<html><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">FYI:<br><div><blockquote type="cite"><span class="Apple-style-span" style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Helvetica; font-size: medium; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; "><div class="Section1"><p style="margin-right: 0cm; margin-left: 0cm; font-size: 12pt; font-family: 'Times New Roman', serif; margin-bottom: 7.5pt; "><span style="font-family: Arial, sans-serif; "><a href="http://www.icann.org/en/announcements/announcement-24may10-en.htm" style="color: blue; text-decoration: underline; ">http://www.icann.org/en/announcements/announcement-24may10-en.htm</a></span><span style="color: rgb(31, 73, 125); "><o:p></o:p></span></p><h2 style="margin-right: 0cm; margin-left: 0cm; font-size: 18pt; font-family: 'Times New Roman', serif; font-weight: bold; margin-bottom: 0.0001pt; "><span style="font-family: Arial, sans-serif; ">Public Comment: April 2010 DNS-CERT Operational Requirements & Collaboration Analysis</span><o:p></o:p></h2><p style="margin-right: 0cm; margin-left: 0cm; font-size: 12pt; font-family: 'Times New Roman', serif; margin-bottom: 0.0001pt; "><span style="font-family: Arial, sans-serif; ">24 May 2010</span><o:p></o:p></p><p style="margin-right: 0cm; margin-left: 0cm; font-size: 12pt; font-family: 'Times New Roman', serif; "><span style="font-family: Arial, sans-serif; ">ICANN is today opening a public comment period on the<span class="Apple-converted-space"> </span><a href="http://www.icann.org/en/topics/ssr/dns-cert-collaboration-analysis-24may10-en.pdf" style="color: blue; text-decoration: underline; ">April 2010 DNS-CERT Operational Requirements and Collaboration Analysis Workshop Report</a><span class="Apple-converted-space"> </span>(with Minority Statement). In advance of the ICANN Brussels meeting, ICANN is seeking comments on the potential requirements identified in the workshop report, DNS Security response gaps.</span><o:p></o:p></p><p style="margin-right: 0cm; margin-left: 0cm; font-size: 12pt; font-family: 'Times New Roman', serif; "><span style="font-family: Arial, sans-serif; ">In addition, ICANN is publishing the<span class="Apple-converted-space"> </span><a href="http://www.icann.org/en/public-comment/summary-analysis-strategic-ssr-initiatives-and-dns-cert-business-case-24may10-en.pdf" style="color: blue; text-decoration: underline; ">Summary & Analysis of Comments on the Security Strategic Initiatives and Global DNS-CERT Business Case papers</a>, and the<span class="Apple-converted-space"> </span><a href="http://www.icann.org/en/topics/ssr/dns-cert-consultation-record-24may10-en.pdf" style="color: blue; text-decoration: underline; ">DNS-CERT Consultation record</a>. The consultation record is included for transparency on the formation of the DNS-CERT concept and consultations that have occurred in parallel with the public comment period on the Security Strategic Initiatives papers.</span><o:p></o:p></p><p style="margin-right: 0cm; margin-left: 0cm; font-size: 12pt; font-family: 'Times New Roman', serif; "><span style="font-family: Arial, sans-serif; ">The DNS-CERT Operational Requirements and Collaboration Analysis Workshop report was prepared by Jose Nazario, Arbor Networks, Roy Arends, Nominet, and Chris Morrow, Google, and is the output from a tabletop workshop conducted 6-7 April 2010 in Washington DC. Participants identified several requirements for responding to Internet and DNS security events, many of which are under-met or ignored by existing DNS security capabilities. They are:</span><o:p></o:p></p><ul type="disc" style="margin-bottom: 0cm; margin-top: 0cm; "><li class="MsoNormal" style="margin-top: 0cm; margin-right: 0cm; margin-bottom: 0.0001pt; margin-left: 0cm; font-size: 12pt; font-family: 'Times New Roman', serif; "><span style="font-family: Arial, sans-serif; ">A trusted communications channel, or multiple channels, for use during event response that is usable by the appropriate parties.