May 2020 - Ssr2-review - lists.icann.org

ICANN Organization Blog on DNS Abuse
by danko.jevtovic＠board.icann.org June 10, 2020

June 10, 2020

ICANN Organization Blog on DNS Abuse https://www.icann.org/news/blog/icann-org-s-multifaceted-response-to-dns-ab… Danko

4 7

Subteam Status
by Russ Housley June 3, 2020

June 3, 2020

We are not having a plenary call this week so that subteams can continue their work. I ask that the Rapporteur for each subteam to send a short status to the whole team by close of business on Wednesday. Thanks, Russ - - - - - - - - Subteam No. / Rapporteur 1 Russ 2 Boban 3 Kerry-Ann 4 Noorul 5 Laurin 6 Norm 7 Boban 8 Boban 9 Boban 10 Denise 11 Denise 12 Denise 13 Denise 14 Denise 15 Laurin 16 Laurin 17 Laurin 18 Laurin 19 kc 20 Eric 21 Eric 22 kc 23 Zarko 24 kc 25 kc 26 Zarko 27 Alain 28 Naveed 29 Kerry-Ann 30 Eric 31 Zarko

4 8

Call summary: SSR2 Plenary - 27 May 2020
by MSSI Secretariat May 28, 2020

May 28, 2020

with attachment now! Dear SSR2 RT members, Please find attached the plenary call report for SSR2 meeting #111, 27 May 2020 at 14:00 UTC. These high-level notes are designed to help SSR2 Review Team members navigate through the content of the call. They are not meant to be a substitute for the recording or transcript, which are posted on the wiki here: https://community.icann.org/x/kIvsBw. The transcript usually becomes available 5 - 7 business days after the meeting. With kind regards, Brenda --- Brenda Brewer, Projects & Operations Assistant Multistakeholder Strategy & Strategic Initiatives (MSSI) Internet Corporation for Assigned Names and Numbers (ICANN) Skype: brenda.brewer.icann

1 0

Call summary: SSR2 Plenary - 27 May 2020
by MSSI Secretariat May 28, 2020

May 28, 2020

Dear SSR2 RT members, Please find attached the plenary call report for SSR2 meeting #111, 27 May 2020 at 14:00 UTC. These high-level notes are designed to help SSR2 Review Team members navigate through the content of the call. They are not meant to be a substitute for the recording or transcript, which are posted on the wiki here: https://community.icann.org/x/kIvsBw. The transcript usually becomes available 5 - 7 business days after the meeting. With kind regards, Brenda --- Brenda Brewer, Projects & Operations Assistant Multistakeholder Strategy & Strategic Initiatives (MSSI) Internet Corporation for Assigned Names and Numbers (ICANN) Skype: brenda.brewer.icann

1 0

SSR2 agenda 27 May 2020
by Larisa B. Gurnick May 27, 2020

May 27, 2020

Dear SSR2 RT members, Below is the agenda for the next SSR2 plenary call, scheduled for Wednesday 27 May @ 14:00 - 15:00 UTC. 1. Welcome, roll call, SOI updates 2. Review draft of the blog “An Update from the SSR2 Review Team”<https://docs.google.com/document/d/1zPCKhaULWKmjPNH4Qr1TqsV5JNwSGjyU9-7W5yT…> 3. Report out on subteam items and any items for team discussion (see chart here<https://docs.google.com/spreadsheets/d/1cOZ1lPXqHfuZNt68zvB5xRB63eBoL3gonDb…><https://docs.google.com/spreadsheets/d/1cOZ1lPXqHfuZNt68zvB5xRB63eBoL3gonDb…>) a. Subteam 1 report b. Timing of other subteam reports 4. AOB 5. Confirm action items, decisions reached Best, Larisa

