- Ssr2-review - lists.icann.org

Proposal: delete “Establish Baseline Security Practices” recommendation as OBE
by Heather Flanagan Dec. 9, 2020

Dec. 9, 2020

Hi all, I’m working on the Baseline Security (see page 38) findings to try and help them support the recommendations. The evidence for the recommendation depend entirely on how the Board handled RSSAC037 and 038. Since this recommendation was first drafted, the Board likely hadn’t done much of anything. The Board’s initial response was in June 2018 and it said they would create an Root Server System Governance Working Group (RSS GWG) so that the community could tell them how to implement RSSAC 037 and 038. That working group didn’t form until the very end of 2019 (see https://ccnso.icann.org/en/announcements/announcement-26nov19-en.htm) That said, it did form, and has a work plan that runs through 2022. Given that, I’m not entirely sure that this still fits - the Board will simply point to the RSS GWG as the group with all the action items in the RSS space. I think it makes sense to drop this recommendation, unless there other supporting evidence we would like to refer to for the recommendation to have merit. Text of the recommendation: SSR2 Recommendation 21: Establish Baseline Security Practices for Root Server Operators and Operations 21.1. ICANN org, in close cooperation with RSSAC and other relevant stakeholders, should ensure that the RSS governance model as proposed by RSSAC037 includes baseline security best practices for Root Server Operators and operations to minimize the SSR risks associated with root server operation. These best practices should include change management, verification procedures, and sanity check procedures. As part of this process, ICANN org should publish its own strategies for managing SSR for the IMRS and encourage other Root Server Operators to do the same. Heather Flanagan — Translator of Geek to Human https://sphericalcowconsulting.com

4 5

SSR2 plenary agenda | 10 December 2020 @ 15:00 UTC
by Jennifer Bryce Dec. 8, 2020

Dec. 8, 2020

Dear SSR2 RT members, Below is the agenda for the next SSR2 plenary call, scheduled for Thursday 10 December @ 15:00 - 16:00 UTC. 1. Welcome, roll call, SOI updates 2. Reminder of Implementation Shepherd volunteer opportunity (see email<https://mm.icann.org/pipermail/ssr2-review/2020-December/002396.html>) 3. Heather to present any outstanding issues in the report for team’s attention during the meeting (draft document here<https://docs.google.com/document/d/1myG9dtYYiL8lFd3ZOPXNUwKfr1yuAsNrwzod-J8…>) 4. Next steps * Heather will send the full report draft on 13th December – please be prepared for discussion on 17th December plenary meeting * Prioritization survey will follow the full report draft – please be prepared to complete this survey * Plenary meeting will need to be scheduled in January – RT members to confirm if Thursday 7th January is ok 5. AOB 6. Confirm action items, decisions reached Best, Jennifer -- Jennifer Bryce Project Manager, Review Support and Accountability Internet Corporation for Assigned Names and Numbers (ICANN) Skype: jennifer.bryce.icann Email: jennifer.bryce(a)icann.org

1 0

Implementation Shepherds
by Jennifer Bryce Dec. 8, 2020

Dec. 8, 2020

Dear SSR2 RT members, As you prepare to finalize your report to submit to the Board I wanted to remind you about Implementation Shepherds so that you can start to think if this is something you’d like to volunteer for. The role of Implementation Shepherds is to be the first contact for any questions or clarifications the Board seeks as it considers the recommendations, and ICANN org seeks once the implementation is underway. Examples of information and clarification that can be sought from Implementation Shepherds include items such as the SSR2's intent behind its recommendations; SSR2 rationale for recommendations; facts that led the SSR2 to certain conclusions; the envisioned implementation timeline; and metrics related to the measure of implementation success. Any RT member who volunteers can be an Implementation Shepherd, there is no specific number required. ATRT3 and CCT each have 6, and RDS has 4. For CCT, RDS, and ATRT3 Reviews, the time commitment has been minimal, around 1-3 hours per month. Implementation is not linked to ICANN meetings. Therefore, the Implementation Shepherds shall not be eligible for travel funding in relation to this role. For examples of the types of discussions, see the wiki pages: * RDS: https://community.icann.org/x/lIICBw * CCT: https://community.icann.org/x/ugSrBQ * ATRT3: https://community.icann.org/x/BYM4C You can read more about Implementation Shepherds in the Operating Standards<https://www.icann.org/en/system/files/files/operating-standards-specific-re…> (p28). Please let me know if you’ve any questions. Best, Jennifer -- Jennifer Bryce Project Manager, Review Support and Accountability Internet Corporation for Assigned Names and Numbers (ICANN) Skype: jennifer.bryce.icann Email: jennifer.bryce(a)icann.org

