Dear Team Sorry to have been so quiet. My daughter was in the ER last week and we’ve been battling a bad bout of pneumonia.. so finally resurfacing for air. I’ll work on the text I undertook this week and have it done by Wednesday the latest. Apologies in advance Cheers Kerry-Ann

On Nov 12, 2019, at 11:48 AM, Russ Housley <housley@vigilsec.com> wrote:



...

...

...

Given this information, and the fact that every email that I recieve from anyone at iana.org <http://iana.org/> already has an S/MIME signature, I think we should drop the IANA portal recommendation altogether. Maybe only for personal accounts? I have a mail from the Root Zone Management (rzm@iana.org) in my inbox. The mail contains a URL to confirm a change we initiated at IANA - in plain text. A signature (S/MIME or PGP) is also not available at the message. I would also like to distinguish mail communication from Root Zone Management portal (https://rzm.iana.org/rzm/login). The portal should have a recommendation regarding a strong authentication procedure (currently username and password). As the current system is outdated and a new system is being designed, i would assume that IANA team will take the necessary measures to meet the security requirements in the naming contract. I would rather discuss ICANN providing a clear roadmap towards the implementation of the new system including the usual community input on the specifications and rollout of the new system

Alain:

Can you write a clear question to ICANN Org to get the information you seek? We need to write it in a way that will not lead to follow-up questions or the schedule will be impacted.

Russ

_______________________________________________ Ssr2-review mailing list Ssr2-review@icann.org https://mm.icann.org/mailman/listinfo/ssr2-review

_______________________________________________ By submitting your personal data, you consent to the processing of your personal data for purposes of subscribing to this mailing list accordance with the ICANN Privacy Policy (https://www.icann.org/privacy/policy) and the website Terms of Service (https://www.icann.org/privacy/tos). You can visit the Mailman link above to change your membership status or configuration, including unsubscribing, setting digest-style delivery or disabling delivery altogether (e.g., for a vacation), and so on.