5 4

Call summary: SSR2 Plenary - 20 May 2020
by MSSI Secretariat May 21, 2020

May 21, 2020

Dear SSR2 RT members, Please find attached the plenary call report for SSR2 meeting #110, 20 May 2020 at 14:00 UTC. These high-level notes are designed to help SSR2 Review Team members navigate through the content of the call. They are not meant to be a substitute for the recording or transcript, which are posted on the wiki here: https://community.icann.org/x/jovsBw. The transcript usually becomes available 5 - 7 business days after the meeting. With kind regards, Brenda --- Brenda Brewer, Projects & Operations Assistant Multistakeholder Strategy & Strategic Initiatives (MSSI) Internet Corporation for Assigned Names and Numbers (ICANN) Skype: brenda.brewer.icann

1 0

SSR2 agenda 20 May 2020
by Jennifer Bryce May 18, 2020

May 18, 2020

Dear SSR2 RT members, Below is the agenda for the next SSR2 plenary call, scheduled for Wednesday 20 May @ 14:00 - 15:00 UTC. 1. Welcome, roll call, SOI updates 2. Review timeline and final date for questions) 3. Report out on subteam items and any items for team discussion (see chart here<https://docs.google.com/spreadsheets/d/1cOZ1lPXqHfuZNt68zvB5xRB63eBoL3gonDb…> to be used going forward) 4. AOB 5. Confirm action items, decisions reached Best, Jennifer -- Jennifer Bryce MSSI Associate Project Manager Internet Corporation for Assigned Names and Numbers (ICANN) Email: jennifer.bryce(a)icann.org Skype: jennifer.bryce.icann www.icann.org

1 0

Abuse Subgroup status
by Denise Michel May 14, 2020

May 14, 2020

Hi. The subgroup continues to work on completing a table for 1) suggested actions and 2) responses to the comments received on Recommendations 10 – 19. There’s a lot to unpack so our objective is to give the full SSR2 team our suggestions relating to Rec. 10 & 11 at least by next week so they can be considered by the full team, and to pass on to the full team additional Recommendations work as we complete each one. (This subgroup also includes Laurin, Norm, Eric, KC, Kerry-Ann and Scott) Best, Denise

1 0

Re: [Ssr2-review] ICANN Organization Blog on DNS Abuse
by Russ Housley May 13, 2020

