August 2020 - Ssr2-review - lists.icann.org

Call summary: SSR2 Plenary - 19 August 2020]
by k claffy Sept. 15, 2020

Sept. 15, 2020

Per Russ' homework assignment, my feedback on 20 and 24. Recommendation 20: DNS Testbed: The Rationale says "ongoing activities are sufficient" so why are there 2 recommendations? What problem is this recommendation trying to solve, how do we know it's a problem, and how will SSR3 know that it is solved? What is the measurable outcome? (SSAC asked for that in PC, iirc) Recommendation 24: We seem to be blending the IANA KPIs and CZDS, but there isn't even a clear problem identified on the KPIs that we're trying to solve. (which stakeholders are trying to get access to these KPIs but cannot?) We identify the CZDS problem, but we don't even include a recommendation to address it.. This seems backwards. Is that what the team agreed to on the 19 Aug call? confused, k On Wed, Aug 19, 2020 at 06:12:27PM +0000, Brenda Brewer wrote: Dear SSR2 RT members, Please find attached the plenary call report for SSR2 meeting #120, 19 August 2020 at 14:00 UTC. These high-level notes are designed to help SSR2 Review Team members navigate through the content of the call. They are not meant to be a substitute for the recording or transcript, which are posted on the wiki here: https://community.icann.org/x/aIBtC. The transcript usually becomes available 5 - 7 business days after the meeting. With kind regards, Brenda --- Brenda Brewer Internet Corporation for Assigned Names and Numbers (ICANN) Skype: brenda.brewer.icann _______________________________________________ Ssr2-review mailing list Ssr2-review(a)icann.org https://mm.icann.org/mailman/listinfo/ssr2-review _______________________________________________ By submitting your personal data, you consent to the processing of your personal data for purposes of subscribing to this mailing list accordance with the ICANN Privacy Policy (https://www.icann.org/privacy/policy) and the website Terms of Service (https://www.icann.org/privacy/tos) You can visit the Mailman link above to change your membership status or configuration, including unsubscribing, setting digest-style delivery or disabling delivery altogether (e.g., for a vacation), and so on. _______________________________________________ Ssr2-review mailing list Ssr2-review(a)icann.org https://mm.icann.org/mailman/listinfo/ssr2-review _______________________________________________ By submitting your personal data, you consent to the processing of your personal data for purposes of subscribing to this mailing list accordance with the ICANN Privacy Policy (https://www.icann.org/privacy/policy) and the website Terms of Service (https://www.icann.org/privacy/tos) You can visit the Mailman link above to change your membership status or configuration, including unsubscribing, setting digest-style delivery or disabling delivery altogether (e.g., for a vacation), and so on. ----- End forwarded message -----

2 3

Wednesday 2 September Plenary Cancelled
by Larisa B. Gurnick Aug. 31, 2020

Aug. 31, 2020

Dear SSR2 RT members, As was just agreed on the leadership team call, the SSR2 plenary meeting this week is canceled. Please use the time for subteam work. The Abuse subteam will be using the blocked plenary call time on Wednesday 2 September for their meeting. Best, Larisa Gurnick

1 0

Re: [Ssr2-review] [EXT] Re: Call summary: SSR2 Plenary - 29 July 2020
by Barrett, Kerry-Ann Aug. 24, 2020

