<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:"Comic Sans MS";
panose-1:3 15 7 2 3 3 2 2 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p
{mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph
{mso-style-priority:34;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
p.msonormal0, li.msonormal0, div.msonormal0
{mso-style-name:msonormal;
mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
span.font
{mso-style-name:font;}
span.size
{mso-style-name:size;}
span.colour
{mso-style-name:colour;}
span.EmailStyle23
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;
font-family:"Calibri",sans-serif;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><a name="_MailEndCompose"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">Dear Ayden:<o:p></o:p></span></a></p>
<p class="MsoNormal"><span style="mso-bookmark:_MailEndCompose"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"><o:p> </o:p></span></span></p>
<p class="MsoNormal"><span style="mso-bookmark:_MailEndCompose"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">“Ignoring a potentially catastrophic outcome” is not something I suggested. I said that a worst-case scenario does not necessarily
dictate what the solution is. (Otherwise there would be no balancing process needed, and the most restrictive, harsh, and secure solution would automatically be put in place.)
<o:p></o:p></span></span></p>
<p class="MsoNormal"><span style="mso-bookmark:_MailEndCompose"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"><o:p> </o:p></span></span></p>
<p class="MsoNormal"><span style="mso-bookmark:_MailEndCompose"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">Very different from what you said I said.<o:p></o:p></span></span></p>
<p class="MsoNormal"><span style="mso-bookmark:_MailEndCompose"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"><o:p> </o:p></span></span></p>
<p class="MsoNormal"><span style="mso-bookmark:_MailEndCompose"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">All best,<o:p></o:p></span></span></p>
<p class="MsoNormal"><span style="mso-bookmark:_MailEndCompose"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">--Greg<o:p></o:p></span></span></p>
<p class="MsoNormal"><span style="mso-bookmark:_MailEndCompose"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"><o:p> </o:p></span></span></p>
<p class="MsoNormal"><span style="mso-bookmark:_MailEndCompose"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"><o:p> </o:p></span></span></p>
<p class="MsoNormal"><span style="mso-bookmark:_MailEndCompose"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"><o:p> </o:p></span></span></p>
<span style="mso-bookmark:_MailEndCompose"></span>
<p class="MsoNormal"><b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">From:</span></b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> Ayden Férdeline [mailto:icann@ferdeline.com]
<br>
<b>Sent:</b> Monday, August 22, 2016 4:25 PM<br>
<b>To:</b> Greg Aaron <gca@icginc.com><br>
<b>Cc:</b> Carlton Samuels <carlton.samuels@gmail.com>; Volker Greimann <vgreimann@key-systems.net>; RDS WG <gnso-rds-pdp-wg@icann.org><br>
<b>Subject:</b> Re: [gnso-rds-pdp-wg] @EXT: RE: Use cases: Fundamental, Incidental, and Theoretical<o:p></o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<p class="MsoNormal">Greg,<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">A worst case scenario is not a fantasy. It is a real, possible outcome that justifies taking precautions from the onset of our work. We should not under-estimate these scenarios but prepare for them. I tend to think of risk as a seesaw;
it is easy to be ambivalent and to see merit on both sides of the issue, or to think something as though it is very unlikely to happen, but if we ignore a potentially catastrophic outcome we are only asking for trouble and could tip the seesaw out of equilibrium.
I would encourage the Working Group to consider Volker and Carlton's suggested approach.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Best wishes,<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<div>
<p class="MsoNormal">Ayden <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</div>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<p class="MsoNormal">-------- Original Message --------<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">Subject: Re: [gnso-rds-pdp-wg] @EXT: RE: Use cases: Fundamental, Incidental, and Theoretical<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">Local Time: August 22, 2016 5:43 PM<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">UTC Time: August 22, 2016 4:43 PM<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">From: <a href="mailto:gca@icginc.com">gca@icginc.com</a><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">To: <a href="mailto:carlton.samuels@gmail.com,vgreimann@key-systems.net">
carlton.samuels@gmail.com,vgreimann@key-systems.net</a><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><a href="mailto:gnso-rds-pdp-wg@icann.org">gnso-rds-pdp-wg@icann.org</a><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span class="size"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">No traditional risk analysis starts with the assumption that the worst-case scenario will determines
what will be done. (Otherwise none of us should drive because of the risk of accidents, and none of us should fly, because terrorists.)
