Showing posts with label controller. Show all posts
Showing posts with label controller. Show all posts

2019-02-10

News Review | EPDP (Draft) Final Report to ICANN GNSO Council Feb 11

graphic "News Review" ©2016 DomainMondo.com
Domain Mondo's weekly internet domain news review (NR 2019-02-10 with analysis and opinion: Features •  1) EPDP (Draft) Final Report to ICANN GNSO Council Feb 11, 2) Other ICANN news: IDN Variants, gTLD Security Threats, TSG, Board Report, 3) Verisign $VRSN, Tucows $TCX, and more, 4) ICYMI, 5) Most Read.

1) EPDP Final Report (latest version) to ICANN GNSO Council Feb 11  
Click on the graphic above to read or download the EPDP Final Report (latest version)
UPDATES Feb 14: GNSO Council Extraordinary meeting 21:00 UTC (4pm EST in US). 
Item 3: COUNCIL DISCUSSION – Final Report of the Expedited Policy Development Process on the ICANN Board Temporary Specification on gTLD Registration Data (50 minutes).
"... we will receive an update from the EPDP WG Leadership and have an opportunity as Council to ask questions, discuss the report, next steps, etc. We will then plan to vote on the Final Report on 21 February, or during another special Council meeting scheduled for 4 March, if needed. Voting before ICANN65 will allow the GAC to consider an approved Final Report during its face-to-face meetings in Kobe, allow for a 40-day public comment period, and give the ICANN Board sufficient time to consider the report and public comments before approving in advance of the May 25 expiration of the Temp Spec. Accordingly, there is no room for a deferral beyond the 4 March meeting."--GNSO Chair Keith Drazek (RySG - Verisign)
GNSO Council Meeting Audio Cast via browser or app. Transcripts and recordings on GNSO Calendar. February 14 Meeting Agenda embed below:

  • Margie Milam (EPDP member, BC - Facebook) email Feb 14: "... Since there was consensus to publish the Initial Report, the Council should have simply notified the EPDP Team in November that it had no objection to proceeding to Phase 2.  Indeed, this reference to the Initial Report confirms that there was no intent to wait until consensus for the Final Report. In our view,  it is problematic to change the interpretation of the Charter midstream during the EPDP’s deliberations for those stakeholder groups and constituencies that relied on this interpretation of the Charter ... Per the charter, work on an access model should have begun late last year.  Instead this work has been deferred to Phase 2 of the team’s work.  What is unclear is when the EPDP team will take up its remaining responsibilities under the charter and produce an actual “final” report - – which must occur prior to the expiration of the Temp Spec on May 25, 2019. We hope this helps clarify our thoughts as the Council considers these procedural issues in its call later today.  We’d like to encourage the Council to ask the EDPD Leadership to create a timeline for producing the Final Report -Part II that brings the work to a close in an expedited manner."
  • Response to Milam's email above from Milton Mueller (EPDP member, NCSG - Georgia Tech).
  • Response to Milam's email above from GNSO Chair Keith Drazek.

UPDATES Feb 12:
  • Margie Milam (EPDP member, BC - Facebook) email Feb 12: "... I am genuinely confused about the directions given to the GNSO Council since this report – although it is misnamed a “Final Report” is really only an “Phase 1 Interim Report” since the PDP has not concluded, and the charter questions have not been answered.  As a result, is seems that the voting thresholds to create a consensus policy and the vote required under the Bylaws do not yet apply until the Phase 2 work is complete. I understand the desire to call this a Final Report, but  there is a significant amount of work that has not been done yet, as outlined in the draft report being circulated, with key areas missing ..." (emphasis added)
  • Response to the above from GNSO Chair Keith Drazek via EPDP email Feb 12.
  • ICANN staff email to EPDP: "... any statements that your group want to see accompany the Final Report need to be submitted by Friday at the latest. As a reminder, even if your group supports the recommendations and consensus designations, groups have the ability to submit statements that are to accompany the Final Report ..."
  • EPDP Consensus Call - Bundle #3 (pdf) embed below: "... Bundle 3 of the consensus designations. As some items are still in discussion or newly minted, I have held off assigning a designation to those. To make it clear, I have created two separate tables (3A and 3B). I have taken a conservative approach in holding back a final designation where we have not received feedback on final wording. However, I do think we have agreement on nearly all of these and look forward to closing them out by the end of this week. Please comment on Table 3A by the end of this week if you disagree or wish to discuss the level of consensus indicated. Please use Table 3B  to consider your response so that we can request a rapid turnaround on that table when it is issued."--Kurt Pritz, EPDP Chair Feb 12, 2018 (EPDP Mail List). 
EPDP Consensus Call Bundle #3:

