- Ssr2-review - lists.icann.org

SSR2 Meeting with Board Caucus Group
by MSSI Secretariat Nov. 1, 2019

Nov. 1, 2019

SSR2 Meeting with Board Caucus Group<https://community.icann.org/x/DIszBw> Zoom Link: https://icann.zoom.us/my/yul66.518 Date: Wednesday, 6 November 2019 Time - 15:45 - 16:45 local Montreal time - additional time zone support here<https://www.timeanddate.com/worldclock/fixedtime.html?msg=SSR2+Meeting+with…> Room: Meeting Room - 518 ICANN66 | Montréal schedule link: HERE<https://66.schedule.icann.org/meetings/1126579>

1 0

FYI - lawsuit involving abuse
by Denise Michel Nov. 1, 2019

Nov. 1, 2019

FYI -- A few days ago, Facebook filed suit against registrar OnlineNIC and its privacy/proxy service, ID Shield, for registering numerous domain names that pretended to be affiliated with our company (such as www-facebook-login.com and facebook-mails.com) and designed to trick users into thinking these are authorized and legitimate Facebook domain names. OnlineNIC refused to reveal their customers behind these malicious domain names even after we notified them of the harm they cause. In order to protect our billions of users, it was necessary to take legal action to enjoin OnlineNIC and deter it from future misconduct. Here’s our post https://newsroom.fb.com/news/2019/10/fighting-domain-name-fraud/, and it’s covered in several news sites, e.g. https://domainnamewire.com/2019/10/29/facebook-sues-domain-name-registrar-o… Best, Denise

1 0

Writing assignments
by Heather Flanagan Nov. 1, 2019

Nov. 1, 2019

These were the writing assignments (aka, areas requiring clarification and/or reorganization) assigned out of the f2f Come back to: intro to Abuse Definitions (Denise to work on) Compliance: Whole question of outsourcing compliance and what was intended is unclear to review team members. Will have a proposal by tomorrow. Contracts: need more detail on how the recommendations will differ between ccTLDs and gTLDs (Zarko to write?) Or can this be made more general to apply to the entire domain space? DNS Testbed: need to come back to this with Eric IANA Portal: Zarko and Laurin to work on revising the text Root Zone Data: Heather to pull info out into findings where possible; Zarko has a concern about whether CZDS has any reason to be prioritized Future’s section will need something about watching the DOH space and (possibly) work against the adoption of that technology (which is fraught with peril since ICANN has heavily invested time in DOH)

1 0

SSR2 Meeting with Board Caucus Group
by MSSI Secretariat Nov. 1, 2019

Nov. 1, 2019

SSR2 Meeting with Board Caucus Group<https://community.icann.org/x/DIszBw> Zoom Link: https://icann.zoom.us/my/yul66.518 Date: Wednesday, 6 November 2019 Time - 15:15 - 16:45 local Montreal time - additional time zone support here<https://www.timeanddate.com/worldclock/fixedtime.html?msg=SSR2+Meeting+with…> Room: Meeting Room - 518 ICANN66 | Montréal schedule link: HERE<https://66.schedule.icann.org/meetings/1126579>

3 2

Dinner tonight?
by Kerry-Ann Barrett Oct. 31, 2019

Oct. 31, 2019

Hey everyone Flight coming in a little delayed but wanted to know if any one had dinner plans tonight that I could crash and join. Please let me know :) Looking forward to the weekend . Cheers Kerry -Ann

1 0

Call summary: SSR2 30 October
by Jennifer Bryce Oct. 30, 2019

Oct. 30, 2019

Dear SSR2 RT members, Please find attached the plenary call report for SSR2 meeting #89, 30 October 2019 at 14:00 UTC. These high-level notes are designed to help SSR2 Review Team members navigate through the content of the call. They are not meant to be a substitute for the recording or transcript, which are posted on the wiki here: https://community.icann.org/x/YoIzBw. The transcript usually becomes available 5 - 7 business days after the meeting. Best, Jennifer -- Jennifer Bryce MSSI Associate Project Manager Internet Corporation for Assigned Names and Numbers (ICANN) Email: jennifer.bryce(a)icann.org Skype: jennifer.bryce.icann www.icann.org

