<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Wingdings;
panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Calibri",sans-serif;}
h1
{mso-style-priority:9;
mso-style-link:"Heading 1 Char";
margin-top:12.0pt;
margin-right:0in;
margin-bottom:0in;
margin-left:.3in;
margin-bottom:.0001pt;
text-indent:-.3in;
page-break-after:avoid;
mso-list:l1 level1 lfo1;
font-size:16.0pt;
font-family:"Calibri Light",sans-serif;
color:#2F5496;
font-weight:normal;}
h2
{mso-style-priority:9;
mso-style-link:"Heading 2 Char";
margin-top:2.0pt;
margin-right:0in;
margin-bottom:0in;
margin-left:.4in;
margin-bottom:.0001pt;
text-indent:-.4in;
page-break-after:avoid;
mso-list:l1 level2 lfo1;
font-size:13.0pt;
font-family:"Calibri Light",sans-serif;
color:#2F5496;
font-weight:normal;}
h3
{mso-style-priority:9;
mso-style-link:"Heading 3 Char";
margin-top:2.0pt;
margin-right:0in;
margin-bottom:0in;
margin-left:.5in;
margin-bottom:.0001pt;
text-indent:-.5in;
page-break-after:avoid;
mso-list:l1 level3 lfo1;
font-size:12.0pt;
font-family:"Calibri Light",sans-serif;
color:#1F3763;
font-weight:normal;}
h4
{mso-style-priority:9;
mso-style-link:"Heading 4 Char";
margin-top:2.0pt;
margin-right:0in;
margin-bottom:0in;
margin-left:.6in;
margin-bottom:.0001pt;
text-indent:-.6in;
page-break-after:avoid;
mso-list:l1 level4 lfo1;
font-size:12.0pt;
font-family:"Calibri Light",sans-serif;
color:#2F5496;
font-weight:normal;
font-style:italic;}
h5
{mso-style-priority:9;
mso-style-link:"Heading 5 Char";
margin-top:2.0pt;
margin-right:0in;
margin-bottom:0in;
margin-left:.7in;
margin-bottom:.0001pt;
text-indent:-.7in;
page-break-after:avoid;
mso-list:l1 level5 lfo1;
font-size:12.0pt;
font-family:"Calibri Light",sans-serif;
color:#2F5496;
font-weight:normal;}
h6
{mso-style-priority:9;
mso-style-link:"Heading 6 Char";
margin-top:2.0pt;
margin-right:0in;
margin-bottom:0in;
margin-left:.8in;
margin-bottom:.0001pt;
text-indent:-.8in;
page-break-after:avoid;
mso-list:l1 level6 lfo1;
font-size:12.0pt;
font-family:"Calibri Light",sans-serif;
color:#1F3763;
font-weight:normal;}
p.MsoHeading7, li.MsoHeading7, div.MsoHeading7
{mso-style-priority:9;
mso-style-link:"Heading 7 Char";
margin-top:2.0pt;
margin-right:0in;
margin-bottom:0in;
margin-left:.9in;
margin-bottom:.0001pt;
text-indent:-.9in;
page-break-after:avoid;
mso-list:l1 level7 lfo1;
font-size:12.0pt;
font-family:"Calibri Light",sans-serif;
color:#1F3763;
font-style:italic;}
p.MsoHeading8, li.MsoHeading8, div.MsoHeading8
{mso-style-priority:9;
mso-style-link:"Heading 8 Char";
margin-top:2.0pt;
margin-right:0in;
margin-bottom:0in;
margin-left:1.0in;
margin-bottom:.0001pt;
text-indent:-1.0in;
page-break-after:avoid;
mso-list:l1 level8 lfo1;
font-size:10.5pt;
font-family:"Calibri Light",sans-serif;
color:#272727;}
p.MsoHeading9, li.MsoHeading9, div.MsoHeading9
{mso-style-priority:9;
mso-style-link:"Heading 9 Char";
margin-top:2.0pt;
margin-right:0in;
margin-bottom:0in;
margin-left:1.1in;
margin-bottom:.0001pt;
text-indent:-1.1in;
page-break-after:avoid;
mso-list:l1 level9 lfo1;
font-size:10.5pt;
font-family:"Calibri Light",sans-serif;
color:#272727;
font-style:italic;}
p.MsoFootnoteText, li.MsoFootnoteText, div.MsoFootnoteText
{mso-style-priority:99;
mso-style-link:"Footnote Text Char";
margin:0in;
margin-bottom:.0001pt;
font-size:10.0pt;
