<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:st1="urn:schemas-microsoft-com:office:smarttags" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=Content-Type content="text/html; charset=us-ascii">
<meta name=Generator content="Microsoft Word 11 (filtered medium)">
<!--[if !mso]>
<style>
v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style>
<![endif]-->
<title>Fast Flux Report - questions </title>
<o:SmartTagType namespaceuri="urn:schemas-microsoft-com:office:smarttags"
name="City"/>
<o:SmartTagType namespaceuri="urn:schemas-microsoft-com:office:smarttags"
name="place"/>
<!--[if !mso]>
<style>
st1\:*{behavior:url(#default#ieooui) }
</style>
<![endif]-->
<style>
<!--
/* Font Definitions */
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman";}
a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{color:purple;
text-decoration:underline;}
p
{mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman";}
span.EmailStyle18
{mso-style-type:personal-reply;
font-family:Arial;
color:navy;}
@page Section1
{size:8.5in 11.0in;
margin:1.0in 1.25in 1.0in 1.25in;}
div.Section1
{page:Section1;}
-->
</style>
</head>
<body lang=EN-US link=blue vlink=purple>
<div class=Section1>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>Kristina and all,<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>Following are responses below from staff
where we can. I believe some of your questions highlight the need for
further study (possibly in more areas than we’ve identified in the
report, as some of your questions suggest). <o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>Happy to try to answer further where we
can, if you have more questions. I just want to note again too that given
the short time frame to prepare the report, the breadth of sources we were able
to draw upon were necessarily limited. I really like your idea about
noting sources and including a bibliography when we prepare issues reports in
the future, and I’m going to add this as a suggestion in our GNSO
improvements process so that we capture this idea to consider in the
development of a new policy development process. <o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>Liz<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>
<div>
<div class=MsoNormal align=center style='text-align:center'><font size=3
face="Times New Roman"><span style='font-size:12.0pt'>
<hr size=2 width="100%" align=center tabindex=-1>
</span></font></div>
<p class=MsoNormal><b><font size=2 face=Tahoma><span style='font-size:10.0pt;
font-family:Tahoma;font-weight:bold'>From:</span></font></b><font size=2
face=Tahoma><span style='font-size:10.0pt;font-family:Tahoma'>
owner-council@gnso.icann.org [mailto:owner-council@gnso.icann.org] <b><span
style='font-weight:bold'>On Behalf Of </span></b>Rosette, Kristina<br>
<b><span style='font-weight:bold'>Sent:</span></b> Thursday, April 17, 2008
7:00 AM<br>
<b><span style='font-weight:bold'>To:</span></b> council@gnso.icann.org<br>
<b><span style='font-weight:bold'>Subject:</span></b> [council] Fast Flux
Report - questions </span></font><o:p></o:p></p>
</div>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'><o:p> </o:p></span></font></p>
<p><font size=2 face=Arial><span style='font-size:10.0pt;font-family:Arial'>All,</span></font>
<o:p></o:p></p>
<p><font size=2 face=Arial><span style='font-size:10.0pt;font-family:Arial'>Here
are some initial questions/requests about the report. I will forward
additional questions soon.</span></font> <o:p></o:p></p>
<p><font size=2 face=Arial><span style='font-size:10.0pt;font-family:Arial'>Page
1: The report states that staff "consulted other appropriate and
relevant sources of information". In the interest of transparency, I
would appreciate having those sources be identified. As a general
note, it may be helpful to all readers of the report if the issues reports
included a bibliography or sources consulted section.<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 color=navy
face=Arial><span style='font-size:10.0pt;font-family:Arial;color:navy'>LG -- staff
considered the SAC Advisory (SAC 025) and I also consulted extensively with Lyman
Chapin. We referred to the email exchanges on the SSAC list during the period
of time in which the SSAC folks were discussing fast flux and preparing
SAC 025, the presentations and transcripts from the SSAC workshops in <st1:City
w:st="on"><st1:place w:st="on">Los Angeles</st1:place></st1:City> (<u><a
href="http://losangeles2007.icann.org/node/78"><font color=navy><span
style='color:navy'>http://losangeles2007.icann.org/node/78</span></font></a></u>)<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 color=navy
face=Arial><span style='font-size:10.0pt;font-family:Arial;color:navy'>and <st1:City
w:st="on"><st1:place w:st="on">Delhi</st1:place></st1:City> (<a
href="http://delhi.icann.org/node/97"><font color=navy><span style='color:navy'>http://delhi.icann.org/node/97</span></font></a>),
and informally with a few other sources.</span></font><font size=2 color=navy
face=Arial><span style='font-size:10.0pt;font-family:Arial;color:navy'><o:p></o:p></span></font></p>
<p><font size=2 face=Arial><span style='font-size:10.0pt;font-family:Arial'>Pages
6, 14: One interpretation of the reference to "domains in ccTLDs are
targeted as well" is that there is no "lasting value" to
developing gTLD policy regarding any issue that occurs in both gTLDs and
ccTLDs. Is this interpretation intended?<o:p></o:p></span></font></p>
<p><font size=2 color=navy face=Arial><span style='font-size:10.0pt;font-family:
Arial;color:navy'>LG -- Chuck’s comment was right. There
could be a benefit to coordinating with the ccNSO. Not making a judgment
on “no lasting value”.<o:p></o:p></span></font></p>
<p><font size=2 face=Arial><span style='font-size:10.0pt;font-family:Arial'>Pages
6, 14: Similarly, one interpretation of the reference to "static
rules through a policy development process might be quickly undermined by
intrepid cybercriminals" is that there can be "no lasting value"
to developing gTLD policy regarding any issue that results from or is
associated with cybercriminals because they move more quickly than the PDP and,
as interpreted by one IPC member, "are smarter than we are". Is
this interpretation intended?<o:p></o:p></span></font></p>
<p><font size=2 color=navy face=Arial><span style='font-size:10.0pt;font-family:
Arial;color:navy'>LG – That is why we mention the importance of
developing best practices, which then can be enhanced and upgraded over time to
keep up better with new techniques developed to undermine existing deterrent techniques.