1 0

A table to map recommendations
by Heather Flanagan Oct. 30, 2019

Oct. 30, 2019

Hello all, A question came up regarding where a specific recommendation landed in the draft report. I’ve kept a table mapping what went where; a copy is below, and a copy is also now online here (in case the formatting doesn’t work for your mail client): https://docs.google.com/spreadsheets/d/1V-S3dZFWtRTGeXOpreLj2ovkCEwmTEUGthi… <https://docs.google.com/spreadsheets/d/1V-S3dZFWtRTGeXOpreLj2ovkCEwmTEUGthi…> Old recommendation number Description Workstream New recommendation number Implement all SSR1 Recommendations SSR1 1 Recommendation 2 ISMS, Certification SSR1 3 Recommendation 3 Metrics, Vulnerability Disclosure SSR1 - still a work in progress 5 Recommendation 4 Budget Transparency SSR1 6 Recommendation 5 SSAC, RSSAC roles SSR1 2 Recommendation 6 SSR Strategy and Framework SSR1 4 Recommendation 7 Budgeting and gTLDs SSR1 7 Recommendation 8 Risk Management SSR1 8 Recommendation 10 Security Position, C-Suite WS2 9 Recommendation 11 Security Risk Management WS2 10 Recommendation 13 DNS Test Bed WS3 16 Recommendation 14 IANA Portal WS3 17 Recommendation 15 Root Server Ops WS3 19 Recommendation 19 Research and Briefings WS4 24 Recommendation 20 Abusive Naming WS3 15 Recommendation 24 Root Zone WS3 20 Recommendation 26 Key Rollover WS3 18 Recommendation 27 DR Plan WS2 11 Recommendation 28 Name Collision WS4 22 Recommendation 35 Crypto WS4 21 Recommendation 36 Privacy WS4 23 Abuse and Compliance: Compliance WS3 12 Abuse and Compliance: Abuse Definitions & Reporting WS3 13 Abuse and Compliance: Policies and Agreements with Contracted Parties WS3 14

1 0

Re: [Ssr2-review] Link to draft SSR2 report
by Barrett, Kerry-Ann Oct. 30, 2019

Oct. 30, 2019

Agreed!!!!! :) you are patient lol Sincerely Kerry-Ann Barrett Cybersecurity Program Officer Secretariat of the Inter-American Committee against Terrorism (CICTE) Secretariat for Multidimensional Security (SMS) Organization of American States 1889 F Street NW Washington D.C. 20006 (202) 370 4675 - (202) 458 3857 www.oas.org/cyber @KerryOAS| @OEA_Cyber Register to our distribution list here! -----Original Message----- From: Ssr2-review [mailto:ssr2-review-bounces@icann.org] On Behalf Of Weissinger, Laurin Sent: Wednesday, October 30, 2019 10:31 AM To: Heather Flanagan <hlf(a)sphericalcowconsulting.com> Cc: SSR2 Review <ssr2-review(a)icann.org> Subject: [EXT] Re: [Ssr2-review] Link to draft SSR2 report Thanks for all your effort, Heather! I am sure this document will help the team review the work. > On Oct 30, 2019, at 10:22, Heather Flanagan <hlf(a)sphericalcowconsulting.com> wrote: > > Hello all, > > I know Russ sent this out earlier this week, but to perhaps make it a > bit easier to find, here is the link to a draft copy of the SSR2 > report, which incorporates all the recommendations and some of the > findings, with minimal markup. I hope you find it useful for reviewing > all the recommendations from start to finish. You all have done a > massive amount of work! Thank you > > -Heather > > https://docs.google.com/document/d/1_L-WrOnckWN2mBQwPaO-foYHIQ8F78ESM8 > 1JOCtbx0A/edit _______________________________________________ > Ssr2-review mailing list > Ssr2-review(a)icann.org > https://nam05.safelinks.protection.outlook.com/?url=https%3A%2F%2Fmm.i > cann.org%2Fmailman%2Flistinfo%2Fssr2-review&data=02%7C01%7Claurin. > weissinger%40yale.edu%7C790b1f65c54d43c8f54c08d75d44ad77%7Cdd8cbebb213 > 94df8b4114e3e87abeb5c%7C0%7C0%7C637080421873452680&sdata=pryKa%2Bh > PtOdcKp3p1fgKrDXGs5qwkIp%2BWKokfx3FS2I%3D&reserved=0 > > _______________________________________________ > By submitting your personal data, you consent to the processing of > your personal data for purposes of subscribing to this mailing list > accordance with the ICANN Privacy Policy > (https://nam05.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww > .icann.org%2Fprivacy%2Fpolicy&data=02%7C01%7Claurin.weissinger%40y > ale.edu%7C790b1f65c54d43c8f54c08d75d44ad77%7Cdd8cbebb21394df8b4114e3e8 > 7abeb5c%7C0%7C0%7C637080421873462675&sdata=JVBTaVRVopKqN6e5WZS6u3B > wTPjxEOjdsxglyaCfTLI%3D&reserved=0) and the website Terms of > Service > (https://nam05.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww > .icann.org%2Fprivacy%2Ftos&data=02%7C01%7Claurin.weissinger%40yale > .edu%7C790b1f65c54d43c8f54c08d75d44ad77%7Cdd8cbebb21394df8b4114e3e87ab > eb5c%7C0%7C0%7C637080421873462675&sdata=lH5u6gUJ51ZGfCUco9SoSgnJIn > n7O2dt%2FTDRRcJooF0%3D&reserved=0). You can visit the Mailman link > above to change your membership status or configuration, including > unsubscribing, setting digest-style deliv ery or d isabling delivery altogether (e.g., for a vacation), and so on. _______________________________________________ Ssr2-review mailing list Ssr2-review(a)icann.org https://mm.icann.org/mailman/listinfo/ssr2-review _______________________________________________ By submitting your personal data, you consent to the processing of your personal data for purposes of subscribing to this mailing list accordance with the ICANN Privacy Policy (https://www.icann.org/privacy/policy) and the website Terms of Service (https://www.icann.org/privacy/tos) You can visit the Mailman link above to change your membership status or configuration, including unsubscribing, setting digest-style delivery or disabling delivery altogether (e.g., for a vacation), and so on.

