<div><div dir="auto">Thanks this is helpful, Marika. </div><div dir="auto"><br></div><div dir="auto">So I am not sure it is worth getting derailed by that question we debated on the last call. </div><div dir="auto"><br></div><div dir="auto">Jonathan </div><div dir="auto"><br></div><br><div class="gmail_quote"><div>On Wed, Oct 4, 2017 at 1:25 PM Marika Konings <<a href="mailto:marika.konings@icann.org">marika.konings@icann.org</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div bgcolor="white" lang="EN-US" link="blue" vlink="purple">
<div class="m_7416146835251694710WordSection1">
<p class="MsoNormal">Jonathan, all,<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">If I may take this opportunity to remind everyone about the WG’s objective for phase 1:<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal"><b><i>During Phase 1,</i></b><i> the PDP WG should,<b> at a minimum</b>, attempt to reach consensus recommendations regarding the following questions:</i><u></u><u></u></p>
<ul style="margin-top:0in" type="disc">
<li class="MsoNormal" style="margin-left:0in"><b><i>What are the fundamental requirements for gTLD registration data?<br>
</i></b><i>When addressing this question, the PDP WG should consider, at a minimum, users and purposes and associated access, accuracy, data element, and privacy requirements.</i><u></u><u></u></li><li class="MsoNormal" style="margin-left:0in"><b><i>Is a new policy framework and next-generation RDS needed to address these requirements?</i></b><u></u><u></u>
<ul style="margin-top:0in" type="disc">
<li class="MsoNormal" style="margin-left:0in">If yes, what cross-cutting requirements must a next-generation RDS address, including coexistence, compliance, system model, and cost, benefit, and risk analysis requirements?<u></u><u></u></li><li class="MsoNormal" style="margin-left:0in">If no, does the current WHOIS policy framework sufficiently address these requirements? If not, what revisions are recommended to the current WHOIS policy framework to do so?<u></u><u></u></li></ul>
</li></ul>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">As such, the WG is asked to focus on requirements, not on existing WHOIS policies, and only when those requirements have achieved consensus, the question is asked whether a new policy framework is needed or whether the existing WHOIS policy
framework can address these requirements (with or without modifications). For further details, please see the WG charter:
<a href="https://community.icann.org/x/E4xlAw" target="_blank">https://community.icann.org/x/E4xlAw</a>.
<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">Best regards,<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">Marika<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<div style="border:none;border-top:solid #b5c4df 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span style="font-size:12.0pt;color:black">From: </span></b><span style="font-size:12.0pt;color:black"><<a href="mailto:gnso-rds-pdp-wg-bounces@icann.org" target="_blank">gnso-rds-pdp-wg-bounces@icann.org</a>> on behalf of jonathan matkowsky <<a href="mailto:jonathan.matkowsky@riskiq.net" target="_blank">jonathan.matkowsky@riskiq.net</a>><br>
<b>Date: </b>Wednesday, October 4, 2017 at 12:02<br>
<b>To: </b>Chuck Gomes <<a href="mailto:consult@cgomes.com" target="_blank">consult@cgomes.com</a>>, Maxim Alzoba <<a href="mailto:m.alzoba@gmail.com" target="_blank">m.alzoba@gmail.com</a>><br>
<b>Cc: </b>"<a href="mailto:gnso-rds-pdp-wg@icann.org" target="_blank">gnso-rds-pdp-wg@icann.org</a>" <<a href="mailto:gnso-rds-pdp-wg@icann.org" target="_blank">gnso-rds-pdp-wg@icann.org</a>></span></p></div></div></div><div bgcolor="white" lang="EN-US" link="blue" vlink="purple"><div class="m_7416146835251694710WordSection1"><div style="border:none;border-top:solid #b5c4df 1.0pt;padding:3.0pt 0in 0in 0in"><p class="MsoNormal"><span style="font-size:12.0pt;color:black"><br>
<b>Subject: </b>Re: [gnso-rds-pdp-wg] Reputation systems are not just nice to have (was Re: What we want redux)<u></u><u></u></span></p></div></div></div><div bgcolor="white" lang="EN-US" link="blue" vlink="purple"><div class="m_7416146835251694710WordSection1"><div>
<div>
<p class="MsoNormal">One more thought - sort of reflections on the last call, and where we are at. I think we are wasting time because we are being asked to come up with an RDS on the basis existing Whois policies including exemptions available, conflict with