Original Post:
As indicated in an update in last week's News Review, the EPDP 'drop dead date' was extended to  Feb 25. The EPDP working group is now scheduled to submit a "draft" (latest version) of its "Final Report" (Phase 1) to the GNSO Council on Monday, February 11, after one last EPDP plenary meeting that same day (details further below, including revised timeline).
"... it was completely unrealistic to think that under the current pressure we would come up with something. Some of us said that from the get-go. Turns out we were right even if we worked in good faith. So we should consider anything we get in an interim policy as success. We've got a lot more mapping done. We've got a lot more of the issues out. This is a slow process, correcting 20 years of inattention. And I think one of the most important products that we can include in that interim policy is a list of things that we've already identified as needing revision to be compliant with GDPR."--Stephanie Perrin, EPDP member and NCSG Chair, Toronto EPDP F2F, Jan 18, 2019, transcript (pdf), p.58.
EPDP Plenary Meeting Monday Feb 11, 2019 at 14:00 UTC (9am EST). Updates: Chat transcript  (pdf), and action items from Monday's meeting,

Observers use Adobe Connect, or audiocast via browser / app. No other EPDP plenary meetings are currently scheduled for this coming week (see EPDP Revised Timeline below). Updates: Adobe recording and MP3.

Links: EPDP Draft Final Report, the EPDP Initial Report (pdf) and public comments to the Initial Report; PCRT Public Comment Review Tool; GNSO Council EPDP page and updates; links to EPDP meeting transcripts and recordings are on the GNSO calendar. Other EPDP links: wiki; mail list; action items; Temp Spec; EPDP Charter (pdf); Data Elements Workbooks (pdf), packet (pdf) small team agreements, ICANN's legal memo on Controllership (pdf), Bird & Bird legal memos are here. EPDP legal mail list (latest Bird & Bird advice on data 'accuracy').

EPDP Team Proposed Timeline (Feb 11-March 4) updated Feb 4:
EPDP recap for week ending Feb 9: EPDP plenary meetings Feb 5, Feb 6, Feb 7, Data Elements group Feb 5. [Editor's note: Legal committee Feb 6 cancelled.]  Highlights:

EPDP Mail List Feb 5, 2019: Proposed Revised "Registration Data" Definition
"... The Temp Spec  contains this definition:  "Registration Data" means data collected from a natural and legal person in connection with a domain name registration." The "in connection with" language is so broad and vague that it could be interpreted to data that registrars and registries would not consider to be registration data such as billing data, account creation data, and the like. RySG [gTLD Registries Stakeholder Group] proposes to revise the definition to reference the relevant data elements:  "Registration Data" means the data elements identified in Annex [X], collected from a natural and legal person in connection with a domain name registration."  (Annex [X] would then identify the relevant data elements, as carried over from the whatever becomes the final version of Recommendation 4) ... "--Kristina Rosette, Senior Corporate Counsel, IP - Domains, Amazon.com, Inc. (RySG).

Feb 5: Kurt Pritz, EPDP Chair (appointed by GNSO Council): "... And question two will demonstrate how far out of my depth I am but you know ..."

Feb 5: Stephanie Perrin (NCSG): " ... any reference to contracts and Bylaws, needs a thorough review, as some policies/contracts/ and even the Bylaws could use an assessment under the GDPR ..."

Feb 5: Stephanie Perrin (NCSG): "As I have said over and over and over again.....we need to have a very clear understanding of who is the controller, and what data processing activities are under whose control. If we have that clear understanding, it has somehow escaped me."

Feb 5: Stephanie Perrin (NCSG): "'Abandon all hope ye who enter here' ought to have been inscribed over the top of our charter ..."

Feb 6: Alan Woods (RySG - Donuts): "To channel Stephanie Perrin .... Thick WHOIS is dead ..... The Minimum data set is the new normal."

For more on last week's meetings see last week's News Review.

Related: To counter the GDPR (European Union's General Data Protection Regulation), Coalition for a Secure and Transparent Internet (CSTI), a coalition that includes DomainTools.com, CINTOC.org, MPAA.org, and others, is reportedly meeting with lawmakers in Washington, D.C., in an effort to pass a U.S. law requiring public WHOIS data for all websites 'designed to interact with U.S. citizens.'

