- Ssr2-review - lists.icann.org

Draft action items SSR2 Plenary 20
by Jennifer Bryce July 26, 2017

July 26, 2017

Hi all, Here are the draft action items and summary notes from SSR2 plenary call 20, Tuesday 25 July. Plenary Action Items/Requests #20 Action/Request Owner Expected Completion Date Staff to build out work plan template to include elements on information gathering, research and outreach. ICANN Org 1 August Review Team members to share any changes to January availability indicated on Doodle poll<https://beta.doodle.com/poll/6k8at4f63wpv37c3>. SSR2-RT 27 July Jennifer -- Jennifer Bryce Senior Reviews Coordinator Internet Corporation for Assigned Names and Numbers (ICANN) Email: jennifer.bryce(a)icann.org Skype: jennifer.bryce.icann www.icann.org

1 0

Connectivity - for SSR2 Meeting Call - Tuesday, 25 July 2017 @ 14:00 UTC
by MSSI Secretariat July 25, 2017

July 25, 2017

Hello SSR2 Review Team - Good day. I just wanted to touch base regarding connectivity for our next SSR2 Meeting Call scheduled for Tuesday, 25 July 2017 @ 14:00 UTC. We have conquered many of the noise disturbances previously present and would like to ensure continued connectivity on future calls. For the best results in regions with connectivity, we suggest doing the following... * Connect to the Adobe Connect (https://participate.icann.org/ssrreview) 20-30 minutes before the scheduled call - the Adobe Connect room will be open and I will be available to assist you - in addition we can resolve any microphone/static/connection issues ahead of time - including connecting with international operators if need be. The goal is to have all connection concerns resolved by the top of the hour for the benefit of the team. * Be located (if possible) in an area that has proper broadband connection and is quiet - thus creating a strong signal connection, making it possible to see and hear in the Adobe Connect Room. * Feel free to Skype me either before, during or after the call - my skype address is yvette.guigneaux.icann - this way I can respond to you almost immediately for whatever you may need - including having the Adobe Connect Room dial out to you if need be. As your SSR2 Review Team Secretariat, I am determined to create an atmosphere where you can clearly participate in the Adobe Connect Room. Thank you everyone and I look forward to seeing you all on our upcoming call. :) Kind Regards, Yvette Guigneaux (MSSI) Multistakeholder Strategy & Strategic Initiatives Projects & Operations Assistant. ICANN - Internet Corporation for Assigned Names and Numbers Email: yvette.guigneaux(a)icann.org Cell: +1-310-460-8432 Skype: yvette.guigneaux.icann www.icann.org<http://www.icann.org/> [cid:image001.png@01D30508.CD482150]

1 0

Draft agenda: SSR2 Plenary #20
by Jennifer Bryce July 25, 2017

July 25, 2017

Hi all, Below is the draft agenda for the SSR2 plenary call on Tuesday, July 25 at 14:00 UTC. Slides will follow on Monday. - Updated SOIs & note apologies/absences - SSR1 implementation briefing: Risk Management (James Caulfield, ICANN Enterprise Risk Management, Xavier Calvez, ICANN Senior Vice President & Chief Financial Officer) - Review & discussion on subtopic work plan template - Updates from subtopic teams (SSR1 Implementation, ICANN SSR, DNS Security, Future Challenges, IANA Transition) - Abu Dhabi face-to-face meeting: Discuss options for Review Team outreach to community. - Confirm January face-to-face meeting dates - AOB Have a great weekend, Jennifer -- Jennifer Bryce Senior Reviews Coordinator Internet Corporation for Assigned Names and Numbers (ICANN) Email: jennifer.bryce(a)icann.org Skype: jennifer.bryce.icann www.icann.org

3 2

Re: [Ssr2-review] SAVE THE DATES - SSR2 RT Face to Face Meetings | 22-24 January 2018
by Jennifer Bryce July 21, 2017

