<html xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Wingdings;
panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
font-size:12.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph
{mso-style-priority:34;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
span.EmailStyle20
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:59835702;
mso-list-template-ids:996171896;}
@list l0:level1
{mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level2
{mso-level-tab-stop:1.0in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level3
{mso-level-tab-stop:1.5in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level4
{mso-level-tab-stop:2.0in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level5
{mso-level-tab-stop:2.5in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level6
{mso-level-tab-stop:3.0in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level7
{mso-level-tab-stop:3.5in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level8
{mso-level-tab-stop:4.0in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level9
{mso-level-tab-stop:4.5in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l1
{mso-list-id:478495585;
mso-list-template-ids:562309922;}
@list l1:level1
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l1:level2
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:1.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l1:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:1.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l1:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l1:level5
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l1:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l1:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l1:level8
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l1:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l2
{mso-list-id:825628923;
mso-list-template-ids:513589522;}
@list l2:level1
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l2:level2
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:1.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l2:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:1.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l2:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l2:level5
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l2:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l2:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l2:level8
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l2:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l3
{mso-list-id:1011178379;
mso-list-template-ids:1925467986;}
@list l3:level1
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l3:level2
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:1.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l3:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:1.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l3:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l3:level5
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l3:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l3:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l3:level8
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l3:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l4
{mso-list-id:1117986302;
mso-list-template-ids:-1172638774;}
@list l4:level1
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l4:level2
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:1.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l4:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:1.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l4:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l4:level5
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l4:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l4:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l4:level8
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l4:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l5
{mso-list-id:1460145940;
mso-list-type:hybrid;
mso-list-template-ids:1305361368 67698689 67698691 67698693 67698689 67698691 67698693 67698689 67698691 67698693;}
@list l5:level1
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Symbol;}
@list l5:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";}
@list l5:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
@list l5:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Symbol;}
@list l5:level5
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";}
@list l5:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
@list l5:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Symbol;}
@list l5:level8
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";}
@list l5:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
@list l6
{mso-list-id:1715495301;
mso-list-type:hybrid;
mso-list-template-ids:-695446114 67698689 67698691 67698693 67698689 67698691 67698693 67698689 67698691 67698693;}
@list l6:level1
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Symbol;}
@list l6:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";}
@list l6:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
@list l6:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Symbol;}
@list l6:level5
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";}
@list l6:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
@list l6:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Symbol;}
@list l6:level8
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";}
@list l6:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
@list l7
{mso-list-id:1954708674;
mso-list-type:hybrid;
mso-list-template-ids:-826343730 67698689 67698691 67698693 67698689 67698691 67698693 67698689 67698691 67698693;}
@list l7:level1
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Symbol;}
@list l7:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";}
@list l7:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
@list l7:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Symbol;}
@list l7:level5
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";}
@list l7:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
@list l7:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Symbol;}
@list l7:level8
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";}
@list l7:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
@list l8
{mso-list-id:1970698869;
mso-list-type:hybrid;
mso-list-template-ids:-1695523050 67698689 67698691 67698693 67698689 67698691 67698693 67698689 67698691 67698693;}
@list l8:level1
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:.75in;
text-indent:-.25in;
font-family:Symbol;}
@list l8:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:1.25in;
text-indent:-.25in;
font-family:"Courier New";}
@list l8:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:1.75in;
text-indent:-.25in;
font-family:Wingdings;}
@list l8:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:2.25in;
text-indent:-.25in;
font-family:Symbol;}
@list l8:level5
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:2.75in;
text-indent:-.25in;