GDPR or other potentially more strict data protection regimes we have not studied. This is a big mistake. It is not necessary. It’s pretty clear to me that a privacy impact assessment is needed in designing the next generation of Whois, which should run in
parallel with Whois at least for a while if not foreseeably forever, with the goal of improving Whois functionality, which clearly at least to me, can be greatly improved. We just have to make sure it functions as intended.<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">So I don’t see why our work needs to create all this conflict deciding about existing Whois policies frankly, which we clearly have not adequately addressed because we have never studied the exemptions available etc. And this group would
be a lot more productive frankly, if we framed our charter in that regard differently. Just food for thought.<u></u><u></u></p>
</div>
<p class="MsoNormal"><u></u> <u></u></p>
</div></div></div><div bgcolor="white" lang="EN-US" link="blue" vlink="purple"><div class="m_7416146835251694710WordSection1"><div><div>
<div>
<p class="MsoNormal">On Wed, Oct 4, 2017 at 12:31 PM jonathan matkowsky <<a href="mailto:jonathan.matkowsky@riskiq.net" target="_blank">jonathan.matkowsky@riskiq.net</a>> wrote:<u></u><u></u></p>
</div>
</div></div></div></div><div bgcolor="white" lang="EN-US" link="blue" vlink="purple"><div class="m_7416146835251694710WordSection1"><div><div><blockquote style="border:none;border-left:solid #cccccc 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in">
<div>
<div>
<div>
<p class="MsoNormal">Hello, Maxim ,<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">I disagree with your analysis. The memo supports that economic repercussions for cyber security firms does not take precedence over fundamental human rights, and that private cyber security firms are not exempt under GDPR currently, absent
specific legislation coming into effect consistent with GDPR. I agree with both of these conclusions.<u></u><u></u></p>
</div>
</div>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">Specifying the purposes of processing is expressly outside the scope of the memorandum, and in that regard, private cyber security firms may very well play a special role. I believe they do. This doesn’t mean GDPR exempts them but that
they may need very thinly gated access to certain information that registrants consent to providing for certain specified purposes.<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">I also understand there may be a privacy framework in Europe that addresses public directories that may still be in effect when GDPR is implemented, and additional analysis may be needed in this regard, but I am still looking into this
as it has been only anecdotal information provided to me at this time. I hope to have more in that regard by next week.<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">Cheers,<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal">Jonathan Matkowsky <u></u><u></u></p>
</div>
</blockquote></div></div></div></div><div bgcolor="white" lang="EN-US" link="blue" vlink="purple"><div class="m_7416146835251694710WordSection1"><div><div><blockquote style="border:none;border-left:solid #cccccc 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in"><div><div><div>
<div>
<p class="MsoNormal">On Wed, Oct 4, 2017 at 9:04 AM Maxim Alzoba <<a href="mailto:m.alzoba@gmail.com" target="_blank">m.alzoba@gmail.com</a>> wrote:<u></u><u></u></p>
</div>
</div></div></div></blockquote></div></div></div></div><div bgcolor="white" lang="EN-US" link="blue" vlink="purple"><div class="m_7416146835251694710WordSection1"><div><div><blockquote style="border:none;border-left:solid #cccccc 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in"><div><div><div><blockquote style="border:none;border-left:solid #cccccc 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in">
<div>
<p class="MsoNormal">Hello Chuck, <u></u><u></u></p>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">Reading the memo I came to the conclusion that all cyber investigating companies, which do not have accreditation of sorts of at least one EU country <u></u><u></u></p>
</div>
<div>