Aug. 24, 2020

Hi KC I wanted to check if you had some of the language specific to the areas you would like to propose. I don't think just answering the questions will lead us closer to agreed text. The edits you see on the agreed text was based on modification from the public comments. I can update some of the time sensitive references you highlighted but in terms of title for example this was generated from our first iteration of the team so if you have any proposed language for the concerns at each bullet please circulate as well and I will work on updating the text. We can have a call this week if you are available and I will work on updating the text. Sincerely Kerry-Ann Barrett Cybersecurity Program Officer Secretariat of the Inter-American Committee against Terrorism (CICTE) Secretariat for Multidimensional Security (SMS) Organization of American States 1889 F Street NW Washington D.C. 20006 (202) 370 4675 - (202) 458 3857 www.oas.org/cyber @KerryOAS| @OEA_Cyber Register to our distribution list here! -----Original Message----- From: Ssr2-review [mailto:ssr2-review-bounces@icann.org] On Behalf Of k claffy Sent: Saturday, August 22, 2020 9:54 PM To: ssr2-review(a)icann.org Subject: [EXT] Re: [Ssr2-review] Call summary: SSR2 Plenary - 29 July 2020 Trying to catch up, I see on this call (that i missed) that Recommendation #29 was reviewed and approved. https://docs.google.com/document/d/1MJrPzXTngRCrdXLuiyPf7SeZsuPvwjjFGFoooQs… (p68). The team generally agreed to the text, with a minor change to 29.4, which was made on the call and is reflected in the document. when i look at the document, i see problems: first, why is it called "Privacy and SSR Measurements" There is no measurement referred to in this recommendation. I'm confused. (1) 29.1: Why is DOH stuck into the same recommendation as access to registration data, which has been a topic of interminable debate for decades? Access to registration data merits its own recommendation, given that we've now spent 2 years on an "EPDP" to try to make progress on this topic. (2) Why is this recommendation not even referring to the EPDP, which has been going on for two years and its final report came out 2 days after this meeting, and SSAC has already published a quite adversarial comment on the EPDP draft report that came out back in the spring? ( SSAC is about to publish a similar comment on the final report, but we should at least have considered the SSAC comment on the draft report..) I don't see how this recommendation can completely ignore the EPDP work. (3) Why is this recommendation using the term WHOIS, which the community is replacing with RDAP? (4) 29.3.2 [god help us if we end up with sub-sub-recommendation numbering!] basically says "ICANN should not break privacy law". Explain to me why this is needed? I claim ICANN is already aware they should not break the law, and already has lawyers monitoring this area. (5) 29.3.3: develop a policy for *who* to protect PII? ICANN is not in charge of how registrars in Germany protect their PII. I don't understand this subrecommendation, what known problem it's aimed at solving, and how SSR3 will know it's been implemented. (6) 29.3.4: We want ICANN to audit registrars around the world? Like in China, to make sure that Chinese registrars are following Chinese registrar law? I don't see this happening. I think we have to be realistic here. What problem are we trying to solve, and how will SSR3 know that progress has occurred? (7) 29.4: What's a DPO? it's not yet been mentioned in this document. "provide guidance to managers and stakeholders" -- which managers and stakeholders? whkich "relevant technical developments". I have no idea what problem this subrecommendation is trying to solve. there also seem to be entire paragraphs in the 'Rationale and Finding' for this recommendation that have nothing to do with privacy, but are focused rather on accuracy of WHOIS information. the text uses WHOIS and RDAP in different places without explaining why. Are we supposed to be reviewing recommendation text but not the accompanying text on Rationale and Findings? struggling, k _______________________________________________ Ssr2-review mailing list Ssr2-review(a)icann.org https://mm.icann.org/mailman/listinfo/ssr2-review _______________________________________________ By submitting your personal data, you consent to the processing of your personal data for purposes of subscribing to this mailing list accordance with the ICANN Privacy Policy (https://www.icann.org/privacy/policy) and the website Terms of Service (https://www.icann.org/privacy/tos) You can visit the Mailman link above to change your membership status or configuration, including unsubscribing, setting digest-style delivery or disabling delivery altogether (e.g., for a vacation), and so on.

1 0

Call summary: SSR2 Plenary - 29 July 2020
by MSSI Secretariat Aug. 24, 2020

Aug. 24, 2020

Dear SSR2 RT members, Please find attached the plenary call report for SSR2 meeting #119, 29 July 2020 at 14:00 UTC. These high-level notes are designed to help SSR2 Review Team members navigate through the content of the call. They are not meant to be a substitute for the recording or transcript, which are posted on the wiki here: https://community.icann.org/x/SIM4C. The transcript usually becomes available 5 - 7 business days after the meeting. With kind regards, Brenda --- Brenda Brewer, Projects & Operations Assistant Multistakeholder Strategy & Strategic Initiatives (MSSI) Internet Corporation for Assigned Names and Numbers (ICANN) Skype: brenda.brewer.icann

3 2

No SSR2 plenary 26 August
by Jennifer Bryce Aug. 24, 2020

Aug. 24, 2020

Dear SSR2 RT members, Please note that there will be no SSR2 plenary call this week. The abuse subteam and the name collision subteam will use the time to progress their work. Best, Jennifer -- Jennifer Bryce Associate Project Manager, Review Support and Accountability Internet Corporation for Assigned Names and Numbers (ICANN) Skype: jennifer.bryce.icann Email: jennifer.bryce(a)icann.org

1 0

CCT Review Update
by Jennifer Bryce Aug. 24, 2020

Aug. 24, 2020

Dear SSR2 RT members, This blog update on the CCT Review may be of interest: https://www.icann.org/news/blog/an-update-on-the-competition-consumer-trust…. Best, Jennifer -- Jennifer Bryce Associate Project Manager, Review Support and Accountability Internet Corporation for Assigned Names and Numbers (ICANN) Skype: jennifer.bryce.icann Email: jennifer.bryce(a)icann.org

