<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 14 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:Helvetica;
panose-1:2 11 6 4 2 2 2 2 2 4;}
@font-face
{font-family:Helvetica;
panose-1:2 11 6 4 2 2 2 2 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
font-family:"Calibri","sans-serif";
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
font-family:"Calibri","sans-serif";
color:purple;
text-decoration:underline;}
p
{mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
{mso-style-priority:99;
mso-style-link:"Balloon Text Char";
margin:0in;
margin-bottom:.0001pt;
font-size:8.0pt;
font-family:"Tahoma","sans-serif";}
p.mso-border-outer, li.mso-border-outer, div.mso-border-outer
{mso-style-name:mso-border-outer;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
background:#F5FFFF;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
p.mso-border-middle, li.mso-border-middle, div.mso-border-middle
{mso-style-name:mso-border-middle;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
background:#DFF6FF;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
p.mso-border-inner, li.mso-border-inner, div.mso-border-inner
{mso-style-name:mso-border-inner;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
background:#99B0E1;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
p.outlook-com-only, li.outlook-com-only, div.outlook-com-only
{mso-style-name:outlook-com-only;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:1.0pt;
font-family:"Times New Roman","serif";
display:none;}
p.border-outer, li.border-outer, div.border-outer
{mso-style-name:border-outer;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
p.border-middle, li.border-middle, div.border-middle
{mso-style-name:border-middle;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
p.border-inner, li.border-inner, div.border-inner
{mso-style-name:border-inner;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
span.EmailStyle25
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.BalloonTextChar
{mso-style-name:"Balloon Text Char";
mso-style-priority:99;
mso-style-link:"Balloon Text";
font-family:"Tahoma","sans-serif";}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:894780070;
mso-list-template-ids:1155814538;}
@list l0:level1
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level2
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:1.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:1.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level5
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level8
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
ol
{margin-bottom:0in;}
ul
{margin-bottom:0in;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1030" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Ayden,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Has someone suggested that “</span><span style="font-family:"Calibri","sans-serif"">privacy must be eroded to the point where anyone, for any reason, can query
the RDS and retrieve such sensitive personal information</span><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">”?<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Chuck<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">From:</span></b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif""> gnso-rds-pdp-wg-bounces@icann.org [mailto:gnso-rds-pdp-wg-bounces@icann.org]
<b>On Behalf Of </b>Ayden Férdeline<br>
<b>Sent:</b> Monday, August 01, 2016 6:02 PM<br>
<b>To:</b> Rod Rasmussen<br>
<b>Cc:</b> gnso-rds-pdp-wg@icann.org<br>
<b>Subject:</b> Re: [gnso-rds-pdp-wg] Use Case - Dissident Group Using the Internet to Communicate Information<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" width="100%" style="width:100.0%">
<tbody>
<tr>
<td valign="top" style="padding:0in 0in 0in 0in">
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0">
<tbody>
<tr>
<td valign="top" style="padding:0in 0in 0in 0in">
<div>
<p class="MsoNormal"><span style="font-family:"Calibri","sans-serif"">Thanks for your comments, Rod. <o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:"Calibri","sans-serif""><o:p> </o:p></span></p>
</div>
<blockquote style="border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in">
<div>
<p class="MsoNormal"><span style="font-family:"Calibri","sans-serif"">That primary concept is for a registrant to be able to definitively prove their ownership (or “right to control/use" if you don’t like the concept of “owning” domains) of a domain name. Someone
has to have that information - the registrar is the base case - in order for the vast, vast majority of domain holders to do things like transfer their domain between registrars, sell the rights to their domain to some other party, obtain domain-related services,
ensure their domain is not hijacked or can be recovered if it is, etc.<o:p></o:p></span></p>
</div>
</blockquote>
<div>
<p class="MsoNormal"><span style="font-family:"Calibri","sans-serif""><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:"Calibri","sans-serif"">I see where you are coming from here, I just question why privacy must be eroded to the point where anyone, for any reason, can query the RDS and retrieve such sensitive personal information.<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:"Calibri","sans-serif""><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:"Calibri","sans-serif"">If I run with the arguments I've heard in this thread, there are two main reasons for why we need a WHOIS-like service. One is so that if a domain name causes problems (intentionally or otherwise)
or has technical issues, there's a point of contact who can be reached. The second argument, the one you have raised, is that there should be some kind of record, like a land title registry, of who owns each domain name. I'll admit I hadn't considered the
