March 2019 - Ssr2-review - lists.icann.org

Questions for the work topic teams
by Weissinger, Laurin March 10, 2019

March 10, 2019

Dear all, I have added some bullet points / questions on the topics I am part of in the "Volunteers - SSR2 RT work topics” document (https://docs.google.com/document/d/1nmPIw-Q6nKI4UdQjAz4KAH83jMU2TIJWncZroWE…) See notes at the bottom. I am not sure this will help everywhere but I thought it might be a good discussion starter for before/when we meet. Please have a look, add and edit points! Many thanks Laurin

1 0

Requests to ICANN Staff
by Russ Housley March 10, 2019

March 10, 2019

I have just learned that some requests have been sent to a few ICANN staff members. Please send requests through Negar and Jennifer. We all have long-standing relationships with various staff members, and we may feel it is easier to just reach out directly, but this makes it hard for Negar and Jennifer to manage the support of our work. Additionally, we want these requests to appear in the email archive for transparency and there is a publicly available list of all of our requests. Thanks for your assistance. Russ

1 0

Follow Up Questions: Root zone change management (Verification, etc.), NS / DS record management
by Weissinger, Laurin March 9, 2019

March 9, 2019

Dear all, Boban and I went through the answers for questions regarding Root zone change management (Verification, etc.), NS / DS record management. The answers only addressed ICANN’s own domain *.icann.org, not the root zone. We clarified accordingly. Jennifer, please submit this new question and subquestions, thanks! How are actors verified by IANA when any changes to the root zone are requested / undertaken? (For example, what happens if TLD op requests IP change of authoritative server?) 1. Are there procedures, and where can they be found? 2. What technologies are used to verify requests? 3. What procedures are used to address SSR concerns when it comes to NS/DS record management inside the root zone? 4. What technologies are used to ensure integrity and authentication when it comes to NS/DS record management inside the root zone? All the best and thanks Jennifer! Laurin

1 1

DNS infrastructure hijacking
by Jennifer Bryce March 9, 2019

March 9, 2019

Setting up this meeting per the request from Review Team.

1 0

Action for RT members re: work topics
by Jennifer Bryce March 9, 2019

March 9, 2019

Dear SSR2 RT members, During the meeting today, the review team assigned a ‘lead’ volunteer for each work topic. ACTION FOR RT MEMBERS: * Please check the Google doc<https://docs.google.com/document/d/1nmPIw-Q6nKI4UdQjAz4KAH83jMU2TIJWncZroWE…> to see which topics you are assigned as the lead (lead is indicated in bold). * If you are the lead for a topic, please reach out to the other volunteers in the topic to coordinate the writing. If you have an objection to being the lead for any topic you’re assigned to, please speak up. The content from the Google doc is also pasted below for ease of reference. ICANN SSR Topic Volunteers # of outstanding questions 1. Perform a assessment of ICANN's Information Security Management System. Jabhera M, Alain A,Noorul A 1 2. Perform a assessment of ICANN's Business Continuity Management System. Boban K, Alain A 18 3. Perform a assessment of ICANN's Risk Management Methodology and Framework. Laurin W, Boban K, Kerry-Ann B 7 4. Perform an how effectively ICANN has implemented its Security Incident Management and Response Processes to reduce (pro-active and reactive) the probability of DNS-related incidents. Scott M, Noorul A 9 5. Perform a assessment of internal security, stability and resiliency of ICANN's operation processes and services. Russ H, Kerry-Ann B (compliance), Naveed R 2 6. Perform an assessment on how effectively ICANN has implemented its processes around vetting registry operators and services concerning the New gTLD Delegation and Transition process. Norm R, Ram P 2 7. Perform an assessment how effectively ICANN has implemented its processes to ensure compliance regarding registrar agreements and the consensus policies. Denise M, Kerry-Ann B 12 DNS SSR Topic Volunteers # of questions outstanding Section I: Root Zone Management Data sharing/ data release KC 0 BC - DR plan Boban K, Zarko K 0 Name Collision Denise M 0 Root zone change management (Verification, etc.) Laurin W, Boban K 2 TLD label management Boban K, Laurin W 2 NS / DS record management Boban K, Laurin W 0 + 2 Section II: Root server system (e.g. l-root) Best practice + System hardening of l-root Alain A, Naveed R 0 Comment on RSSAC document around proposed governance model for the root servers environment KC, Alain A, Naveed R 0 Section III: Alternate Root Deployment & Co-existence Accountability & Transparency with respect to risks and benefits - annual report Eric O, Naveed R 0 Section IV: SSR Measurements SLA compliance (SLAs for what? with whom?) Kerry-Ann B 0 Propagation delay and consistency of changes of zone contents across name servers Eric O, KC 0 IANA registry availability measurements - security Scott M 0 Identify KPI for SSR measurements Eric, KC, Laurin, Naveed R 0 Section V: Namespace Abuse Transparency with respect to abuse (is this DAAR?) Denise M, KC, Jabhera M, Norm R 0 Reactive vs. proactive compliance - one-off complaints response vs. data driven priorities Proactive anti-abuse by registrars and registries Denise M, Kerry--Ann B, Norm R, Laurin W, Eric O 0 Leadership: Give ICANN compliance a “big stick” to lead abuse remediation initiatives and take action Laurin W, Norm R, KC, Denise M 0 IDN domain names (glyph phish) Russ H, Laurin W 2 Section VI: Software interop Testbed of software variants (NS / resolver / etc.) for regression testing Eric O, Laurin W 0 Future Challenges Topic Volunteers # of questions outstanding Coalescence of registrars/registry/backend operators for multiple TLDs Eric O, Denise M, Norm R, Boban K 6 Access to data, info, research on important abuse attack vectors Laurin W, Norm R, Denise M, Eric O, Scott M, Jabhera M, KC 1 New crypto-systems in DNSSEC (ECC + PQ) Eric O, Russ H, Ram P, Laurin W, Alain A 1 New uses for DNS (IoT etc.) Laurin W, Eric O, Kerry-Ann B, Naveed R 0 Alternate naming systems (interactions, conflicts etc) Norm R, Laurin W, Eric O 1 Root server system protection: assess the threatscape of top threats (e.g. DDoS to the root system) Kerry-Ann B, Eric O, Norm R, Laurin W, Noorul A 2 Privacy protections Kerry-Ann B, Eric O, Norm R, Laurin W, Noorul A 1 clarification requested -- Jennifer Bryce Senior Reviews Coordinator Internet Corporation for Assigned Names and Numbers (ICANN) Email: jennifer.bryce(a)icann.org Skype: jennifer.bryce.icann www.icann.org