font-family:"Calibri",sans-serif;}
span.MsoFootnoteReference
{mso-style-priority:99;
vertical-align:super;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph
{mso-style-priority:34;
margin-top:0in;
margin-right:0in;
margin-bottom:0in;
margin-left:.5in;
margin-bottom:.0001pt;
mso-add-space:auto;
font-size:12.0pt;
font-family:"Calibri",sans-serif;}
p.MsoListParagraphCxSpFirst, li.MsoListParagraphCxSpFirst, div.MsoListParagraphCxSpFirst
{mso-style-priority:34;
mso-style-type:export-only;
margin-top:0in;
margin-right:0in;
margin-bottom:0in;
margin-left:.5in;
margin-bottom:.0001pt;
mso-add-space:auto;
font-size:12.0pt;
font-family:"Calibri",sans-serif;}
p.MsoListParagraphCxSpMiddle, li.MsoListParagraphCxSpMiddle, div.MsoListParagraphCxSpMiddle
{mso-style-priority:34;
mso-style-type:export-only;
margin-top:0in;
margin-right:0in;
margin-bottom:0in;
margin-left:.5in;
margin-bottom:.0001pt;
mso-add-space:auto;
font-size:12.0pt;
font-family:"Calibri",sans-serif;}
p.MsoListParagraphCxSpLast, li.MsoListParagraphCxSpLast, div.MsoListParagraphCxSpLast
{mso-style-priority:34;
mso-style-type:export-only;
margin-top:0in;
margin-right:0in;
margin-bottom:0in;
margin-left:.5in;
margin-bottom:.0001pt;
mso-add-space:auto;
font-size:12.0pt;
font-family:"Calibri",sans-serif;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
span.Heading1Char
{mso-style-name:"Heading 1 Char";
mso-style-priority:9;
mso-style-link:"Heading 1";
font-family:"Calibri Light",sans-serif;
color:#2F5496;}
span.Heading2Char
{mso-style-name:"Heading 2 Char";
mso-style-priority:9;
mso-style-link:"Heading 2";
font-family:"Calibri Light",sans-serif;
color:#2F5496;}
span.Heading3Char
{mso-style-name:"Heading 3 Char";
mso-style-priority:9;
mso-style-link:"Heading 3";
font-family:"Calibri Light",sans-serif;
color:#1F3763;}
span.Heading4Char
{mso-style-name:"Heading 4 Char";
mso-style-priority:9;
mso-style-link:"Heading 4";
font-family:"Calibri Light",sans-serif;
color:#2F5496;
font-style:italic;}
span.Heading5Char
{mso-style-name:"Heading 5 Char";
mso-style-priority:9;
mso-style-link:"Heading 5";
font-family:"Calibri Light",sans-serif;
color:#2F5496;}
span.Heading6Char
{mso-style-name:"Heading 6 Char";
mso-style-priority:9;
mso-style-link:"Heading 6";
font-family:"Calibri Light",sans-serif;
color:#1F3763;}
span.Heading7Char
{mso-style-name:"Heading 7 Char";
mso-style-priority:9;
mso-style-link:"Heading 7";
font-family:"Calibri Light",sans-serif;
color:#1F3763;
font-style:italic;}
span.Heading8Char
{mso-style-name:"Heading 8 Char";
mso-style-priority:9;
mso-style-link:"Heading 8";
font-family:"Calibri Light",sans-serif;
color:#272727;}
span.Heading9Char
{mso-style-name:"Heading 9 Char";
mso-style-priority:9;
mso-style-link:"Heading 9";
font-family:"Calibri Light",sans-serif;
color:#272727;
font-style:italic;}
span.FootnoteTextChar
{mso-style-name:"Footnote Text Char";
mso-style-priority:99;
mso-style-link:"Footnote Text";}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;}
/* Page Definitions */
@page
{mso-endnote-separator:url("cid:header.htm\@01D5899F.F8B5B140") es;
mso-endnote-continuation-separator:url("cid:header.htm\@01D5899F.F8B5B140") ecs;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:308635022;
mso-list-type:hybrid;
