<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=Content-Type content="text/html; charset=us-ascii">
<meta name=Generator content="Microsoft Word 12 (filtered medium)">
<!--[if !mso]>
<style>
v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style>
<![endif]-->
<style>
<!--
/* Font Definitions */
@font-face
{font-family:Wingdings;
panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:Wingdings;
panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph
{mso-style-priority:34;
margin-top:0in;
margin-right:0in;
margin-bottom:0in;
margin-left:.5in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
span.EmailStyle18
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:windowtext;}
span.EmailStyle19
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page Section1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.Section1
{page:Section1;}
/* List Definitions */
@list l0
{mso-list-id:272782506;
mso-list-template-ids:1839650756;}
@list l0:level1
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
ol
{margin-bottom:0in;}
ul
{margin-bottom:0in;}
-->
</style>
<!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang=EN-US link=blue vlink=purple>
<div class=Section1>
<p class=MsoNormal><span style='color:#1F497D'>Chuck and all, please see my
responses below. Please let me know if you have any more questions or
would like more information. Thanks, Liz<o:p></o:p></span></p>
<p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p>
<div>
<div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in'>
<p class=MsoNormal><b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>From:</span></b><span
style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'> Gomes, Chuck
[mailto:cgomes@verisign.com] <br>
<b>Sent:</b> Wednesday, March 24, 2010 12:45 PM<br>
<b>To:</b> Liz Gasster; GNSO Council List<br>
<b>Cc:</b> Steve Sheng<br>
<b>Subject:</b> RE: [council] Initial staff report on GNSO-requested WHOIS
studies attached for your review and discussion<br>
<b>Importance:</b> High<o:p></o:p></span></p>
</div>
</div>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial","sans-serif";
color:blue'>Liz,</span><span style='font-size:12.0pt;font-family:"Times New Roman","serif"'><o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:12.0pt;font-family:"Times New Roman","serif"'> <o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial","sans-serif";
color:blue'>After reviewing the report, I have a few comments. Please
note the possible time sensitive action item under 3 below.</span><span
style='font-size:12.0pt;font-family:"Times New Roman","serif"'><o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:12.0pt;font-family:"Times New Roman","serif"'> <o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:12.0pt;font-family:"Times New Roman","serif";
color:blue'>"<b>3. Staff Analysis of WHOIS Misuse Studies </b></span><span
style='font-size:12.0pt;font-family:"Times New Roman","serif"'>"<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:12.0pt;font-family:"Times New Roman","serif"'> <o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial","sans-serif";
color:blue'>The following points from the analysis make me wonder whether these
studies are worth the investment:</span><span style='font-size:12.0pt;
font-family:"Times New Roman","serif"'><o:p></o:p></span></p>
<ul type=disc>
<li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;
mso-list:l0 level1 lfo1'><span style='font-size:10.0pt;font-family:"Arial","sans-serif";
color:blue'>Referring to the recommended proposal, ". . </span><span
style='font-size:12.0pt;font-family:"Arial","sans-serif";color:blue'>even
that proposal did not address key challenges that could diminish the WHOIS
policy contributions afforded by this study – notably, determining
the "significance" of misuse and proving a causal relationship
between misuse reduction and WHOIS anti-harvesting measures. If ICANN and
GNSO elect to pursue this study, these concerns should be discussed with
the bidder before a contract is awarded. </span><span style='font-size:
10.0pt;font-family:"Arial","sans-serif";color:blue'>"</span><span
style='font-size:12.0pt;font-family:"Times New Roman","serif"'><o:p></o:p></span></li>
<li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;
mso-list:l0 level1 lfo1'><span style='font-size:10.0pt;font-family:"Arial","sans-serif";
color:blue'>". . </span><span style='font-size:12.0pt;font-family:
"Arial","sans-serif";color:blue'>it is not clear that researchers can
quantitatively measure or qualitatively assess whether measured misuse is
"significant." The ToR suggested surveying registrants about
incident impact (severity), but no bidder elaborated on this study goal or
indicated how "significance" might be assessed. Simply counting
harmful acts without putting them into some kind of perspective cannot
prove the study's hypothesis and may thus do little to inform policy. </span><span
style='font-size:10.0pt;font-family:"Arial","sans-serif";color:blue'>"</span><span
style='font-size:12.0pt;font-family:"Times New Roman","serif"'><o:p></o:p></span></li>
</ul>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial","sans-serif";
color:blue'>Is it possible to ask the bidders, or possibly just the preferred
one, to elaborate on "</span><span style='font-size:12.0pt;font-family:
"Arial","sans-serif";color:blue'>how "significance" might be assessed</span><span
style='font-size:10.0pt;font-family:"Arial","sans-serif";color:blue'>"?