<p class="MsoNormal">are pure third parties and police exemptions from personal data legislation will not work for them.<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">(it was page 9)<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">Following this logic, they play no special role according to GDPR and thus I am not sure we can make it a primary purpose (or at least I am not sure it will be accepted by EU DPAs).<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">P.s: I do understand importance of anti-abuse cyber investigations, but not sure how to fit their special role into purposes, compliant with GDPR.<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal">And which might be worse, local Law Enforcement do not fit either (if they are not from EU or there is no special treaty between EU and that country). <u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<p class="MsoNormal"><span style="font-family:"Helvetica",sans-serif;color:black">Sincerely Yours,<br>
<br>
Maxim Alzoba<br>
Special projects manager,<br>
International Relations Department,<br>
FAITID<br>
<br>
m. +7 916 6761580(+whatsapp)<u></u><u></u></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:"Helvetica",sans-serif;color:black">skype oldfrogger<u></u><u></u></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:"Helvetica",sans-serif;color:black"><u></u> <u></u></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:"Helvetica",sans-serif;color:black">Current UTC offset: +3.00 (.Moscow)<u></u><u></u></span></p>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</blockquote></div></div></div></blockquote></div></div></div></div><div bgcolor="white" lang="EN-US" link="blue" vlink="purple"><div class="m_7416146835251694710WordSection1"><div><div><blockquote style="border:none;border-left:solid #cccccc 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in"><div><div><div><blockquote style="border:none;border-left:solid #cccccc 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in"><div><div><div><blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<p class="MsoNormal">On Oct 4, 2017, at 16:08, Chuck <<a href="mailto:consult@cgomes.com" target="_blank">consult@cgomes.com</a>> wrote:<u></u><u></u></p>
</div>
<p class="MsoNormal"><u></u> <u></u></p>
</blockquote></div></div></div></blockquote></div></div></div></blockquote></div></div></div></div><div bgcolor="white" lang="EN-US" link="blue" vlink="purple"><div class="m_7416146835251694710WordSection1"><div><div><blockquote style="border:none;border-left:solid #cccccc 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in"><div><div><div><blockquote style="border:none;border-left:solid #cccccc 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in"><div><div><div><blockquote style="margin-top:5.0pt;margin-bottom:5.0pt"><div><div>
<div>
<p class="MsoNormal">Note that the WG has already reached rough consensus that anti-abuse is a legitimate purpose for at least the minimum public data set. (WG Agreement 11: “<span style="font-size:13.0pt;font-family:"Arial",sans-serif">Criminal Investigation
& DNS Abuse Mitigation is a legitimate purpose for “Minimum Public Data Set” collection.</span>”<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"> <u></u><u></u></p>
</div>
<div>
<p class="MsoNormal">Chuck<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"> <u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><b>From:</b><span class="m_7416146835251694710m7406089597629729227m-2449397515639811802m5709486960701476254apple-converted-space"> </span><a href="mailto:gnso-rds-pdp-wg-bounces@icann.org" target="_blank"><span style="color:purple">gnso-rds-pdp-wg-bounces@icann.org</span></a><span class="m_7416146835251694710m7406089597629729227m-2449397515639811802m5709486960701476254apple-converted-space"> </span>[<a href="mailto:gnso-rds-pdp-wg-bounces@icann.org" target="_blank"><span style="color:purple">mailto:gnso-rds-pdp-wg-bounces@icann.org</span></a>]<span class="m_7416146835251694710m7406089597629729227m-2449397515639811802m5709486960701476254apple-converted-space"> </span><b>On
Behalf Of<span class="m_7416146835251694710m7406089597629729227m-2449397515639811802m5709486960701476254apple-converted-space"> </span></b>allison nixon<br>
<b>Sent:</b><span class="m_7416146835251694710m7406089597629729227m-2449397515639811802m5709486960701476254apple-converted-space"> </span>Tuesday, October 03, 2017 2:57 PM<br>
<b>To:</b><span class="m_7416146835251694710m7406089597629729227m-2449397515639811802m5709486960701476254apple-converted-space"> </span>Jeremy Malcolm <<a href="mailto:jmalcolm@eff.org" target="_blank"><span style="color:purple">jmalcolm@eff.org</span></a>><br>