2) Other ICANN News
graphic "ICANN | Internet Corporation for Assigned Names and Numbers"
a. Recommendations for Managing Internationalized Domain Name [IDN] Variant Top-Level Domains Published--ICANN.org 05 Feb 2019.

b. ICANN Publishes the First Monthly Report on Generic Top-Level Domain SecurityThreats--ICANN.org 04 Feb 2019.

c. Technical Study Group [TSG] Makes Progress at First Face-to-Face Meeting | ICANN.org 04 Feb 2019: "... the ICANN organization [would] serve as the sole entity receiving authorized queries for non-public registration data, obtaining such data from generic top-level domain (gTLD) registries and registrars, and then passing that data to the third-party requestor. The TSG's aim is to develop a technical design and specification that could be used by implementors to determine whether a unified access model would be possible under the European Union's General Data Protection Regulation  [GDPR] ... The group also agreed on several assumptions, detailed in our updated charter. We confirmed that the group's work will be built upon the Registration Data Access Protocol (RDAP) and will utilize the gTLD RDAP profile currently under discussion; that gaining access to non-public registration data would be centralized within the ICANN org ... We will explain all these in detail when we produce our final technical model ... We are all coming to the ICANN64 meeting in Kobe, where we plan to hold a community workshop to present our work and solicit your feedback ,,."  See ICANN's Technical Study Group on Access to Non-Public Registration Data | ICANN.org.

d. ICANN Org Report to the ICANN Board of Directors, Jan 2019 (pdf)
 ICANN Board of Directors Report Jan 2019
 Office of the CEO: "The ICANN org Executive Team is working diligently and making progress on a variety of key projects, including the Information Transparency Initiative (ITI), Open Data Initiative, development of the FY21-25 Operating Plan, creation of a unified access model for non-public registration data that is compliance with the General Data Protection Regulation (GDPR) ... Since the October resignation of Akram Atallah, President of the Global Domains Division (GDD), I’ve been working with the Executive Team to determine how to handle his responsibilities going forward ... I continue to keep a close eye on the development of a proposed governance model for the Domain Name System (DNS) root server system."

[Editor's note: 2 letters of correspondence to ICANN included under 3) below.]

3) Names, Domains & Trademarks
graphic "Names, Domains & Trademarks" ©2017 DomainMondo.com
• Verisign $VRSN Q4 2018 Earnings: "In the fourth quarter, Verisign processed 9.5 million new domain name registrations for .com and .net, as compared to 9.0 million for the same quarter in 2017." More at the link above.

• Tucows $TCX Q4 2018 Financial Results and Recorded Call: Wednesday, February 13, 2019 at 5:05 P.M. EST--tucows.com. "In lieu of a live question and answer period, for the next five days (until Monday, February 18), shareholders, analysts and prospective investors can submit questions to Tucows’ management at ir@tucows.com. Management will post responses to questions of general interest to the Company’s web site at http://www.tucows.com/investors/financials/ on Tuesday, February 26 at approximately 4:00 p.m. ET. All questions will receive a response, however, questions of a more specific nature may be responded to directly." News Release | KPI Summary 2018 (pdf) | Financial Statement (pdf). Editor's note: the KPI Summary indicates Tucows' "Domain Services" business is declining. Earnings Call transcript.

• 04 Feb 2019 Letter from TUCOWS Reg Levy to ICANN Maguy Serad re: Tucows' Change of Registrant (COR) Process, excerpt: "... We respectfully submit that we have attempted to work with ICANN Contractual Compliance regarding our implementation of our contractual duties to no avail. We ask that you close this ticket, accepting that we are at an impasse and that there is no breach, merely a difference of opinion about how to best protect registrants and a divergence of opinion regarding contractual requirements that are vague."

• GoDaddy & Spammers: thousands of dormant domains hijacked for spam simply by registering free accounts at GoDaddy and telling the company’s automated DNS service to allow sending of email with those domains from a spammer's internet address--krebsonsecurity.com.

• Chrome browser lookalike detection feature battles URL imposters--nakedsecurity.sophos.com.

• 01 Feb 2019 Letter from MARQUES Nick Wood to ICANN Cherine Chalaby (pdf) re ICANN's Review of the Uniform Domain Name Dispute Resolution Policy (UDRP), excerpt: "We believe that there should be no changes to the UDRP ...."

• Exec sacked after changing domain name from .org to .com without boss's permission--dailymail.co.uk: "We set up the website eight years earlier, and over that time we worked to make sure our website was at the top of search engines. If we changed the website domain it would be like starting at zero again ..."

4) ICYMI Internet Domain News 
graphic "ICYMI Internet Domain News" ©2017 DomainMondo.com
  • That German-French Deal to "Rescue" the EU Copyright Directive? Everyone Hates It. EVERYONE--eff.org.
  • Tech lobby takes India to task over plans to police online content--reuters.com.
  • Internet shutdowns violate human rights--mg.co.za.
  • Blocking of VPNs in India and China spells trouble for our internet freedom--techradar.com.
  • Why your online privacy matters, even if you have nothing to hide--techly.com.au.

