- Ssr2-review - lists.icann.org

Action Item from the SSR2 15 March 2017 Plenary
by Karen Mulberry March 22, 2017

March 22, 2017

Per your request, here are the contact details for the two vendors who presented in the afternoon plenary session. SADAG researchers for the DNS Abuse Study Maciej Korczyński: maciej.korczynski(a)tudelft.nl<mailto:maciej.korczynski@tudelft.nl> Maarten Wullink: maarten.wullink(a)sidn.nl<mailto:maarten.wullink@sidn.nl> TNO researcher for the Root Zone Study Bart Gijsen at TNO: bart.gijsen(a)tno.nl<mailto:bart.gijsen@tno.nl>. For TNO, please let Eleeza Agopian <eleeza.agopian(a)icann.org<mailto:eleeza.agopian@icann.org>> know if you would like to get in touch with TNO. If you would like to arrange a longer discussion on either of the study’s on one of the SSR2 upcoming plenary calls, please let us know so arrangements can be made. Karen Mulberry Director, Multistakeholder Strategy and Strategic Initiatives (MSSI) ICANN 12025 Waterfront Dr., Suite 300 Los Angeles, CA 90094 Phone: +1 424 353 9745

7 11

Investigating Identifier Systems Abuse or Misuse: Training Metrics
by Karen Mulberry March 21, 2017

March 21, 2017

I wanted to let you know that a new document has been posted in the SSR2 Background wiki page on Investigating Identifier Systems Abuse or Misuse: Training Metrics Here is the link to the document https://www.icann.org/en/system/files/files/octo-identifier-systems-trainin… Karen Mulberry Director, Multistakeholder Strategy and Strategic Initiatives (MSSI) ICANN 12025 Waterfront Dr., Suite 300 Los Angeles, CA 90094 Phone: +1 424 353 9745

1 0

SSR2 Brainstorming Session 15 March 2017
by Karen Mulberry March 21, 2017

March 21, 2017

Attached is the SSR2 full capture document and pictures of the post it posters from the Brainstorming session in Copenhagen. Karen Mulberry Director, Multistakeholder Strategy and Strategic Initiatives (MSSI) ICANN 12025 Waterfront Dr., Suite 300 Los Angeles, CA 90094 Phone: +1 424 353 9745

1 0

Fwd: Your message to Ssr2-review awaits moderator approval
by Mohamad Amin hasbini March 21, 2017

March 21, 2017

Hi folks, I am still getting the below non-member message, kindly add my current email ma(a)mahasbini.org to the allowed list, also amin.hasbini(a)kaspersky.com Regards, Amin ---------- Forwarded message ---------- From: <ssr2-review-bounces(a)icann.org> Date: Mon, Mar 20, 2017 at 10:44 PM Subject: Your message to Ssr2-review awaits moderator approval To: ma(a)mahasbini.org Your mail to 'Ssr2-review' with the subject Re: [Ssr2-review] SSR2 Madrid - Dietary Requests Is being held until the list moderator can review it for approval. The reason it is being held: Post by non-member to a members-only list Either the message will get posted to the list, or you will receive notification of the moderator's decision. If you would like to cancel this posting, please visit the following URL: https://mm.icann.org/mailman/confirm/ssr2-review/ 62d22d293702666b05cdbd73f69a29b66d2da7d2

2 1

Draft SSR2 22 March Agenda
by Karen Mulberry March 20, 2017

March 20, 2017

Below is the draft agenda for the SSR2 RT call on 22nd March at 1900 UTC. Please let us know if there is anyone interested in leading the session and if there are any corrections or additions. SSR2 Review Team 22 March 2017 Adobe Connect Room via https://participate.icann.org/ssrreview 1900 UTC 1 hr. Draft Agenda 1. Updated SOI 2. Review Action Items from 15 March meeting 3. Finalize Leadership structure (Chair/Co-Chairs) 4. Determine process to choose Review Team Leadership 5. Select Leadership 6. Scope of Work and Work Plan Development 7. Schedule of future meetings - Review table of time zones (see attached) - Note tentative agreement to not hold meetings on Monday’s or Friday’s - Date/Time for next meeting Thank you, Karen Mulberry Director, Multistakeholder Strategy and Strategic Initiatives (MSSI) ICANN 12025 Waterfront Dr., Suite 300 Los Angeles, CA 90094 Phone: +1 424 353 9745

