<div dir="ltr"><div>Dear Mr. Sarmad:</div><div><br></div><div>Thanks for your message.</div><div><br></div><div>I browsed SAC060 document and it seems that</div><div>Recommendation 7 is relevant in CJK variant discussion.</div><div><br></div><div>I am still trying how Recom. 7 can be applied to CJK variant issue</div><div>or whether Recom. 7 can be applied to CJK variant issue.</div><div><br></div><div>Plz give me some more time.</div><div><br></div><div>Thanks.</div><div><br></div><div>Rgds,</div><div><br></div><div>KIM, K.</div><br><div class="gmail_extra"><br><div class="gmail_quote">On Thu, Jan 8, 2015 at 6:01 PM, Sarmad Hussain <span dir="ltr"><<a href="mailto:sarmad.hussain@icann.org" target="_blank">sarmad.hussain@icann.org</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex"><div lang="EN-US" link="#0563C1" vlink="#954F72"><div><p class="MsoNormal">Dear Prof. Kim, All,<u></u><u></u></p><p class="MsoNormal"><u></u> <u></u></p><p class="MsoNormal">Here is the relevant text from SSAC’s SAC 60 report (<a href="https://www.icann.org/en/system/files/files/sac-060-en.pdf" target="_blank">https://www.icann.org/en/system/files/files/sac-060-en.pdf</a>), as mentioned during the call today:<u></u><u></u></p><p class="MsoNormal"><u></u> <u></u></p><p class="MsoNormal"><b><i>Recommendation 7: Should ICANN decide to implement safeguards it should seek<u></u><u></u></i></b></p><p class="MsoNormal"><b><i>to distinguish the following two types of failure modes when a user expects a variant<u></u><u></u></i></b></p><p class="MsoNormal"><b><i>to work but it is not implemented:<u></u><u></u></i></b></p><p class="MsoNormal"><i><u></u> <u></u></i></p><p class="MsoNormal" style="margin-left:0.5in"><i>• <span style="background:yellow">Denial of service:</span> the user attempts to visit <a href="http://example.Y" target="_blank">http://example.Y</a>, reading it as<u></u><u></u></i></p><p class="MsoNormal" style="margin-left:0.5in"><i>being the same Uniform Resource Identifier (URI) as the <a href="http://example.X" target="_blank">http://example.X</a><u></u><u></u></i></p><p class="MsoNormal" style="margin-left:0.5in"><i>that, for example, he or she saw in an advertisement, but the connection does<u></u><u></u></i></p><p class="MsoNormal" style="margin-left:0.5in"><i>not work (lookup fails) because Y is either blocked, withheld, or X has no<u></u><u></u></i></p><p class="MsoNormal" style="margin-left:0.5in"><i>variant at all, and example.Y is not registered.<u></u><u></u></i></p><p class="MsoNormal" style="margin-left:0.5in"><i><u></u> <u></u></i></p><p class="MsoNormal" style="margin-left:0.5in"><i>• <span style="background:yellow">Misconnection:</span> the user attempts to visit <a href="http://example.Y" target="_blank">http://example.Y</a>, reading it as being<u></u><u></u></i></p><p class="MsoNormal" style="margin-left:0.5in"><i>the same URI as the <a href="http://example.X" target="_blank">http://example.X</a> that, for example, he or she saw in an<u></u><u></u></i></p><p class="MsoNormal" style="margin-left:0.5in"><i>advertisement, but arrives at a site controlled by a registrant different to that of<u></u><u></u></i></p><p class="MsoNormal" style="margin-left:0.5in"><i>example.X.<u></u><u></u></i></p><p class="MsoNormal"><i><u></u> <u></u></i></p><p class="MsoNormal"><i>The second case is much more dangerous than the first one. In the first case, the user is<u></u><u></u></i></p><p class="MsoNormal"><i>frustrated and may conclude that “the Internet does not work,” but no serious harm has<u></u><u></u></i></p><p class="MsoNormal"><i>arisen. The second case is problematic even if this effect is not the result of malicious<u></u><u></u></i></p><p class="MsoNormal"><i>work on the part of Y’s operator or example.Y registrant. Misconnections to a perfectly<u></u><u></u></i></p><p class="MsoNormal"><i>legitimate site operating at example.Y present issues of possible credential compromise<u></u><u></u></i></p><p class="MsoNormal"><i>or other accidental disclosure of information in addition to user confusion and frustration.<u></u><u></u></i></p><p class="MsoNormal"><u></u> <u></u></p><p class="MsoNormal"><u></u> <u></u></p><p class="MsoNormal">Regards,<br>Sarmad<u></u><u></u></p><p class="MsoNormal"><u></u> <u></u></p></div></div></blockquote></div><br><br clear="all"><div><br></div>-- <br><div class="gmail_signature">김 경석 KIM, Kyongsok</div>
</div></div>