And could this be asked prior to our 1 April Council meeting? This could
be critical information in making a decision regarding whether to purse these
studies or not. </span><span style='font-size:12.0pt;font-family:"Times New Roman","serif"'><o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:12.0pt;font-family:"Times New Roman","serif"'> <o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial","sans-serif";
color:blue'>If we are unable to prove or disprove the hypothesis, it might not
make sense to spend $149,000.</span><span style='font-size:10.0pt;font-family:
"Arial","sans-serif"'><o:p></o:p></span></p>
<p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal>LG – The Council should understand that the issue of
how significance might be assessed is one that remains even after several
bidders and numerous subject matter experts pored through this study for months,
and so far no one has yet found a good answer for. Based on my work
to-date, my view is ICANN and the bidder would probably need to invest more
than a day or two discussing these concerns and proposed methods to arrive at
workable solutions for what (after months of discussion) are still unresolved
challenges. I believe that if the Council wants to pursue this study and
recognizing this concern, the next step would be for staff to ask the bidder to
address this concern before awarding a contract. <o:p></o:p></p>
<p class=MsoNormal><span style='font-size:12.0pt;font-family:"Times New Roman","serif"'> <o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial","sans-serif";
color:blue'>"</span><b><span style='font-size:12.0pt;font-family:"Arial","sans-serif";
color:blue'>4. Staff Analysis of WHOIS Registrant Identification Study </span></b><span
style='font-size:10.0pt;font-family:"Arial","sans-serif";color:blue'>"</span><span
style='font-size:12.0pt;font-family:"Times New Roman","serif"'><o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:12.0pt;font-family:"Times New Roman","serif"'> <o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial","sans-serif";
color:blue'>Based on Staff analysis, it seems like this study might be worth
doing. The challenge it appears would be to choose between the two top
bidders and their different methodologies.</span><span style='font-size:10.0pt;
font-family:"Arial","sans-serif"'><o:p></o:p></span></p>
<p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal>LG – We would not look to the Council to choose
between the bidders or methodologies, that is something staff would work out once
the decision is made to pursue this study. My point in making that statement
was simply to say that there were credible options presented by two bidders,
which is useful in confirming the feasibility of such a study.<o:p></o:p></p>
<p class=MsoNormal><span style='font-size:12.0pt;font-family:"Times New Roman","serif"'> <o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial","sans-serif";
color:blue'>"</span><b><span style='font-size:12.0pt;font-family:"Arial","sans-serif";
color:blue'>5. Preliminary staff Analysis of WHOIS Abuse and Reveal Studies</span></b><span
style='font-size:10.0pt;font-family:"Arial","sans-serif";color:blue'>"</span><span
style='font-size:12.0pt;font-family:"Times New Roman","serif"'><o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:12.0pt;font-family:"Times New Roman","serif"'> <o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial","sans-serif";
color:blue'>It appears that it is too early to make any decisions on these
studies, but we may need to at least decide whether we think any funds should
be set aside in the FY11 budget for further work and possibly doing one of
them.</span><span style='font-size:12.0pt;font-family:"Times New Roman","serif"'><o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:12.0pt;font-family:"Times New Roman","serif"'> <o:p></o:p></span></p>
<p class=MsoNormal>LG – Agree that it is too early. Information
on the proxy and privacy “abuse” study might be available in July
or August (I have not released an RFP yet). We are still not sure about
the viability of a privacy/proxy “reveal” study. If the
Council thinks it is likely to find the proxy/privacy abuse study to also be of
a high priority, then asking for a set aside for that study might make
sense. Given current budget constraints and the cost of the first two
studies, it may also make sense to look to the FY 2012 budget.<o:p></o:p></p>
<p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial","sans-serif";
color:blue'>Chuck</span><span style='font-size:12.0pt;font-family:"Times New Roman","serif"'><o:p></o:p></span></p>
<blockquote style='border:none;border-left:solid blue 1.5pt;padding:0in 0in 0in 4.0pt;
margin-left:3.75pt;margin-top:5.0pt;margin-right:0in;margin-bottom:5.0pt'>
<p class=MsoNormal><span style='font-size:12.0pt;font-family:"Times New Roman","serif"'><o:p> </o:p></span></p>
<div class=MsoNormal align=center style='text-align:center'><span
