- Ssr2-review - lists.icann.org

sections of report
by k claffy May 20, 2019

May 20, 2019

i filled in all my @@ (marks where i had text), and i've made a ton of comments on the dns ssr ws doc and the recommendations (and a few in the q&a). few other issues, that i'm not sure if/where to put in the docs. (1) i am wondering if the final report doesn't need a whole category about measurement and data sharing. so many of the recommendations seem to be asking for measurement/ data sharing. but it may be that just because the perceived need for measurement is so pervasive, making it a separate section would be unbalanced. so i didn't try to do it. but maybe we should consider separately collating all the specific measurements we are asking for, and what the specific questions we believe those measurements would answer. because i think we do not do a great job of tying our asks to the need/purpose/question/harm right now. we ask for too much, and we cannot prioritize measurements until we prioritize harms we're trying to mitgiate/prevent. which means we need a taxonomy.. and if if we can't document (maybe even quantify) a serious need/problem that the measurement will inform/address, we should drop it. (2) in this context, i think we probably need to ask for a new curated data section of the web site, and we should specify urls. maybe something like. https://data.icann.org -- for raw data sets https://statistics.icann.org -- for derivative data sets. and then explicit data sets we think should go in there, and important metadata (like dates when page is updated, which often seem missing, e.g., http://www.dns.icann.org/imrs/stats/ indeed, i think we should recommend that every page have a 'content last updated' date, because trying to figure out what's stale and what's current on the web site seems beyond even icann staff i ask for help ;( e.g., icann has recently posted http://www.icann.org/opendata/, which some vague promises, no date, and a promise for updates as progress is made.. this is not what we want. we should be specific about each type of measurement, that every update must include a date, type of data, expected use of data, questions the data can answer, how to get the data, usage terms. now to elephants in the room: (3) many ssr gaps are rooted in the lack of balance of stakholders in the presumably multistakeholder process. in particular, there is no significant representation of public interest/consumer protection issues. it's amazing how broad the consensus seems to be on this point. in this context, i find the report puzzling in many places, asking for things as if they haven't been asked for many times, including in ssr1. are we still having the report on explicit analysis of ssr1 implementation? because i think it's important to state in our new set of recommendations that some of these attempts to get more attention to consumer protection have been going on for over a decade. and that if (when) they fail this time, we have a backup recommendation to put in play. that could have the word 'regulation' in it, but maybe we figure out a way to make sure that if icann fails to achieve what we consider needed in terms of substantial progress on consumer protection, then icann should publish a report stating that it failed to achieve ssr2 recommendations within 12,24,36 months. e.g., one of our recommendations could be " icann org should seek explicit consensus with 4-5 consumer protection agencies on how abuse should be defined and handled, before any discussion with CPs, and publish an explicit summary of this consensus, or exactly where the consensus got stuck, within 12 months of this report." then, if they fail, there is a document that asserts it, that at least advances this groundhog day conversation to the next step? (4) a related recommendation could/should be an ongoing function to track progress of these recommendations, and prove monthly reports to SSR2, and explicitly solicits our feedback on whether the recommendation was implemented as we intended. i.e., don't wait for SSR3 who may have no idea what we even meant back in 2019... (5) i hear a growing number of others argue that we dont see real change on consumer protection (SSR issues) until the fiscal architecture changes. we can discuss, but one example: "center of excellence". is a nice idea, but so long as it answers to icann, and so long as icann answers to the industry that solely funds it, i don't see how it will effect change. what is its incentive structure? it is likely to just waste many millions generating the appearance of "something is being done". i think it's our responsibility to point out the fundamental incentive misalignment and lack of stakeholder balance in the ssr context, and that it is not rational to expect anything to change while the incentives/money flows remain as they are. which means there needs to be a center of excellence, but it needs to be funded by several governments, industry, as well as icann, and have statutory support for access to data (at least for researchers to data from r&rs within their own country.) it must not require publication review from funding sources. it must be truly independent. that would have a chance to escape the stalemate wrt consumer protection. or if we cannot get consensus on such an idea, those of us who agree can add it to the report as a minority view. k

1 0

SSR2 RT assignment
by Jennifer Bryce May 19, 2019

May 19, 2019

Dear SSR2 RT, The team has grouped related draft recommendations together. You can see the overview of draft recommendations and penholders for each here: https://docs.google.com/spreadsheets/d/1gAKc36QYmlrGZjow5fYrCVBXltgZvjSmFnG…. ACTION: Please work on merging and coming up with text for the related recommendations. The call on Thursday 23 May will be a coordination call with opportunity to ask questions and discuss issues with the team. The aim is to have consolidated text by the following call on Thursday 30 May. Please insert your draft consolidated text into the document here: https://docs.google.com/document/d/1giGuTH2_PDRkgdxXIgPP1YP3cb5mQ5FhTg7Hkc5… The current text for draft recommendations can be found here: https://docs.google.com/document/d/1CsuEYzQHve6a5rKQNeMQbjoyujdUQa9g__9_ojo… For quick reference, see the assigned recommendations below: Scott: 2, 6 Eric: 3, 24, 25, 26, 30, 31, 32, 33, 34 Russ: 4, 5, Laurin: 14, 16, A Norm: 17, 37, 38, J, M, P, R1, R2 KC: 18, 19, L Denise: 39, B, C, D, E, F, G, H, I, K, N, O, Q, S, T Kerry-Ann: 10, 36, V1, V2, V3 Matogoro: 9 Ram and Alain: 35 Boban: 8, 11, 27, 40 Naveed: 15, 20, 21, 22, 23, 29 Angie: 1, 7, 13, 28 Best, Jennifer -- Jennifer Bryce MSSI Associate Project Manager Internet Corporation for Assigned Names and Numbers (ICANN) Email: jennifer.bryce(a)icann.org Skype: jennifer.bryce.icann www.icann.org