mso-list-template-ids:-2146555184 67698689 67698691 67698693 67698689 67698691 67698693 67698689 67698691 67698693;}
@list l0:level1
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Symbol;}
@list l0:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";}
@list l0:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
@list l0:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Symbol;}
@list l0:level5
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";}
@list l0:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
@list l0:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Symbol;}
@list l0:level8
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";}
@list l0:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
@list l1
{mso-list-id:822701538;
mso-list-template-ids:134807589;}
@list l1:level1
{mso-level-style-link:"Heading 1";
mso-level-text:%1;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:.3in;
text-indent:-.3in;}
@list l1:level2
{mso-level-style-link:"Heading 2";
mso-level-text:"%1\.%2";
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:.4in;
text-indent:-.4in;}
@list l1:level3
{mso-level-style-link:"Heading 3";
mso-level-text:"%1\.%2\.%3";
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:.5in;
text-indent:-.5in;}
@list l1:level4
{mso-level-style-link:"Heading 4";
mso-level-text:"%1\.%2\.%3\.%4";
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:.6in;
text-indent:-.6in;}
@list l1:level5
{mso-level-style-link:"Heading 5";
mso-level-text:"%1\.%2\.%3\.%4\.%5";
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:.7in;
text-indent:-.7in;}
@list l1:level6
{mso-level-style-link:"Heading 6";
mso-level-text:"%1\.%2\.%3\.%4\.%5\.%6";
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:.8in;
text-indent:-.8in;}
@list l1:level7
{mso-level-style-link:"Heading 7";
mso-level-text:"%1\.%2\.%3\.%4\.%5\.%6\.%7";
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:.9in;
text-indent:-.9in;}
@list l1:level8
{mso-level-style-link:"Heading 8";
mso-level-text:"%1\.%2\.%3\.%4\.%5\.%6\.%7\.%8";
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:1.0in;
text-indent:-1.0in;}
@list l1:level9
{mso-level-style-link:"Heading 9";
mso-level-text:"%1\.%2\.%3\.%4\.%5\.%6\.%7\.%8\.%9";
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:1.1in;
text-indent:-1.1in;}
@list l2
{mso-list-id:1254244328;
mso-list-type:hybrid;
mso-list-template-ids:-228051022 67698689 67698691 67698693 67698689 67698691 67698693 67698689 67698691 67698693;}
@list l2:level1
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Symbol;}
@list l2:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";}
@list l2:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
@list l2:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Symbol;}
@list l2:level5
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";}
@list l2:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
@list l2:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Symbol;}
@list l2:level8
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";}
@list l2:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
ol
{margin-bottom:0in;}
ul
{margin-bottom:0in;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal"><span style="color:black">As discussed, here’s background on the definitions of “DNS abuse” that have been used in ICANN over the years.