latter before, and I've been reflecting on the idea over the past few days.<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:"Calibri","sans-serif""><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:"Calibri","sans-serif"">In Helsinki at our cross-community session, Jordyn Buchanan from Google said we shouldn't include any requirements where there's another, alternative mechanism to achieve the same result
in a better way. Applying his suggestion here, there really would seem to be no need to know who owns a domain name, so long as there is a mechanism through which a message can be relayed to the registrant if there is a legitimate need to do so. Do questions
of domain name ownership not fall within the remit of whatever contract exists between the registrar and the registrant? One of the data elements I suggested collecting was the name of the registrar. I imagine that most registrars retain the billing information
of their active customers, so if they receive some kind of legal action, they have the capacity to pass this along to the billing contact. Likewise, if law enforcement is investigating something, provided due process is followed they may be able to query the
billing contact information. However, I remain firmly of the view that such sensitive information should not be free for anyone to query and retrieve.<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:"Calibri","sans-serif""><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:"Calibri","sans-serif"">Best wishes,<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:"Calibri","sans-serif""><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:"Calibri","sans-serif"">Ayden<o:p></o:p></span></p>
</div>
<p class="MsoNormal"><!--[if gte vml 1]><v:shapetype id="_x0000_t75" coordsize="21600,21600" o:spt="75" o:preferrelative="t" path="m@4@5l@4@11@9@11@9@5xe" filled="f" stroked="f">
<v:stroke joinstyle="miter" />
<v:formulas>
<v:f eqn="if lineDrawn pixelLineWidth 0" />
<v:f eqn="sum @0 1 0" />
<v:f eqn="sum 0 0 @1" />
<v:f eqn="prod @2 1 2" />
<v:f eqn="prod @3 21600 pixelWidth" />
<v:f eqn="prod @3 21600 pixelHeight" />
<v:f eqn="sum @0 0 1" />
<v:f eqn="prod @6 1 2" />
<v:f eqn="prod @7 21600 pixelWidth" />
<v:f eqn="sum @8 21600 0" />
<v:f eqn="prod @7 21600 pixelHeight" />
<v:f eqn="sum @10 21600 0" />
</v:formulas>
<v:path o:extrusionok="f" gradientshapeok="t" o:connecttype="rect" />
<o:lock v:ext="edit" aspectratio="t" />
</v:shapetype><v:shape id="_x0000_s1026" type="#_x0000_t75" alt="" style='position:absolute;margin-left:0;margin-top:0;width:.75pt;height:.75pt;z-index:251658240;mso-wrap-distance-left:0;mso-wrap-distance-top:0;mso-wrap-distance-right:0;mso-wrap-distance-bottom:0;mso-position-horizontal:left;mso-position-horizontal-relative:text;mso-position-vertical-relative:line' o:allowoverlap="f">
<v:imagedata src="https://app.mixmax.com/api/track/v2/2LM7xORtH7PxLyIdA/i02bj5SZulGblRmclZGQu5WYjlmI/icmcv5ibuF2YpB0Z31CckBXLzRmct82cudmI/icmcv5ibuF2YpB0Z31CckBXLzRmct82cudmI?sc=false" />
<w:wrap type="square"/>
</v:shape><![endif]--><![if !vml]><img src="https://app.mixmax.com/api/track/v2/2LM7xORtH7PxLyIdA/i02bj5SZulGblRmclZGQu5WYjlmI/icmcv5ibuF2YpB0Z31CckBXLzRmct82cudmI/icmcv5ibuF2YpB0Z31CckBXLzRmct82cudmI?sc=false" align="left" v:shapes="_x0000_s1026"><![endif]><span style="font-family:"Calibri","sans-serif""><o:p></o:p></span></p>
</td>
</tr>
</tbody>
</table>
</td>
</tr>
</tbody>
</table>
<div>
<div>
<p><o:p> </o:p></p>
<div>
<p><o:p> </o:p></p>
<div>
<p class="MsoNormal">On Tue, Jul 26, 2016 6:17 PM, Rod Rasmussen <a href="mailto:rrasmussen@infoblox.com" target="_blank">
<span style="font-family:"Calibri","sans-serif"">rrasmussen@infoblox.com</span></a> wrote:<o:p></o:p></p>
<p class="MsoNormal">So let point out that the EWG spent a huge amount of time on exactly this use case area to address these very difficult issues and concerns to life and liberty. One reason that this took a lot of time is that the option that Ayden is advocating
for here that you cannot store ANY personally identifiable data in any place anywhere (paraphrasing, please correct if I’m misinterpreting you here) due to risk of its exposure due to some compromise in the chain (RDS, registry, registrar, P/P service) runs
counter to one of the *primary* use case building blocks for domain registrants. That primary concept is for a registrant to be able to definitively prove their ownership (or “right to control/use" if you don’t like the concept of “owning” domains) of a domain
name. Someone has to have that information - the registrar is the base case - in order for the vast, vast majority of domain holders to do things like transfer their domain between registrars, sell the rights to their domain to some other party, obtain domain-related
services, ensure their domain is not hijacked or can be recovered if it is, etc. So imposing requirements for a minuscule fraction of the domain registrant population in order to handle an uncommon (yet vitally important!) use case is simply disproportional.
This is a great example of why you develop use cases - to tease out where they conflict, and instead of proscribing solutions up front (in this case not collecting information at all) you explore what the goals are (in this case, making sure that an oppressive
regime cannot get ahold of the personal information of a dissident that could put that at risk of harm) to see how to solve those while imposing such restrictions on the system that you can’t accomplish other, equal or in this case, far more important goals
of the system.<o:p></o:p></p>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">So, what did we do on the EWG? We proposed an entire system for dealing with such circumstances and that is explained in section VII b. Secure Protected Credentials Principals on pages 101-108 of the EWG report (<a href="https://www.icann.org/en/system/files/files/final-report-06jun14-en.pdf"><span style="font-family:"Calibri","sans-serif"">https://www.icann.org/en/system/files/files/final-report-06jun14-en.pdf</span></a>).