font-family:"Courier New";}
@list l8:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:3.25in;
text-indent:-.25in;
font-family:Wingdings;}
@list l8:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:3.75in;
text-indent:-.25in;
font-family:Symbol;}
@list l8:level8
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:4.25in;
text-indent:-.25in;
font-family:"Courier New";}
@list l8:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:4.75in;
text-indent:-.25in;
font-family:Wingdings;}
@list l9
{mso-list-id:2114091070;
mso-list-type:hybrid;
mso-list-template-ids:2117731508 67698689 67698691 67698693 67698689 67698691 67698693 67698689 67698691 67698693;}
@list l9:level1
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:.75in;
text-indent:-.25in;
font-family:Symbol;}
@list l9:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:1.25in;
text-indent:-.25in;
font-family:"Courier New";}
@list l9:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:1.75in;
text-indent:-.25in;
font-family:Wingdings;}
@list l9:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:2.25in;
text-indent:-.25in;
font-family:Symbol;}
@list l9:level5
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:2.75in;
text-indent:-.25in;
font-family:"Courier New";}
@list l9:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:3.25in;
text-indent:-.25in;
font-family:Wingdings;}
@list l9:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:3.75in;
text-indent:-.25in;
font-family:Symbol;}
@list l9:level8
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:4.25in;
text-indent:-.25in;
font-family:"Courier New";}
@list l9:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:4.75in;
text-indent:-.25in;
font-family:Wingdings;}
ol
{margin-bottom:0in;}
ul
{margin-bottom:0in;}
--></style>
</head>
<body lang="EN-US" link="#0563C1" vlink="purple" style="word-wrap:break-word">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt">Dear Working Group Members,</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt"> </span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Please find below the notes and action items from today’s meeting during ICANN71.</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt"> </span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt">The next meeting will be on Tuesday, 29 June at 16:00 UTC for 90 minutes.</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt"> </span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Best regards,</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt"> </span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Emily, Julie, Berry, and Caitlin</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt"> </span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt">--</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt"> </span><o:p></o:p></p>
<p class="MsoNormal"><b><u><span style="font-size:11.0pt;color:black">Action Items</span></u></b><o:p></o:p></p>
<p class="MsoNormal"><b><span style="font-size:11.0pt;color:black"> </span></b><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt;color:black">Please refer to the
<a href="https://urldefense.com/v3/__https:/docs.google.com/spreadsheets/d/1FunWaz3gNZl8mPi5pNKti2GsfPC_9_DTt8uRQq4Oe5Q/edit*gid=0__;Iw!!PtGJab4!omqG24jAPKDuGU6m9wNGF542ClJfeSBWp2qwbtoX_VWSXYCuXGyTPIqxk_cf7Un9phjRy55V1Q$">
Work Plan and Action Items List [docs.google.com]</a> for updated action items.</span><o:p></o:p></p>
<p class="MsoNormal"><b><span style="font-size:11.0pt;color:black"> </span></b><b><span style="font-size:11.0pt"><o:p></o:p></span></b></p>
<p class="MsoNormal"><span style="font-size:11.0pt">1. Discussion of Policy Goals<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">See the Jamboard at: <a href="https://jamboard.google.com/d/1atFQTx8qQbeiWqF1aMdAUkgaVNz7r57COA61nMXvIA4/viewer?f=0">
https://jamboard.google.com/d/1atFQTx8qQbeiWqF1aMdAUkgaVNz7r57COA61nMXvIA4/viewer?f=0</a><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Policy Goals Brainstorm:<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Policy Goals for Previous Policy Development Work:<o:p></o:p></span></p>
<ul type="disc">
<li class="MsoListParagraph" style="mso-list:l5 level1 lfo10"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">Enable registered name holders to move their domain names to a new provider, thereby increasing consumer choice and competition;<o:p></o:p></span></li><li class="MsoListParagraph" style="mso-list:l5 level1 lfo10"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">Ensure the IRTP includes sufficient protections to prevent fraudulent domain name transfers and domain name hijacking;<o:p></o:p></span></li><li class="MsoListParagraph" style="mso-list:l5 level1 lfo10"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">Clarify the language of the IRTP so that ICANN-accredited registrars consistently interpret and apply the policy;<o:p></o:p></span></li><li class="MsoListParagraph" style="mso-list:l5 level1 lfo10"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">Clarify the language and visibility of the Transfer Dispute Resolution Policy so that providers/panelists consistently interpret and
apply the policy.<o:p></o:p></span></li></ul>
<p class="MsoNormal"><span style="font-size:11.0pt">Additional Goals:<o:p></o:p></span></p>
<ul type="disc">
<li class="MsoListParagraph" style="mso-list:l7 level1 lfo12"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">DNSSEC transfer has a role in mitigating domain name hijacking. We should clarify this and define guidelines for DNS transfer during
registration transfer.<o:p></o:p></span></li><li class="MsoListParagraph" style="mso-list:l7 level1 lfo12"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">Efficient/</span>
<span style="font-size:11.0pt;font-family:"Calibri",sans-serif">registrant-friendly transfer?<o:p></o:p></span></li></ul>
<p class="MsoNormal"><span style="font-size:11.0pt">Second Goal:<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">-- Question Re: “to prevent fraudulent domain name transfers and domain name hijacking” – are these the same or different?<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">-- Want to prevent bad transfers, but facilitate good ones.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">-- Maybe remove “and domain name hijacking”?<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">-- One well-known form of fraudulent transfer is slamming, i.e. misleading the customer in order to charge for overpriced services after transfer, but not actually hijack the domain.<o:p></o:p></span></p>
<p class="MsoNormal"><b><span style="font-size:11.0pt">ACTION ITEM: For the second goal, rewrite to: ““…prevent fraudulent domain name transfers, in particular to prevent the misuse of the transfer mechanism for domain name hijacking”.”
<o:p></o:p></span></b></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Fourth Goal:<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">-- Question: Why is this goal here? Answer: Before the IRTP there was no efficiency. It is better now, but still needs improvement.