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:black">As you know, the Board didn’t approve most of the CCT Review’s recommendations and one of their cited reasons (surprisingly) was that DNS abuse first needed to be defined. Staff and some ICANN groups have subsequently
pursued this issue. <o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:black">I think SSR2’s proposed approach strikes the appropriate balance and is a useful contribution to this discussion -- essentially that: ICANN is responsible for enforcing its contracts and following through on its
plans and obligations based on the existing definitions of DNS abuse that have been well-vetted and used by ICANN for many years, while simultaneously evolving the definition of DNS abuse in conjunction with outside experts to keep pace with user harm tied
to the internet’s unique identifiers. <o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:black">Best,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black">Denise<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:black"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:black">Denise Michel<o:p></o:p></span></p>
<p class="MsoNormal"><u><span style="color:black"><a href="mailto:denisemichel@fb.com" title="mailto:denisemichel@fb.com"><span style="color:black">denisemichel@fb.com</span></a></span></u><span style="color:black"> <o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:black"><o:p> </o:p></span></p>
<h1 style="mso-list:l1 level1 lfo1"><![if !supportLists]><span lang="EN-GB" style="font-family:"Calibri",sans-serif;color:black"><span style="mso-list:Ignore">1<span style="font:7.0pt "Times New Roman"">
</span></span></span><![endif]><span lang="EN-GB" style="font-family:"Calibri",sans-serif;color:black">Community developed definitions of key terms (eg DNS Security; DNS Abuse)<o:p></o:p></span></h1>
<p class="MsoNormal"><span style="color:black"><o:p> </o:p></span></p>
<h2 style="mso-list:l1 level2 lfo1"><![if !supportLists]><b><span lang="EN-GB" style="font-family:"Calibri",sans-serif;color:black"><span style="mso-list:Ignore">1.1<span style="font:7.0pt "Times New Roman"">
</span></span></span></b><![endif]><b><span lang="EN-GB" style="font-family:"Calibri",sans-serif;color:black">CCT Report – 2018
</span></b><span lang="EN-GB" style="font-family:"Calibri",sans-serif;color:black">(<a href="https://www.icann.org/en/system/files/files/cct-final-08sep18-en.pdf">CCT Review</a>)<b><o:p></o:p></b></span></h2>
<p class="MsoNormal"><span style="color:black">The CCT is a community review, so the definitions adopted in the report are community-developed or approved, and the review has been subject to public comment.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:black">DNS Abuse is defined by the CCT (at footnote 11, p8) as follows. The footnote makes clear that the definition was developed through the ICANN Community:<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black"><o:p> </o:p></span></p>
<p class="MsoNormal"><i><span style="color:black">“DNS Abuse” is a term used by the Review Team that refers to “intentionally deceptive, conniving, or unsolicited activities that actively make use of the DNS and/or the procedures used to register domain names”
(see p. 3 of the “New gTLD Program Safeguards Against DNS Abuse: Revised Report” referenced below).
<o:p></o:p></span></i></p>
<p class="MsoNormal"><i><span style="color:black"><o:p> </o:p></span></i></p>
<p class="MsoNormal"><i><span style="color:black">“DNS Security Abuse” in the context of this report refers to specific, technical forms of abusive behavior: malware distribution, phishing, pharming, botnet command-and-control, and spam in the DNS. For more
on how abuse has been characterized by the ICANN Community, see the Registration Abuse Policies Working Group’s Final Report (29 May 2010),
<o:p></o:p></span></i></p>
<p class="MsoNormal"><i><span style="color:black"><o:p> </o:p></span></i></p>
<p class="MsoNormal"><span style="color:black">At the glossary, DNS Abuse and DNS Security Abuse are defined as:<o:p></o:p></span></p>
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" style="border-collapse:collapse">
<tbody>
<tr>
<td style="border-top:#1684C4 1.5pt;border-left:#1684C6 1.0pt;border-bottom:#1684C4 1.5pt;border-right:#1684C6 1.0pt;border-style:solid;padding:.75pt .75pt .75pt .75pt">
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><i><span style="font-size:11.0pt;color:black">DNS Abuse
</span></i><i><span style="color:black"><o:p></o:p></span></i></p>
</td>
<td width="535" style="width:400.9pt;border-top:solid #198CC9 1.5pt;border-left:none;border-bottom:solid #198CC9 1.5pt;border-right:solid #1684C6 1.0pt;padding:.75pt .75pt .75pt .75pt">
