<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 14 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:"Trebuchet MS";
panose-1:2 11 6 3 2 2 2 2 2 4;}
@font-face
{font-family:Verdana;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p
{mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
{mso-style-priority:99;
mso-style-link:"Balloon Text Char";
margin:0in;
margin-bottom:.0001pt;
font-size:8.0pt;
font-family:"Tahoma","sans-serif";}
span.EmailStyle18
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.BalloonTextChar
{mso-style-name:"Balloon Text Char";
mso-style-priority:99;
mso-style-link:"Balloon Text";
font-family:"Tahoma","sans-serif";}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri","sans-serif";}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Parts of what you are suggesting will fit into all three phases of the PDP: 1) requirements, 2) policy development, and 3) implementation. It will also be
applicable to several of the 11 questions that are part of each phase.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Chuck<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">From:</span></b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif""> isolatedn@gmail.com [mailto:isolatedn@gmail.com]
<b>On Behalf Of </b>Sivasubramanian M<br>
<b>Sent:</b> Monday, July 25, 2016 5:32 PM<br>
<b>To:</b> Gomes, Chuck<br>
<b>Cc:</b> gnso-rds-pdp-wg@icann.org<br>
<b>Subject:</b> Re: [gnso-rds-pdp-wg] A possible global process for collection, storage and access of Registrant Data<o:p></o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<div>
<p class="MsoNormal"><span style="font-family:"Verdana","sans-serif";color:#333333">Dear Chuck,<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:"Verdana","sans-serif";color:#333333"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:"Verdana","sans-serif";color:#333333"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:"Verdana","sans-serif";color:#333333">I don't know. You are far more experienced, you could suggest how to move forward on this, whois, RDAP-long term, even Accountability?<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:"Verdana","sans-serif";color:#333333"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:"Verdana","sans-serif";color:#333333">Andrew Sullivan mentioned the pursuit to avoid centralization. The initial outline above is fraught with such a danger, but a new process for the long term could be well thought
of to reconcile such a concern.<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:"Verdana","sans-serif";color:#333333"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:"Verdana","sans-serif";color:#333333">Sivasubramanian M<o:p></o:p></span></p>
</div>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<p class="MsoNormal">On Tue, Jul 26, 2016 at 1:04 AM, Gomes, Chuck <<a href="mailto:cgomes@verisign.com" target="_blank">cgomes@verisign.com</a>> wrote:<o:p></o:p></p>
<div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Where do you think this should fit in the work plan Sivasubramanian? Note that it might fit in multiple
places.</span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"> </span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Chuck</span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"> </span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">From:</span></b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">
<a href="mailto:gnso-rds-pdp-wg-bounces@icann.org" target="_blank">gnso-rds-pdp-wg-bounces@icann.org</a> [mailto:<a href="mailto:gnso-rds-pdp-wg-bounces@icann.org" target="_blank">gnso-rds-pdp-wg-bounces@icann.org</a>]
<b>On Behalf Of </b>Sivasubramanian M<br>
<b>Sent:</b> Monday, July 25, 2016 1:37 PM<br>
<b>To:</b> <a href="mailto:gnso-rds-pdp-wg@icann.org" target="_blank">gnso-rds-pdp-wg@icann.org</a><br>
<b>Subject:</b> [gnso-rds-pdp-wg] A possible global process for collection, storage and access of Registrant Data</span><o:p></o:p></p>
<div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
<div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-family:"Verdana","sans-serif";color:#333333">If the topic is not a priority for the Working Group at present, I would still request the Working Group to suggest
a suitable time for discussion or redirect this to a suitable forum. (sent this from the email address isolatedn@... which did not get posted, so resending this a moment later from this alias, if there is repetition, apologies.)<br clear="all">
</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-family:"Verdana","sans-serif";color:#333333"> </span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-family:"Verdana","sans-serif";color:#333333">Thank you</span><o:p></o:p></p>
</div>
<div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><a href="https://www.facebook.com/sivasubramanian.muthusamy" target="_blank">Sivasubramanian M</a><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
</div>
<div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-family:"Arial","sans-serif";color:#333333"></span><b><span style="font-size:11.0pt;font-family:"Trebuchet MS","sans-serif";color:#333333">A possible global process
for collection, storage and access of Registrant Data</span></b><o:p></o:p></p>
</div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;margin-bottom:12.0pt"> <o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><b><span style="font-size:11.0pt;font-family:"Trebuchet MS","sans-serif";color:#333333">Background</span></b><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><span style="font-size:11.0pt;font-family:"Trebuchet MS","sans-serif";color:#333333">A Domain Registrar, either directly or through a Reseller collects a Registrant’s personal data at the time of registering a Domain
Name. With over 300 million domain names registered worldwide, this becomes Big Data as a collective.</span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><span style="font-size:11.0pt;font-family:"Trebuchet MS","sans-serif";color:#333333">ICANN coordinates the allocation of Domain Names (and associated Number resources), but does not make “rules” concerning the handling
of Registrant Data, which is valuable to the Registrant who parted it with the Registrar/Reseller in Trust.