</span></span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span class="size"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> </span></span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span class="size"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">Risk analysis tends to follow this outline:</span></span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span class="size"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> </span></span><o:p></o:p></p>
<p class="MsoListParagraph" style="text-indent:-.25in"><span class="size"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">1.</span></span><span class="size"><span style="font-size:7.0pt">
</span></span><span class="size"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">What can happen? (i.e., what can go wrong?)</span></span><o:p></o:p></p>
<p class="MsoListParagraph" style="text-indent:-.25in"><span class="size"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">2.</span></span><span class="size"><span style="font-size:7.0pt">
</span></span><span class="size"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">How likely is it that it will happen?</span></span><o:p></o:p></p>
<p class="MsoListParagraph" style="text-indent:-.25in"><span class="size"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">3.</span></span><span class="size"><span style="font-size:7.0pt">
</span></span><span class="size"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">If it does happen, what are the consequences?</span></span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span class="size"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> </span></span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span class="size"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">And then choices are made, balancing the various variables. As we have been discussing, there
are various opinions and concerns among the participants and stakeholders. At some point those need to be laid out and quantified where possible, so that fact-based decision-making and balancing can be done.</span></span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span class="size"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> </span></span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span class="size"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">See also SAC061 Recommendation 2: “The ICANN Board should ensure that a formal security risk assessment
of the registration data policy be conducted as an input into the Policy Development Process.” That would happen down the line, when things have progressed further and policy options have are coalesced.</span></span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span class="size"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> </span></span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span class="size"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">All best,</span></span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span class="size"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">--Greg</span></span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span class="size"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> </span></span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span class="size"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> </span></span><o:p></o:p></p>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span class="size"><b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">From:</span></b></span><span class="size"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">
</span></span><a href="mailto:gnso-rds-pdp-wg-bounces@icann.org"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">gnso-rds-pdp-wg-bounces@icann.org</span></a><span class="size"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">
[</span></span><a href="mailto:gnso-rds-pdp-wg-bounces@icann.org"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">mailto:gnso-rds-pdp-wg-bounces@icann.org</span></a><span class="size"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">]
<b>On Behalf Of </b>Carlton Samuels</span></span><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"><br>
<span class="size"><b>Sent:</b> Monday, August 22, 2016 12:02 PM</span><br>
<span class="size"><b>To:</b> Volker Greimann <</span></span><a href="mailto:vgreimann@key-systems.net"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">vgreimann@key-systems.net</span></a><span class="size"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">></span></span><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"><br>
<span class="size"><b>Cc:</b> RDS WG <</span></span><a href="mailto:gnso-rds-pdp-wg@icann.org"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">gnso-rds-pdp-wg@icann.org</span></a><span class="size"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">></span></span><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"><br>
<span class="size"><b>Subject:</b> Re: [gnso-rds-pdp-wg] @EXT: RE: Use cases: Fundamental, Incidental, and Theoretical</span></span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
<div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">On Mon, Aug 22, 2016 at 2:19 AM, Volker Greimann <<a href="mailto:vgreimann@key-systems.net">vgreimann@key-systems.net</a>> wrote:<o:p></o:p></p>
<blockquote style="border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-top:5.0pt;margin-right:0in;margin-bottom:5.0pt">
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">Simply put: Anything that can be abused, will be abuse. We therefore need to model our approach on the worst possible actors, not the best.
<o:p></o:p></p>
</blockquote>
</div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span class="font"><span style="font-family:"Comic Sans MS",serif">+1</span></span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span class="font"><span style="font-family:"Comic Sans MS",serif"> </span></span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span class="font"><span style="font-family:"Comic Sans MS",serif">I cannot see how any other model makes sense in this context.</span></span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span class="font"><span style="font-family:"Comic Sans MS",serif"> </span></span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span class="font"><span style="font-family:"Comic Sans MS",serif">-Carlton</span></span><o:p></o:p></p>
</div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><o:p> </o:p></p>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<p><o:p> </o:p></p>
<div>
<div>
<div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><o:p> </o:p></p>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">==============================<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span class="font"><i><span style="font-family:"Comic Sans MS",serif">Carlton A Samuels</span></i></span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span class="font"><i><span style="font-family:"Comic Sans MS",serif">Mobile: 876-818-1799</span></i></span><i><span style="font-family:"Comic Sans MS",serif"><br>
<span class="colour"><span style="color:#33CC00">Strategy, Planning, Governance, Assessment & Turnaround</span></span></span></i><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">=============================<o:p></o:p></p>
</div>
<p><o:p> </o:p></p>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</blockquote>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</div>
</body>
</html>