<b>Cc:</b><span class="m_7416146835251694710m7406089597629729227m-2449397515639811802m5709486960701476254apple-converted-space"> </span><a href="mailto:gnso-rds-pdp-wg@icann.org" target="_blank"><span style="color:purple">gnso-rds-pdp-wg@icann.org</span></a><span class="m_7416146835251694710m7406089597629729227m-2449397515639811802m5709486960701476254apple-converted-space"> </span>>><span class="m_7416146835251694710m7406089597629729227m-2449397515639811802m5709486960701476254apple-converted-space"> </span><a href="mailto:gnso-rds-pdp-wg@icann.org" target="_blank"><span style="color:purple">gnso-rds-pdp-wg@icann.org</span></a><span class="m_7416146835251694710m7406089597629729227m-2449397515639811802m5709486960701476254apple-converted-space"> </span><<a href="mailto:gnso-rds-pdp-wg@icann.org" target="_blank"><span style="color:purple">gnso-rds-pdp-wg@icann.org</span></a>><br>
<b>Subject:</b><span class="m_7416146835251694710m7406089597629729227m-2449397515639811802m5709486960701476254apple-converted-space"> </span>Re: [gnso-rds-pdp-wg] Reputation systems are not just nice to have (was Re: What we want redux)<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"> <u></u><u></u></p>
</div>
</div></div></blockquote></div></div></div></blockquote></div></div></div></blockquote></div></div></div></div><div bgcolor="white" lang="EN-US" link="blue" vlink="purple"><div class="m_7416146835251694710WordSection1"><div><div><blockquote style="border:none;border-left:solid #cccccc 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in"><div><div><div><blockquote style="border:none;border-left:solid #cccccc 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in"><div><div><div><blockquote style="margin-top:5.0pt;margin-bottom:5.0pt"><div><div><div>
<div>
<p class="MsoNormal">Thank you for the clarification. I still disagree with it but it makes more sense. <u></u><u></u></p>
</div>
<div>
<div>
<p class="MsoNormal"> <u></u><u></u></p>
</div>
</div>
<div>
<div>
<p class="MsoNormal">I would like to highlight the ICANN webpage on WHOIS:<u></u><u></u></p>
</div>
</div>
<div>
<div>
<p class="MsoNormal"> <u></u><u></u></p>
</div>
</div>
</div></div></div></blockquote></div></div></div></blockquote></div></div></div></blockquote></div></div></div></div><div bgcolor="white" lang="EN-US" link="blue" vlink="purple"><div class="m_7416146835251694710WordSection1"><div><div><blockquote style="border:none;border-left:solid #cccccc 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in"><div><div><div><blockquote style="border:none;border-left:solid #cccccc 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in"><div><div><div><blockquote style="margin-top:5.0pt;margin-bottom:5.0pt"><div><div><div><div>
<div>
<p class="MsoNormal"><a href="https://urldefense.proofpoint.com/v2/url?u=https-3A__whois.icann.org_en_what-2Dwhois-2Ddata-2Dused&d=DwMFaQ&c=FmY1u3PJp6wrcrwll3mSVzgfkbPSS6sJms7xcl4I5cM&r=7_PQAir-9nJQ2uB2cWiTDDDo5Hfy5HL9rSTe65iXLVM&m=hy29y5oLdG0tXfZj90EdaFqtIjW8hFx9n3ocrYm0bx0&s=JKzp7N4Sg-mIiNVgTwz3qtI2baj9UwnjUwEDpKpANTc&e=" target="_blank"><span style="color:purple">https://whois.icann.org/en/what-whois-data-used[whois.icann.org]</span></a><u></u><u></u></p>
</div>
</div></div></div></div></blockquote></div></div></div></blockquote></div></div></div></blockquote></div></div></div></div><div bgcolor="white" lang="EN-US" link="blue" vlink="purple"><div class="m_7416146835251694710WordSection1"><div><div><blockquote style="border:none;border-left:solid #cccccc 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in"><div><div><div><blockquote style="border:none;border-left:solid #cccccc 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in"><div><div><div><blockquote style="margin-top:5.0pt;margin-bottom:5.0pt"><div><div><div>
<div>
<div>
<p class="MsoNormal"> <u></u><u></u></p>
</div>
</div>
<blockquote style="margin-left:30.0pt;margin-top:5.0pt;margin-right:0in;margin-bottom:5.0pt">
<div>
<div>
<div>
<p class="MsoNormal">What is WHOIS data used for?<u></u><u></u></p>
</div>
</div>
</div>
<div>
<div>
<div>
<p class="MsoNormal">WHOIS is indispensable to the smooth operation of the DNS and is used for many legitimate purposes, including:<u></u><u></u></p>
</div>
</div>
</div>
</blockquote>
<div>
<div>
<ul style="margin-top:0in" type="disc">
<ul style="margin-top:0in" type="circle">