2 1

Link to draft SSR2 report
by Heather Flanagan Oct. 30, 2019

Oct. 30, 2019

Hello all, I know Russ sent this out earlier this week, but to perhaps make it a bit easier to find, here is the link to a draft copy of the SSR2 report, which incorporates all the recommendations and some of the findings, with minimal markup. I hope you find it useful for reviewing all the recommendations from start to finish. You all have done a massive amount of work! Thank you -Heather https://docs.google.com/document/d/1_L-WrOnckWN2mBQwPaO-foYHIQ8F78ESM81JOCt… <https://docs.google.com/document/d/1_L-WrOnckWN2mBQwPaO-foYHIQ8F78ESM81JOCt…>

2 1

SSR2 Montreal agenda
by Jennifer Bryce Oct. 29, 2019

Oct. 29, 2019

Dear SSR2 RT members, Attached, please find the agenda for SSR2 meetings in Montreal. Additionally, please find below other ICANN66 sessions that may be of interest to you. Please let us know if you have any questions about the agenda or any of the scheduled meetings. Monday November 4 Enhancing the Effectiveness of Review Recommendations and Their Implementation 15:15 - 16:45 ET, 517D (Main Room) Reviews are an important element of ICANN’s multistakeholder model and continuous improvement. Improvements resulting from these reviews speak to ICANN’s accountability and transparency, and its ability to evolve as an institution that continuously improves, promoting the global public interest, with sensitivity to the changing environment as it relates to ICANN’s mission. Developing recommendations that propose improvements and implementing such recommendations effectively is required for the reviews to serve their intended purpose. With the wide range and scope of community-related review recommendations, there have been discussions within ICANN (community, Board and the ICANN organization) that have opened up the possibility for collaboratively engaging to make these recommendations more effective. https://66.schedule.icann.org/meetings/1116749 Tuesday November 5 Emerging Identifier Technology 13:30 - 15:00 ET, 511A As now regularly organized at ICANN meetings, this session will provide participants with the opportunity to learn more about emerging identifiers technologies. We will discuss in Montreal with experts working on GNU Name System (GNS - https://docs.gnunet.org/handbook/gnunet.html#The-GNU-Name-System) and Handshake system (https://handshake.org/) Join the OCTO team and other experts to hear about how these systems work and discuss whether they are relevant to the identifier system ICANN currently helps coordinate. https://66.schedule.icann.org/meetings/1116895 Wednesday November 6 DNS Abuse 10:30 - 12:00 ET, 517D (Main Room) This plenary session is coordinated by members of the Governmental Advisory Committee (GAC), the Generic Names Supporting Organization (GNSO), the Country Code Names Supporting Organization (ccNSO), and the Security and Stability Advisory Committee (SSAC). Following from the informational webinar that was conducted on 15 October, this plenary session will allow members of the community to continue to discuss practices to mitigate abuse and address related policy gaps. https://66.schedule.icann.org/meetings/1116759 Wednesday November 6 DAAR Improvements 13:30 - 14:30, 514A The session will include discussions on ongoing changes to the Domain Abuse Activity Reporting (DAAR) system and its corresponding monthly reports since ICANN65. It will also put forward ideas on a couple of planned future improvements to the system and aims to have constructive discussions with the community about them. https://66.schedule.icann.org/meetings/1116956 Best, Jennifer -- Jennifer Bryce MSSI Associate Project Manager Internet Corporation for Assigned Names and Numbers (ICANN) Email: jennifer.bryce(a)icann.org Skype: jennifer.bryce.icann www.icann.org

1 0