1 0

SSR2 Staff Email
by MSSI Secretariat March 20, 2017

March 20, 2017

Hi All - Just a reminder, if anyone needs to reach SSR2 Support Staff for any reason, please email ssr2-staff(a)icann.org<mailto:ssr2-staff@icann.org> Thank you. Kind Regards, Yvette Guigneaux (MSSI) Multistakeholder Strategy & Strategic Initiatives Projects & Operations Assistant. ICANN - Internet Corporation for Assigned Names and Numbers Email: yvette.guigneaux(a)icann.org Cell: +1-310-460-8432 Skype: yvette.guigneaux.icann www.icann.org<http://www.icann.org/>

1 0

SSR2 Madrid - Dietary Requests
by MSSI Secretariat March 20, 2017

March 20, 2017

Hi All - Nice meeting you all in Copenhagen. Thinking ahead to the Madrid meeting in terms of dietary needs. Just wanted to check and see what if there were dietary restrictions/requirements on the team, such as vegetarian, gluten free, certain food allergies or the like etc. This will help plan a menu that works for everyone. Please advise and thank you. :) Kind Regards, Yvette Guigneaux (MSSI) Multistakeholder Strategy & Strategic Initiatives Projects & Operations Assistant. ICANN - Internet Corporation for Assigned Names and Numbers Email: yvette.guigneaux(a)icann.org Cell: +1-310-460-8432 Skype: yvette.guigneaux.icann www.icann.org<http://www.icann.org/>

3 3

Bylaws Article 18 IANA Naming Function Reviews
by Karen Mulberry March 20, 2017

March 20, 2017

Bylaws Article 18 IANA Naming Function Reviews We thought that this might assist the RT as it considers the SSR2 Review’s scope of work. Article 18: https://www.icann.org/resources/pages/governance/bylaws-en/#article18 Karen Mulberry Director, Multistakeholder Strategy and Strategic Initiatives (MSSI) ICANN 12025 Waterfront Dr., Suite 300 Los Angeles, CA 90094 Phone: +1 424 353 9745

3 3

Re: [Ssr2-review] Action Item from the SSR2 15 March 2017 Plenary
by Osterweil, Eric March 20, 2017