<li class="MsoNormal" style="margin-left:0in">To contact network administrators for resolution of technical matters related to networks associated with a domain name (e.g., DNS or routing matter, origin and path analysis of DoS and other
network-based attacks).<u></u><u></u></li><li class="MsoNormal" style="margin-left:0in">To obtain the real world identity, business location and contact information of an online merchant or business, or generally, any organization that has an online presence.<u></u><u></u></li><li class="MsoNormal" style="margin-left:0in">To establish or look into an identity in cyberspace, and as part of an incident response following an Internet or computer attack. (Security professionals and law enforcement agents use WHOIS
to identify points of contact for a domain name.)<u></u><u></u></li><li class="MsoNormal" style="margin-left:0in">To gather investigative leads (i.e., to identify parties from whom additional information might be obtained). Law enforcement agents use WHOIS to find email addresses and attempt to identify
the location of an alleged perpetrator of a crime involving fraud.<u></u><u></u></li><li class="MsoNormal" style="margin-left:0in">To investigate spam, law enforcement agents look to the WHOIS database to collect information on the website advertised in the spam.<u></u><u></u></li></ul>
</ul>
</div>
</div>
<div>
<div>
<p class="MsoNormal">Those and others are currently listed on ICANN's website as uses for WHOIS data. To reject anti-abuse as a purpose would be to shift away from the currently accepted purposes of WHOIS. <u></u><u></u></p>
</div>
</div>
<div>
<div>
<p class="MsoNormal"> <u></u><u></u></p>
</div>
</div>
<div>
<div>
<p class="MsoNormal"> <u></u><u></u></p>
</div>
</div>
<div>
<div>
<p class="MsoNormal"> <u></u><u></u></p>
</div>
</div>
<div>
<div>
<p class="MsoNormal"> <u></u><u></u></p>
</div>
</div>
<div>
<div>
<p class="MsoNormal"> <u></u><u></u></p>
</div>
</div>
<div>
<div>
<p class="MsoNormal"> <u></u><u></u></p>
</div>
</div>
<div>
<div>
<p class="MsoNormal"> <u></u><u></u></p>
</div>
</div>
<div>
<div>
<p class="MsoNormal"> <u></u><u></u></p>
</div>
</div>
<div>
<div>
<p class="MsoNormal"> <u></u><u></u></p>
</div>
</div>
</div></div></div></blockquote></div></div></div></blockquote></div></div></div></blockquote></div></div></div></div><div bgcolor="white" lang="EN-US" link="blue" vlink="purple"><div class="m_7416146835251694710WordSection1"><div><div><blockquote style="border:none;border-left:solid #cccccc 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in"><div><div><div><blockquote style="border:none;border-left:solid #cccccc 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in"><div><div><div><blockquote style="margin-top:5.0pt;margin-bottom:5.0pt"><div><div><div><div>
<div>
<p class="MsoNormal">On Tue, Oct 3, 2017 at 5:41 PM, Jeremy Malcolm <<a href="mailto:jmalcolm@eff.org" target="_blank"><span style="color:purple">jmalcolm@eff.org</span></a>> wrote:<u></u><u></u></p>
</div>
</div></div></div></div></blockquote></div></div></div></blockquote></div></div></div></blockquote></div></div></div></div><div bgcolor="white" lang="EN-US" link="blue" vlink="purple"><div class="m_7416146835251694710WordSection1"><div><div><blockquote style="border:none;border-left:solid #cccccc 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in"><div><div><div><blockquote style="border:none;border-left:solid #cccccc 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in"><div><div><div><blockquote style="margin-top:5.0pt;margin-bottom:5.0pt"><div><div><div><div><blockquote style="border:none;border-left:solid #cccccc 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-top:5.0pt;margin-right:0in;margin-bottom:5.0pt">
<div>
<p class="MsoNormal">On 3/10/17 2:31 pm, John Bambenek via gnso-rds-pdp-wg wrote:<br>
><br>
> To confirm and clarify your meaning... you don't think there should be<br>
> a WHOIS/RDS and the only means to contact a domain owner should be on<br>
> their website. Is that correct?<br>
><br>
<br>
No, we are fine with registrants making some information available<br>
through WHOIS/RDS subject to data protection law (eg. informed consent,<br>
etc). But we don't think that a starting point for the design of the<br>
RDS has to take the requirements of anti-abuse specialists or reputation<br>
systems as an essential element.<u></u><u></u></p>
</div>
