<html xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Aptos;
panose-1:2 11 0 4 2 2 2 2 2 4;}
@font-face
{font-family:-webkit-standard;
panose-1:2 11 6 4 2 2 2 2 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
font-size:10.0pt;
font-family:"Aptos",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
span.EmailStyle21
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;
mso-ligatures:none;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
--></style>
</head>
<body lang="EN-GB" link="blue" vlink="purple" style="word-wrap:break-word">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;mso-fareast-language:EN-US">There are of course varying degrees of failure, so what you can and can’t do will differ significantly from one event to the next, flexibility on
how to act is IMHO critical here. I don’t think we want the parties involved (ICANN, The EBERO and the failed registry) to air all the details in public and therefore we have to enact a certain level of trust.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;mso-fareast-language:EN-US">Brett<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<div>
<div>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">-- <o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">Brett Carr<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">System Development Manager UK-DNS.<o:p></o:p></span></p>
</div>
</div>
</div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal"><b><span lang="EN-IE" style="font-size:12.0pt;font-family:"Calibri",sans-serif;color:black">From:
</span></b><span lang="EN-IE" style="font-size:12.0pt;font-family:"Calibri",sans-serif;color:black">gtld-tech <gtld-tech-bounces@icann.org> on behalf of Michele Neylon - Blacknight via gtld-tech <gtld-tech@icann.org><br>
<b>Reply to: </b>Michele Neylon - Blacknight <michele@blacknight.com><br>
<b>Date: </b>Friday, 20 October 2023 at 10:53<br>
<b>To: </b>Wes Hardaker <wjhns1@hardakers.net>, Dr Eberhard W Lisse via gtld-tech <gtld-tech@icann.org><br>
<b>Subject: </b>RE: [EXTERNAL] [gtld-tech] .DESI to Be Placed in the Emergency Back-end Registry Operator Program<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span lang="EN-IE" style="font-size:11.0pt;font-family:"Calibri",sans-serif"><o:p> </o:p></span></p>
</div>
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" style="border-collapse:collapse">
<tbody>
<tr style="height:15.25pt">
<td width="1123" valign="top" style="width:842.35pt;border:solid #ED7D31 1.5pt;padding:0cm 5.4pt 0cm 5.4pt;height:15.25pt">
<p><strong><span style="font-family:"Calibri",sans-serif;color:black;background:#FFFF99">CAUTION</span></strong><span style="color:black;background:#FFFF99">: This email originated from outside of the organization. Do not click links or open attachments unless
you can confirm the sender and know the content is safe.</span><o:p></o:p></p>
</td>
</tr>
</tbody>
</table>
<p class="MsoNormal"><span lang="EN-IE" style="font-size:11.0pt;font-family:"Calibri",sans-serif"><o:p> </o:p></span></p>
<div>
<p class="MsoNormal"><span lang="EN-IE" style="font-size:12.0pt;mso-fareast-language:EN-US">EBERO kicks in when the world is on fire and the registry has failed.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-IE" style="font-size:12.0pt;mso-fareast-language:EN-US">I don’t see how you can force a failed registry to do anything
<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-IE" style="font-size:12.0pt;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-IE" style="font-size:11.0pt;font-family:-webkit-standard;color:black">--<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-IE" style="font-size:11.0pt;font-family:-webkit-standard;color:black">Mr Michele Neylon<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-IE" style="font-size:11.0pt;font-family:-webkit-standard;color:black">Blacknight Solutions<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-IE" style="font-size:11.0pt;font-family:-webkit-standard;color:black">Hosting, Colocation & Domains<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-IE" style="font-size:11.0pt;font-family:-webkit-standard;color:black"><a href="https://www.blacknight.com/"><span style="color:#0563C1">https://www.blacknight.com/</span></a><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-IE" style="font-size:11.0pt;font-family:-webkit-standard;color:black"><a href="https://blacknight.blog/"><span style="color:#0563C1">https://blacknight.blog/</span></a><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-IE" style="font-size:11.0pt;font-family:-webkit-standard;color:black">Intl. +353 (0) 59 9183072<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-IE" style="font-size:11.0pt;font-family:-webkit-standard;color:black">Direct