- Ssr2-review - lists.icann.org

Re: [Ssr2-review] Emergency Changes in the Root Zone Database
by Kerry-Ann Barrett Nov. 25, 2019

Nov. 25, 2019

Dear Team Sorry to have been so quiet. My daughter was in the ER last week and we’ve been battling a bad bout of pneumonia.. so finally resurfacing for air. I’ll work on the text I undertook this week and have it done by Wednesday the latest. Apologies in advance Cheers Kerry-Ann > On Nov 12, 2019, at 11:48 AM, Russ Housley <housley(a)vigilsec.com> wrote: > > >>>> Given this information, and the fact that every email that I recieve from anyone at iana.org <http://iana.org/> already has an S/MIME signature, I think we should drop the IANA portal recommendation altogether. >>> Maybe only for personal accounts? I have a mail from the Root Zone >>> Management (rzm(a)iana.org) in my inbox. The mail contains a URL to >>> confirm a change we initiated at IANA - in plain text. A signature >>> (S/MIME or PGP) is also not available at the message. >>> I would also like to distinguish mail communication from Root Zone >>> Management portal (https://rzm.iana.org/rzm/login) The portal should >>> have a recommendation regarding a strong authentication procedure >>> (currently username and password). >> As the current system is outdated and a new system is being designed, i would assume that IANA team will take the necessary measures to meet the security requirements in the naming contract. >> I would rather discuss ICANN providing a clear roadmap towards the implementation of the new system including the usual community input on the specifications and rollout of the new system > > Alain: > > Can you write a clear question to ICANN Org to get the information you seek? We need to write it in a way that will not lead to follow-up questions or the schedule will be impacted. > > Russ > > _______________________________________________ > Ssr2-review mailing list > Ssr2-review(a)icann.org > https://mm.icann.org/mailman/listinfo/ssr2-review > > _______________________________________________ > By submitting your personal data, you consent to the processing of your personal data for purposes of subscribing to this mailing list accordance with the ICANN Privacy Policy (https://www.icann.org/privacy/policy) and the website Terms of Service (https://www.icann.org/privacy/tos) You can visit the Mailman link above to change your membership status or configuration, including unsubscribing, setting digest-style delivery or disabling delivery altogether (e.g., for a vacation), and so on.

1 0

Re: [Ssr2-review] [EXT] Postel Award
by Barrett, Kerry-Ann Nov. 20, 2019

Nov. 20, 2019

Congrats Alain I’m so honored to be among such a distinguished group of professionals and moments like this emphasizes this. We should celebrate all our awardees in the next F2F :) Sincerely, Kerry-Ann Barrett Cybersecurity Policy Specialist Organization of American States On Nov 20, 2019, at 11:17 AM, Steve Conte <steve.conte(a)icann.org> wrote: CAUTION: EXTERNAL SENDER https://www.internetsociety.org/blog/2019/11/alain-aina-2019-jonathan-b-pos… Congratulations to Alain! Kudos to not only the work that you’ve done on this journey, but also to the work you continue to do for the betterment of the community! Steve _______________________________________________ Ssr2-review mailing list Ssr2-review(a)icann.org https://mm.icann.org/mailman/listinfo/ssr2-review _______________________________________________ By submitting your personal data, you consent to the processing of your personal data for purposes of subscribing to this mailing list accordance with the ICANN Privacy Policy (https://www.icann.org/privacy/policy) and the website Terms of Service (https://www.icann.org/privacy/tos) You can visit the Mailman link above to change your membership status or configuration, including unsubscribing, setting digest-style delivery or disabling delivery altogether (e.g., for a vacation), and so on.

2 1

Postel Award
by Steve Conte Nov. 20, 2019

Nov. 20, 2019

https://www.internetsociety.org/blog/2019/11/alain-aina-2019-jonathan-b-pos… Congratulations to Alain! Kudos to not only the work that you’ve done on this journey, but also to the work you continue to do for the betterment of the community! Steve

1 0

Alain Aina: 2019 Jonathan B. Postel Service Award Winner
by Matogoro Jabera Nov. 20, 2019

Nov. 20, 2019

Congratulations Alaim Aina for the award. https://www.internetsociety.org/blog/2019/11/alain-aina-2019-jonathan-b-pos… Regards, MATOGORO Jabhera Assistant Lecturer College of Informatics and Virtual Education The University of Dodoma P.O Box 490, Dodoma. Website: www.udom.ac.tz *IEEE Membership ID: 93934185*