I would refer people with an interest in this topic to that rather detailed section of our report to see a potential way forward on these issues. Since the writing of the EWG report, much more work has occurred within the space of providing anonymous, yet
verifiable credentialing, particularly with the use of blockchain technologies which are open source, and largely available at very low cost for usage in software products and online services. Domain registration is not the only area where people have this
sort of interest, and the market, along with the technical community, are responding accordingly. So while this is just one way of solving this use case, and may not be fully fleshed out to the implementation level in the current level of documentation, I
will posit that when you run into a use case like this that runs counter to many others, there will often be a way to solve it without hampering or invalidating other use cases, particularly fundamental ones.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Cheers,<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Rod<o:p></o:p></p>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<div>
<div>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:black">Rod Rasmussen<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#595959">VP, Cybersecurity</span><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:black"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:black"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:black"><a href="http://www.infoblox.com/"><span style="font-size:11.0pt;color:windowtext;text-decoration:none"><img border="0" width="180" height="59" id="_x0038_2F2D380-68DD-45CD-B4D3-81DD436A8CED" src="cid:image001.png@01D1EC4A.59316740"></span><span style="color:black;text-decoration:none">- </span><span style="font-size:11.0pt;color:windowtext;text-decoration:none">
</span></a><o:p></o:p></span></p>
</div>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<p class="MsoNormal">On Jul 26, 2016, at 8:57 AM, Ayden Férdeline <<a href="mailto:icann@ferdeline.com"><span style="font-family:"Calibri","sans-serif"">icann@ferdeline.com</span></a>> wrote:<o:p></o:p></p>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" width="1440" style="width:15.0in;font-variant-caps: normal;orphans: auto;text-align:start;widows: auto;-webkit-text-stroke-width: 0px;word-spacing:0px">
<tbody>
<tr>
<td valign="top" style="padding:4.5pt 0in 0in 0in">
<div>
<p class="MsoNormal" style="margin-top:4.5pt"><span style="font-size:9.0pt;font-family:"Arial","sans-serif";color:#222222">Thanks for the questions, Alex. I am happy to clarify.<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="margin-top:4.5pt"><span style="font-size:9.0pt;font-family:"Arial","sans-serif";color:#222222"><o:p> </o:p></span></p>
</div>
<blockquote style="border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in">
<div>
<p class="MsoNormal" style="margin-top:4.5pt"><span style="font-size:9.0pt;font-family:"Arial","sans-serif";color:#222222">Based on the details you outline, particularly the limitations you place on the RDS data elements, can you comment on how technical issues
with the dissidents domain name operation are handled? <o:p></o:p></span></p>
</div>
</blockquote>
<div>
<p class="MsoNormal" style="margin-top:4.5pt"><span style="font-size:9.0pt;font-family:"Arial","sans-serif";color:#222222"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="margin-top:4.5pt"><span style="font-size:9.0pt;font-family:"Arial","sans-serif";color:#222222">I consider this to be registrar-registrant contract information. As such, it is up to the registrar to determine which additional data
elements they wish to collect (if any), how they wish to store this data (if applicable), and to whom they wish to release it, in accordance with local laws and the informed consent of their customers.<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="margin-top:4.5pt"><span style="font-size:9.0pt;font-family:"Arial","sans-serif";color:#222222"><o:p> </o:p></span></p>
</div>
<blockquote style="border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in">
<div>
<p class="MsoNormal" style="margin-top:4.5pt"><span style="font-size:9.0pt;font-family:"Arial","sans-serif";color:#222222">As for the cost of P/P services I appreciate the view it is an added cost (and even FWIW that one should not have to pay for privacy)
but so is the purchase of the domain name, hosting provider, web-site, tis cert (the non-free ones) to enable transport encryption, etc. If there are funds available to purchase (and maintain) a domain name (and the site behind it) I’m not sure the extra cost
for the P/P add-on is truly prohibitive. <o:p></o:p></span></p>
</div>
</blockquote>
<div>
<p class="MsoNormal" style="margin-top:4.5pt"><span style="font-size:9.0pt;font-family:"Arial","sans-serif";color:#222222"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="margin-top:4.5pt"><span style="font-size:9.0pt;font-family:"Arial","sans-serif";color:#222222">It is possible that the web hosting or these other required products/services have been donated.<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="margin-top:4.5pt"><span style="font-size:9.0pt;font-family:"Arial","sans-serif";color:#222222"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="margin-top:4.5pt"><span style="font-size:9.0pt;font-family:"Arial","sans-serif";color:#222222">But the principle is less about the cost and more about the data being collected in the first place. If there exists a database which
contains personally identifiable information, even if this information is stored behind a locked door, it is not unimaginable to anticipate it will be breached at some stage. And once data is leaked, the damage is permanent. <o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="margin-top:4.5pt"><span style="font-size:9.0pt;font-family:"Arial","sans-serif";color:#222222"><o:p> </o:p></span></p>
</div>
<blockquote style="border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in">
<div>
<p class="MsoNormal" style="margin-top:4.5pt"><span style="font-size:9.0pt;font-family:"Arial","sans-serif";color:#222222">Lastly, can you clarify the term “foreign nation” in the scenario description? Is it the same or different from the nation of the dissident?