1 0

FYI: Board action on ATRT3 recommendations
by Jennifer Bryce Dec. 7, 2020

Dec. 7, 2020

Dear SSR2 RT members, The Board took action on the ATRT3 recommendations on 30 November 2020. You can read the Board resolution, which contains detailed discussion and rationale for the Board’s action on each recommendation, here: https://www.icann.org/resources/board-material/resolutions-2020-11-30-en. A blog has been published to icann.org on the topic by Maarten Botterman here: https://www.icann.org/news/blog/board-activity-on-the-third-accountability-…. Best, Jennifer -- Jennifer Bryce Project Manager, Review Support and Accountability Internet Corporation for Assigned Names and Numbers (ICANN) Skype: jennifer.bryce.icann Email: jennifer.bryce(a)icann.org

2 1

Call summary: SSR2 Plenary - 3 December 2020
by Brenda Brewer Dec. 4, 2020

Dec. 4, 2020

Dear SSR2 RT members, Please find attached the plenary call report for SSR2 plenary #130, 3 December 2020 at 15:00 UTC. These high-level notes are designed to help SSR2 Review Team members navigate through the content of the call. They are not meant to be a substitute for the recording or transcript, which are posted on the wiki here: https://community.icann.org/x/CAENCQ. The transcript usually becomes available 5 - 7 business days after the meeting. With kind regards, Brenda --- Brenda Brewer Internet Corporation for Assigned Names and Numbers (ICANN) Skype: brenda.brewer.icann

1 0

SSR2 plenary #130 agenda | 3 December 2020 @ 15:00 UTC
by Jean-Baptiste Deroulez Dec. 1, 2020

Dec. 1, 2020

Dear SSR2 RT members, Below is the agenda for the next SSR2 plenary call #130<https://community.icann.org/x/CAENCQ>, scheduled for Thursday 3 December 2020 @ 15:00 - 16:00 UTC. 1. Welcome, roll call, SOI updates 2. SSR1 Appendix | LINK<https://docs.google.com/document/d/1hgz9Zd2A7TLoc1UjDNZ4W756YqCP8JrPNLrGeNj…> | ‘Findings Related to SSR1 Recommendations’: Resolve Heather’s outstanding questions 3. SMART Criteria - Global DNS Section | LINK<https://docs.google.com/document/d/1ReMnPea7scjH0odMhG9bkI6Mj94NmNa2QiK1ndW…> | Dates needed for some recommendations 4. Abuse Subteam | REDLINE VERSION<https://docs.google.com/document/d/1PdjkR6i_FdXuFTomxptVpLVVtORRTgrrnVQ-vSp…> – CLEAN VERSION<https://docs.google.com/document/d/19a2ccRftbktVYS_M1-_FTd5e42IbIvHJWCYsYxz…> | Review of latest edits 5. A.O.B. 6. Confirm action items, decisions reached Additional reference documents: * Response to public comments spreadsheet: LINK<https://docs.google.com/spreadsheets/d/1DQpPA0aLDsW5IHLKgQqHtW-5860CKGCuTYI…> * SSR2 final report draft: LINK<https://docs.google.com/document/d/1myG9dtYYiL8lFd3ZOPXNUwKfr1yuAsNrwzod-J8…> Please let Brenda know in advance whether any other documents need to be projected. Many thanks and best wishes, Jean-Baptiste

1 0

Call summary: SSR2 Plenary - 19 November 2020
by Brenda Brewer Nov. 19, 2020

Nov. 19, 2020

Dear SSR2 RT members, Please find attached the plenary call report for SSR2 plenary #129, 19 November 2020 at 15:00 UTC. These high-level notes are designed to help SSR2 Review Team members navigate through the content of the call. They are not meant to be a substitute for the recording or transcript, which are posted on the wiki here: https://community.icann.org/x/AgENCQ. The transcript usually becomes available 5 - 7 business days after the meeting. With kind regards, Brenda --- Brenda Brewer Internet Corporation for Assigned Names and Numbers (ICANN) Skype: brenda.brewer.icann

