[ncdnhc-discuss] No new LA agenda

Wed Oct 3 15:54:27 CEST 2001

Milton:

--- Milton Mueller <Mueller at syr.edu> wrote:
> Most of the real security issues are technical ones
> regarding the
> implementation of certain protocols or procedures.
So?

> And most of them 
> involve actions that must be taken by the operators
> of NAME SERVERS -
> that is, over 600,000 independent operators and ISPs
> around
Managing a Names Server to resolve several domains,
this is problem of the manager of such name servers. 
If I shutdown my Names Server who resolves SDNP domain
and other users domains, this is my problem and
doesn't raise any concern about stability or
robustness of the DNS.

> the world. Including root-servers - which are not
> even operated by 
> ICANN. 
Not operated by ICANN doesn't eliminates its duty to
take care about it.  ICANN has an obligation to take
care of this issues also.

There is very little DNSO or NCDNHC can
> contribute to
> this. 
Well...if you don't have anything to contribute, this
is your problem, but there are many people members of
the NCDNHC that are Directors of Network Centers that
has years of experience of Security issues at macro
level regarding stability of their own Networks, that
I am sure they have a lot to say!!!

> Nevertheless, if any member wants to submit a
> substantive 
> proposal on security, it will enjoy the same rights
> of getting on the 
> agenda as any other resolution or proposal. But it
> will be interesting 
> to see if there is any substance to this call to
> "discuss security."
OK!

> I will
> look forward, Vany, to your technical proposal to
> increase the
> stability and robustness of DNS. 
The idea is that all members discuss their concerns
about security issues, their knowledge, etc...in order
that the NCDNHC develops a proposal...this is not
about me.

>I would first
> suggest you propose it to
> the IETF.
The ICANN is the one who has to propose to the IETF
which is also a member of PSO.   Our task is to send a
proposal to ICANN Board.

> I can guarantee you that as an Adcom member we are
> not going
> to give priority on the agenda to open-ended
> discussions of ill-defined
> topics.
Milton...this is not necesary to emphazise your
position.  If you are not agree, you are not
agree...if you don't want to participate in
discussions about Security, Robustness, etc of the DNS
this is your problem.   But definitively this is as
important as other subjects in the NCDNHC agenda, as I
pointed out in my previous e-mail.   

Best Regards
Vany   

> >>> vany_martinez at yahoo.com 10/02/01 05:01PM >>>
> Hi to all:
> 
> 
> Following Dave comments, I propose the following:
> 
> To Include in NCDNHC agenda to deal with security
> issues that leads to mantain and improove the
> stability and the robustness of the DNS.
> 
> Please, remember that working on security issues
> also
> affects Non-Commercial interests, in part because
> any
> policy developed by ICANN or any recommendation that
> would ICANN can make to the pertaining bodies that
> works directly with the stability and robustness of
> the DNS, will affect in any way the .ORG Registry
> Policy and Operations.
> 
> Best Regards
> Vany
> 
> 
> --- Dave Crocker <dhc2 at dcrocker.net> wrote:
> > At 10:38 PM 9/29/2001, Vany Martinez wrote:
> > > > There is no evidence whatsoever of an imminent
> > threat to DNS.
> > >And?  Terrorist actions in USA has opened the
> eyes
> > to
> > >ICANN that it is also wise to think in Security
> > issues
> > 
> > Correct.  If the only effort to consider security
> > issues is to respond to 
> > known, imminent threats, then security work will
> > always fail.
> > 
> > The nature of serious security planning to is to
> > anticipate all threats 
> > that seems likely or reasonable.  Ultimately,
> > security experts note that it 
> > is never possible to provide perfect security. 
> The
> > goal is to anticipate 
> > likely threats and design a set of prevention
> > mechanisms that balance cost, 
> > versus benefit, versus likelihood.
> > 
> > 
> > > > The particular terrorists we are dealing with
> > are not interested in 
> > > disrupting web sites and email.
> > >This is outside the scope or ICANN...This is not
> > the
> > 
> > I am extremely impressed that Milton is so certain
> > about the goals of the 
> > terrorists.
> > 
> > The recent actions show a desire to attack icons
> of
> > "western" commerce and 
> > power.  Infrastructure services for the Internet
> > would seem an entirely 
> > plausible outlet for such intentions.  (As others
> > have noted, the only real 
> > pressure against their attacking the Internet is
> > their own demonstrated use 
> > of it.)
> > 
> > 
> > > > They want to kill people, large numbers of
> them.
> > I have not
> > > > yet heard of a way one can become a martyr by
> > hacking.
> > >You see? Still insisting.   Milton...this is not
> > about Hacking or Cracking 
> > >a server.
> > 
> > Continuing to give in to the tendency to believe
> > that any of us really 
> > understands the terrorists' goals and styles, I'll
> > note that killing people 
> > well might not be a requirement.
> > 
> > In terms of social damage it is worth noting that
> > the effect of the attack 
> > on the World Trade Center was probably far more
> > serious for the physical 
> > disruption of major businesses than for the total
> > number of people 
> > killed.  Yes, killing people carries the drama
> they
> > seem to want, but it is 
> > not the only way to achieve that notariety.
> > 
> > Perhaps the most important point to consider is
> that
> > these terrorists have 
> > shown astonishing and appalling creativity.  We
> all
> > need to be very, very 
> > careful about the assumptions we make, when trying
> > to predict their behavior.
> > 
> > d/
> > 
> > ----------
> > Dave Crocker  <mailto:dcrocker at brandenburg.com>
> > Brandenburg InternetWorking 
> > <http://www.brandenburg.com>
> > tel +1.408.246.8253;  fax +1.408.273.6464
> > 
> > _______________________________________________
> > Discuss mailing list
> > Discuss at icann-ncc.org 
> > http://www.icann-ncc.org/mailman/listinfo/discuss 
> 
> 
> =====
> Nilda Vany Martinez Grajales
> Information Technology Specialist
> Sustainable Development Networking Programme/Panama
> http://www.sdnp.org.pa e-mail: vany at sdnp.org.pa 
> 
> Go to
>
http://www.getpaid4.com/cgi-bin/emailpanel.cgi?userid=659401
> to receive FREE newsletters via email!
> Go to http://www.getpaid4.com?sheharhore to make $$$
> using YOUR OWN computer and sigining subscribers in
> YOUR OWN emails!
> 
> __________________________________________________
> Do You Yahoo!?
> Listen to your Yahoo! Mail messages from any phone.
> http://phone.yahoo.com 
> _______________________________________________
> Discuss mailing list
> Discuss at icann-ncc.org 
> http://www.icann-ncc.org/mailman/listinfo/discuss

=====
Nilda Vany Martinez Grajales
Information Technology Specialist
Sustainable Development Networking Programme/Panama
http://www.sdnp.org.pa e-mail: vany at sdnp.org.pa

Go to http://www.getpaid4.com/cgi-bin/emailpanel.cgi?userid=659401 to receive FREE newsletters via email!
Go to http://www.getpaid4.com?sheharhore to make $$$ using YOUR OWN computer and sigining subscribers in YOUR OWN emails!

__________________________________________________
Do You Yahoo!?
Listen to your Yahoo! Mail messages from any phone.
http://phone.yahoo.com