This is a small detail perhaps but one that got me thinking about how (or even if) this use case would play out in a real world scenario.<o:p></o:p></span></p>
</div>
</blockquote>
<div>
<p class="MsoNormal" style="margin-top:4.5pt"><span style="font-size:9.0pt;font-family:"Arial","sans-serif";color:#222222"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="margin-top:4.5pt"><span style="font-size:9.0pt;font-family:"Arial","sans-serif";color:#222222">The dissident lives in country X. The foreign nation is any other sovereign state except X.<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="margin-top:4.5pt"><span style="font-size:9.0pt;font-family:"Arial","sans-serif";color:#222222"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="margin-top:4.5pt"><span style="font-size:9.0pt;font-family:"Arial","sans-serif";color:#222222">Best wishes,<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="margin-top:4.5pt"><span style="font-size:9.0pt;font-family:"Arial","sans-serif";color:#222222"><o:p> </o:p></span></p>
</div>
<div>
<div>
<p class="MsoNormal" style="margin-top:4.5pt"><span style="font-size:9.0pt;font-family:"Arial","sans-serif";color:#222222">Ayden <o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal" style="margin-top:4.5pt"><!--[if gte vml 1]><v:shape id="_x0000_s1027" type="#_x0000_t75" alt="" style='position:absolute;margin-left:0;margin-top:0;width:.75pt;height:.75pt;z-index:251659264;mso-wrap-distance-left:0;mso-wrap-distance-top:0;mso-wrap-distance-right:0;mso-wrap-distance-bottom:0;mso-position-horizontal:left;mso-position-horizontal-relative:text;mso-position-vertical-relative:line' o:allowoverlap="f">
<v:imagedata src="https://compose.mixmax.com/img/blank.png" />
<w:wrap type="square"/>
</v:shape><![endif]--><![if !vml]><img src="https://compose.mixmax.com/img/blank.png" align="left" v:shapes="_x0000_s1027"><![endif]><span style="font-size:9.0pt;font-family:"Arial","sans-serif";color:#222222"><o:p></o:p></span></p>
</td>
</tr>
</tbody>
</table>
<div>
<div>
<p><span style="font-size:9.0pt;font-family:"Helvetica","sans-serif""><o:p> </o:p></span></p>
<div>
<p><span style="font-size:9.0pt;font-family:"Helvetica","sans-serif""><o:p> </o:p></span></p>
<div>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Helvetica","sans-serif"">On Tue, Jul 26, 2016 4:46 PM, Deacon, Alex <a href="mailto:Alex_Deacon@mpaa.org" target="_blank"><span style="font-family:"Calibri","sans-serif"">Alex_Deacon@mpaa.org</span></a> wrote:<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Helvetica","sans-serif"">Thanks for the use case Ayden. A few questions/comments. <o:p></o:p></span></p>
<div>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Helvetica","sans-serif""><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Helvetica","sans-serif"">Based on the details you outline, particularly the limitations you place on the RDS data elements, can you comment on how technical issues with the dissidents domain name
operation are handled? <o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Helvetica","sans-serif""><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Helvetica","sans-serif"">As for the cost of P/P services I appreciate the view it is an added cost (and even FWIW that one should not have to pay for privacy) but so is the purchase of the domain
name, hosting provider, web-site, tis cert (the non-free ones) to enable transport encryption, etc. If there are funds available to purchase (and maintain) a domain name (and the site behind it) I’m not sure the extra cost for the P/P add-on is truly prohibitive.
<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Helvetica","sans-serif""><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Helvetica","sans-serif"">Lastly, can you clarify the term “foreign nation” in the scenario description? Is it the same or different from the nation of the dissident? This is a small detail perhaps
but one that got me thinking about how (or even if) this use case would play out in a real world scenario. <o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Helvetica","sans-serif""><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Helvetica","sans-serif"">Thanks!!<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Helvetica","sans-serif""><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Helvetica","sans-serif"">Alex<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Helvetica","sans-serif""><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Helvetica","sans-serif""><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Helvetica","sans-serif""><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Helvetica","sans-serif""><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Helvetica","sans-serif""><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Helvetica","sans-serif""><o:p> </o:p></span></p>
<div>
<div>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Helvetica","sans-serif"">On Jul 26, 2016, at 6:38 AM, Ayden Férdeline <<a href="mailto:icann@ferdeline.com"><span style="font-family:"Calibri","sans-serif"">icann@ferdeline.com</span></a>> wrote:<o:p></o:p></span></p>
</div>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Helvetica","sans-serif""><o:p> </o:p></span></p>
<div>
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" width="1440" style="width:15.0in;font-variant-caps: normal;orphans: auto;text-align:start;widows: auto;-webkit-text-stroke-width: 0px;word-spacing:0px">
<tbody>
<tr>
<td valign="top" style="padding:4.5pt 0in 0in 0in">
<div>
<p class="MsoNormal" style="margin-top:4.5pt"><span style="font-size:9.0pt;font-family:"Arial","sans-serif";color:#222222">Thanks for your comments, Greg. Without wanting to dive too deep into our deliberations, I would just like to briefly comment on this:<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="margin-top:4.5pt"><span style="font-size:9.0pt;font-family:"Arial","sans-serif";color:#222222"><o:p> </o:p></span></p>
</div>
<blockquote style="border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in">
<div>
<p class="MsoNormal" style="margin-top:4.5pt"><span style="font-size:9.0pt;font-family:"Arial","sans-serif";color:#222222">The actual market price of such services is inexpensive (for example GoDaddy’s is US$7.00 per year). It may be reasonable to assume that
at-risk dissidents are aware that privacy services exist, and can afford the minimal cost.<o:p></o:p></span></p>
</div>
</blockquote>
<div>
<p class="MsoNormal" style="margin-top:4.5pt"><span style="font-size:9.0pt;font-family:"Arial","sans-serif";color:#222222"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="margin-top:4.5pt"><span style="font-size:9.0pt;font-family:"Arial","sans-serif";color:#222222">I do not think it is reasonable to make such an assumption. Privacy proxy services have not reached critical mass, as most domain names
are not protected through such cloaks. <o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="margin-top:4.5pt"><span style="font-size:9.0pt;font-family:"Arial","sans-serif";color:#222222"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="margin-top:4.5pt"><span style="font-size:9.0pt;font-family:"Arial","sans-serif";color:#222222">In addition, the subscription cost of such services must be seen as relative to local incomes and the ability to make a purchase in a
foreign currency. It is not easy for everyone in every country to purchase goods online; not everyone has access to a credit card, and in many regions payment processors do not accept all currencies. And while US$7.00 per year may not be a lot to you or I,
it is a significant amount of money to some. <o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="margin-top:4.5pt"><span style="font-size:9.0pt;font-family:"Arial","sans-serif";color:#222222"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="margin-top:4.5pt"><span style="font-size:9.0pt;font-family:"Arial","sans-serif";color:#222222">When I was living in Argentina in 2014, the government imposed restrictions on online purchases as part of efforts to prevent foreign
currency reserves from dwindling. At one stage, I believe that Argentine credit cards were limited to making no more than US$25 per month in foreign transactions. In such a case a dissent group would have to choose carefully how to allocate their resources.