</span><o:p></o:p></li><li class="MsoNormal" style="margin-top: 0cm; margin-right: 0cm; margin-bottom: 0.0001pt; margin-left: 0cm; font-size: 12pt; font-family: 'Times New Roman', serif; "><span style="font-family: Arial, sans-serif; ">Standing incident coordination and response functions, which enable consistent and professional incident handling efforts.</span><o:p></o:p></li><li class="MsoNormal" style="margin-top: 0cm; margin-right: 0cm; margin-bottom: 0.0001pt; margin-left: 0cm; font-size: 12pt; font-family: 'Times New Roman', serif; "><span style="font-family: Arial, sans-serif; ">Incident status tracking through to completion, with communication to the necessary parties.</span><o:p></o:p></li><li class="MsoNormal" style="margin-top: 0cm; margin-right: 0cm; margin-bottom: 0.0001pt; margin-left: 0cm; font-size: 12pt; font-family: 'Times New Roman', serif; "><span style="font-family: Arial, sans-serif; ">Trusted guidance on issues with knowledge and experience with the various and varied areas of Internet and DNS security. Respect of these voices by the areas of the Internet and DNS communities with which they speak is important.</span><o:p></o:p></li><li class="MsoNormal" style="margin-top: 0cm; margin-right: 0cm; margin-bottom: 0.0001pt; margin-left: 0cm; font-size: 12pt; font-family: 'Times New Roman', serif; "><span style="font-family: Arial, sans-serif; ">A trust broker / introduction service across traditional communities boundaries, recognizing that the community identifying threats to Internet and DNS operations is often far-flung and sometimes outside the knowledge of the Internet and DNS operator and vendor communities.</span><o:p></o:p></li><li class="MsoNormal" style="margin-top: 0cm; margin-right: 0cm; margin-bottom: 0.0001pt; margin-left: 0cm; font-size: 12pt; font-family: 'Times New Roman', serif; "><span style="font-family: Arial, sans-serif; ">Analysis capabilities, including data such as DNS traffic, software vulnerabilities and attack traffic, to validate incidents and identify next steps as quickly as possible.</span><o:p></o:p></li><li class="MsoNormal" style="margin-top: 0cm; margin-right: 0cm; margin-bottom: 0.0001pt; margin-left: 0cm; font-size: 12pt; font-family: 'Times New Roman', serif; "><span style="font-family: Arial, sans-serif; ">Institutional memory in the form of reports, recommendations, and best practices, which can inform the various Internet and DNS security communities, support future successful incident responses, and help evolve incident response capabilities.</span><o:p></o:p></li><li class="MsoNormal" style="margin-top: 0cm; margin-right: 0cm; margin-bottom: 0.0001pt; margin-left: 0cm; font-size: 12pt; font-family: 'Times New Roman', serif; "><span style="font-family: Arial, sans-serif; ">Outreach and education functions to share best practices for securing Internet and DNS operations, secure registration functions, implementing DNSSEC, and other key DNS and security factors.</span><o:p></o:p></li><li class="MsoNormal" style="margin-top: 0cm; margin-right: 0cm; margin-bottom: 0.0001pt; margin-left: 0cm; font-size: 12pt; font-family: 'Times New Roman', serif; "><span style="font-family: Arial, sans-serif; ">The ability to act quickly, and to be prepared to act with necessary resources in response to threats to the DNS of a global nature in a timely and sustained manner.</span><o:p></o:p></li><li class="MsoNormal" style="margin-top: 0cm; margin-right: 0cm; margin-bottom: 0.0001pt; margin-left: 0cm; font-size: 12pt; font-family: 'Times New Roman', serif; "><span style="font-family: Arial, sans-serif; ">A sensitivity to the complexity of the international nature of the DNS, understanding the capabilities and limitations of the global DNS community.