Dial: +353 (0)59 9183090<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-IE" style="font-size:11.0pt;font-family:-webkit-standard;color:black">Personal blog: <a href="https://michele.blog/"><span style="color:#0563C1">https://michele.blog/</span></a><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-IE" style="font-size:11.0pt;font-family:-webkit-standard;color:black">Some thoughts: <a href="https://ceo.hosting/"><span style="color:#0563C1">https://ceo.hosting/</span></a><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-IE" style="font-size:11.0pt;font-family:-webkit-standard;color:black">-------------------------------<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-IE" style="font-size:11.0pt;font-family:-webkit-standard;color:black">Blacknight Internet Solutions Ltd, Unit 12A,Barrowside Business Park,Sleaty Road,Graiguecullen,Carlow,R93 X265,Ireland Company No.: 370845<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-IE" style="font-size:11.0pt;font-family:-webkit-standard;color:black"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-IE" style="font-size:11.0pt;font-family:-webkit-standard;color:black">I have sent this email at a time that is convenient for me. I do not expect you to respond to it outside of your usual working hours.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-IE" style="font-size:12.0pt;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-IE" style="font-size:12.0pt;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<div id="mail-editor-reference-message-container">
<div>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal" style="mso-margin-top-alt:0cm;margin-right:0cm;margin-bottom:12.0pt;margin-left:36.0pt">
<b><span lang="EN-IE" style="font-size:12.0pt;color:black">From: </span></b><span lang="EN-IE" style="font-size:12.0pt;color:black">gtld-tech <gtld-tech-bounces@icann.org> on behalf of Wes Hardaker via gtld-tech <gtld-tech@icann.org><br>
<b>Date: </b>Friday, 20 October 2023 at 11:49<br>
<b>To: </b>Dr Eberhard W Lisse via gtld-tech <gtld-tech@icann.org><br>
<b>Subject: </b>Re: [gtld-tech] .DESI to Be Placed in the Emergency Back-end Registry Operator Program<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:36.0pt"><span lang="EN-IE" style="font-size:11.0pt">[EXTERNAL EMAIL] Please use caution when opening attachments from unrecognised sources.<br>
<br>
Dr Eberhard W Lisse via gtld-tech <gtld-tech@icann.org> writes:<br>
<br>
> Pardon my ignorance, but would such a roll at transfer not require the<br>
> collaboration of the losing Registry?<br>
<br>
[Note: though I'm on the ICANN board, I'm both not speaking for the<br>
board and I don't have any direct knowledge of the situation of this<br>
particular event in the first place -- I'm speaking purely from a<br>
technical and personal perspective only]<br>
<br>
That's certainly the core of the problem, but the answer depends on a<br>
lot of things like the signature timing of the current records, the TTLs<br>
of those records and the DS record, etc. You can do things to minimize<br>
the impact if you don't have the original DNSKEY but it may not be<br>
trivial if the timing constraints don't let you do something safer.<br>
Certainly one thing you shouldn't do at the same time is an algorithm<br>
roll, as that would increase the complexity significantly.<br>
<br>
--<br>
Wes Hardaker<br>
USC/ISI<br>
_______________________________________________<br>
gtld-tech mailing list<br>
gtld-tech@icann.org<br>
<a href="https://mm.icann.org/mailman/listinfo/gtld-tech">https://mm.icann.org/mailman/listinfo/gtld-tech</a><br>
<br>
________________________________________________By submitting your personal data, you consent to the processing of your personal data for purposes of subscribing to this mailing list accordance with the ICANN Privacy Policy (<a href="https://www.icann.org/privacy/policy">https://www.icann.org/privacy/policy</a>)
and the website Terms of Service (<a href="https://www.icann.org/privacy/tos">https://www.icann.org/privacy/tos</a>). You can visit the Mailman link above to change your membership status or configuration, including unsubscribing, setting digest-style delivery
or disabling delivery altogether (e.g., for a vacation), and so on.<o:p></o:p></span></p>
</div>
</div>
</div>
</div>
</div>
<br><br><br>Amazon Web Services EMEA SARL, 38 avenue John F. Kennedy, L-1855 Luxembourg, R.C.S. Luxembourg B186284
<br>
<br>Amazon Web Services EMEA Sarl, UK Branch, 1 Principal Place, Worship Street, London, EC2A 2FA, United Kingdom, registered in England and Wales, UK Establishment No. BR019315
<br><br><br>
</body>
</html>