Do they buy Skype credit to make calls abroad? Do they buy a privacy proxy cloak? Do they purchase literature from abroad that cannot be purchased locally?<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="margin-top:4.5pt"><span style="font-size:9.0pt;font-family:"Arial","sans-serif";color:#222222"><o:p> </o:p></span></p>
</div>
<blockquote style="border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in">
<div>
<p class="MsoNormal" style="margin-top:4.5pt"><span style="font-size:9.0pt;font-family:"Arial","sans-serif";color:#222222">Government authorities in the dissident’s country request the underlying registrant data from the privacy service provider. The privacy
service provider must then decide whether it will accept the government’s complaint.<o:p></o:p></span></p>
</div>
</blockquote>
<div>
<p class="MsoNormal" style="margin-top:4.5pt"><span style="font-size:9.0pt;font-family:"Arial","sans-serif";color:#222222"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="margin-top:4.5pt"><span style="font-size:9.0pt;font-family:"Arial","sans-serif";color:#222222">This operates on the assumption that due process is followed. A privacy service provider is not a court and, as far as I am aware, there
is no binding entitlement to domain name registrants to a fair and public hearing within a reasonable time by an independent, competent, and impartial tribunal as to whether the registrant's data should be released to that government authority?<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="margin-top:4.5pt"><span style="font-size:9.0pt;font-family:"Arial","sans-serif";color:#222222"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="margin-top:4.5pt"><span style="font-size:9.0pt;font-family:"Arial","sans-serif";color:#222222">This also assumes that the data is requested and not simply taken. Given efforts are underway globally to restrict encryption, we cannot
presume that all governments worldwide will follow due process if the data they desire exists in some form where it can somehow be extracted.<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="margin-top:4.5pt"><span style="font-size:9.0pt;font-family:"Arial","sans-serif";color:#222222"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="margin-top:4.5pt"><span style="font-size:9.0pt;font-family:"Arial","sans-serif";color:#222222">Best wishes,<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="margin-top:4.5pt"><span style="font-size:9.0pt;font-family:"Arial","sans-serif";color:#222222"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="margin-top:4.5pt"><span style="font-size:9.0pt;font-family:"Arial","sans-serif";color:#222222">Ayden<o:p></o:p></span></p>
</div>
<p class="MsoNormal" style="margin-top:4.5pt"><!--[if gte vml 1]><v:shape id="_x0000_s1028" type="#_x0000_t75" alt="" style='position:absolute;margin-left:0;margin-top:0;width:.75pt;height:.75pt;z-index:251660288;mso-wrap-distance-left:0;mso-wrap-distance-top:0;mso-wrap-distance-right:0;mso-wrap-distance-bottom:0;mso-position-horizontal:left;mso-position-horizontal-relative:text;mso-position-vertical-relative:line' o:allowoverlap="f">
<v:imagedata src="https://compose.mixmax.com/img/blank.png" />
<w:wrap type="square"/>
</v:shape><![endif]--><![if !vml]><img src="https://compose.mixmax.com/img/blank.png" align="left" v:shapes="_x0000_s1028"><![endif]><span style="font-size:9.0pt;font-family:"Arial","sans-serif";color:#222222"><o:p></o:p></span></p>
</td>
</tr>
</tbody>
</table>
<div>
<div>
<p><span style="font-size:9.0pt;font-family:"Helvetica","sans-serif""><o:p> </o:p></span></p>
<div>
<p><span style="font-size:9.0pt;font-family:"Helvetica","sans-serif""><o:p> </o:p></span></p>
<div>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Helvetica","sans-serif"">On Tue, Jul 26, 2016 2:10 PM, Greg Aaron <a href="mailto:gca@icginc.com" target="_blank"><span style="font-family:"Calibri","sans-serif"">gca@icginc.com</span></a> wrote:<o:p></o:p></span></p>
<div>
<p><a name="_MailEndCompose"><span style="font-size:9.0pt;font-family:"Calibri","sans-serif"">Here are three cases that are variations of the scenario that Ayden presented. </span></a><span style="font-size:9.0pt;font-family:"Calibri","sans-serif""><o:p></o:p></span></p>
<p><span style="font-size:9.0pt;font-family:"Calibri","sans-serif""><o:p> </o:p></span></p>
<p style="text-indent:-.25in"><span style="font-size:9.0pt;font-family:"Calibri","sans-serif"">1.</span><span style="font-size:7.0pt"> </span><span style="font-size:9.0pt;font-family:"Calibri","sans-serif"">Member of the dissident group registers a gTLD
domain name using a privacy service, located in a different country from the registrant. The actual market price of such services is inexpensive (for example GoDaddy’s is US$7.00 per year). It may be reasonable to assume that at-risk dissidents are aware
that privacy services exist, and can afford the minimal cost. Government authorities in the dissident’s country request the underlying registrant data from the privacy service provider. The privacy service provider must then decide whether it will accept
the government’s complaint. The decision may depend mainly on whether the service provider believes the registrant has breached the service provider’s terms of service, as interpreted under the laws of the service provider’s country (not the country of the
registrant and the complaining government).<o:p></o:p></span></p>