March 20, 2017

Hey all, So, one of the things that concerns me is that we might inadvertently try to draw boundaries around the problem space instead of the eventual recommendations. It seems to me that the problem space is as large as the systemic dependencies mandate it. That said, I think we were advised to try and make our recommendations actionable within ICANN’s remit, and we need to be on guard against trying to boil the ocean. What I’m trying to say is that if there are a lot of reasons that aspect _a_ of (say) the root servers is important for some reason that we can quantify, then _a_ is important, and we might want to study it (even if the reasons are external). Also, I hope this doesn’t seem overly pedantic, I think the disconnect here could be from the fact that the SSR team’s charter predates the PTI, right? I thought the SSR team was being convened to help provide some measure of oversight that doesn’t exist elsewhere, no? Regardless, my 0.02 is that it will be important to be flexible in what we assess as important, and then measured in our recommendations. Eric From: <ssr2-review-bounces(a)icann.org> on behalf of Emily Taylor <emily.taylor(a)oxil.co.uk> Date: Monday, March 20, 2017 at 5:58 AM To: Geoff Huston <gih(a)apnic.net> Cc: SSR2 <ssr2-review(a)icann.org> Subject: [EXTERNAL] Re: [Ssr2-review] Action Item from the SSR2 15 March 2017 Plenary Hi Geoff I agree that "ICANN's execution of its commitments" is a key component of that sentence, and helps to limit the scope from boiling-the-ocean into something that's more organisationally focused. So, in that context, how would you view the word 'external'? Best Emily On Mon, Mar 20, 2017 at 9:54 AM, Geoff Huston <gih(a)apnic.net<mailto:gih@apnic.net>> wrote: When I read that sentence Emily I see "ICANN’s execution of its commitment.. . “ as being the subject of the sentence, rather than the systems and processes. i.e. a) what _exactly_ is ICANN’s commitment here in trying to look past the fluffy generic phrases and look at these commitments on more specific and tangible terms of expression in terms of process and programs, and b) how well is ICANN executing this commitment? So I’d like to think that the scope is about the scope of ICANN’s own commitments at this point in time. I’m sure there are many ways to interpret this sentence, but for me it begins and ends with ICANN’s current specific commitments. regards, Geoff > On 20 Mar 2017, at 7:53 pm, Emily Taylor <emily.taylor(a)oxil.co.uk<mailto:emily.taylor@oxil.co.uk>> wrote: > > Hi Matagoro, Geoff, and James > > As Matagoro says, we'll be discussing the scope in our upcoming call(s) and it is very important that we get it right. > > Personally, I find the language of the bylaws rather confusing and complex, so it may be a challenge for us to define our scope. > > One aspect of the bylaws text which wasn't up on the walls during our brainstorming session is this preamble, which I believe is relevant to the discussions on the list, and our discussions on scope. I've highlighted some words: > > The Board shall cause a periodic review of ICANN’s execution of its commitment to enhance the operational stability, reliability, resiliency, security, and global interoperability of the systems and processes, both internal and external, that directly affect and/or are affected by the Internet’s system of unique identifiers that ICANN coordinates (“SSR Review”). > > My question is, what do you think 'external' means in this context? All the systems and processes in the world that directly affect and/or are affected by the Internet's system of unique identifiers that ICANN coordinates? The PTI? ICANN's external facing systems? Something else? > > Best wishes > > Emily > > > On Mon, Mar 20, 2017 at 8:46 AM, Matogoro Jabera <jaberamatogoro(a)gmail.com<mailto:jaberamatogoro@gmail.com>> wrote: > Thank Geoff, > > The scope of our review is very important and I would appreciate if in the coming meeting we can have time to explore in detail the understanding of each review team on the scope of our work. > > > Regards, > Matogoro > > On Sun, Mar 19, 2017 at 10:46 PM, Geoff Huston <gih(a)apnic.net<mailto:gih@apnic.net>> wrote: > Scope question: Is this an SSR of ICANN or an SSR of the PTI? > > I had thought this was a SSR of ICANN, and the PTI has its own independent existence, governance structures, and I presume the PTI Board will be responsible for conducting its own processes of periodic audit and review. > > If this is indeed the case, then I am hard pressed to understand why an ICANN SSR has any chartered responsibility to peer over the fence into the PTI’s space. > > If I have