1 0

dave on WHOIS eradication and SSR impacts
by k claffy March 9, 2019

March 9, 2019

https://www.securityskeptic.com/2019/03/facts-figures-whois-policy-changes-…

1 0

SSR2 Board Caucus Group Meeting | Wednesday, 13 March at 11:30 AM/local Kobe time
by MSSI Secretariat March 9, 2019

March 9, 2019

Meeting with the SSR2 Board Caucus Group, on Wednesday 13th at 11:30 - 12:15 Kobe time. ICANN64 | Kobe Location: Sapphire Room - see venue map here<https://64.schedule.icann.org/floor_maps/3664/shapes/42153> Remote participants may join Adobe Connect: https://participate.icann.org/kix64-sapphire

1 0

FYI: Engagement Slides
by Jennifer Bryce March 8, 2019

March 8, 2019

Dear all, FYI, attached are the slides that were finalized today, to be used for the team’s engagement sessions at ICANN64. Best, Jennifer -- Jennifer Bryce Senior Reviews Coordinator Internet Corporation for Assigned Names and Numbers (ICANN) Email: jennifer.bryce(a)icann.org Skype: jennifer.bryce.icann www.icann.org

3 2

Dial-in information for today
by Jennifer Bryce March 8, 2019

March 8, 2019

Dear all, Adobe connect information for today’s face-to-face meeting is below: https://participate.icann.org/kix64-emerald Dial in #: 1-605-475-5619 Passcode: 3134284787 Best, Jennifer -- Jennifer Bryce Senior Reviews Coordinator Internet Corporation for Assigned Names and Numbers (ICANN) Email: jennifer.bryce(a)icann.org Skype: jennifer.bryce.icann www.icann.org

3 2

Writing rooms
by Jennifer Bryce March 8, 2019

March 8, 2019

Dear all, There are rooms booked for writing sessions for the following times. If you would like to request a different time please let us know. Monday 11 March 09:00 - 10:30 - 307 (KICC) Tuesday 12 March 10:15 - 13:30 - 307 (KICC) Wednesday 13 March 09:00 -12:15 307 (KICC) Jennifer -- Jennifer Bryce Senior Reviews Coordinator Internet Corporation for Assigned Names and Numbers (ICANN) Email: jennifer.bryce(a)icann.org Skype: jennifer.bryce.icann www.icann.org

1 0