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><i><span style="font-size:11.0pt;color:black">Intentionally deceptive, conniving or unsolicited activities that actively exploit the DNS and/or the procedures used to register domain
names. </span></i><i><span style="color:black"><o:p></o:p></span></i></p>
</td>
</tr>
<tr>
<td style="border:solid #1684C6 1.0pt;border-top:none;padding:.75pt .75pt .75pt .75pt">
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><i><span style="font-size:11.0pt;color:black">DNS Security Abuse<o:p></o:p></span></i></p>
</td>
<td width="535" style="width:400.9pt;border-top:none;border-left:none;border-bottom:solid #1984C6 1.0pt;border-right:solid #1684C6 1.0pt;padding:.75pt .75pt .75pt .75pt">
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><i><span style="font-size:11.0pt;color:black">DNS abuse related to cybersecurity, such as malware distribution, phishing, pharming, botnet command-and- control, and high volume
spam.<o:p></o:p></span></i></p>
</td>
</tr>
</tbody>
</table>
<p class="MsoNormal"><span lang="EN-GB" style="color:black"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:black">Note that ‘DNS Security Abuse’ includes ‘high volume spam’.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black"><o:p> </o:p></span></p>
<h2 style="mso-list:l1 level2 lfo1"><![if !supportLists]><span lang="EN-GB" style="font-family:"Calibri",sans-serif;color:black"><span style="mso-list:Ignore">1.2<span style="font:7.0pt "Times New Roman"">
</span></span></span><![endif]><b><span lang="EN-GB" style="font-family:"Calibri",sans-serif;color:black">New gTLD Program Safeguards Against DNS Abuse: Revised Report - 2016</span></b><span lang="EN-GB" style="font-family:"Calibri",sans-serif;color:black">
(<a href="https://newgtlds.icann.org/en/reviews/dns-abuse/safeguards-against-dns-abuse-18jul16-en.pdf">New gTLD Safeguards Report</a>)<o:p></o:p></span></h2>
<p class="MsoNormal"><span style="color:black">The report was commissioned by the CCT as part of their work. It was written by ICANN staff in consultation with ‘expert constituencies’, and was subject to public comment<a style="mso-footnote-id:ftn1" href="#_ftn1" name="_ftnref1" title=""><span class="MsoFootnoteReference"><span class="MsoFootnoteReference"><span style="font-size:12.0pt;font-family:"Calibri",sans-serif;color:black;mso-fareast-language:EN-US">[1]</span></span></span></a>.
The revised report was published in 2016.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:black">The definition of DNS Abuse adopted by the CCT was coined in the New gTLD Program Safeguards report.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black"><o:p> </o:p></span></p>
<h2 style="mso-list:l1 level2 lfo1"><![if !supportLists]><span lang="EN-GB" style="font-family:"Calibri",sans-serif;color:black"><span style="mso-list:Ignore">1.3<span style="font:7.0pt "Times New Roman"">
</span></span></span><![endif]><b><span lang="EN-GB" style="font-family:"Calibri",sans-serif;color:black">Registration Abuse Policies Working Group – 2010</span></b><span lang="EN-GB" style="font-family:"Calibri",sans-serif;color:black"> (<a href="https://gnso.icann.org/sites/default/files/filefield_12530/rap-wg-final-report-29may10-en.pdf">RAP
WG</a>)<o:p></o:p></span></h2>
<p class="MsoNormal"><span style="color:black">The ICANN Registration Abuse Policies Working Group Final Report is 126 pages long, and provides detailed examination of the various ways in which domain names can be and are abused.
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:black">Recommendation #1 under ‘Malicious use of domain names’ the team unanimously recommends the creation of non-binding best practices to help contracted parties address the illicit use of domain names (see p12, and
pp 50-70). The subject areas include policies for identifying and investigating malicious use such as malware and phishing).<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:black">It contains the following definitions, which were adopted by unanimous consensus of the community represented through the working group (see page 19)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black"><o:p> </o:p></span></p>
<p class="MsoNormal"><i><span style="color:black">Abuse is an action that: <o:p></o:p></span></i></p>
<ul style="margin-top:0in" type="disc">
<li class="MsoListParagraphCxSpFirst" style="color:black;margin-left:0in;mso-add-space:auto;mso-list:l0 level1 lfo2">
<i><span lang="EN-GB">Causes actual and substantial harm, or is a material predicate of such harm, and
<o:p></o:p></span></i></li><li class="MsoListParagraphCxSpLast" style="color:black;margin-left:0in;mso-add-space:auto;mso-list:l0 level1 lfo2">
<i><span lang="EN-GB">Is illegal or illegitimate, or is otherwise considered contrary to the intention and design of a stated legitimate purpose, if such purpose is disclosed.
