<html xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:"Yu Gothic";
panose-1:2 11 4 0 0 0 0 0 0 0;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:"\@Yu Gothic";
panose-1:2 11 4 0 0 0 0 0 0 0;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
font-size:12.0pt;
font-family:"Calibri",sans-serif;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:12.0pt;
font-family:"Calibri",sans-serif;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:930862;
mso-list-template-ids:-34727828;}
@list l0:level1
{mso-level-start-at:4;
mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l1
{mso-list-id:340859513;
mso-list-template-ids:-1533641456;}
@list l1:level1
{mso-level-start-at:6;
mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l2
{mso-list-id:396361765;
mso-list-template-ids:2064829924;}
@list l2:level1
{mso-level-start-at:7;
mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l3
{mso-list-id:763723519;
mso-list-template-ids:-2126354842;}
@list l3:level1
{mso-level-start-at:2;
mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l4
{mso-list-id:767847398;
mso-list-template-ids:1261350342;}
@list l4:level1
{mso-level-start-at:5;
mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l5
{mso-list-id:1385566070;
mso-list-template-ids:-826352628;}
@list l6
{mso-list-id:1668820134;
mso-list-template-ids:463003584;}
@list l6:level1
{mso-level-start-at:6;
mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l7
{mso-list-id:1877347775;
mso-list-template-ids:676862264;}
@list l7:level1
{mso-level-start-at:3;
mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;}
ol
{margin-bottom:0in;}
ul
{margin-bottom:0in;}
--></style>
</head>
<body lang="EN-US" link="#0563C1" vlink="#954F72" style="word-wrap:break-word">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt;color:black">Dear Janis,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;color:black"> <o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;color:black">The SSAD ODP Project Team has been closely analyzing the applicable recommendations within the Final Report to ensure we have a clear understanding. We have identified several recommendations that
we would like clarification on to ensure the Operational Design Phase assessment is based on the correct understanding of the recommendations. As the GNSO Council Liaison, we ask that you please relay our understanding to obtain the Council’s verification
and/or feedback and provide a response when available.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;color:black"> <o:p></o:p></span></p>
<ol style="margin-top:0in" start="1" type="1">
<li class="MsoNormal" style="color:black;mso-list:l5 level1 lfo1;vertical-align:baseline">
<span style="font-size:11.0pt">Recommendation 1.4.3 states that the Accreditation Authority “<i>MUST validate Identity Credentials and Signed Assertions, in addition to the information contained in the <u>request</u>, facilitate the decision to accept or reject
the Authorization of an SSAD request.</i>” ICANN org interprets it to mean that the “request” mentioned in this recommendation refers to the <i>accreditation</i> request, and <b>not</b> the nonpublic registration data request. Please confirm that our understanding
is correct.<o:p></o:p></span></li></ol>
<p class="MsoNormal" style="margin-left:.5in;vertical-align:baseline"><span style="font-size:11.0pt;color:black"> <o:p></o:p></span></p>
<ol style="margin-top:0in" start="2" type="1">
<li class="MsoNormal" style="color:black;mso-list:l3 level1 lfo2;vertical-align:baseline">
<span style="font-size:11.0pt">Recommendation 13.1.4 states that the Central Gateway Manager “<i>MUST respond only to requests for <u>a specific domain name</u>…</i>” whereas the Recommendation 13.3.2 states that the CGM “<i>MUST support the ability of a Requestor
to submit <u>multiple domain names</u> in a single request.</i>” Implementation Guidance 13.5 also states “<i>it must be possible for Requestors to submit <u>multiple requests</u> at the same time</i>.” Recommendation 13.1.4 could be interpreted to be in conflict
with Recommendation 13.3.2 and Implementation Guidance 13.5 in terms of how many disclosure requests can be included in a single request. <o:p></o:p></span></li></ol>
<p class="MsoNormal"><span style="font-size:11.0pt;color:black"> <o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:.5in"><span style="font-size:11.0pt;color:black">ICANN org’s interpretation is that a single request can contain disclosure requests for multiple domain names as long as all the domain names are individually specified
in a fully qualified format. In other words, the Central Gateway Manager should not allow any sort of “catch all” requests, such as a request concerning all domain names that have “apple” in the name, or that are owned by a particular registrant. Please confirm
that our understanding is correct.<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:.5in"><span style="font-size:11.0pt;color:black"> <o:p></o:p></span></p>
<ol style="margin-top:0in" start="3" type="1">
<li class="MsoNormal" style="color:black;mso-list:l7 level1 lfo3;vertical-align:baseline">
<span style="font-size:11.0pt">Recommendation 10.14 states that “<i>Response Targets and Compliance Targets MUST be reviewed, at a minimum, after every six months in the first year, thereafter annually (depending on the outcome of the first review).</i>” ICANAN