</span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><span style="font-size:11.0pt;font-family:"Trebuchet MS","sans-serif";color:#333333">Due to the cross border nature of the Internet, a Registrant in one country, say, India, registers a Domain Name which on the Top
Level is delegated by ICANN, a non-profit Corporation Registered in the State of California, United States, to a Registry operating from, say, Gibraltar, who appoints a Registrar based in Germany, who in turn appoints a Reseller based in South Africa who registers
the Domain Name to the Registrant based in, say, India. The Reseller retains some of the Registrant Data, and parts with part of the data (or a copy of all Data) to the Registrar, who passes on a part of the Data to the Registry, and a certain mandated components
of the Registrant Data gets published in the whois database for public access. (This has not been described with schematic accuracy, but in general it works more or less in this manner at present)</span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><span style="font-size:11.0pt;font-family:"Trebuchet MS","sans-serif";color:#333333">The Registry, Registrar and the Reseller might be using the Registrant Data for their own essential commercial operations, or at
times sharing it with third parties by commercial arrangements. In addition, there are periodic requests from the Law and Order Agencies for access to the Registrant Data. Complications arise when one country demands access to Registrant Data stored outside
its jurisdiction, and further complications arise when the data so released pertain to the citizens of another country. Also, “</span><span style="font-size:11.0pt;font-family:"Trebuchet MS","sans-serif"">the problem of cross-border data requests arises when
one government’s laws compel the production of information while another government’s laws simultaneously forbid that same production.”
</span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><span style="font-size:11.0pt;font-family:"Trebuchet MS","sans-serif";color:#333333">It can not be denied that some of these Law and Order requirements are in the National or Global public interest, but the focus
of this paper is on possible excesses or abuses.</span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><b><span style="font-size:11.0pt;font-family:"Trebuchet MS","sans-serif";color:#333333">A possible global process for collection, storage and access of Registrant Data:</span></b><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><span style="font-size:11.0pt;font-family:"Trebuchet MS","sans-serif";color:#333333">If some data is held by Registrar, some by Registry and some by the ISP, there may be a way of streamlining this by modifying the
manner in which Registrant data is gathered and stored at the time of registration. Some attention to the VISA/MASTERCARD method of collecting and handling credit card information could help ICANN come up with a streamlined design for handling Registrant data.
</span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><span style="font-size:11.0pt;font-family:"Trebuchet MS","sans-serif";color:#333333">If such a model is to be emulated, a Registrant going to a sub-Reseller going through a Reseller going through a Registrar under
a Registry would gather the Registrant data on a secure form interjected by an operator like Verisign. ‘Verisign’ here is not to be confused with Verisign the Registry, or Verisign the RZM operator, but that division of Verisign which serves the secure form
in credit card transactions. In the Domain registration scenario, ‘Verisign’ would, by a secure protocol, interject a registration form on the Reseller interface, that would be a secure form independent of and regardless of the insecurity of the Sub-Reseller's
webspace. In DNS, this could indeed be a verisign form or an IAB/IETF/ICANN designed secure form,
</span><span style="font-size:11.0pt;font-family:"Arial","sans-serif";color:#333333"></span><span style="font-size:11.0pt;font-family:"Trebuchet MS","sans-serif"">or a form designed by the ICANN Technical expert volunteers from the Community, or even by any
other commercial contractor designated by ICANN.<span style="color:#333333"> This verisign form (I call this the Verisign form, for illustration.</span> Not implying that the system peculiar to DNS must only be designed by Verisign. However we could continue
to refer to this as the 'Verisign form' for the purpose of this discussion<span style="color:#333333">) could then be used to collect: </span></span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><span style="font-size:11.0pt;font-family:"Trebuchet MS","sans-serif";color:#333333">a) all Registrant data and then automatically distribute the basic data back to the Sub-Reseller and Reseller, basic + quasi-sensitive