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">-- Question: How do we know when we achieve this goal? Answer: We can tie a charter question back to the specific goal.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">New goal on DNSSEC:<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">-- On DNSSEC, you almost always have to transfer the domain service when you transfer the domain name. How to make this efficient and cost effective.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">-- I think the positive goal (facilitate valid transfers) is captured in the first green box, so the second box still seems to me to contain redundancy. I propose we remove "and domain name hijacking".<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">-- It’s not clear why DNSSEC should be a goal of this PDP, as it was not something identified in the issues report. Maybe consider it later after we’ve considered other items in our charter?<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">-- It does sound like DNSSEC transfer is more of a technical concern than a policy one.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">-- Maybe we all should work/establish at “best practice” document after the new IRTP is settled. This “best practice” should obviously include transfers of signed zone.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">-- There is a country code solution in the Netherlands, but for gTLDs the registry is not involved. Keys have to be available in the new and old locations. There are a variety of reasons for why there is
a loss of service during transfer for DNSSEC services.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">-- Is making DNS service transfers in scope of this PDP?<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">-- Maybe it is important to keep an explicit reference to domain hijacking even if not all fraudulent transfers are hijacking, and not all hijackings are by way of domain transfer. So the phrase could we worded
as follows: “prevent fraudulent domain name transfers, in particular to prevent the misuse of the transfer mechanism for domain name hijacking”.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">-- Issue comes up if you are moving from one registrar to another and also changing the name service. If gaining registrar wants to continue the name service it needs the cooperation of the losing registrar
if it is offering the name service.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">-- Change of registrant might also cause unwanted DNSSEC disruption if the new registrant runs a successor service instead of a new service with the same domain name.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">-- But, you could change the name service before the registrar transfer, so these could be separate operations.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">-- From the Registrant point of view it is a concern if DNSSEC implies a disruption in the transfer. Thus, a clear statement needs to be in place when the parties explore the transfer.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">-- DNSSEC, if implemented correctly, CAN be used as a way to ensure strong authentication that replaces less safe forms of authentication based on email. As a result, removing DNSSEC from the scope would deprive
the community of improvements to the transfer process that can only be based on DNSSEC. So it might be good to keep DNSSEC part of the scope, but ensure solutions are available in the absence of DNSSEC too.<o:p></o:p></span></p>
<p class="MsoNormal"><b><span style="font-size:11.0pt">SUMMARY: This issue (domain name service transfer) is not part of the charter. DNSSEC service transfer is important but we aren’t going to solve it here.<o:p></o:p></span></b></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">CPH TechOps Principles:<o:p></o:p></span></p>
<ul type="disc">
<li class="MsoListParagraph" style="mso-list:l6 level1 lfo11"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">The transfer process must comply with current data privacy regulations<o:p></o:p></span></li><li class="MsoListParagraph" style="mso-list:l6 level1 lfo11"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">The transfer process must be instant, but with enough time to validate the legitimacy of a transfer<o:p></o:p></span></li><li class="MsoListParagraph" style="mso-list:l6 level1 lfo11"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">A transfer token shall be sufficient to authorize a transfer<o:p></o:p></span></li><li class="MsoListParagraph" style="mso-list:l6 level1 lfo11"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">No personal data shall be transferred from the old to the new registrar<o:p></o:p></span></li><li class="MsoListParagraph" style="mso-list:l6 level1 lfo11"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">The existing gTLD transfer policy should be changed as little as possible<o:p></o:p></span></li></ul>
<p class="MsoNormal"><span style="font-size:11.0pt">Second Principle:<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">-- Re: “The transfer process must be instant, but with enough time to validate the legitimacy of a transfer” – note that this is the entire process from beginning to the end. Need to qualify that it should
be “as efficient as possible”.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">-- Seems clear what “instant” means – could change the language to say that the “transfer should be processed” instantly. Update to be more specific.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">-- Is the “instant transfer” a high-level goal, or is that a piece of a high-level goal.<o:p></o:p></span></p>
<p class="MsoNormal"><b><span style="font-size:11.0pt">ACTION ITEM: Rewrite the second principle to a high-level goal that the “The transfer shall be processed as efficiently as possible.”<o:p></o:p></span></b></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Third Principle:<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">-- The principle “A transfer token shall be sufficient to authorize a transfer” is too overreaching. There can be very good reason to say that it is necessary but not sufficient. In particular, a well-organize
transfer involves proactive cooperation between gaining and losing registrar, rather than a dangerous event for which the losing registrar is unprepared. If we just forget our old habits for a moment, we can see that allowing a concept of “backup registrar”