1 0

DNS-CERT
by ALAIN AINA May 19, 2019

May 19, 2019

Hello, Below is the reference of the DNS CERT initiative which i mentioned yesterday. I was conducted in 2009 and 2010 and failed. https://www.icann.org/en/system/files/files/dns-cert-business-case-19mar10-… Was wondering if the "Centre of excellency “ idea is not another way of filling a vacuum of institution and mechanisms to combat DNS abuses and others security related issues to the DNS. —Alain

2 2

Will not join the face to face today
by ALAIN AINA May 19, 2019

May 19, 2019

Hello, I have an emergency to attend to with our NOC services. I do apology I will expect my assignments list. Thanks —Alain

1 0

Edits
by Barrett, Kerry-Ann May 19, 2019

May 19, 2019

Hi Team I made some suggested edits and am ok with the IoT and privacy clauses with minor edits. I’ll do the logic/ rationale for the IoT and compliance if needed. Please feel free to volunteer me for any write up this week as I have a lighter workload at the office this week. I won’t be able to join this session in the first half but will join 8am EST. Great work last few days guys Sincerely, Kerry-Ann Barrett Cybersecurity Policy Specialist Organization of American States

1 0

Action Requested: Doodle Poll for SSR2 Face to Face at ICANN65 | Marrakech
by MSSI Secretariat May 18, 2019

May 18, 2019

Dear SSR2 Members, Please see the doodle poll link below and select the dates you plan to join in-person the SSR2 Face to Face meetings in Marrakech. As noted on the doodle the dates are; 22 & 23 June (full days) and 27 June (half day). Please note the meeting on the 27th is not yet confirmed but we do not anticipate any issues. Thank you! https://doodle.com/poll/3qzvn8a8s73fi8kh With kind regards, Brenda --- Brenda Brewer, Projects & Operations Assistant Multistakeholder Strategy & Strategic Initiatives (MSSI) Internet Corporation for Assigned Names and Numbers (ICANN) Skype: brenda.brewer.icann

1 0

DNS SSR answer
by Jennifer Bryce May 18, 2019

May 18, 2019

Hi Boban, Below in highlighted text is the answer to the clarification question that you had asked in related to the DNS SSR workstream. Q: Does ICANN have a documented business continuity operational planning and control process that enables it to determine, plan, implement and control those actions needed to fulfil its business continuity policy and objectives? A: These documents are confidential and not published publicly for security reasons. There is an established Disaster Recovery plan for systems, a Continuity Plan for the IANA Functions, and a broader Continuity Plan under development for the wider ICANN organization to be delivered in 2019. Q: Clarification sought in re to DNS SSR Workstream: “Does the DR Plan also include Root Zone Management?” A: All systems operated by ICANN (including for IANA) are included in the DR Plan. Best, Jennifer -- Jennifer Bryce MSSI Associate Project Manager Internet Corporation for Assigned Names and Numbers (ICANN) Email: jennifer.bryce(a)icann.org Skype: jennifer.bryce.icann www.icann.org

1 0

Re: [Ssr2-review] DNS Symposium info
by Denise Michel May 18, 2019

May 18, 2019

Thanks, Jennifer. May we have an OCTO staff’s summary of presentations and key discussion points relevant to our work? Denise Michel Sent via mobile From: Ssr2-review <ssr2-review-bounces(a)icann.org> on behalf of Jennifer Bryce <jennifer.bryce(a)icann.org> Date: Friday, May 17, 2019 at 4:31 PM To: SSR2 <ssr2-review(a)icann.org> Subject: [Ssr2-review] DNS Symposium info Dear all, You can find links to the DNS Symposium presentations and recordings here: https://www.icann.org/ids<https://urldefense.proofpoint.com/v2/url?u=https-3A__www.icann.org_ids&d=Dw…>. Also, this article CircleID piece may be of interest: http://www.circleid.com/posts/20190516_a_report_on_the_icann_dns_symposium/<https://urldefense.proofpoint.com/v2/url?u=http-3A__www.circleid.com_posts_…> We will follow up if there are any additional topics of discussion that may be of interest to the review team. Best, Jennifer -- Jennifer Bryce MSSI Associate Project Manager Internet Corporation for Assigned Names and Numbers (ICANN) Email: jennifer.bryce(a)icann.org Skype: jennifer.bryce.icann www.icann.org

2 1

DNS Symposium info
by Jennifer Bryce May 18, 2019

May 18, 2019

Dear all, You can find links to the DNS Symposium presentations and recordings here: https://www.icann.org/ids. Also, this article CircleID piece may be of interest: http://www.circleid.com/posts/20190516_a_report_on_the_icann_dns_symposium/ We will follow up if there are any additional topics of discussion that may be of interest to the review team. Best, Jennifer -- Jennifer Bryce MSSI Associate Project Manager Internet Corporation for Assigned Names and Numbers (ICANN) Email: jennifer.bryce(a)icann.org Skype: jennifer.bryce.icann www.icann.org

2 1

Q&A Document
by Naveed Bin Rais May 18, 2019

May 18, 2019

https://docs.google.com/document/d/14eJwDGP-LvS9ltTmZoh1i19Fi0_pB2nJ4JYMsS7…

2 1