<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=utf-8"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Verdana;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
pre
{mso-style-priority:99;
mso-style-link:"HTML Preformatted Char";
margin:0cm;
margin-bottom:.0001pt;
font-size:10.0pt;
font-family:"Courier New";}
span.HTMLPreformattedChar
{mso-style-name:"HTML Preformatted Char";
mso-style-priority:99;
mso-style-link:"HTML Preformatted";
font-family:"Courier New";}
.MsoChpDefault
{mso-style-type:export-only;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
--></style></head><body lang=EN-CA link=blue vlink="#954F72" style='word-wrap:break-word'><div class=WordSection1><p class=MsoNormal>Hello Team,</p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>I am here to propose new text for our Recommendation #7 (was #3) which sets out security requirements for the TAC. </p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Here is the <a href="https://docs.google.com/document/d/1O9PAnxWFUuPofLQCWIQXz8lT7KEj1HgH3b_obh0AK00/edit">current shared draft text</a>: </p><p class=MsoNormal style='margin-left:36.0pt'>The Working Group recommends that ICANN org establish minimum requirements for the composition of the TAC (for example, minimum length, syntax, or entropy value) based on current applicable technical security standards. ICANN org may change these requirements in response to new or updated standards, but any changes to the requirements must go in effect with sufficient notification and time for contracted parties to implement the necessary updates.</p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Here is my suggested updated version:</p><p class=MsoNormal style='margin-left:36.0pt'>The Working Group recommends that Registrars and Registry Operators follow best practices for the composition of the TAC (for example, minimum length, syntax, or entropy value) based on current applicable technical security standards such as RFC9154 or subsequent or similar RFCs. These best practices may be updated in response to new or updated standards as appropriate.</p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Or if redline is preferred:</p><p class=MsoNormal style='margin-left:36.0pt'>The Working Group recommends that <s>ICANN org establish minimum requirements</s> <span style='color:red'>Registrars and Registry Operators follow best practices </span>for the composition of the TAC (for example, minimum length, syntax, or entropy value) based on current applicable technical security standards <span style='color:red'>such as RFC9154 or subsequent or similar RFCs. These best practices may be updated</span> <s>ICANN org may change these requirements</s> in response to new or updated standards <span style='color:red'>as appropriate</span><s>, but any changes to the requirements must go in effect with sufficient notification and time for contracted parties to implement the necessary updates.<o:p></o:p></s></p><p class=MsoNormal><s><o:p><span style='text-decoration:none'> </span></o:p></s></p><p class=MsoNormal>This has been discussed (with generally positive sentiment) in the CPH TechOps team. Thank you! </p><pre><o:p> </o:p></pre><pre><o:p> </o:p></pre><pre><span style='font-family:"Verdana",sans-serif'>-- <o:p></o:p></span></pre><pre><b><span style='font-family:"Verdana",sans-serif'>Sarah Wyld</span></b><span style='font-family:"Verdana",sans-serif'>, CIPP/E<o:p></o:p></span></pre><pre><span style='font-family:"Verdana",sans-serif'><o:p> </o:p></span></pre><pre><span style='font-family:"Verdana",sans-serif'>Policy & Privacy Manager<o:p></o:p></span></pre><pre><span style='font-family:"Verdana",sans-serif'>Pronouns: she/they<o:p></o:p></span></pre><pre><span style='font-family:"Verdana",sans-serif'><o:p> </o:p></span></pre><pre><a href="mailto:swyld@tucows.com"><span style='font-family:"Verdana",sans-serif'>swyld@tucows.com</span></a><span style='font-family:"Verdana",sans-serif'> <o:p></o:p></span></pre><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'><o:p> </o:p></span></p><p class=MsoNormal><img border=0 width=100 height=25 style='width:1.0416in;height:.2552in' id="Picture_x0020_3" src="cid:image001.png@01D8588D.D93127E0"><o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p></div></body></html>