this all wrong, I’d appreciate a better understanding of exactly why the PTI falls into the scope of this ICANN-chartered SSR exercise before we rush into any studies of KMFs, key ceremonies and the like. > > kind regards, > > Geoff > > > > > > On 17 Mar 2017, at 10:06 pm, James Gannon <james(a)cyberinvasion.net<mailto:james@cyberinvasion.net>> wrote: > > > > Apologies! > > > > So the KMFs are the Key Management Facilities that are used to store and operate the extremely important set of private keys that sign the root zone of the internet for the DNSSEC. > > https://www.icann.org/resources/pages/dnssec-qaa-2014-01-29-en > > > > You can see what the facilities look like and one of the high trust ceremonies being performed at https://www.iana.org/dnssec/ceremonies/28 > > > > They are one of the few physical facilities that have extremely high security requirements and it would be useful for the team to understand where the contract for management of the KMFs stands and did it transfer to PTI as part of the IANA transition, as when it comes to the DNSSEC and the Key Ceremonies we still have a lot of overlap. > > > > -James > > > > From: Emily Taylor <emily.taylor(a)oxil.co.uk<mailto:emily.taylor@oxil.co.uk>> > > Date: Friday 17 March 2017 at 12:02 > > To: James Gannon <james(a)cyberinvasion.net<mailto:james@cyberinvasion.net>> > > Cc: Karen Mulberry <karen.mulberry(a)icann.org<mailto:karen.mulberry@icann.org>>, SSR2 <ssr2-review(a)icann.org<mailto:ssr2-review@icann.org>>, Eleeza Agopian <eleeza.agopian(a)icann.org<mailto:eleeza.agopian@icann.org>>, Elise Gerich <elise.gerich(a)iana.org<mailto:elise.gerich@iana.org>> > > Subject: Re: [Ssr2-review] Action Item from the SSR2 15 March 2017 Plenary > > > > Hi James > > > > Thanks for this. Would you be able to spell out the acronyms for those members of the team who are less familiar with the ICANN environment? > > > > Best wishes > > > > Emily > > > > On Fri, Mar 17, 2017 at 11:00 AM, James Gannon <james(a)cyberinvasion.net<mailto:james@cyberinvasion.net>> wrote: > > Hi Karen, > > > > Also just putting in writing my request for John from the SSR side or the PTI team to set out the ownership and responsibility matrix for the KMFs as requested in the meeting. > > > > -james > > > > _______________________________________________ > Ssr2-review mailing list > Ssr2-review(a)icann.org<mailto:Ssr2-review@icann.org> > https://mm.icann.org/mailman/listinfo/ssr2-review > > > > -- > MATOGORO Jabhera > Assistant Lecturer & Coordinator - Microsoft Innovation Center, Tanzania > College of Informatics and Virtual Education > The University of Dodoma (www.udom.ac.tz<http://www.udom.ac.tz>) > > _______________________________________________ > Ssr2-review mailing list > Ssr2-review(a)icann.org<mailto:Ssr2-review@icann.org> > https://mm.icann.org/mailman/listinfo/ssr2-review > > > > > -- > Emily Taylor > CEO, Oxford Information Labs > Associate Fellow, Chatham House; Editor, Journal of Cyber Policy > > PLEASE NOTE MY NEW EMAIL ADDRESS AND CONTACTS AS OF 1 JANUARY 2017 > > Magdalen Centre, Oxford OX4 4GA | T: 01865 582885 > E: emily.taylor(a)oxil.co.uk<mailto:emily.taylor@oxil.co.uk> | D: 01865 582811 | M: +44 7540 049322<tel:%2B44%207540%20049322> > > > > Registered office: 37 Market Square, Witney, Oxfordshire OX28 6RE. Registered in England and Wales No. 4520925. VAT No. 799526263 > > . > > -- Emily Taylor CEO, Oxford Information Labs Associate Fellow, Chatham House; Editor, Journal of Cyber Policy PLEASE NOTE MY NEW EMAIL ADDRESS AND CONTACTS AS OF 1 JANUARY 2017 Magdalen Centre, Oxford OX4 4GA | T: 01865 582885 E: emily.taylor(a)oxil.co.uk<mailto:emily.taylor@oxil.co.uk> | D: 01865 582811 | M: +44 7540 049322 [https://s3-eu-west-1.amazonaws.com/static.oxil/oxil_logo-150x.png] [https://docs.google.com/a/oxil.co.uk/uc?id=0B7sS_6djDxsHNm92d21jM21HMDQ&exp…] <http://explore.tandfonline.com/cfp/pgas/rcyb-cfp-2017> Registered office: 37 Market Square, Witney, Oxfordshire OX28 6RE. Registered in England and Wales No. 4520925. VAT No. 799526263 .

2 1

Time Zones
by MSSI Secretariat March 19, 2017

March 19, 2017

Hi All - nice meeting everyone yesterday, looking forward to working with you all. Just looking to get everyone's time zones since we had quite wide spectrum in the room - this will help us with future scheduling - please advise. Thank you. Kind Regards, Yvette Guigneaux (MSSI) Multistakeholder Strategy & Strategic Initiatives Projects & Operations Assistant. ICANN - Internet Corporation for Assigned Names and Numbers Email: yvette.guigneaux(a)icann.org Cell: +1-310-460-8432 Skype: yvette.guigneaux.icann www.icann.org<http://www.icann.org/>

7 6