<p><span style="font-size:9.0pt;font-family:"Calibri","sans-serif""><o:p> </o:p></span></p>
<p style="text-indent:-.25in"><span style="font-size:9.0pt;font-family:"Calibri","sans-serif"">2.</span><span style="font-size:7.0pt"> </span><span style="font-size:9.0pt;font-family:"Calibri","sans-serif""> Instead of a gTLD domain, member of the dissident
group chooses to register a ccTLD domain, in a ccTLD that does not provide registrant contact data in its WHOIS. The ccTLD registry and registrar are outside the dissident’s country. If the government authorities in the dissident’s country wish to obtain
contact data, the government authorities must contact either the registrar or registry, which will then consider the complaint according to their terms of service, as interpreted under the laws of the registrar’s or registry’s country.<o:p></o:p></span></p>
<p><span style="font-size:9.0pt;font-family:"Calibri","sans-serif""><o:p> </o:p></span></p>
<p style="text-indent:-.25in"><span style="font-size:9.0pt;font-family:"Calibri","sans-serif"">3.</span><span style="font-size:7.0pt"> </span><span style="font-size:9.0pt;font-family:"Calibri","sans-serif"">Member of the dissident group registers a gTLD
domain name using a proxy, such as a law firm located in another country. If government authorities in the dissident’s country request the identity of the dissident, the proxy must decide whether to reveal its client’s name. The proxy is not subject to the
jurisdiction of the foreign government. <o:p></o:p></span></p>
<p><span style="font-size:9.0pt;font-family:"Calibri","sans-serif""><o:p> </o:p></span></p>
<p><span style="font-size:9.0pt;font-family:"Calibri","sans-serif"">These use cases assume that dissidents wish to take steps to keep their identities from their government regime. All three cases allow the registrant to work within existing ICANN registration
data policies, including the recommendations that have come out of the recent privacy/proxy PDP.<o:p></o:p></span></p>
<p><span style="font-size:9.0pt;font-family:"Calibri","sans-serif""><o:p> </o:p></span></p>
<p><span style="font-size:9.0pt;font-family:"Calibri","sans-serif"">All best,<o:p></o:p></span></p>
<p><span style="font-size:9.0pt;font-family:"Calibri","sans-serif"">--Greg<o:p></o:p></span></p>
<p><span style="font-size:10.0pt;font-family:"Calibri","sans-serif""><o:p> </o:p></span></p>
<p><span style="font-size:11.0pt;font-family:"Calibri","sans-serif""><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in">
<p><b><span style="font-size:11.0pt;font-family:"Calibri","sans-serif"">From:</span></b><span style="font-size:11.0pt;font-family:"Calibri","sans-serif""> <a href="mailto:gnso-rds-pdp-wg-bounces@icann.org">gnso-rds-pdp-wg-bounces@icann.org</a> [<a href="mailto:gnso-rds-pdp-wg-bounces@icann.org">mailto:gnso-rds-pdp-wg-bounces@icann.org</a>] <b>On
Behalf Of </b>Ayden Férdeline<br>
<b>Sent:</b> Monday, July 25, 2016 6:41 PM<br>
<b>To:</b> <a href="mailto:gnso-rds-pdp-wg@icann.org">gnso-rds-pdp-wg@icann.org</a><br>
<b>Subject:</b> [gnso-rds-pdp-wg] Use Case - Dissident Group Using the Internet to Communicate Information<o:p></o:p></span></p>
</div>
</div>
<p><span style="font-size:9.0pt;font-family:"Helvetica","sans-serif""><o:p> </o:p></span></p>
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" width="100%" style="width:100.0%">
<tbody>
<tr>
<td valign="top" style="padding:0in 0in 0in 0in">
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0">
<tbody>
<tr>
<td valign="top" style="padding:0in 0in 0in 0in">
<div>
<p><span style="font-family:"Calibri","sans-serif"">Hello all,<o:p></o:p></span></p>
</div>
<div>
<p><span style="font-family:"Calibri","sans-serif""><o:p> </o:p></span></p>
</div>
<div>
<p><span style="font-family:"Calibri","sans-serif"">I would like to introduce an additional use case. This is just a rough draft for now, and I welcome your feedback on how this use case can be strengthened. <o:p></o:p></span></p>
</div>
<div>
<p><span style="font-family:"Calibri","sans-serif""><o:p> </o:p></span></p>
</div>
<div>
<p><span style="font-family:"Calibri","sans-serif"">The scenario is: a dissident group launches a website to bring important news and information to the public. They register their domain name in a foreign nation and do not want law enforcement, or other parties,
to be able to identify the website’s administrators, management, and/or sources of information. If this information was made known, their publishing could be silenced and their sources and contributors could suffer harm. The registrant is not aware of the
existence of privacy proxy services at the time they register their domain name.<o:p></o:p></span></p>
</div>
<div>
<p><span style="font-family:"Calibri","sans-serif""><o:p> </o:p></span></p>
</div>
<div>
<p><b><span style="font-family:"Calibri","sans-serif"">Misuse Case:</span></b><span style="font-family:"Calibri","sans-serif""> The RDS could be used by State actors or other parties to identify members of or contributors to the dissident group, and this could
result in their voices being silenced through legal, political, or physical means.<o:p></o:p></span></p>
</div>
<div>
<p><span style="font-family:"Calibri","sans-serif""><o:p> </o:p></span></p>
</div>
<div>
<p><b><span style="font-family:"Calibri","sans-serif"">Main Misuse Case: </span></b><span style="font-family:"Calibri","sans-serif"">An actor is unhappy that a website in a country is publishing material that speaks unfavourably about a given topic. They wish
