedule.icann.org/meetings. As discussed, staff will work to arrange room space for the Review Team to have writing sessions throughout the week using the pop-up rooms at the meeting. More information on these slots will be shared once confirmed. All times are in Kobe local time (UTC +9). Friday 8 March 09:00 - 17:00 | SSR2 face-to-face meeting day 1 | pre-meeting event, not published to schedule Saturday 9 March 09:00 - 17:00 | SSR2 face-to-face meeting day 2 | https://64.schedule.icann.org/meetings/962062 Monday 11 March 10:30 - 16:45 | ccNSO Tech Day | https://64.schedule.icann.org/meetings/962022 10:30 - 12:00 | ICANN Strategic Planning | https://64.schedule.icann.org/meetings/961911 13:30 - 15:00 | Joint Meeting: ICANN Board Technical Committee and RSSAC |https://64.schedule.icann.org/meetings/962069 13:30 - 14:45 | Open Data Program Workshop | https://64.schedule.icann.org/meetings/962090 13:30 - 14:45 | Engagement Session with the SSR2 Review Team | https://64.schedule.icann.org/meetings/962149 (calendar invite pending to RT members) Tuesday 12 March 09:00 - 10:15 | RDS-WHOIS2 Review Team Engagement Session |https://64.schedule.icann.org/meetings/962070 09:00 - 10:15 | RSSAC Information Session | https://64.schedule.icann.org/meetings/962133 13:30 - 15:00 | Joint Meeting: RSSAC & OCTO | https://64.schedule.icann.org/meetings/962135 15:15 - 16:45 | Emerging Identifiers Technology | https://64.schedule.icann.org/meetings/961998 Wednesday 13 March 08:45 - 10:15 | DAAR update | https://64.schedule.icann.org/meetings/963339 09:00 - 10:15 | Lessons Learned: How .DK successfully reduced abusive domains | https://64.schedule.icann.org/meetings/962156 10:30 - 12:00 | Updated Operating Standards for Specific Reviews |https://64.schedule.icann.org/meetings/962155 15:15 - 16:45 | RSSAC meeting | https://64.schedule.icann.org/meetings/962139 15:45 - 16:45 | SSAC public meeting | https://64.schedule.icann.org/meetings/961940 17:00 - 18:30 | Joint Meeting: ICANN Board and Technical Experts Group (TEG) |https://64.schedule.icann.org/meetings/961925 Thursday 14 March 09:00 - 13:15 | SSR2 face-to-face meeting day 3 | https://64.schedule.icann.org/meetings/962077 -- Jennifer Bryce Senior Reviews Coordinator Internet Corporation for Assigned Names and Numbers (ICANN) Email: jennifer.bryce(a)icann.org Skype: jennifer.bryce.icann www.icann.org

1 0