or “primary sponsoring registrar plus secondary sponsoring registrar” would go a long way to make transfers much more secure.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">-- This may be too broad.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Fourth Principle:<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">-- Re: “No personal data shall be transferred from the old to the new registrar” – not sure we need this. Not sure we need to restrict this.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">-- Add “Policy shall not require”?<b><o:p></o:p></b></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Fifth Principle:<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">-- Re: “The existing gTLD transfer policy should be changed as little as possible” – think this one can be removed.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">-- Originally the goal was to provide as much security and thought without changing the policy a lot. We are here to look at it as a whole and change what is needed.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">-- Maybe not appropriate for this PDP.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">2. Discussion of Charter Topic 4 – AuthInfo Code Management<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">See: <a href="https://docs.google.com/document/d/1O9PAnxWFUuPofLQCWIQXz8lT7KEj1HgH3b_obh0AK00/edit">
https://docs.google.com/document/d/1O9PAnxWFUuPofLQCWIQXz8lT7KEj1HgH3b_obh0AK00/edit</a><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Charter Questions:<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><b><span style="font-size:11.0pt;color:black">b1) Is AuthInfo Code still a secure method for inter-registrar transfers? What evidence was used by the Working Group to make this determination?<o:p></o:p></span></b></p>
<p class="MsoNormal"><span style="font-size:11.0pt;color:black"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;color:black">-- Answer to the question is “not today, but it could be”. There are certain security principles that aren’t being protected.</span><span style="font-size:11.0pt"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">-- Compliance is looking for data. But this may not be intuitive to inform the question of how secure AuthInfo code is. So we would need to go to the CPH.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">-- Wondering if Compliance is looking at how many times TDRP has been used?<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">-- Need to come up with the policy or business definers to for TechOps to consider the questions – or those that are relevant.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">-- Frame the questions to TechOps in context, such as that the goal of the AuthInfo code is to ensure that the registrant asking for the transfer is the same registrant who owns the domain.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">-- The data/metrics from ICANN org is of importance. However, there are members of the PDP that have experience - and maybe data, from ccTLD transfers. These data could be handy to have.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">-- It’s not the amount of complaints that we’re looking for, it’s the amount of unauthorized transfers that have been reversed.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">-- Distinction for consider: what we are talking about here are the security requirements for the transfer. That the transfer is authorized by the registrant and that the identity is confirmed by the AuthInfo
code. Or whether additional security requirements are necessary. But the additional security requirements of the code are what allow the mechanism to achieve the goal – these two security issues should be separate. 1) mechanism, and 2) what to do with
the mechanism to achieve the goal.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">-- Precision is required here for any input we seek from TechOps/CPs.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">-- The current AuthInfo functions much like a one-time password. It is not fully implemented that way.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">-- If we move down the path of wanting to depend on the Transfer Authorization Code (TAC), then we need to think carefully about its security requirements.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">-- So this group may want to keep this in mind when formulating possible future recommendations of things that can be measured and data gathered from CPs to help measure the success of the new policy requirements.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">-- The goal is to remove the FOAs and using a TAC/AuthCode, and making sure that the registrant asking for the transfer is the registrant authorized to do so. Have to assume that when answering the questions,
until that doesn’t work.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">-- Is there an ask for the CPs coming out of this PDP to gather certain data?<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">-- The available evidence is a leading indicator, but it isn’t definitive. Important to gather that information, but it won’t answer the question. The experts here might be able to answer it or not.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">-- There have been a lot of changes in the last three years to make the AuthCode more secure, so the data won’t tell the whole story.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">-- AuthCodes have proved secure in the last three years, but need to ask for the data from TechOps to answer the question.<o:p></o:p></span></p>
<p class="MsoNormal"><b><span style="font-size:11.0pt">ACTION ITEMS: <o:p></o:p></span></b></p>
<p class="MsoNormal"><b><span style="font-size:11.0pt">1) Once the WG has clarified policy parameters for AuthInfo Codes, staff with the WG to draft letter to CPH TechOps asking for input on a technical solution (or technical solutions) to meet those parameters.<o:p></o:p></span></b></p>
<p class="MsoNormal"><b><span style="font-size:11.0pt">2) Staff with the WG to draft a survey to send to Registrars asking for input and evidence/data regarding the security of AuthInfo Codes.<o:p></o:p></span></b></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">3. Next Meeting 29 June 2021:<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">The WG will continue discussion on the charter questions at the next meeting, beginning with the following question.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><b><span style="font-size:11.0pt;color:black">B2) The registrar is currently the authoritative holder of the AuthInfo Code. Should this be maintained, or should the registry be the authoritative AuthInfo Code holder? Why?</span></b><b><span style="font-size:11.0pt"><o:p></o:p></span></b></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><i><span style="font-size:11.0pt">As a starting point, the CPH Tech Ops Group concluded “to reach a uniform, transparent, and predictable process, Registries should be in control of the storage and processing of the AuthCode, regarding
the technical part.” </span></i><span style="font-size:11.0pt"><o:p></o:p></span></p>
</div>
</body>
</html>