</blockquote></div></div></div></div></blockquote></div></div></div></blockquote></div></div></div></blockquote></div></div></div></div><div bgcolor="white" lang="EN-US" link="blue" vlink="purple"><div class="m_7416146835251694710WordSection1"><div><div><blockquote style="border:none;border-left:solid #cccccc 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in"><div><div><div><blockquote style="border:none;border-left:solid #cccccc 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in"><div><div><div><blockquote style="margin-top:5.0pt;margin-bottom:5.0pt"><div><div><div><div><blockquote style="border:none;border-left:solid #cccccc 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-top:5.0pt;margin-right:0in;margin-bottom:5.0pt"><div><div><p class="MsoNormal" style="margin-bottom:12.0pt"><br>
--<br>
Jeremy Malcolm<br>
Senior Global Policy Analyst<br>
Electronic Frontier Foundation<br>
</p></div></div></blockquote></div></div></div></div></blockquote></div></div></div></blockquote></div></div></div></blockquote></div></div></div></div><div bgcolor="white" lang="EN-US" link="blue" vlink="purple"><div class="m_7416146835251694710WordSection1"><div><div><blockquote style="border:none;border-left:solid #cccccc 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in"><div><div><div><blockquote style="border:none;border-left:solid #cccccc 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in"><div><div><div><blockquote style="margin-top:5.0pt;margin-bottom:5.0pt"><div><div><div><div><blockquote style="border:none;border-left:solid #cccccc 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-top:5.0pt;margin-right:0in;margin-bottom:5.0pt"><div><div><p class="MsoNormal" style="margin-bottom:12.0pt"><a href="https://urldefense.proofpoint.com/v2/url?u=https-3A__eff.org_&d=DwMFaQ&c=FmY1u3PJp6wrcrwll3mSVzgfkbPSS6sJms7xcl4I5cM&r=7_PQAir-9nJQ2uB2cWiTDDDo5Hfy5HL9rSTe65iXLVM&m=hy29y5oLdG0tXfZj90EdaFqtIjW8hFx9n3ocrYm0bx0&s=hHH7NnvBpneSbZeS6duetlM5mUY7jvJdJHd0fxvatdk&e=" target="_blank"><span style="color:purple">https://eff.org[eff.org]</span></a></p></div></div></blockquote></div></div></div></div></blockquote></div></div></div></blockquote></div></div></div></blockquote></div></div></div></div><div bgcolor="white" lang="EN-US" link="blue" vlink="purple"><div class="m_7416146835251694710WordSection1"><div><div><blockquote style="border:none;border-left:solid #cccccc 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in"><div><div><div><blockquote style="border:none;border-left:solid #cccccc 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in"><div><div><div><blockquote style="margin-top:5.0pt;margin-bottom:5.0pt"><div><div><div><div><blockquote style="border:none;border-left:solid #cccccc 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-top:5.0pt;margin-right:0in;margin-bottom:5.0pt"><div><div><p class="MsoNormal" style="margin-bottom:12.0pt"><br>
<a href="mailto:jmalcolm@eff.org" target="_blank"><span style="color:purple">jmalcolm@eff.org</span></a><br>
<br>
Tel:<span class="m_7416146835251694710m7406089597629729227m-2449397515639811802m5709486960701476254apple-converted-space"> </span><a href="tel:415.436.9333%20ext%20161" target="_blank"><span style="color:purple">415.436.9333 ext 161</span></a><br>
<br>
:: Defending Your Rights in the Digital World ::<br>
<br></p></div></div></blockquote></div></div></div></div></blockquote></div></div></div></blockquote></div></div></div></blockquote></div></div></div></div><div bgcolor="white" lang="EN-US" link="blue" vlink="purple"><div class="m_7416146835251694710WordSection1"><div><div><blockquote style="border:none;border-left:solid #cccccc 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in"><div><div><div><blockquote style="border:none;border-left:solid #cccccc 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in"><div><div><div><blockquote style="margin-top:5.0pt;margin-bottom:5.0pt"><div><div><div><div><blockquote style="border:none;border-left:solid #cccccc 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-top:5.0pt;margin-right:0in;margin-bottom:5.0pt"><div><div><p class="MsoNormal" style="margin-bottom:12.0pt">