to launch political and legal attacks to silence the website’s publishers and to alter the narrative of the historical record on this topic. They thus utilise the RDS to identify a contact of someone involved in the administration of this website, with the
view of torturing or otherwise extracting from this contact the names and contact details of contributors to the dissenting website. As the registrant does not subscribe to a privacy proxy service (possibly because of limited financial resources, or lack of
awareness that such a service exists), their contact details have been permanently published into the public record and their privacy is thus permanently breached. As a result the RDS threatens the ability of dissenting voices to exercise their inalienable
rights in an online environment. <o:p></o:p></span></p>
</div>
<div>
<p><span style="font-family:"Calibri","sans-serif""><o:p> </o:p></span></p>
</div>
<div>
<p><b><span style="font-family:"Calibri","sans-serif"">Primary Actor: </span></b><span style="font-family:"Calibri","sans-serif"">Government or other entity wanting to censor a dissident group.<o:p></o:p></span></p>
</div>
<div>
<p><span style="font-family:"Calibri","sans-serif""><o:p> </o:p></span></p>
</div>
<div>
<p><b><span style="font-family:"Calibri","sans-serif"">Other stakeholders:</span></b><span style="font-family:"Calibri","sans-serif""> Domain name registrant.<o:p></o:p></span></p>
</div>
<div>
<p><span style="font-family:"Calibri","sans-serif""><o:p> </o:p></span></p>
</div>
<div>
<p><b><span style="font-family:"Calibri","sans-serif"">Scope:</span></b><span style="font-family:"Calibri","sans-serif""><o:p></o:p></span></p>
</div>
<div>
<p><span style="font-family:"Calibri","sans-serif""><o:p> </o:p></span></p>
</div>
<div>
<p><b><span style="font-family:"Calibri","sans-serif"">Level:</span></b><span style="font-family:"Calibri","sans-serif""><o:p></o:p></span></p>
</div>
<div>
<p><span style="font-family:"Calibri","sans-serif""><o:p> </o:p></span></p>
</div>
<div>
<p><b><span style="font-family:"Calibri","sans-serif"">Data Elements:</span></b><span style="font-family:"Calibri","sans-serif""> In order to prevent misuse by another actor, no personally identifiable information should be stored in the RDS whatsoever. The
only data elements that the RDS requires to operate on a technical level are: the domain name itself, the registrar, the domain name’s expiry date, and its status (registered / not registered). For it to be of functional use, there are two optional fields:
name servers, and the auth-code.<o:p></o:p></span></p>
</div>
<div>
<p><span style="font-family:"Calibri","sans-serif""><o:p> </o:p></span></p>
</div>
<div>
<p><b><span style="font-family:"Calibri","sans-serif"">Story: </span></b><span style="font-family:"Calibri","sans-serif""><o:p></o:p></span></p>
</div>
<ul type="disc">
<li class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l0 level1 lfo1">
<span style="font-family:"Calibri","sans-serif"">A requestor accesses the RDS to obtain information about a registered domain name. The RDS immediately returns the registration data associated with the domain name, which may include a name and physical address
of the registrant.<o:p></o:p></span></li><li class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l0 level1 lfo1">
<span style="font-family:"Calibri","sans-serif"">The requestor passes the extracted information on to a third party who visits the physical address of the contact. The registrant suffers physical harm as a result of the RDS and no longer feels comfortable using
the Internet to convey to the public important information.<o:p></o:p></span></li></ul>
<div>
<p><b><span style="font-family:"Calibri","sans-serif"">Privacy implications: </span></b><span style="font-family:"Calibri","sans-serif"">Article 19 of the Universal Declaration of Human Rights states that everyone has the right to freedom of opinion and expression;
this right includes the freedom to hold opinions without interference and to seek, receive, and impart information and ideas through any media and regardless of frontiers. These principles must be upheld in the RDS. An RDS that contains any personally-identifiable
information would threaten these very freedoms. Accordingly, the RDS must only collect and store data for limited, lawful, and appropriate purposes.<o:p></o:p></span></p>
</div>
<div>
<p><span style="font-family:"Calibri","sans-serif""><o:p> </o:p></span></p>
</div>
<div>
<p><b><span style="font-family:"Calibri","sans-serif"">Who has control of and access to the data:</span></b><span style="font-family:"Calibri","sans-serif""><o:p></o:p></span></p>
</div>
<div>
<p><b><span style="font-family:"Calibri","sans-serif""> </span></b><span style="font-family:"Calibri","sans-serif""><o:p></o:p></span></p>
</div>
<div>
<p><b><span style="font-family:"Calibri","sans-serif"">Conditions under which the data are accessible:</span></b><span style="font-family:"Calibri","sans-serif""><o:p></o:p></span></p>
</div>
<div>
<p><span style="font-family:"Calibri","sans-serif""> <o:p></o:p></span></p>
</div>
<div>
<p><b><span style="font-family:"Calibri","sans-serif"">How data can be accessed: </span></b><span style="font-family:"Calibri","sans-serif"">At this time, personally identifiable information can be accessed by any party in the world, for any reason. This is