1 0

gac communique from montreal on dns abuse
by k claffy Nov. 19, 2019

Nov. 19, 2019

maybe everyone but me saw this already, but it seems like the SSR2 report should quote/link to it. GAC Public Safety Working Group (PSWG) The PSWG discussed DNS abuse mitigation measures, including the need to implement the CCT Review Team recommendations on DNS Abuse, the importance of the Domain Abuse Activity Reporting System, and the need to ensure that the requirement for reasonable access to non-public Domain Name Registration Information is operating effectively given the impact on investigations and other activities to preserve public safety and enforce the law. 1. CCT Review and Subsequent Rounds of New gTLDs a. The GAC advises the Board: i. not to proceed with a new round of gTLDs until after the complete implementation of the recommendations in the Competition, Consumer Trust and Consumer Choice Review that were identified as "prerequisites" or as "high priority". b. The GAC advises the Board to: i. Instruct the ICANN organization to ensure that the current system that requires "reasonable access" to non-public domain name registration is operating effectively. This should include: educating key stakeholder groups, including governments, that there is a process to request non-public data; actively making available a standard request form that can be used by stakeholders to request access based upon the current consensus policy; and actively making available links to registrar and registry information and points of contact on this topic. ii. Instruct ICANN Compliance to create a specific process to address complaints regarding failure to respond to, and unreasonable denial of requests for non-public domain name registration data, and monitor and publish reports on compliance with the current policy as part of their regular monthly reporting. https://gac.icann.org/contentMigrated/icann66-montreal-communique?mkt_tok=e… //

1 0

FW: ICANN News Alert -- Country Code Top-Level Domains Can Now Participate in ICANN’s Domain Abuse Activity Reporting (DAAR) System
by Danko Jevtovic Nov. 19, 2019

Nov. 19, 2019

From: ICANN <no-reply(a)external.icann.org> Sent: Tuesday, November 19, 2019 5:37 PM To: danko.jevtovic(a)board.icann.org Subject: ICANN News Alert -- Country Code Top-Level Domains Can Now Participate in ICANN’s Domain Abuse Activity Reporting (DAAR) System <https://info.icann.org/rs/529-CRE-717/images/slice_03.png> <https://newsalerts.icann.org/CRL00L0xP03C0Ndp2201E00> Country Code Top-Level Domains Can Now Participate in ICANN’s Domain Abuse Activity Reporting (DAAR) System 19 November 2019 LOS ANGELES – 19 November 2019 – Today, the Internet Corporation for Assigned Names and Numbers (ICANN) announced that country code top-level domain (ccTLD) operators will now be able to actively participate in the Domain Abuse Activity Reporting (DAAR) system. ICANN's DAAR system is used to study and report on domain name registration and security threat behavior across top-level domain (TLD) registries. The data is obtained from a curated list of Domain Name System (DNS) reputation providers. Now, ccTLD operators can pull their own aggregated DAAR data via the Monitoring System Application Programing Interface (MoSAPI). The MoSAPI interface allows registry operators to retrieve information collected by the ICANN Service Level Agreement Monitoring (SLAM) system. While ccTLD operators will not be subject to the SLAs the SLAM system monitors, using MoSAPI will allow a consistent interface for all registries participating in DAAR. The aggregated data counts security threats broken down by threat type (e.g., phishing, botnet command and control, malware distribution, and spam) per TLD. These data sets will be similar to those of the generic top-level domains (gTLDs) that are currently provided via MoSAPI. Having access to such data will enable ccTLD operators to monitor the DAAR security threat levels per threat type per month in the same way as gTLD operators. The ICANN organization invites all ccTLD operators to participate in the DAAR project to promote a greater understanding of DNS abuse across the global DNS. To participate, ccTLD operators should send a request to globalsupport(a)icann.org <https://newsalerts.icann.org/VpRM000d310E200CP02LyN0> to begin the process. More Information For additional discussions regarding DAAR project data sharing and any other measurement of DNS security threats and abuse related topics please join the DNS-Abuse-Measurements <https://newsalerts.icann.org/z02p2dP0000RNz31CLN0E00> mailing list. DAAR webpage: https://www.icann.org/octo-ssr/daar <https://newsalerts.icann.org/wRpEN0dCP0000L1O0022A03> . About ICANN ICANN's mission is to help ensure a stable, secure, and unified global Internet. To reach another person on the Internet, you need to type an address – a name or a number – into your computer or other device. That address must be unique so computers know where to find each other. ICANN helps coordinate and support these unique identifiers across the world. ICANN was formed in 1998 as a not-for-profit public-benefit corporation with a community of participants from all over the world. <https://info.icann.org/rs/529-CRE-717/images/slices-test_06.jpg> <https://newsalerts.icann.org/L202ER0010B30CPpL0P0d0N> <https://newsalerts.icann.org/A30Q00CR20Nd1L200P0C0pE> <https://newsalerts.icann.org/TRNC30L01000pRD20P02dE0> <https://newsalerts.icann.org/q1EC0d0pPS0N0302R0LE002> <https://newsalerts.icann.org/B100TC2EN000003R0pFPL2d> <https://info.icann.org/rs/529-CRE-717/images/slices-test_19.png> <https://newsalerts.icann.org/dd0PL1GN320Ep00R0U020C0> Unsubscribe | <https://newsalerts.icann.org/Q03E0pR0CH2P20N1d00V0L0> https://www.icann.org <https://newsalerts.icann.org/trk?t=1&mid=NTI5LUNSRS03MTc6NTQyOjE0OTU6MTExOT…>