July 21, 2017

Hi all, The January face-to-face meeting will be in Brussels. If you’re availability has changed, please email staff directly by close of business Monday, UTC. Here is the link to the original Doodle poll: https://beta.doodle.com/poll/6k8at4f63wpv37c3 Date (January 2018) 15 – 17 (Mon – Wed) 22 – 24 (Mon - Wed) 26 – 28 (Fri – Sun) PARTICIPANTS Alain Aina Noorul Ameen Kerry-Ann Barrett Don Blumenthal James Gannon Cathy Handley Mohamad Amin Hasbini Geoff Huston Žarko Kecić Boban Krsic Denise Michel Jabhera Matogoro Eric Osterweil Ramkrishna Pariyar From: <ssr2-review-bounces(a)icann.org> on behalf of "Gannon, James-1" <james-1.gannon(a)novartis.com> Date: Saturday, July 15, 2017 at 5:17 PM To: Cathy Handley <chandley(a)arin.net> Cc: SSR2 <SSR2-review(a)icann.org> Subject: Re: [Ssr2-review] SAVE THE DATES - SSR2 RT Face to Face Meetings | 22-24 January 2018 I am also tentative depending on location, as I noted midweek is very difficult for me. Sent from my iPhone On 14 Jul 2017, at 22:39, Cathy Handley <chandley(a)arin.net<mailto:chandley@arin.net>> wrote: I need to apologize, I will not be able to attend this meeting. When I originally responded my calendar was clear, however in the mean time other commitments have come up. If there are any changes in these dates and the meeting is in Brussels , I could make the 26-28 as I am in Geneva and could attend in between my other commitments. Sorry for any inconvenience, Cathy Handley Executive Director Government Affairs American Registry for Internet Numbers (ARIN) PO Box 232290 Centrevile, VA 20120 Mobile: +1 703 341 7996<tel:+1%20703%20341%207996> Email: chandley(a)arin.net<mailto:chandley@arin.net> On Jul 14, 2017, at 4:46 PM, MSSI Secretariat <mssi-secretariat(a)icann.org<mailto:mssi-secretariat@icann.org>> wrote: Hi All – SSR2 (F2F) Meetings in January - Save the Dates (22-24 January 2018) Location: TBD – more information to follow _______________________________________________ Ssr2-review mailing list Ssr2-review(a)icann.org<mailto:Ssr2-review@icann.org> https://mm.icann.org/mailman/listinfo/ssr2-review <meeting.ics> _______________________________________________ Ssr2-review mailing list Ssr2-review(a)icann.org<mailto:Ssr2-review@icann.org> https://mm.icann.org/mailman/listinfo/ssr2-review Novartis Ireland Ltd. Registered No. 11931, Ireland. Registered Office: The Vista Building, Elm Park Business Park, Merrion Road, Dublin 4. DO4 A9N6, Ireland. Confidentiality Notice: This e-mail message, including any attachments, is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies of the original message.

1 0

Post-Meeting Blog
by Jennifer Bryce July 18, 2017

July 18, 2017

Hi all, For your information, please find attached the post-Johannesburg meeting blog that will publish on ICANN.org tomorrow afternoon, July 19 UTC. Thanks to Alain for his help with this. Jennifer -- Jennifer Bryce Senior Reviews Coordinator Internet Corporation for Assigned Names and Numbers (ICANN) Email: jennifer.bryce(a)icann.org Skype: jennifer.bryce.icann www.icann.org

1 0

Item 68: L Root Question
by Steve Conte July 17, 2017

July 17, 2017

Greetings all, In response to the question on open item 68: "What measures are undertaken by ICANN for the anycast deployment for L-Root to ensure physical and network security and stability." Please see the response below: =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- SSR measures undertaken by ICANN for the anycast deployment of the root server operated y ICANN can be considered on two axis, Structured activities, and technical considerations. The ICANN DNS Engineering department undertakes two structured activities directed at operational security matters, they are: - ICANN DNS Engineering engages in an annual table-top exercise with other root server operators to test its global operational readiness to security or attack events. - ICANN DNS Engineering have commenced an annual security review where a 3rd party security firm is contracted to perform a range of penetration tests targeting all facets of L-Root operations. Technical considerations cover actions applied to all ICANN root server anycast instances. All L-Root instances have access control lists applied to the interfaces in a stateless mode that: - only permits access from the greater internet to the public service addresses for the necessary ports on the expected protocols (eg 2001:500:9f::42, port 53, TCP and UDP) - restrict all traffic to/from the management interfaces to ICANN management networks Additionally, all L-Root instances: - follow a plan and process to update all hardware before it reaches 5 years of age - follow a policy that all hardware is under either a 3 year or 5 year, next business day, support contract from the hardware vendor (when supported by the vendor in the particular country where the instance is located) - have internal and external monitoring of the L-Root service AS number - have internal and external monitoring of the L-Root service on all necessary protocols and service addresses - are monitored for access activity, network uptime and performance, and system uptime and performance - implement the appropriate recommendations from BCP38 and RFC7454. Given ICANN anycast deployments come in two forms. 1) Anycast instances operated by ICANN and hosted by contracted parties. 2) Anycast instances operated and hosted by ICANN SSR measures for these two deployment forms differ slightly 1. Anycast instances operated by ICANN and hosted by contracted parties. For all L-Root instances hosted by contracted parties the following conditions are placed on the host, by contract. - provide connectivity for network traffic for the DNS service interface in such a way to achieve high availability; - provide connectivity for network traffic for the remote management interface in such a way to achieve high availability; - provide physical security with no history of breaches within the last 12 months, which may be monitored and adjusted by ICANN from time to time; - provide suitable power and cooling, which may be monitored and adjusted by ICANN - ensure access to the Equipment to is restricted to no other individuals than an ICANN representative or an authorised employee of the contracted organisation - ensure the contracted organisation access the Equipment only as directed by ICANN - notify ICANN should any security, power or cooling arrangements be changed 2. Anycast instances both operated and hosted by ICANN These anycast instances are maintained in ICANN controlled cages in data-centers that have been inspected by ICANN Staff and meet the following access security and infrastructure requirements: - require photographic government issued ID for access - premises are manned by security personnel 24x7 - pre-authorisation is required for access - key or pin-code access into ICANN caged areas - 24x7 monitoring and recording of access - equipment entering or leaving the facility is vetted and checked with ICANN staff - full UPS power on all circuits - power supply redundancy including on-site generators. - robust and redundant heating, ventilation, and air conditioning (HVAC) systems Network connectivity at these anycast locations is via multiple redundant upstream connections and the providers of these services are contracted directly to ICANN, and as such changes can only be implemented by authorised ICANN staff. ----- Steve Conte steve.conte(a)icann.org