Perhaps a policy outcome might point to the need to adopt rigorous best
practices and refresh on an ongoing basis. But my understanding on fast
flux is that these best practices do not necessarily exist today, so the
question might be how to encourage their development in a structured and
focused way, as a necessary precursor to deciding how to encourage or require
their widespread adoption. Might the GNSO Council take on a convening
role here? Or encourage or direct in some other way? In this
context, the inference of concern about “lasting value” of imposing
a specific practice is intended. <o:p></o:p></span></font></p>
<p><font size=2 face=Arial><span style='font-size:10.0pt;font-family:Arial'>Page
8: For how long and on what scale has proxy redirection been used to
maintain high availability and spread the network load?<o:p></o:p></span></font></p>
<p><font size=2 color=navy face=Arial><span style='font-size:10.0pt;font-family:
Arial;color:navy'>LG – We need to study this more. The key question
I was raising is, “are there valid uses that need to be considered, that
could be undermined if certain deterrent steps were imposed?” It is
not clear from our cursory view how broadly this is used – seems also unlikely
that there would be need for such constant and frequent fluxing in this context,
but we couldn’t determine for sure either way. <o:p></o:p></span></font></p>
<p><font size=2 face=Arial><span style='font-size:10.0pt;font-family:Arial'>Page
9: Did more than one person describe evasion of "black holing"
"anecdotally as a possible 'legitimate use'" of fast flux? Any
evidence or research to suggest that it actually happens? <o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=3 color=navy
face=Arial><span style='font-size:12.0pt;font-family:Arial;color:navy'>LG </span></font><font
size=2 color=navy face=Arial><span style='font-size:10.0pt;font-family:Arial;
color:navy'>-- This is anecdotal and may only be one entity, another potential
subject of further study.</span></font><font size=2 color=navy face=Arial><span
style='font-size:10.0pt;font-family:Arial;color:navy'><o:p></o:p></span></font></p>
<p><font size=2 face=Arial><span style='font-size:10.0pt;font-family:Arial'>Page
10: How likely is that fast flux hosting "could be significantly
curtailed by changes in the way in which DNS registries and registrars
currently operate"?<o:p></o:p></span></font></p>
<p><font size=2 color=navy face=Arial><span style='font-size:10.0pt;font-family:
Arial;color:navy'>LG – Would need to study further.<o:p></o:p></span></font></p>
<p><font size=2 face=Arial><span style='font-size:10.0pt;font-family:Arial'>Page
11: Is it technically possible now for registries and registrars to act
in two ways set forth in report? Practically possible? If so, do
they? If not, have reasons for not doing so been provided and, if so,
what are they?<o:p></o:p></span></font></p>
<p><font size=2 color=navy face=Arial><span style='font-size:10.0pt;font-family:
Arial;color:navy'>LG – Would need to study further.<o:p></o:p></span></font></p>
<p><font size=2 face=Arial><span style='font-size:10.0pt;font-family:Arial'>(I
have not included a scope clarification question because I understand that it
has already bee posed.)</span></font> <o:p></o:p></p>
<p><font size=2 face=Arial><span style='font-size:10.0pt;font-family:Arial'>Many
thanks.</span></font> <o:p></o:p></p>
<p><font size=2 face=Arial><span style='font-size:10.0pt;font-family:Arial'>Kristina
</span></font><o:p></o:p></p>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'><o:p> </o:p></span></font></p>
</div>
</body>
</html>