data to the Registrar under whom the Reseller operates and retain a copy of the above + Sensitive data with the Registry, while ultra-sensitive data, if any so categorised by any name, together with all of the above would stay only with ICANN. (the categorization
of data as basic etc is arbitrary. This is a generalized description of how it would work, there may be existing classes and sub-classes or ICANN may come up with suitable sub-classes of Registrant data)</span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><span style="font-size:11.0pt;font-family:"Trebuchet MS","sans-serif";color:#333333">Or, optionally,</span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><span style="font-size:11.0pt;font-family:"Trebuchet MS","sans-serif";color:#333333">b) The Sensitive and Ultra-sensitive user data alone could be gathered by the Verisign form after the basic data is collected by
the Reseller in his own form that may be shared with the Registrar. </span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><span style="font-size:11.0pt;font-family:"Trebuchet MS","sans-serif";color:#333333">Any of the above options would prevent Registrant data abuse in a situation where there are a multitude of Resellers. If such a
process could be designed and implemented, the Resellers would retain the basic contact information for them the opportunity to maintain contact with their customers, Registrars would get a copy of whatever commercial data that they require from the Resellers
or from their direct customers, the Registry would still retain most of the data with a copy for the ICANN in a database, and only ICANN retain the ultra-sensitive data, if there is any part of Registrant data is ultra-sensitive by any other name. </span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><span style="font-size:11.0pt;font-family:"Trebuchet MS","sans-serif";color:#333333">Law and Order Requests:</span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><span style="font-size:11.0pt;font-family:"Trebuchet MS","sans-serif";color:#333333">Such a new process would require a system of handling Law and Order Requests. ICANN could facilitate/ help to create/ or actually
‘own’ a well designed process involving a highly ethical team of community members to screen requests from Law and Order authorities anywhere to access data, and to determine what portion of data to be released or allowed access.
</span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><span style="font-size:11.0pt;font-family:"Trebuchet MS","sans-serif";color:#333333">The caution needed here is that such a system may have to be well thought of, the privacy and security concerns to be examined in
extensive detail, the commercial privileges concerning Registrant data prevailing among Resellers, Registrars and Registries have be examined, the ability of ICANN / Internet Community to judge the validity of Law and Order requests and the strength of ICANN
to deny some requests if deemed necessary - all these aspects have to be examined in detail.</span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><span style="font-size:11.0pt;font-family:"Trebuchet MS","sans-serif";color:#333333">If the question "where does data reside" extends beyond Registrant data, the answer would be far more complicated. That would draw
the Internet Community's attention to questions concerning content in a very interesting way.</span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><span style="font-size:11.0pt;font-family:"Trebuchet MS","sans-serif";color:#333333">The details: (with some repetion)</span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><span style="font-size:11.0pt;font-family:"Trebuchet MS","sans-serif"">1. What I suggested was use of this form as a globally central system of collecting all Registrant data from Registrants through any Reseller/Registrar,
across the world, across all gTLDs. <span style="color:#333333">Sounds a bit scary, but could be fair.
</span></span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><span style="font-size:11.0pt;font-family:"Trebuchet MS","sans-serif"">2. The data collected by using the 'Verisign' Domain Name Registration form would be 'owned' by ICANN</span><span style="font-size:11.0pt;font-family:"Arial","sans-serif";color:#333333"></span><span style="font-size:11.0pt;font-family:"Trebuchet MS","sans-serif"">,
the term 'owned' implying responsibility.</span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><span style="font-size:11.0pt;font-family:"Trebuchet MS","sans-serif"">3. By an automated process, the data entered by the Registrant as received in total by ICANN could get classified according to predetermined