1 0

Call summary: SSR2 Plenary - 19 August 2020
by Brenda Brewer Aug. 23, 2020

Aug. 23, 2020

Dear SSR2 RT members, Please find attached the plenary call report for SSR2 meeting #120, 19 August 2020 at 14:00 UTC. These high-level notes are designed to help SSR2 Review Team members navigate through the content of the call. They are not meant to be a substitute for the recording or transcript, which are posted on the wiki here: https://community.icann.org/x/aIBtC. The transcript usually becomes available 5 - 7 business days after the meeting. With kind regards, Brenda --- Brenda Brewer Internet Corporation for Assigned Names and Numbers (ICANN) Skype: brenda.brewer.icann

2 1

Re: [Ssr2-review] [EXT] Re: SSR2 agenda 19 August 2020
by Barrett, Kerry-Ann Aug. 20, 2020

Aug. 20, 2020

Dear Russ I reviewed the text and have no objection. I would recommend for Recommendation 24 we state some nexus to some existing ICANN org operational reporting e.g the annual reports so at least there is a time factor to having it up and running and accountability as it needs tone presented in the annual report as well as placed on the website. Sincerely, Kerry-Ann Barrett Cybersecurity Policy Specialist Organization of American States On Aug 19, 2020, at 7:29 PM, Russ Housley <housley(a)vigilsec.com> wrote: CAUTION: EXTERNAL SENDER SSR2 RT: On the call today, we reviewed the text for Recommendation 20 and Recommendation 24. Participation on the call was light, but no one that was there raised any concerns with the text. If you were not on the call, please review the (short) text and raise any concerns on the mail list. The text is in the Google doc at the link in agenda item 2 below. Russ On Aug 18, 2020, at 3:52 AM, Jennifer Bryce <jennifer.bryce(a)icann.org<mailto:jennifer.bryce@icann.org>> wrote: Dear SSR2 RT members, Below is the agenda for the next SSR2 plenary call, scheduled for Wednesday 19 August @ 14:00 - 15:00 UTC. 1. Welcome, roll call, SOI updates 2. Review text for recommendations<https://docs.google.com/document/d/1FaGlYsLVSob_CflYkKBag4L27vMUNA0C0kVNtAI…> 20 (p46) and 24 (p51) 3. AOB 4. Confirm action items, decisions reached Additional reference documents: * Response to public comments spreadsheet here<https://docs.google.com/spreadsheets/d/1DQpPA0aLDsW5IHLKgQqHtW-5860CKGCuTYI…> * Subteam status spreadsheet here<https://docs.google.com/spreadsheets/d/1cOZ1lPXqHfuZNt68zvB5xRB63eBoL3gonDb…> Best, Jennifer _______________________________________________ Ssr2-review mailing list Ssr2-review(a)icann.org https://mm.icann.org/mailman/listinfo/ssr2-review _______________________________________________ By submitting your personal data, you consent to the processing of your personal data for purposes of subscribing to this mailing list accordance with the ICANN Privacy Policy (https://www.icann.org/privacy/policy) and the website Terms of Service (https://www.icann.org/privacy/tos) You can visit the Mailman link above to change your membership status or configuration, including unsubscribing, setting digest-style delivery or disabling delivery altogether (e.g., for a vacation), and so on.

2 1

SSR2 agenda 19 August 2020
by Jennifer Bryce Aug. 19, 2020

Aug. 19, 2020

Dear SSR2 RT members, Below is the agenda for the next SSR2 plenary call, scheduled for Wednesday 19 August @ 14:00 - 15:00 UTC. 1. Welcome, roll call, SOI updates 2. Review text for recommendations<https://docs.google.com/document/d/1FaGlYsLVSob_CflYkKBag4L27vMUNA0C0kVNtAI…> 20 (p46) and 24 (p51) 3. AOB 4. Confirm action items, decisions reached Additional reference documents: * Response to public comments spreadsheet here<https://docs.google.com/spreadsheets/d/1DQpPA0aLDsW5IHLKgQqHtW-5860CKGCuTYI…> * Subteam status spreadsheet here<https://docs.google.com/spreadsheets/d/1cOZ1lPXqHfuZNt68zvB5xRB63eBoL3gonDb…> Best, Jennifer -- Jennifer Bryce Associate Project Manager, Review Support and Accountability Internet Corporation for Assigned Names and Numbers (ICANN) Email: jennifer.bryce(a)icann.org Skype: jennifer.bryce.icann www.icann.org

2 1

Wednesday 12 August plenary canceled
by Jennifer Bryce Aug. 10, 2020

Aug. 10, 2020

Dear SSR2 RT members, The 12 August plenary meeting is canceled. As with last week please use the time for subteam work. The ‘Abuse’ subteam will be using the 14:00 UTC slot on Wednesday to progress its work. Best, Jennifer -- Jennifer Bryce MSSI Associate Project Manager Internet Corporation for Assigned Names and Numbers (ICANN) Email: jennifer.bryce(a)icann.org Skype: jennifer.bryce.icann www.icann.org

1 0