Public key:<span class="m_7416146835251694710m7406089597629729227m-2449397515639811802m5709486960701476254apple-converted-space"> </span><a href="https://urldefense.proofpoint.com/v2/url?u=https-3A__www.eff.org_files_2016_11_27_key-5Fjmalcolm.txt&d=DwMFaQ&c=FmY1u3PJp6wrcrwll3mSVzgfkbPSS6sJms7xcl4I5cM&r=7_PQAir-9nJQ2uB2cWiTDDDo5Hfy5HL9rSTe65iXLVM&m=hy29y5oLdG0tXfZj90EdaFqtIjW8hFx9n3ocrYm0bx0&s=Iumsa0mEzxN2yyNX8NTDY5GKp0PvP0DdBIIRQJOCLvI&e=" target="_blank"><span style="color:purple">https://www.eff.org/files/2016/11/27/key_jmalcolm.txt[eff.org]</span></a></p></div></div></blockquote></div></div></div></div></blockquote></div></div></div></blockquote></div></div></div></blockquote></div></div></div></div><div bgcolor="white" lang="EN-US" link="blue" vlink="purple"><div class="m_7416146835251694710WordSection1"><div><div><blockquote style="border:none;border-left:solid #cccccc 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in"><div><div><div><blockquote style="border:none;border-left:solid #cccccc 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in"><div><div><div><blockquote style="margin-top:5.0pt;margin-bottom:5.0pt"><div><div><div><div><blockquote style="border:none;border-left:solid #cccccc 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-top:5.0pt;margin-right:0in;margin-bottom:5.0pt"><div><div><p class="MsoNormal" style="margin-bottom:12.0pt"><br>
PGP fingerprint: 75D2 4C0D 35EA EA2F 8CA8 8F79 4911 EC4A EDDF 1122<br>
<br>
<br>
<u></u><u></u></p></div></div></blockquote></div></div></div></div></blockquote></div></div></div></blockquote></div></div></div></blockquote></div></div></div></div><div bgcolor="white" lang="EN-US" link="blue" vlink="purple"><div class="m_7416146835251694710WordSection1"><div><div><blockquote style="border:none;border-left:solid #cccccc 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in"><div><div><div><blockquote style="border:none;border-left:solid #cccccc 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in"><div><div><div><blockquote style="margin-top:5.0pt;margin-bottom:5.0pt"><div><div><div><div><blockquote style="border:none;border-left:solid #cccccc 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-top:5.0pt;margin-right:0in;margin-bottom:5.0pt">
<div>
<p class="MsoNormal"><br>
_______________________________________________<br>
gnso-rds-pdp-wg mailing list<br>
<a href="mailto:gnso-rds-pdp-wg@icann.org" target="_blank"><span style="color:purple">gnso-rds-pdp-wg@icann.org</span></a><br>
<a href="https://mm.icann.org/mailman/listinfo/gnso-rds-pdp-wg" target="_blank"><span style="color:purple">https://mm.icann.org/mailman/listinfo/gnso-rds-pdp-wg</span></a><u></u><u></u></p>
</div>
</blockquote></div></div></div></div></blockquote></div></div></div></blockquote></div></div></div></blockquote></div></div></div></div><div bgcolor="white" lang="EN-US" link="blue" vlink="purple"><div class="m_7416146835251694710WordSection1"><div><div><blockquote style="border:none;border-left:solid #cccccc 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in"><div><div><div><blockquote style="border:none;border-left:solid #cccccc 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in"><div><div><div><blockquote style="margin-top:5.0pt;margin-bottom:5.0pt"><div><div><div>
<div>
<p class="MsoNormal"><br>
<br clear="all">
<u></u><u></u></p>
</div>
<div>
<div>
<p class="MsoNormal"> <u></u><u></u></p>
</div>
</div>
<div>
<p class="MsoNormal">--<span class="m_7416146835251694710m7406089597629729227m-2449397515639811802m5709486960701476254apple-converted-space"> </span><u></u><u></u></p>
</div>
<div>
<div>
<p class="MsoNormal">_________________________________<br>
Note to self: Pillage BEFORE burning.<u></u><u></u></p>
</div>
</div>
</div></div></div></blockquote></div></div></div></blockquote></div></div></div></blockquote></div></div></div></div><div bgcolor="white" lang="EN-US" link="blue" vlink="purple"><div class="m_7416146835251694710WordSection1"><div><div><blockquote style="border:none;border-left:solid #cccccc 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in"><div><div><div><blockquote style="border:none;border-left:solid #cccccc 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in"><div><div><div><blockquote style="margin-top:5.0pt;margin-bottom:5.0pt"><div>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Helvetica",sans-serif">_______________________________________________<br>
gnso-rds-pdp-wg mailing list<br>
</span><a href="mailto:gnso-rds-pdp-wg@icann.org" target="_blank"><span style="font-size:9.0pt;font-family:"Helvetica",sans-serif;color:purple">gnso-rds-pdp-wg@icann.org</span></a><span style="font-size:9.0pt;font-family:"Helvetica",sans-serif"><br>
