<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">Hi Matt,<div class=""><br class=""></div><div class="">The setting we talked about is that we have DNS data providers who may want to participate in NCAP analyses, but have understandable concerns about sharing/exposing their data, and more general privacy concerns when they do.</div><div class=""><br class=""></div><div class=""><describing the paper (not my work, no ownership/proprietary feelings from me></div><div class="">It proposes a secure/private federated database. In regards to data providers wanting to protect their data, but still trying to share (i.e. DNS providers that have name collisions data but are understandably worried about having to expose it, while still trying to enable NCAP analyses). As reported in the paper: SMCQL would facilitate the creation of a federated database (whereby different data owners would let some analyses be done on their data without letting it leave their networks). The execution of queries would then be done in a way that matches the security/privacy wishes of the data holder. The architecture (in Figure 1) describes untrusted end-users, semi trusted brokers, and secure data holders.</div><div class=""><div></describing the paper (not my work, no ownership/proprietary feelings from me></div><div><br class=""></div><div>Eric</div><div><br class=""><blockquote type="cite" class=""><div class="">On May 22, 2019, at 1:29 PM, Matt Larson <<a href="mailto:matt.larson@icann.org" class="">matt.larson@icann.org</a>> wrote:</div><br class="Apple-interchange-newline"><div class="">
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" class="">
<div style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">
Eric,
<div class=""><br class="">
</div>
<div class="">How are you thinking this work applies to NCAP?</div>
<div class=""><br class="">
</div>
<div class="">Thanks,</div>
<div class=""><br class="">
</div>
<div class="">Matt</div>
<div class=""><br class="">
<div class=""><br class="">
<blockquote type="cite" class="">
<div class="">On May 22, 2019, at 11:18 AM, Eric Osterweil <<a href="mailto:lists@osterweil.net" class="">lists@osterweil.net</a>> wrote:</div>
<br class="Apple-interchange-newline">
<div class=""><span style="caret-color: rgb(0, 0, 0); font-family: CourierNewPSMT; font-size: 14px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; float: none; display: inline !important;" class="">I
wanted to bring to the group’s attention some work that I have become aware of, which seems to me to be worth considering for NCAP. In 2017, a paper was published in VLDB (the very top-tier of large-scale data infrastructure research) about a tool for ``mutually
distrustful parties’’ to allow untrusted clients to query and join datasets. I (personally) found the work to be inspired. It uses techniques like secure circuits and Oblivious RAM (ORAM) to implement a Secure Multiparty Computation (SMC) extensions/optimizations
for SQL-like quires (called SMCQL). The paper can be found here:</span><br style="caret-color: rgb(0, 0, 0); font-family: CourierNewPSMT; font-size: 14px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class="">
<span class="Apple-tab-span" style="caret-color: rgb(0, 0, 0); font-family: CourierNewPSMT; font-size: 14px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: pre; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;"></span><a href="https://urldefense.proofpoint.com/v2/url?u=https-3A__dl.acm.org_citation.cfm-3Fid-3D3055334&d=DwIGaQ&c=FmY1u3PJp6wrcrwll3mSVzgfkbPSS6sJms7xcl4I5cM&r=xhCX8vQGcsNMzNMbgIokNle9Mpt6sQ45tM98iwh4H0w&m=3NzPJbEUwAeHXxHyJF9WYbEoPnbkjGDmpB-OQyDj7k8&s=HcSy267oTgllN1J2LCJjMAC2nFTSweg7qlXXJlRnzsM&e=" style="font-family: CourierNewPSMT; font-size: 14px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px;" class="">https://urldefense.proofpoint.com/v2/url?u=https-3A__dl.acm.org_citation.cfm-3Fid-3D3055334&d=DwIGaQ&c=FmY1u3PJp6wrcrwll3mSVzgfkbPSS6sJms7xcl4I5cM&r=xhCX8vQGcsNMzNMbgIokNle9Mpt6sQ45tM98iwh4H0w&m=3NzPJbEUwAeHXxHyJF9WYbEoPnbkjGDmpB-OQyDj7k8&s=HcSy267oTgllN1J2LCJjMAC2nFTSweg7qlXXJlRnzsM&e=</a><br style="caret-color: rgb(0, 0, 0); font-family: CourierNewPSMT; font-size: 14px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class="">
<br style="caret-color: rgb(0, 0, 0); font-family: CourierNewPSMT; font-size: 14px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class="">
<span style="caret-color: rgb(0, 0, 0); font-family: CourierNewPSMT; font-size: 14px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; float: none; display: inline !important;" class="">I
have reached out to the authors and begun reaching out to others that I know who work in this area for other references. Ahead of that, however, I thought I would share early-and-often with the group, here. I am happy to share any more of my thoughts.</span><br style="caret-color: rgb(0, 0, 0); font-family: CourierNewPSMT; font-size: 14px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class="">
</div>
</blockquote>
</div>
<br class="">
</div>
</div>
</div></blockquote></div><br class=""></div></body></html>