5) Most Read this past week on DomainMondo.com: 
graphic "Domain Mondo" ©2017 DomainMondo.com




-- John Poole, Editor • Domain Mondo 

feedback & comments via twitter @DomainMondo


DISCLAIMER

2018-02-04

News Review | GDPR & ICANN WHOIS: "We're all Europeans now"

graphic "News Review" ©2016 DomainMondo.com
Domain Mondo's weekly internet domain news review (NR 2018-02-04) with analysis and opinion: Features •  1) GDPR & ICANN WHOIS: "We're all Europeans now",  2) Other ICANN news, 3) Names, Domains & Trademarks: a. Collapse in new gTLDs' Domain Name Registrations Continues into 2018, b. ccTLD .au, c. Verisign $VRSN Q4 2017 4) ICYMI Internet Domain News, 5) Most Read.

1. EU GDPR & ICANN WHOIS: "We're all Europeans now"
GDPR Summary of Important Aspects | Eureka.eu: "The EU General Data Protection Regulation is the world's biggest change to information security ever and is poised to export Europe's data protection and data privacy principles to the rest of the world."
The European Union’s General Data Protection Regulation (GDPR) becomes enforceable on May 25, 2018, and marks the biggest overhaul of personal data privacy rules in the history of the internet, directly impacting ICANN and its "contracted parties" (gTLD registry operators and registrars), who are considered "controllers" of domain name registrants' personal data.
The 2006 Definition of Whois Purpose: Case study of the “bad old days” in ICANN | InternetGovernance.org: "... the legal situation is changing in ways that make it difficult, if not impossible, to keep evading the issue ..."
WHAT IS Going to Happen With WHOIS? | Motherboard.vice.com: "... an overhaul of this nearly 30-year-old protocol [WHOIS] is long overdue. The notion that individual data should require a requester to also provide their own data is both equitable and intuitive—the only remaining question is how to make it work."
Diagram of interim models presented at ICANN webinar Feb 2, 2018
Editor's note: a webinar was conducted by ICANN management on Friday, February 2, 2018, which I attended along with more than 300 other stakeholders, and learned:
  1. ICANN acknowledges it is a "controller" subject to the EU's GDPR law;
  2. ICANN acknowledges that the GDPR law is a "compliance issue" for the ICANN organization, not a policy issue, and that ICANN org is working on a single, global model, for complying with the GDPR;
  3. According to ICANN CEO Goran Marby, ICANN is "working around the clock" and hopes to have more information about its "model" by mid-February;
  4. Here's a work paper explaining differences between the models.
Legal Analyses, Proposed Compliance Models, & Community Feedback | ICANN.org:

29 January 2018 Rafik Dammak NCSG Policy Committee Chair, Non Commercial Stakeholder Group (NCSG), re: ICANN-Proposed Compliance Models Comments (pdf, 330KB) excerpt (emphasis added):
Our evaluation of the models offered by ICANN are based on three fundamental principles. No model that fails to conform to all three is acceptable to the NCSG.
1. The purpose of whois must be strictly tied to ICANN's mission. That is, the data that is collected and the data that are published must directly and demonstrably contribute to ICANN's mission as defined in Article 1 of its new bylaws. We reject any definition of Whois purpose that is based on the way people happen to make use of data that can be accessed indiscriminately in a public directory. The fact that certain people currently use Whois for any purpose does not mean that the purpose of Whois is to provide thick data about the domain and its registrant to anyone who wants it for any reason.
2. Whois service, like the DNS itself, should be globally uniform and not vary by jurisdiction. ICANN was created to provide globalized governance of the DNS so that it would continue to be globally compatible and coordinated. Any solution that involves fragmenting the policies and practices of Whois along jurisdictional lines is not desirable.
3. No tiered access solution that involves establishing new criteria for access can feasibly be created in the next 3 months. We would strongly resist throwing the community into a hopeless rush to come up with entirely new policies, standards and practices involving tiered access to data, and we do not want ICANN staff to invent a policy that is not subject to community review and approval. Based on these three principles, we believe that Model 3 is the only viable option available.
2 February 2018 Maryant Fernandez Perez, European Digital Rights (EDRi) ICANN-Proposed Compliance Models Comments (pdf, 56 KB) ".... it appears that only model 3 is reconcilable with the GDPR, provided that the issues noted above are addressed. Both models 1 and 2 result in the potential publication of personal data on a scale that is neither necessary, nor proportionate ..."