<o:p></o:p></span></i></li></ul>
<p class="MsoNormal"><span style="color:black"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:black">Section 5 of the report lists out numerous registration abuses. Section 6 of the RAPWG report considers ‘Malicious use of domain names’, particularly ‘e-crime’. As a general point, in relation to fast-flux, ‘but
also spamming, malware distribution, online child pornography, phishing, botnet command-and-control, 419 scams and others’, the malicious or illicit behaviour ‘may be mitigated by stopping the domain name from resolving…. in the ICANN context, stopping the
resolution of the domain is the relevant issue, since that is what registrars and registries have the technical ability to make happen.’<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black"><o:p> </o:p></span></p>
<h2 style="mso-list:l1 level2 lfo1"><![if !supportLists]><span lang="EN-GB" style="font-family:"Calibri",sans-serif;color:black"><span style="mso-list:Ignore">1.4<span style="font:7.0pt "Times New Roman"">
</span></span></span><![endif]><b><span lang="EN-GB" style="font-family:"Calibri",sans-serif;color:black">Draft working definitions – GNSO drafting team – 2009</span></b><span lang="EN-GB" style="font-family:"Calibri",sans-serif;color:black"> (<a href="https://gnso.icann.org/sites/default/files/filefield_5950/whois-working-definitions-study-terms-18feb09.pdf">reference</a>)<o:p></o:p></span></h2>
<p class="MsoNormal"><span style="color:black">The RAPWG report references a document entitled ‘Draft Working Definitions prepared by the GNSO Drafting Team for further use by the GNSO Council as of 18 February 2009’
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:black">This document’s definition of misuse is cited with approval by the RAPWG<i><o:p></o:p></i></span></p>
<p class="MsoNormal"><i><span style="color:black"><o:p> </o:p></span></i></p>
<p class="MsoNormal"><i><span style="color:black">2) Misuse <o:p></o:p></span></i></p>
<p class="MsoNormal"><i><span style="color:black">See study #s 1, 14, GAC 3 for examples of use in context.
<o:p></o:p></span></i></p>
<p class="MsoNormal"><i><span style="color:black"><o:p> </o:p></span></i></p>
<p class="MsoNormal"><i><span style="color:black">Misuse is an action that causes actual harm, is the predicate to such harm, is illegal or illegitimate, or is otherwise considered contrary to intention and design of a stated legitimate purpose, if such purpose
is disclosed. When applied to Whois data, such harmful actions <b>may include the generation of spam</b>, the abuse of personal data, intellectual property theft, loss of reputation or identity theft, loss of data,
<b>phishing and other cybercrime related exploits, harassment, stalking, or other activity with negative personal or economic consequences.</b> The predicate to harmful action often includes automated email harvesting, domain name registration by proxy/privacy
services to aid wrongful activity, and support of false or misleading registrant data. Predicate acts might include the
<b>use of Whois data to develop large email lists for commercial purposes. <o:p></o:p></b></span></i></p>
<p class="MsoNormal"><span style="color:black"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:black"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:black"><o:p> </o:p></span></p>
</div>
<div style="mso-element:footnote-list"><br clear="all">
<hr align="left" size="1" width="33%">
<div style="mso-element:footnote" id="ftn1">
<p class="MsoNormal"><a style="mso-footnote-id:ftn1" href="#_ftnref1" name="_ftn1" title=""><span class="MsoFootnoteReference"><span class="MsoFootnoteReference"><span style="font-size:12.0pt;font-family:"Calibri",sans-serif;mso-fareast-language:EN-US">[1]</span></span></span></a>
<a href="https://www.icann.org/en/system/files/files/report-comments-new-gtld-safeguards-dns-abuse-17jun16-en.pdf">
https://www.icann.org/en/system/files/files/report-comments-new-gtld-safeguards-dns-abuse-17jun16-en.pdf</a><o:p></o:p></p>
<p class="MsoFootnoteText"><span lang="EN-GB"><o:p> </o:p></span></p>
</div>
</div>
</body>
</html>