1 0

Call summary: SSR2 13 November
by Negar Farzinnia Nov. 15, 2019

Nov. 15, 2019

Dear SSR2 RT members, Please find attached the plenary call report for SSR2 meeting #91, 13 November 2019 at 14:00 UTC. These high-level notes are designed to help SSR2 Review Team members navigate through the content of the call. They are not meant to be a substitute for the recording or transcript, which are posted on the wiki here: https://community.icann.org/display/SSR/SSR2+Plenary+%2391+-+13+November+20…. The transcript usually becomes available 5 - 7 business days after the meeting. Kind regards, Negar

1 0

GCSC Launches Final Report
by Danko Jevtovic Nov. 15, 2019

Nov. 15, 2019

The Global Commission on the Stability of Cyberspace (GCSC) has launched its final report Fact sheet: https://cyberstability.org/wp-content/uploads/2019/11/GCSC-Fact-Sheet.pdf The report (52 pages) can be downloaded from: https://cyberstability.org/report/ Danko

1 0

Emergency Changes in the Root Zone Database
by Boban Krsic Nov. 14, 2019

Nov. 14, 2019

Hi all, I have received some information from Kim in the meantime: The IANA Naming Function states that emergency changes should be completed within 12 hours. The SLAs and contracts are available at https://pti.icann.org/agreements (note the emergency SLA is in the contract itself, not the SLA annex) I personally see no need for any concrete recommendations regarding emergency changes (except the regular testing). SLA's are in place. We can therefore focus on the topics of integrity, authenticity and confidentiality within the communication process. Best regards, - Boban

3 7

Re: [Ssr2-review] [EXT] Re: SSR2 agenda 13 November 2019
by Barrett, Kerry-Ann Nov. 13, 2019

Nov. 13, 2019

Dear Team Similarly, I have two other conflicts, one arose this morning. I’ll reply to any input needed by email and work on the sections I committed to work on. Sincerely, Kerry-Ann Barrett Cybersecurity Policy Specialist Organization of American States On Nov 13, 2019, at 7:58 AM, ALAIN AINA via Ssr2-review <ssr2-review(a)icann.org> wrote: CAUTION: EXTERNAL SENDER Hello, Please accept my apology for this call —Alain On 12 Nov 2019, at 16:28, Jennifer Bryce <jennifer.bryce(a)icann.org<mailto:jennifer.bryce@icann.org>> wrote: Dear SSR2 RT members, Below is the agenda for the next SSR2 plenary call, scheduled for Wednesday 13 November at 15:00 UTC. 1. Welcome, roll call, SOI updates * January face-to-face meeting, team members to advise if arrangements are outstanding 2. Confirm writing assignments to fill the gaps (see Russ’ November 7 email<https://mm.icann.org/pipermail/ssr2-review/2019-November/001961.html>): * Heather has started to build the DRAFT report, and there are some gaps. Please sign up in the spreadsheet to write some of the missing text:https://docs.google.com/spreadsheets/d/1Wkodgk-MqpaoGVO3ll3RJIk8oIdxG_… * For context, the draft report document is here: https://docs.google.com/document/d/1PAG8kh4Jg_6BNMbkqebVpyqebw5mPjXr3ie-4rg… 3. Can we use the SSAC tool for prioritization? * Per KC suggestion in Montreal (for context, see p185 of transcript here<https://community.icann.org/display/SSR/SSR2+Plenary+%2390+-+1-2+November+2…>) 4. AOB 5. Confirm action items, decisions reached Best, Jennifer -- Jennifer Bryce MSSI Associate Project Manager Internet Corporation for Assigned Names and Numbers (ICANN) Email: jennifer.bryce(a)icann.org<mailto:jennifer.bryce@icann.org> Skype: jennifer.bryce.icann www.icann.org<http://www.icann.org/> _______________________________________________ Ssr2-review mailing list Ssr2-review(a)icann.org<mailto:Ssr2-review@icann.org> https://mm.icann.org/mailman/listinfo/ssr2-review _______________________________________________ By submitting your personal data, you consent to the processing of your personal data for purposes of subscribing to this mailing list accordance with the ICANN Privacy Policy (https://www.icann.org/privacy/policy) and the website Terms of Service (https://www.icann.org/privacy/tos) You can visit the Mailman link above to change your membership status or configuration, including unsubscribing, setting digest-style delivery or disabling delivery altogether (e.g., for a vacation), and so on. _______________________________________________ Ssr2-review mailing list Ssr2-review(a)icann.org https://mm.icann.org/mailman/listinfo/ssr2-review _______________________________________________ By submitting your personal data, you consent to the processing of your personal data for purposes of subscribing to this mailing list accordance with the ICANN Privacy Policy (https://www.icann.org/privacy/policy) and the website Terms of Service (https://www.icann.org/privacy/tos) You can visit the Mailman link above to change your membership status or configuration, including unsubscribing, setting digest-style delivery or disabling delivery altogether (e.g., for a vacation), and so on.

1 0