<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-2">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Helvetica;
panose-1:2 11 6 4 2 2 2 2 2 4;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:"Roboto Light";
panose-1:2 0 0 0 0 0 0 0 0 0;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{mso-margin-top-alt:auto;
margin-right:0cm;
mso-margin-bottom-alt:auto;
margin-left:0cm;
mso-add-space:auto;
font-size:11.0pt;
font-family:"Roboto Light";
mso-fareast-language:EN-US;}
p.MsoNormalCxSpFirst, li.MsoNormalCxSpFirst, div.MsoNormalCxSpFirst
{mso-style-type:export-only;
mso-margin-top-alt:auto;
margin-right:0cm;
mso-margin-bottom-alt:auto;
margin-left:0cm;
mso-add-space:auto;
font-size:11.0pt;
font-family:"Roboto Light";
mso-fareast-language:EN-US;}
p.MsoNormalCxSpMiddle, li.MsoNormalCxSpMiddle, div.MsoNormalCxSpMiddle
{mso-style-type:export-only;
mso-margin-top-alt:auto;
margin-right:0cm;
mso-margin-bottom-alt:auto;
margin-left:0cm;
mso-add-space:auto;
font-size:11.0pt;
font-family:"Roboto Light";
mso-fareast-language:EN-US;}
p.MsoNormalCxSpLast, li.MsoNormalCxSpLast, div.MsoNormalCxSpLast
{mso-style-type:export-only;
mso-margin-top-alt:auto;
margin-right:0cm;
mso-margin-bottom-alt:auto;
margin-left:0cm;
mso-add-space:auto;
font-size:11.0pt;
font-family:"Roboto Light";
mso-fareast-language:EN-US;}
p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph
{mso-style-priority:34;
mso-margin-top-alt:auto;
margin-right:0cm;
mso-margin-bottom-alt:auto;
margin-left:0cm;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Roboto Light";
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Roboto Light";
mso-fareast-language:EN-US;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:70.85pt 70.85pt 70.85pt 70.85pt;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:1094127428;
mso-list-template-ids:-1822255902;}
@list l1
{mso-list-id:1711102101;
mso-list-template-ids:799580294;}
@list l1:level1
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:36.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l1:level2
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:72.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l1:level3
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:108.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l1:level4
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:144.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l1:level5
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:180.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l1:level6
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:216.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l1:level7
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:252.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l1:level8
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:288.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l1:level9
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:324.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="SR-LATN-RS" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormalCxSpFirst">Dear team,<o:p></o:p></p>
<p class="MsoNormalCxSpMiddle"><o:p> </o:p></p>
<p class="MsoNormalCxSpMiddle">I think you will be interested in the information below, about the possible approach for conducting the next root zone key signing ceremony. Obviously there is a disaster recovery plan and procedure to perform these ceremonies
even in situations such as the present, although likely none of us even thought that what was happening now is actually possible.<o:p></o:p></p>
<p class="MsoNormalCxSpMiddle"><o:p> </o:p></p>
<p class="MsoNormalCxSpMiddle">Žarko<o:p></o:p></p>
<p class="MsoNormalCxSpMiddle"><o:p> </o:p></p>
<p class="MsoNormalCxSpMiddle"><b><span style="font-family:"Helvetica",sans-serif"><o:p> </o:p></span></b></p>
<p class="MsoNormalCxSpMiddle"><b><span style="font-family:"Helvetica",sans-serif">Contingency plans for the next Root KSK Ceremony</span></b><o:p></o:p></p>
<p class="MsoNormalCxSpMiddle"> <o:p></o:p></p>
<p class="MsoNormalCxSpMiddle"><span style="font-size:10.0pt;font-family:"Arial",sans-serif">Colleagues,</span><o:p></o:p></p>
<p class="MsoNormalCxSpMiddle"><span style="font-size:10.0pt;font-family:"Arial",sans-serif"> </span><o:p></o:p></p>
<p class="MsoNormalCxSpMiddle"><span style="font-size:10.0pt;font-family:"Arial",sans-serif">The IANA team, and the broader ICANN organization, have been giving significant thought to the Coronavirus pandemic and its impact on root zone KSK operations. Managing
the KSK is centred on conducting "key signing ceremonies", where trusted community representatives (TCRs) attend from around the world to witness utilization of the root zone KSK private key. This approach seeks to engender trust in the broader community that
the key has not been compromised, in addition to more typical controls such as third-party auditing.</span><o:p></o:p></p>
<p class="MsoNormalCxSpMiddle"><span style="font-size:10.0pt;font-family:"Arial",sans-serif"> </span><o:p></o:p></p>
<p class="MsoNormalCxSpLast"><span style="font-size:10.0pt;font-family:"Arial",sans-serif">In light of world events we have developed contingency plans around how to hold key ceremonies in the short term. To that end, we identified a graduated set of options,