1 0

Abuse Text
by Weissinger, Laurin Nov. 17, 2020

Nov. 17, 2020

Dear all, As discussed on call, Denise took the pen and added some text. Currently, those changes are in markup so it is apparent. Please have a look and raise issues on list or in the doc by Tuesday night if at all possible. This is to give the sub team time to make changes and to share those in time. As always, please use suggest mode and/or comments on g-docs. As you know, we would like to discuss all outstanding items on Thursday and get an idea of team consensus as well. Document here: https://docs.google.com/document/d/1PdjkR6i_FdXuFTomxptVpLVVtORRTgrrnVQ-vSp… All the best Laurin

3 4

SSR2 plenary agenda | 19 November 2020 @ 15:00 UTC
by Jennifer Bryce Nov. 16, 2020

Nov. 16, 2020

Dear SSR2 RT members, Below is the agenda for the next SSR2 plenary call, scheduled for Thursday 19 November @ 15:00 - 16:00 UTC. 1. Welcome, roll call, SOI updates 2. Abuse subteam – (see document here [docs.google.com]<https://urldefense.com/v3/__https:/docs.google.com/document/d/1PdjkR6i_FdXu…>) – determine level of consensus on text 3. SSR1 Appendix D [docs.google.com]<https://urldefense.com/v3/__https:/docs.google.com/document/d/1hgz9Zd2A7TLo…> ‘Findings Related to SSR1 Recommendations’: Resolve Heather’s outstanding questions [docs.google.com]<https://urldefense.com/v3/__https:/docs.google.com/document/d/1eClKhTdGEARn…> 4. Discuss next steps 5. AOB * No plenary meeting next week – Thursday 26 November 6. Confirm action items, decisions reached Additional reference documents: * Response to public comments spreadsheet here [docs.google.com]<https://urldefense.com/v3/__https:/docs.google.com/spreadsheets/d/1DQpPA0aL…> * SSR2 final report draft here [docs.google.com]<https://urldefense.com/v3/__https:/docs.google.com/document/d/1myG9dtYYiL8l…> Please let Brenda know in advance whether any other documents need to be projected. Best, Jennifer -- Jennifer Bryce Project Manager, Review Support and Accountability Internet Corporation for Assigned Names and Numbers (ICANN) Skype: jennifer.bryce.icann Email: jennifer.bryce(a)icann.org

1 0

SSR2 plenary agenda | 12 November 2020 @ 15:00 UTC
by Jennifer Bryce Nov. 10, 2020

Nov. 10, 2020

Dear SSR2 RT members, Below is the agenda for the next SSR2 plenary call, scheduled for Thursday 12 November @ 15:00 - 16:00 UTC. 1. Welcome, roll call, SOI updates 2. Subteam updates (subteam status spreadsheet [docs.google.com]<https://urldefense.com/v3/__https:/docs.google.com/spreadsheets/d/1cOZ1lPXq…> here * Abuse subteam – (see document here [docs.google.com]<https://urldefense.com/v3/__https:/docs.google.com/document/d/1PdjkR6i_FdXu…>) 3. SSR1 Appendix D<https://docs.google.com/document/d/1hgz9Zd2A7TLoc1UjDNZ4W756YqCP8JrPNLrGeNj…> ‘Findings Related to SSR2 Recommendations’: Walk through SSR1 rewrite and resolve Heather’s outstanding questions<https://docs.google.com/document/d/1eClKhTdGEARn0WojZrVBm7GL70LOWm6tz3Pzl7V…> 4. Confirm action items, decisions reached Additional reference documents: * Response to public comments spreadsheet here [docs.google.com]<https://urldefense.com/v3/__https:/docs.google.com/spreadsheets/d/1DQpPA0aL…> * SSR2 final report draft here [docs.google.com]<https://urldefense.com/v3/__https:/docs.google.com/document/d/1myG9dtYYiL8l…> Please let Brenda know in advance whether any other documents need to be projected. Best, Jennifer -- Jennifer Bryce Project Manager, Review Support and Accountability Internet Corporation for Assigned Names and Numbers (ICANN) Skype: jennifer.bryce.icann Email: jennifer.bryce(a)icann.org

1 0