and gradually increasing levels of privileges between the Reseller who registered the domain name for the Registrant (for example, the information gathered from form fields 1-5), the Registrar under whom the Reseller operates (for example, the information
gathered from form fields 1-5 + fields 6-7), the Registry who operates that TLD (for example form fields 1-7 + form fields 8-10) and ICANN (all form fields 1-20). Without any discernible delay, ICANN Storage returns the information from 1-5 to that Reseller,
1-7 to that Registrar, 1-10 to that Registry and retains a copy of <span style="color:#333333">
all of </span></span><span style="font-size:11.0pt;font-family:"Arial","sans-serif";color:#333333"></span><span style="font-size:11.0pt;font-family:"Trebuchet MS","sans-serif"">1-20 in its highly secure storage with community oversight.</span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><span style="font-size:11.0pt;font-family:"Trebuchet MS","sans-serif"">4. The same method could be used to determine what information gets published on whois. (for example, it could be agreed by the ICANN community
that form fields 2, 4, 5, and 7 gets published in the public whois database.</span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><span style="font-size:11.0pt;font-family:"Trebuchet MS","sans-serif"">5. If there is agreement that Law and Order Agencies could UNIVERSALLY access an additional portion of the Registrant data over and above whois,
WITHOUT the need to make a request or produce a warrant, we could agree to transfer a copy of all form fields in whois
<span style="color:#333333">(2,4,5 and 7)</span></span><span style="font-size:11.0pt;font-family:"Arial","sans-serif";color:#333333"></span><span style="font-size:11.0pt;font-family:"Trebuchet MS","sans-serif";color:#333333">
</span><span style="font-size:11.0pt;font-family:"Trebuchet MS","sans-serif"">+ the information gathered in form field 14 and 17 to, lets say,
</span><span style="font-size:11.0pt;font-family:"Arial","sans-serif";color:#333333"></span><span style="font-size:11.0pt;font-family:"Trebuchet MS","sans-serif";color:#333333">to
</span><span style="font-size:11.0pt;font-family:"Arial","sans-serif";color:#333333"></span><span style="font-size:11.0pt;font-family:"Trebuchet MS","sans-serif"">the Interpol data base.</span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><span style="font-size:11.0pt;font-family:"Trebuchet MS","sans-serif"">6. Apart from the Domain Registration form, for Law and Order requests, as in cases where the FBI or the police in any other country require
specific information, a similar, possibly even a relatively less transparent form could be designed to allow the Law and Order Agency to document their requests to ICANN to release information. This could be
<span style="color:#333333">the form to fill in, for </span>FBI <span style="color:#333333">
to make a request</span></span><span style="font-size:11.0pt;font-family:"Arial","sans-serif";color:#333333"></span><span style="font-size:11.0pt;font-family:"Trebuchet MS","sans-serif";color:#333333">
</span><span style="font-size:11.0pt;font-family:"Trebuchet MS","sans-serif"">for all Registrants' 1-20 data on .terror, or
</span><span style="font-size:11.0pt;font-family:"Arial","sans-serif";color:#333333"></span><span style="font-size:11.0pt;font-family:"Trebuchet MS","sans-serif";color:#333333">for a
</span><span style="font-size:11.0pt;font-family:"Trebuchet MS","sans-serif"">culturally aggressive Government
<span style="color:#333333">to make a request</span></span><span style="font-size:11.0pt;font-family:"Arial","sans-serif";color:#333333"></span><span style="font-size:11.0pt;font-family:"Trebuchet MS","sans-serif";color:#333333">
</span><span style="font-size:11.0pt;font-family:"Trebuchet MS","sans-serif"">for all Registrants' 1-20 data on .wildsex. Or
</span><span style="font-size:11.0pt;font-family:"Arial","sans-serif";color:#333333"></span><span style="font-size:11.0pt;font-family:"Trebuchet MS","sans-serif";color:#333333">for the Law and Order Agency of another country to make
</span><span style="font-size:11.0pt;font-family:"Arial","sans-serif";color:#333333"></span><span style="font-size:11.0pt;font-family:"Trebuchet MS","sans-serif"">a more specific request for 16-18 of a particular domain registrant.</span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><span style="font-size:11.0pt;font-family:"Arial","sans-serif";color:#333333"></span><span style="font-size:11.0pt;font-family:"Trebuchet MS","sans-serif";color:#333333">7.