style='font-size:12.0pt;font-family:"Times New Roman","serif"'>
<hr size=2 width="100%" align=center>
</span></div>
<p class=MsoNormal style='margin-bottom:12.0pt'><b><span style='font-size:10.0pt;
font-family:"Tahoma","sans-serif"'>From:</span></b><span style='font-size:10.0pt;
font-family:"Tahoma","sans-serif"'> owner-council@gnso.icann.org
[mailto:owner-council@gnso.icann.org] <b>On Behalf Of </b>Liz Gasster<br>
<b>Sent:</b> Tuesday, March 23, 2010 7:47 PM<br>
<b>To:</b> GNSO Council List<br>
<b>Cc:</b> Steve Sheng<br>
<b>Subject:</b> [council] Initial staff report on GNSO-requested WHOIS studies
attached for your review and discussion</span><span style='font-size:12.0pt;
font-family:"Times New Roman","serif"'><o:p></o:p></span></p>
<p class=MsoNormal>All,<o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal>Attached please find staff’s initial report on WHOIS
studies as requested by the Council on 4 March 2009. I will provide an
overview of this report at the Council’s upcoming 1 April meeting, and I
look forward to your comments and input. My report will also be posted
here shortly. <a
href="https://st.icann.org/gnso-council/index.cgi?whois_discussion">https://st.icann.org/gnso-council/index.cgi?whois_discussion#</a>
I will also be posting my presentation slides by the end of this
week. I’d also like to make the following points:<o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoListParagraph style='text-indent:-.25in'>1.<span style='font-size:
7.0pt;font-family:"Times New Roman","serif"'>
</span>I want to recognize that this effort has been underway for quite some
time, and while I have provided many updates along the way, I understand that
the background and context may be new to Council members who joined the GNSO
following the discussions that led to initiation of this work. I would be
glad to add additional background or detail as requested. There was a
significant body of work that the Council and community engaged in that led up
to the decision in March 2009 to pursue costs and feasibility for the specific
study areas selected. There were also other studies initially proposed by
members of the community and by the GAC. Those described in my report
were selected by the Council for staff to pursue. <o:p></o:p></p>
<p class=MsoListParagraph style='text-indent:-.25in'>2.<span style='font-size:
7.0pt;font-family:"Times New Roman","serif"'>
</span>The Policy staff is also releasing a first draft later this month of an
additional “study” that was requested by the GNSO Council in May
2009. This “study” is more accurately described as a
compilation or synthesis of WHOIS Service Requirements, that includes
known deficiencies in the current service and “any possible requirements
that may be needed to support various policy initiatives that have been
suggested in the past”. As requested in the resolution initiating this
work, when Staff releases the report, we will be consulting with the SSAC,
ALAC, GAC, the ccNSO and the GNSO on this draft, and an updated synthesis will
be prepared following those consultations. Steve Sheng is the primary author of
this upcoming report. <o:p></o:p></p>
<p class=MsoListParagraph style='text-indent:-.25in'>3.<span style='font-size:
7.0pt;font-family:"Times New Roman","serif"'>
</span>Regarding both reports, staff has tried to be responsive to the
expectations of the GNSO in initiating the requests. If more work is
needed or you have something further in mind, please let us know. We
consider both to be working documents that can be updated or refined upon
community review. <o:p></o:p></p>
<p class=MsoListParagraph style='text-indent:-.25in'><span style='color:#1F497D'>4.</span><span
style='font-size:7.0pt;font-family:"Times New Roman","serif";color:#1F497D'>
</span>There are many important details to consider, but ultimately the Council
will want to consider whether to recommend funding for WHOIS studies in the FY
2011 budget. WHOIS studies have been noted as a potential future expense
for some time, but the analysis I’ve just completed provides much-needed
detail on specific costs to anticipate for the WHOIS Misuse and WHOIS
Registrant Identification studies. <span style='color:#1F497D'><o:p></o:p></span></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal>At the time this work was initiated, there were differing
views about whether / which studies should be undertaken. Hopefully the
information provided will be useful to the Council in considering next
steps. I might also suggest that this information be provided to the GAC
given its extensive previous recommendations for further study of WHOIS.
Staff can forward the report or the Council may certainly do so.<o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal>Again, we look forward to your comments and input! <o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal>Thanks, Liz<span style='color:#1F497D'><o:p></o:p></span></p>
<p class=MsoNormal><o:p> </o:p></p>
</blockquote>
</div>
</body>
</html>