org’s interpretation of this recommendation is that such a review is expected to be done across all contracted parties and not review individual contracted parties. This review is meant to be conducted by the GNSO Standing Committee. <o:p></o:p></span></li></ol>
<p class="MsoNormal" style="margin-left:.5in;vertical-align:baseline"><span style="color:black"> </span><span style="font-size:11.0pt;color:black"><o:p></o:p></span></p>
<ol style="margin-top:0in" start="4" type="1">
<li class="MsoNormal" style="color:black;mso-list:l0 level1 lfo4;vertical-align:baseline">
<span style="font-size:11.0pt">Recommendations 13.3.6 states that the “<i><u>SSAD</u> MUST be able to save the history of the different disclosure requests…</i>” ICANN org’s interpretation is that this recommendation applies to not only the Central Gateway
Manager, but also to other parties, such as the Accreditation Authorities and the Contracted Parties. Please confirm that our understanding is correct.<o:p></o:p></span></li></ol>
<p class="MsoNormal" style="margin-left:.5in"><span style="font-size:11.0pt;color:black"> <o:p></o:p></span></p>
<ol style="margin-top:0in" start="5" type="1">
<li class="MsoNormal" style="color:black;mso-list:l4 level1 lfo5;vertical-align:baseline">
<span style="font-size:11.0pt">Recommendation 13.2 states that “<i>Requestors of the SSAD data should primarily bear the costs of maintaining this system</i>,” whereas the Recommendation 14.4 states that the “<i>SSAD SHOULD NOT be considered a profit-generating
platform for ICANN or <u>the contracted parties</u>. Funding for the SSAD should be sufficient to cover costs</i>…” ICANN org’s interpretation of these recommendations is that the SSAD user fees should cover the operating cost of only the Accreditation Authorities,
Identity Providers, and Central Gateway Manager, and does not cover any costs that contracted parties may incur. Please confirm that our understanding is correct.<o:p></o:p></span></li></ol>
<p class="MsoNormal" style="margin-left:.5in"><span style="font-size:11.0pt;color:black"> <o:p></o:p></span></p>
<ol style="margin-top:0in" start="6" type="1">
<li class="MsoNormal" style="color:black;mso-list:l6 level1 lfo8;vertical-align:baseline">
<span style="font-size:11.0pt">Recommendation 2 lays out the requirements for governmental accreditation authorities, but it does not indicate whether government entities requiring access to non-public gTLD registration data may only be accredited via these
governmental accreditation authorities. Footnote 13 seems to limit the Intergovernmental Organizations (IGOs) to only use the hosting country’s Accreditation Authority. ICANN org’s interpretation is that governmental entities are required to use an Accreditation
Authority from their country/territory. This means, if there are no such Accreditation Authorities established within their country/territory, those entities cannot be accredited via the Accreditation Authority that is to be established for non-governmental
entities. Please confirm that our understanding is correct.<o:p></o:p></span></li></ol>
<p class="MsoNormal" style="margin-left:.5in"><span style="font-size:11.0pt;color:black"> <o:p></o:p></span></p>
<ol style="margin-top:0in" start="7" type="1">
<li class="MsoNormal" style="color:black;mso-list:l2 level1 lfo7;vertical-align:baseline">
<span style="font-size:11.0pt">Recommendations 7.1.1 states that “<i>Requestors MAY also submit data verification requests on the basis of Registered Name Holder (RNH) consent that has been obtained by the Requestor (and is at the sole responsibility of that
Requestor), for example to validate the RNH’s claim of ownership of a domain name registration, or contract with the Requestor.</i>” ICANN org’s interpretation is that the request on the basis of RNH consent is automatically approved given the parenthetical
of “<i>and is at the sole responsibility of that Requestor.</i>” Please confirm that our understanding is correct.<o:p></o:p></span></li></ol>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Regards,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial",sans-serif;color:black">Yuko Green</span><span style="font-size:11.0pt;color:black"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial",sans-serif;color:black">Program Director</span><span style="font-size:11.0pt;color:black"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial",sans-serif;color:black">Strategic Initiatives, Global Domains & Strategy</span><span style="font-size:11.0pt;color:black"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial",sans-serif;color:black">Internet Corporation for Assigned Names and Numbers (ICANN)</span><span style="font-size:11.0pt;color:black"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial",sans-serif;color:black">E-mail: <a href="mailto:yuko.green@icann.org"><span style="color:#0563C1">yuko.green@icann.org</span></a></span><span style="font-size:11.0pt;color:black"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial",sans-serif;color:black"><a href="http://www.icann.org/" title="http://www.icann.org/"><span style="color:#0563C1">www.icann.org</span></a></span><span style="font-size:11.0pt;color:black"><o:p></o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</body>
</html>