</span><span style="font-size:11.0pt;font-family:"Arial","sans-serif";color:#333333"></span><span style="font-size:11.0pt;font-family:"Trebuchet MS","sans-serif"">This relatively less transparent form
<span style="color:#333333">as described in (6) above, </span></span><span style="font-size:11.0pt;font-family:"Arial","sans-serif";color:#333333"></span><span style="font-size:11.0pt;font-family:"Trebuchet MS","sans-serif"">would be visible to the Trustees
of Registrant Data, (loosely we could say at this stage, for the purpose of illustration, this could be a Board
<span style="color:#333333">or Council </span></span><span style="font-size:11.0pt;font-family:"Arial","sans-serif";color:#333333"></span><span style="font-size:11.0pt;font-family:"Trebuchet MS","sans-serif"">of 30 or more Nominees by ICANN, ISOC, IETF, Privacy
Organizations, Government representatives from such Departments as Department of Culture, other Civil Society organizations of relevance, Trustees to
</span><span style="font-size:11.0pt;font-family:"Arial","sans-serif";color:#333333"></span><span style="font-size:11.0pt;font-family:"Trebuchet MS","sans-serif";color:#333333">be
</span><span style="font-size:11.0pt;font-family:"Arial","sans-serif";color:#333333"></span><span style="font-size:11.0pt;font-family:"Trebuchet MS","sans-serif"">drawn for their individual propensity to be trusted and for their ability to judge the merits
of Law and Order requests). The trustees would make the </span><span style="font-size:11.0pt;font-family:"Arial","sans-serif";color:#333333"></span><span style="font-size:11.0pt;font-family:"Trebuchet MS","sans-serif";color:#333333">Law and Order
</span><span style="font-size:11.0pt;font-family:"Arial","sans-serif";color:#333333"></span><span style="font-size:11.0pt;font-family:"Trebuchet MS","sans-serif"">requests transparent only in extremely difficult cases, for example in the case of a request
for 1-20 data on .sex by a country known for culturally extreme positions, request denied, and the Trustees politically challenged.</span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><span style="font-size:11.0pt;font-family:"Arial","sans-serif";color:#333333"></span><span style="font-size:11.0pt;font-family:"Trebuchet MS","sans-serif";color:#333333">8.</span><span style="font-size:11.0pt;font-family:"Arial","sans-serif";color:#333333"></span><span style="font-size:11.0pt;font-family:"Trebuchet MS","sans-serif";color:#333333">
The relatively </span><span style="font-size:11.0pt;font-family:"Trebuchet MS","sans-serif"">less transparent form as described in 6, could also be so designed as to accept “a secret law enforcement request (warrant or other legal document), and manage the
expiry date of the secrecy of the warrant". The idea of designing this second Law and Order Access form would be to "to deal with law enforcement's demands that their investigations be private".</span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><span style="font-size:11.0pt;font-family:"Arial","sans-serif";color:#333333"></span><span style="font-size:11.0pt;font-family:"Trebuchet MS","sans-serif";color:#333333">9</span><span style="font-size:11.0pt;font-family:"Arial","sans-serif";color:#333333"></span><span style="font-size:11.0pt;font-family:"Trebuchet MS","sans-serif";color:#333333">.</span><span style="font-size:11.0pt;font-family:"Trebuchet MS","sans-serif"">Even
the doors opened on specific requests would be in such a manner as to ensure that the Law and Order Agencies do not "go for a romp in the system, for an indefinite period."</span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><span style="font-size:11.0pt;font-family:"Arial","sans-serif";color:#333333"></span><span style="font-size:11.0pt;font-family:"Trebuchet MS","sans-serif";color:#333333">10</span><span style="font-size:11.0pt;font-family:"Arial","sans-serif";color:#333333"></span><span style="font-size:11.0pt;font-family:"Trebuchet MS","sans-serif";color:#333333">.
</span><span style="font-size:11.0pt;font-family:"Trebuchet MS","sans-serif"">Such a collection, Storage and Request for Access system, in combination, would make it rare for ICANN to consider, or even reasonably deny, excessive backdoors for Law and Order
access, not to FBI, nor to Scotland Yard, not to the Interpol, not to the CBI of India.</span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><span style="font-size:11.0pt;font-family:"Trebuchet MS","sans-serif"">This proposal could be discussed, or even tested, by ICANN delegating a test domain, .test, or .dnsdata, to itself, make it somewhat privately
operational, assign roles as “Registrars”, “Resellers” to volunteers from Business, ask Community participants to take up the role of Registrants and register .test names, first to test the technical feasibility of such a system, then to determine what personal
data is absolutely needed, what is commercially desirable, what is needed for National Security, and what safeguards are needed for sharing this data between the Registrar and Registry, and what would be routinely made available to Law and Order, what part
of the data would be released on requests and how, for what time frame, and what would be denied. This test TLD could also be more vividly used to simulate content regulation scenarios.</span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><span style="font-size:11.0pt;font-family:"Trebuchet MS","sans-serif"">Sivasubramanian M</span><o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><span style="font-size:11.0pt;font-family:"Arial","sans-serif";color:#333333"></span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-family:"Arial","sans-serif";color:#333333"></span><o:p></o:p></p>
</div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</div>
</body>
</html>