</span><a href="https://mm.icann.org/mailman/listinfo/gnso-rds-pdp-wg" target="_blank"><span style="font-size:9.0pt;font-family:"Helvetica",sans-serif;color:purple">https://mm.icann.org/mailman/listinfo/gnso-rds-pdp-wg</span></a><u></u><u></u></p>
</div></blockquote></div></div></div></blockquote></div></div></div></blockquote></div></div></div></div><div bgcolor="white" lang="EN-US" link="blue" vlink="purple"><div class="m_7416146835251694710WordSection1"><div><div><blockquote style="border:none;border-left:solid #cccccc 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in"><div><div><div><blockquote style="border:none;border-left:solid #cccccc 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in">
<p class="MsoNormal">_______________________________________________<br>
gnso-rds-pdp-wg mailing list<br>
<a href="mailto:gnso-rds-pdp-wg@icann.org" target="_blank">gnso-rds-pdp-wg@icann.org</a><br>
<a href="https://mm.icann.org/mailman/listinfo/gnso-rds-pdp-wg" target="_blank">https://mm.icann.org/mailman/listinfo/gnso-rds-pdp-wg</a><u></u><u></u></p>
</blockquote></div></div></div></blockquote></div></div></div></div><div bgcolor="white" lang="EN-US" link="blue" vlink="purple"><div class="m_7416146835251694710WordSection1"><div><div><blockquote style="border:none;border-left:solid #cccccc 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in"><div><div><div><blockquote style="border:none;border-left:solid #cccccc 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in"></blockquote>
</div>
</div>
</div>
<div>
<p class="MsoNormal">-- <u></u><u></u></p>
</div>
<div>
<p class="MsoNormal">Jonathan Matkowsky<u></u><u></u></p>
</div>
</blockquote>
</div>
</div>
<div>
<p class="MsoNormal">-- <u></u><u></u></p>
</div>
<div>
<p class="MsoNormal">Jonathan Matkowsky<u></u><u></u></p>
</div>
<p class="MsoNormal"><br></p></div></div><div bgcolor="white" lang="EN-US" link="blue" vlink="purple"><div class="m_7416146835251694710WordSection1"><p class="MsoNormal">
<span style="font-size:9.5pt;font-family:"Arial",sans-serif;color:#222222;background:white">*******************************************************************<br>
This message was sent from RiskIQ, and is intended only for the designated recipient(s). It may contain confidential or proprietary information and may be subject to confidentiality protections. If you are not a designated recipient, you may not review, copy
or distribute this message. If you receive this in error, please notify the sender by reply e-mail and delete this message. Thank you.</span>
<u></u><u></u></p></div></div><div bgcolor="white" lang="EN-US" link="blue" vlink="purple"><div class="m_7416146835251694710WordSection1"><p class="MsoNormal"></p>
<p class="MsoNormal"><span style="font-size:9.5pt;font-family:"Arial",sans-serif;color:#222222;background:white">*******************************************************************</span>
<u></u><u></u></p>
</div>
</div>
</blockquote></div></div><div dir="ltr">-- <br></div><div class="gmail_signature" data-smartmail="gmail_signature">Jonathan Matkowsky</div>
<br>
<span style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:12.8px;background-color:rgb(255,255,255)">******************************</span><span style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:12.8px;background-color:rgb(255,255,255)"><wbr>******************************</span><span style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:12.8px;background-color:rgb(255,255,255)"><wbr>*******<br></span><span style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:12.8px;background-color:rgb(255,255,255)">This message was sent from RiskIQ, and is intended only for the designated recipient(s). It may contain confidential or proprietary information and may be subject to confidentiality protections. If you are not a designated recipient, you may not review, copy or distribute this message. If you receive this in error, please notify the sender by reply e-mail and delete this message. Thank you.</span><p style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:12.8px;background-color:rgb(255,255,255)"></p><span style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:12.8px;background-color:rgb(255,255,255)">******************************</span><span style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:12.8px;background-color:rgb(255,255,255)"><wbr>******************************</span><span style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:12.8px;background-color:rgb(255,255,255)"><wbr>*******</span>