not consistent with best practices in privacy protection.<o:p></o:p></span></p>
</div>
<div>
<p><span style="font-family:"Calibri","sans-serif""> <o:p></o:p></span></p>
</div>
<div>
<p><b><span style="font-family:"Calibri","sans-serif"">Other?</span></b><span style="font-family:"Calibri","sans-serif""><o:p></o:p></span></p>
</div>
<div>
<p><span style="font-family:"Calibri","sans-serif""> <o:p></o:p></span></p>
</div>
<div>
<p><span style="font-family:"Calibri","sans-serif"">As you can see, I have left a few of the fields in Lisa's template for use cases blank. I do not have all the answers, so I would very much welcome your suggestions on how this use case could be strengthened. I'm
still a little uncertain as to whether we are designing use cases for what the WHOIS protocol is like today (this is an assumption I have gone by in this first draft) or if this is meant to be more like a use case in a dream system instead. I'll revise this
use case once I understand this exercise a bit better.<o:p></o:p></span></p>
</div>
<div>
<p><span style="font-family:"Calibri","sans-serif""><o:p> </o:p></span></p>
</div>
<div>
<p><span style="font-family:"Calibri","sans-serif"">Thank you for your time, consideration, and feedback.<o:p></o:p></span></p>
</div>
<div>
<p><span style="font-family:"Calibri","sans-serif""><o:p> </o:p></span></p>
</div>
<div>
<p><span style="font-family:"Calibri","sans-serif"">Best wishes,<o:p></o:p></span></p>
</div>
<div>
<p><span style="font-family:"Calibri","sans-serif""><o:p> </o:p></span></p>
</div>
<div>
<p><span style="font-family:"Calibri","sans-serif"">Ayden Férdeline<o:p></o:p></span></p>
</div>
<p><!--[if gte vml 1]><v:shape id="_x0000_s1029" type="#_x0000_t75" alt="" style='position:absolute;margin-left:0;margin-top:0;width:.75pt;height:.75pt;z-index:251661312;mso-wrap-distance-left:0;mso-wrap-distance-top:0;mso-wrap-distance-right:0;mso-wrap-distance-bottom:0;mso-position-horizontal:left;mso-position-horizontal-relative:text;mso-position-vertical-relative:line' o:allowoverlap="f">
<v:imagedata src="https://compose.mixmax.com/img/blank.png" />
<w:wrap type="square"/>
</v:shape><![endif]--><![if !vml]><img src="https://compose.mixmax.com/img/blank.png" align="left" v:shapes="_x0000_s1029"><![endif]><span style="font-family:"Calibri","sans-serif""><o:p></o:p></span></p>
</td>
</tr>
</tbody>
</table>
</td>
</tr>
</tbody>
</table>
<p><span style="font-size:9.0pt;font-family:"Helvetica","sans-serif""><o:p> </o:p></span></p>
</div>
</div>
</div>
</div>
</div>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Helvetica","sans-serif""><br style="font-variant-caps: normal;orphans: auto;text-align:start;widows: auto;-webkit-text-stroke-width: 0px;word-spacing:0px">
<br>
<o:p></o:p></span></p>
<div>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Helvetica","sans-serif"">Ayden Férdeline<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Helvetica","sans-serif""><a href="https://community.icann.org/display/gnsosoi/Ayden+F%C3%A9rdeline+SOI"><span style="font-family:"Calibri","sans-serif";background:white">Statement of Interest</span></a><o:p></o:p></span></p>
</div>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Helvetica","sans-serif"">_______________________________________________<br>
gnso-rds-pdp-wg mailing list<br>
<a href="mailto:gnso-rds-pdp-wg@icann.org">gnso-rds-pdp-wg@icann.org</a><br>
<a href="https://mm.icann.org/mailman/listinfo/gnso-rds-pdp-wg">https://mm.icann.org/mailman/listinfo/gnso-rds-pdp-wg</a><o:p></o:p></span></p>
</div>
</blockquote>
</div>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Helvetica","sans-serif""><o:p> </o:p></span></p>
</div>
</div>
</div>
</div>
</div>
</div>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Helvetica","sans-serif""><br style="font-variant-caps: normal;orphans: auto;text-align:start;widows: auto;-webkit-text-stroke-width: 0px;word-spacing:0px">
<br>
</span><o:p></o:p></p>
<div>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Helvetica","sans-serif"">Ayden Férdeline<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Helvetica","sans-serif""><a href="https://community.icann.org/display/gnsosoi/Ayden+F%C3%A9rdeline+SOI"><span style="font-family:"Calibri","sans-serif";background:white">Statement of Interest</span></a><o:p></o:p></span></p>
</div>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Helvetica","sans-serif"">_______________________________________________<br>
gnso-rds-pdp-wg mailing list<br>
</span><a href="mailto:gnso-rds-pdp-wg@icann.org"><span style="font-size:9.0pt;font-family:"Helvetica","sans-serif"">gnso-rds-pdp-wg@icann.org</span></a><span style="font-size:9.0pt;font-family:"Helvetica","sans-serif""><br>
</span><a href="https://mm.icann.org/mailman/listinfo/gnso-rds-pdp-wg"><span style="font-size:9.0pt;font-family:"Helvetica","sans-serif"">https://mm.icann.org/mailman/listinfo/gnso-rds-pdp-wg</span></a><o:p></o:p></p>
</div>
</blockquote>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</div>
</div>
</div>
</div>
</div>
<p class="MsoNormal" style="margin-bottom:12.0pt"><o:p> </o:p></p>
<div>
<p class="MsoNormal">Ayden Férdeline<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><a href="https://community.icann.org/display/gnsosoi/Ayden+Férdeline+SOI"><span style="font-family:"Calibri","sans-serif";background:white">Statement of Interest</span></a><o:p></o:p></p>
</div>
</div>
</body>
</html>