in summary:</span><o:p></o:p></p>
<ol style="margin-top:0cm" start="1" type="1">
<li class="MsoListParagraph" style="margin-top:0cm;margin-bottom:0cm;margin-bottom:.0001pt;mso-list:l0 level1 lfo1">
<span style="font-size:10.0pt;font-family:"Arial",sans-serif">Hold the next ceremony as planned on April 23, with a quorum of participants globally.</span><o:p></o:p></li><li class="MsoListParagraph" style="margin-top:0cm;margin-bottom:0cm;margin-bottom:.0001pt;mso-list:l0 level1 lfo1">
<span style="font-size:10.0pt;font-family:"Arial",sans-serif">Hold the next ceremony on a different date using only US-based TCRs.</span><o:p></o:p></li><li class="MsoListParagraph" style="margin-top:0cm;margin-bottom:0cm;margin-bottom:.0001pt;mso-list:l0 level1 lfo1">
<span style="font-size:10.0pt;font-family:"Arial",sans-serif">Hold the next ceremony using our disaster recovery procedure, which provides for a staff-only ceremony (i.e. no TCRs would be physically present).</span><o:p></o:p></li></ol>
<p class="MsoNormalCxSpFirst"><span style="font-size:10.0pt;font-family:"Arial",sans-serif">In general, our goal has been to navigate from Option 1, and if that is not possible, Option 2, and so on. However, at this time, our focus is on developing a plan around
Option 3.</span><o:p></o:p></p>
<p class="MsoNormalCxSpMiddle"><span style="font-size:10.0pt;font-family:"Arial",sans-serif"> </span><o:p></o:p></p>
<p class="MsoNormalCxSpMiddle"><span style="font-size:10.0pt;font-family:"Arial",sans-serif">The ceremony is currently scheduled unusually early in the quarter (it is typically held in May), and needs to be held to generate signatures that will be needed in
production for July. Our contingency plan is comprised of:</span><o:p></o:p></p>
<p class="MsoNormalCxSpLast"><span style="font-size:10.0pt;font-family:"Arial",sans-serif"> </span><o:p></o:p></p>
<ul style="margin-top:0cm" type="disc">
<li class="MsoListParagraph" style="margin-top:0cm;margin-bottom:0cm;margin-bottom:.0001pt;mso-list:l1 level1 lfo2">
<span style="font-size:10.0pt;font-family:"Arial",sans-serif">Holding the ceremony with a bare minimum of staff (approximately 6);</span><o:p></o:p></li><li class="MsoListParagraph" style="margin-top:0cm;margin-bottom:0cm;margin-bottom:.0001pt;mso-list:l1 level1 lfo2">
<span style="font-size:10.0pt;font-family:"Arial",sans-serif">Using 3 TCRs’ credentials, either by having their access key transferred to us in a secure manner in advance of the ceremony, or by drilling the safety deposit box that holds their secure elements.</span><o:p></o:p></li><li class="MsoListParagraph" style="margin-top:0cm;margin-bottom:0cm;margin-bottom:.0001pt;mso-list:l1 level1 lfo2">
<span style="font-size:10.0pt;font-family:"Arial",sans-serif">Holding the ceremony under typical audit coverage, allowing for remote witnessing of events by all, plus providing additional opportunities for TCRs to stay involved in the process remotely.</span><o:p></o:p></li><li class="MsoListParagraph" style="margin-top:0cm;margin-bottom:0cm;margin-bottom:.0001pt;mso-list:l1 level1 lfo2">
<span style="font-size:10.0pt;font-family:"Arial",sans-serif">Signing key materials to cover one or more subsequent quarters, to provide relief from the need to necessarily hold ceremonies later in 2020 if circumstances disallow it. (The additional signatures
would be withheld securely until they are needed.)</span><o:p></o:p></li></ul>
<p class="MsoNormalCxSpFirst"><span style="font-size:10.0pt;font-family:"Arial",sans-serif">Our key management facilities were designed with the disaster recovery capability of performing staff-only ceremonies in mind, but this is a significant shift from normal
operations and we want to promote broader community awareness of this work. Those directly involved in key ceremonies - the trusted community representatives, our vendors and auditors - have been consulted and are broadly supportive of this effort.</span><o:p></o:p></p>
<p class="MsoNormalCxSpMiddle"><span style="font-size:10.0pt;font-family:"Arial",sans-serif"> </span><o:p></o:p></p>
<p class="MsoNormalCxSpMiddle"><span style="font-size:10.0pt;font-family:"Arial",sans-serif">Should there be any specific feedback you would like to share with our team, please let me know or respond to this thread. We will take it into consideration as we
finalize our plans.</span><o:p></o:p></p>
<p class="MsoNormalCxSpMiddle"><span style="font-size:10.0pt;font-family:"Arial",sans-serif">Thank you for your support.</span><o:p></o:p></p>
<p class="MsoNormalCxSpMiddle"><o:p> </o:p></p>
<p class="MsoNormal" style="margin:0cm;margin-bottom:.0001pt"><span style="font-size:10.0pt;font-family:"Arial",sans-serif">Kim Davies<o:p></o:p></span></p>
<p class="MsoNormal" style="margin:0cm;margin-bottom:.0001pt"><span style="font-size:10.0pt;font-family:"Arial",sans-serif">VP, IANA Services, ICANN<o:p></o:p></span></p>
<p class="MsoNormal" style="margin:0cm;margin-bottom:.0001pt"><span style="font-size:10.0pt;font-family:"Arial",sans-serif">President, Public Technical Identifiers (PTI)<o:p></o:p></span></p>
<p class="MsoNormalCxSpLast"><o:p> </o:p></p>
</div>
</body>
</html>