</span><o:p></o:p></li></ul><p style="margin-right: 0cm; margin-left: 0cm; font-size: 12pt; font-family: 'Times New Roman', serif; "><span style="font-family: Arial, sans-serif; ">Workshop participants noted many of these functions are addressed by various groups, either standing or ad-hoc. Some participants expressed concern that only a few of the existing organizations are DNS-specific. The report includes a<a href="http://www.icann.org/en/topics/ssr/dns-cert-collaboration-analysis-minority-statement-18may10-en.pdf" style="color: blue; text-decoration: underline; ">Minority Statement</a><span class="Apple-converted-space"> </span>from Kathy Kleiman, Public Interest Registry, and Greg Aaron, Afilias.</span><o:p></o:p></p><p style="margin-right: 0cm; margin-left: 0cm; font-size: 12pt; font-family: 'Times New Roman', serif; "><span style="font-family: Arial, sans-serif; ">Comments on the Operational Requirements and Collaboration Analysis Report submitted to<span class="Apple-converted-space"> </span><a href="mailto:dns-collab-analysis@icann.org" style="color: blue; text-decoration: underline; ">dns-collab-analysis@icann.org</a><span class="Apple-converted-space"> </span>will be considered until 2 Jul 2010 23:59 UTC. Comments may be viewed at<a href="http://forum.icann.org/lists/dns-collab-analysis/" style="color: blue; text-decoration: underline; ">http://forum.icann.org/lists/dns-collab-analysis/.</a></span><o:p></o:p></p><p style="margin-right: 0cm; margin-left: 0cm; font-size: 12pt; font-family: 'Times New Roman', serif; "><span style="font-family: Arial, sans-serif; ">A consultation session will be held at the ICANN meeting in Brussels on the Security Strategic Initiatives (DNS-CERT and system-wide DNS Risk Assessment and exercises), with a date and time soon to be included in the Brussels meeting schedule.</span><o:p></o:p></p><div style="margin-right: 0cm; margin-left: 0cm; font-size: 10.5pt; font-family: Consolas; margin-top: 0cm; margin-bottom: 0.0001pt; "><span style="font-size: 12pt; font-family: Arial, sans-serif; ">Glen de Saint Géry<o:p></o:p></span></div><div style="margin-right: 0cm; margin-left: 0cm; font-size: 10.5pt; font-family: Consolas; margin-top: 0cm; margin-bottom: 0.0001pt; "><span style="font-size: 12pt; font-family: Arial, sans-serif; ">GNSO Secretariat<o:p></o:p></span></div><div style="margin-right: 0cm; margin-left: 0cm; font-size: 10.5pt; font-family: Consolas; margin-top: 0cm; margin-bottom: 0.0001pt; "><span lang="EN-US" style="font-size: 12pt; font-family: Arial, sans-serif; "><a href="mailto:gnso.secretariat@gnso.icann.org" style="color: blue; text-decoration: underline; "><span lang="FR">gnso.secretariat@gnso.icann.org</span></a></span><span style="font-size: 12pt; font-family: Arial, sans-serif; "><o:p></o:p></span></div><div style="margin-right: 0cm; margin-left: 0cm; font-size: 10.5pt; font-family: Consolas; margin-top: 0cm; margin-bottom: 0.0001pt; "><span lang="EN-US" style="font-size: 12pt; font-family: Arial, sans-serif; "><a href="http://gnso.icann.org" style="color: blue; text-decoration: underline; ">http://gnso.icann.org</a><o:p></o:p></span></div><p align="center" style="margin-right: 0cm; margin-left: 0cm; font-size: 12pt; font-family: 'Times New Roman', serif; text-align: center; "><o:p> </o:p></p></div></span></blockquote></div><br><div> <span class="Apple-style-span" style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0; "><div><br class="Apple-interchange-newline"><br class="khtml-block-placeholder"></div><div><br class="khtml-block-placeholder"></div><div>IP JUSTICE</div><div>Robin Gross, Executive Director</div><div>1192 Haight Street, San Francisco, CA 94117 USA</div><div>p: +1-415-553-6261 f: +1-415-462-6451</div><div>w: <a href="http://www.ipjustice.org">http://www.ipjustice.org</a> e: <a href="mailto:robin@ipjustice.org">robin@ipjustice.org</a></div><br class="Apple-interchange-newline"></span><br class="Apple-interchange-newline"> </div><br></body></html>