May 13, 2020

Do any other team members have additional questions? My understanding is that these questions have been passed along to ICANN staff, but if there are additional questions, we want to ask them now so that they can be taken into account while writing the final report. Russ > From: Ssr2-review <ssr2-review-bounces(a)icann.org <mailto:ssr2-review-bounces@icann.org>> on behalf of SSR2 <ssr2-review(a)icann.org <mailto:ssr2-review@icann.org>> > Reply-To: Denise Michel <denisemichel(a)fb.com <mailto:denisemichel@fb.com>> > Date: Wednesday, April 29, 2020 at 1:36 PM > To: "danko.jevtovic(a)board.icann.org <mailto:danko.jevtovic@board.icann.org>" <danko.jevtovic(a)board.icann.org <mailto:danko.jevtovic@board.icann.org>>, SSR2 <ssr2-review(a)icann.org <mailto:ssr2-review@icann.org>> > Subject: Re: [Ssr2-review] ICANN Organization Blog on DNS Abuse > > Thanks for sharing, the ICANN blog <https://urldefense.proofpoint.com/v2/url?u=https-3A__www.icann.org_news_blo…>, Danko. It’s highly relevant to SSR2 work, as well as to what several SSR2 members are doing in our day jobs to stop domain abuse. > > On the whole, the blog is an expression of intent to act. While welcomed, there are no specifics nor a time table for when the internal and community actions will occur. This raises several questions related to SSR2 work for ICANN Staff to answer (and a couple for the Board), which are listed below. > > Would SSR2 be able to get expedited answers to these? It would be useful for all concerned if we could factor this into our SSR2 work. > > Thanks > Denise > > > 1) The blog says: " the domain names and the data collected by the system will be shared with parties who are in a position to take action, such as registrars and registries, and in some cases with national and international law enforcement organizations." > What specific actions is ICANN expecting registries and registrars to take? > For example, is ICANN encouraging suspension of name resolution or of the registration, or the registrant account? > Will ICANN ask registrars and registries to report on the efficacy of these actions? If so, when and on what cadence? > ICANN should publicly report per registrar & registry action: > How many names has it identified as suspicious/malicious? > What’s the number of domain names that each registry/registrar has taken action against? And what action was taken? > When can we expect ICANN public reporting and on what cadence? > > 2) What distinguishes ICANN's participation in the face of the pandemic from how they've participated in the past? > The blog says: “ICANN Compliance uses data collected in audits (described in more detail below) to assess whether registries and registrars are adhering to their DNS security threat obligations.” > What will Compliance do that it has not done until now? > Is Compliance making audit data associated with US-based registrars available to States Attorney Generals and the US Attorney General? > > 3) The blog states (the obvious) that ICANN isn’t a regulator of Internet content, but it doesn’t address ICANN’s public interest remit. Multiple entities have asked ICANN to better govern the manner in which domain names are registered, and now especially, everyone is asking ICANN to hold contracted parties to greater accountability to prevent domains from being registered by malicious actors, especially for pandemic-related fraud and abuse. This requires greater scrutiny during the registration process. > What actions are ICANN taking that address this? > In addition to high volumes of fraudulent domain names containing pandemic-related strings with which criminals try to fool Internet users, random looking or otherwise auto-generated names that are easy to register in volume and are being used by the hundreds to perpetuate pandemic-related phishing attacks. What actions are ICANN taking that addresses this? > Recommended actions contained in SSR2’s draft report could help mitigate pandemic-related domain name abuse. Is the ICANN Board and staff reconsidering any of these actions? > Recommendations from others over the last few years also would help mitigate pandemic-related domain name abuse – especially the substantially increased phishing attacks that harm users. Is the ICANN Board and staff reconsidering any of these actions? Including: > - will ICANN move to ensure domain name registrant data is validated? Or at least implement cross-field validation? > - will ICANN put in place an Acceptable Use Policy that applies specifically to parties that register large numbers of domains, that requires registrants to apply for (and be validated for) bulk registration services? Further, will ICANN put in place an obligation to distinguish domain names registered by legal entities from those registered by > natural persons, classify parties that use bulk registration services as legal entities, and require unredacted access to the registration data of legal entities? > - will ICANN maintain and publish a current list of validated bulk registrants (who are from above defined as not natural persons)? > - will ICANN disallow registration transactions that involve large numbers of random-looking algorithmic domain names? > - will ICANN disallow, for a period of one year, the re-registration of any bulk-registered domain name that has been used in a criminal cyberattack? > > > > From: Ssr2-review <ssr2-review-bounces(a)icann.org <mailto:ssr2-review-bounces@icann.org>> on behalf of "danko.jevtovic(a)board.icann.org <mailto:danko.jevtovic@board.icann.org>" <danko.jevtovic(a)board.icann.org <mailto:danko.jevtovic@board.icann.org>> > Organization: ICANN Board > Date: Tuesday, April 21, 2020 at 8:44 AM > To: SSR2 <ssr2-review(a)icann.org <mailto:ssr2-review@icann.org>> > Subject: [Ssr2-review] ICANN Organization Blog on DNS Abuse > > ICANN Organization Blog on DNS Abuse > > https://www.icann.org/news/blog/icann-org-s-multifaceted-response-to-dns-ab… <https://urldefense.proofpoint.com/v2/url?u=https-3A__www.icann.org_news_blo…> > > Danko

2 1

SAC111
by k claffy May 7, 2020

May 7, 2020

relevant. SAC111: SSAC Comment on the Initial Report of the Temporary Specification for gTLD Registration Data Phase 2 Expedited Policy Development Process <https://www.icann.org/en/system/files/files/sac-111-en.pdf> k

1 0