3 4

SSR2-RT Plenary #18 Actions
by Karen Mulberry July 17, 2017

July 17, 2017

Here are the notes and draft Action Items from the SSR2-RT Plenary meeting #18. Karen Mulberry Director, Multistakeholder Strategy and Strategic Initiatives (MSSI) ICANN 12025 Waterfront Dr., Suite 300 Los Angeles, CA 90094 Phone: +1 424 353 9745

1 0

Resignation from SSR2
by Emily Taylor July 17, 2017

July 17, 2017

Dear colleagues With regret, I am resigning from the SSR2 with immediate effect. As you know from my SOI, my company Oxford Information Labs occasionally provides consultancy work for ICANN. ICANN has introduced terms for consultants which make it no longer viable for me to continue as a volunteer within the ICANN community. I have consulted with the SSR2 co-chairs and my business partners and have their full support in taking this step. I would like to extend a personal thanks to both Eric and Denise for their support and dedicated work on this project. I wish you all every success in the months ahead. I will inform the leadership of the RrSG, which nominated me to this team. Best wishes Emily -- Emily Taylor CEO, Oxford Information Labs *Associate Fellow, Chatham House; Editor, Journal of Cyber Policy* Magdalen Centre, Oxford OX4 4GA | T: 01865 582885 E: emily.taylor(a)oxil.co.uk | D: 01865 582811 | M: +44 7540 049322 <http://explore.tandfonline.com/cfp/pgas/rcyb-cfp-2017> Registered office: 37 Market Square, Witney, Oxfordshire OX28 6RE. Registered in England and Wales No. 4520925. VAT No. 799526263 .

4 4

Re: [Ssr2-review] SAVE THE DATES - SSR2 RT Face to Face Meetings | 22-24 January 2018
by Cathy Handley July 15, 2017

July 15, 2017

I need to apologize, I will not be able to attend this meeting. When I originally responded my calendar was clear, however in the mean time other commitments have come up. If there are any changes in these dates and the meeting is in Brussels , I could make the 26-28 as I am in Geneva and could attend in between my other commitments. Sorry for any inconvenience, Cathy Handley Executive Director Government Affairs American Registry for Internet Numbers (ARIN) PO Box 232290 Centrevile, VA 20120 Mobile: +1 703 341 7996<tel:+1%20703%20341%207996> Email: chandley(a)arin.net<mailto:chandley@arin.net> On Jul 14, 2017, at 4:46 PM, MSSI Secretariat <mssi-secretariat(a)icann.org<mailto:mssi-secretariat@icann.org>> wrote: Hi All – SSR2 (F2F) Meetings in January - Save the Dates (22-24 January 2018) Location: TBD – more information to follow _______________________________________________ Ssr2-review mailing list Ssr2-review(a)icann.org<mailto:Ssr2-review@icann.org> https://mm.icann.org/mailman/listinfo/ssr2-review <meeting.ics>

2 1

SAVE THE DATES - SSR2 RT Face to Face Meetings | 22-24 January 2018
by MSSI Secretariat July 14, 2017

July 14, 2017

Hi All - SSR2 (F2F) Meetings in January - Save the Dates (22-24 January 2018) Location: TBD - more information to follow

1 0