See also 29 January 2018 Letter from Dimitris Avramopoulos, VÄ›ra Jourová & Sir Julian King [European Commission] to ICANN CEO Göran Marby re: European Commission Concerns Regarding GDPR and WHOIS.

Read the other comments here. My comment is here (pdf).

Related Links:

2) Other ICANN news
graphic "ICANN | Internet Corporation for Assigned Names and Numbers"
a. Announcing Draft Plan For Continuing With The KSK Roll | ICANN.org: "The plan calls for rolling the root zone KSK on 11 October 2018 (one year later than originally planned)"--ICANN public comment period is open and closes 2 Apr 2018 23:59 UTC.

b. Information Transparency Initiative Update: The Content Audit and ICANN Taxonomy | ICANN.org: "ICANN is performing a first-ever quantitative and qualitative audit of all the content on www.icann.org. The audit began in November 2017 and will continue through to August 2018."

c. Global DNS and gTLDs--recommended reading for ICANN leadership and others--We have plundered the commons | weforum.org. See also: The Corruption of Capitalism: Why Rentiers thrive and work does not pay (London, Biteback, 2017).

3) Names, Domains & Trademarks
graphic "Names, Domains & Trademarks" ©2017 DomainMondo.com
a. Collapse in new gTLDs' domain name registrations continues into 2018--Editor's note: The below is NOT a picture of "Lack of Awareness" but "Registrant Rejection" of new gTLDs--
Top: Jan 2017 - Jan 2018;  Bottom: January 2018 (source: ntldstats.com)
After the collapse in new gTLDs' domain name registrations in 2017, some were hoping for a 'turnaround' starting in January 2018--no such luck--nobody wants these "losers" anymore--not even Chinese speculators (who have since moved on to crypto). Here are the details from the ntldstats.com data:
New gTLDs' domain name registrations as of 12/31/2017: 23,819,095
New gTLDs' domain name registrations as of 01/31/2018: 23,046,656
Net LOSS in January 2018 --------------------------------------- (772,439)
January Net Loss (772,439) X 12 (months) = Projected Net LOSS of (9,269,268) new gTLDs' domain name registrations for all of 2018 at January's rate, which would be equal to a net loss of 39% of all new gTLDs' domain name registrations existing on the last day of 2017.

Data at namestat.org shows only 19.8 million new gTLD domain name registrations as of Feb 1, 2018.

Editor's note: As I noted last month, it is now obvious to everyone (except 'deniers') that ICANN grossly mismanaged its ill-conceived and misbegotten expansion of gTLDs (from just 22 to over 1200). Among the multitude of mistakes, probably the most egregious were rejecting the advice of the Federal Trade Commission (FTC) (pdf) and U.S. Department of Justice Antitrust Division (pdf) with regard to competition, pricing power, and consumer (registrant) benefits and protections. The above referenced letter from the US DOJ Antitrust Division was attached to a letter to ICANN from NTIA in Dec 2008 (pdf).

b. ccTLD .au: 'Yourname.au' proposed as discussion opens on Australia's domain future | ZDNet.com

c. Q4 2017 Earnings season: Verisign | NASDAQ: VRSN Feb 8, 4:30pm ET. Versign is a registry services provider and operator, including gTLDs .COM and .NET, as well as internet security services provider, internet Root Zone Maintainer, and manager of  Root Servers A and J.

4) ICYMI Internet Domain News 
graphic "ICYMI Internet Domain News" ©2017 DomainMondo.com
  • "In Geneva, the UN working group did not reach agreement on recommendations for the UNGA [United Nations General Assembly] on the role of governments in international internet policy. NL and like-minded countries oppose UN control over the Internet and supported multi-stakeholder approach."--Arnold van Rhijn Jan 31, 2018
  • Internet Freedom Festival 2018 Schedule IFF 2018: March 5-9, 2018, Valencia, Spain.

5) Most Read Posts (# of pageviews Sun-Sat) this past week on DomainMondo.com: 
graphic "Domain Mondo" ©2017 DomainMondo.com
1. News Review | IANA Transition Unwind? ICANN Nightmare or Fantasy?
2. Amazon $AMZN, Apple $AAPL, Google $GOOGL, LIVE Webcasts Feb 1
3. Tech Review | Is Google Done? 'Can No Longer Innovate' Says Ex-Googler 
4. Facebook $FB Q4 2017 Earnings LIVE Webcast, Jan 31, 5pm ET 
5. Starbucks $SBUX CEO Kevin Johnson On Earnings & Future Of The Brand 

-- John Poole, Editor, Domain Mondo 

feedback & comments via twitter @DomainMondo


DISCLAIMER

Domain Mondo archive