[RSSAC Caucus] Threat Mitigation for the Root Server System

[Mallory Knodel]

On 01/10/2019 22:51, Wes Hardaker wrote:
> 
> 
>     Thanks Wes for your take on this. Would there be a need or an interest
>     in taking what is in this document into discussions at the policy level?
> 
> 
> (again, speaking only for myself) I think to a large extent similar
> things are already being discussed in the rssac workshops (specifically,
> the metrics work party), probably ssac work bodies, and will be taken up
> as RSSAC037 model development goes forward as the GCG gets created by
> the ICANN board to discuss the future of the governance models of the
> root.  I suspect this will include discussions on measuring and
> monitoring the root for its effectiveness in meeting system requirements.
> 
> So turning the question back around, what aspects do you think should be
> discussed in the ICANN forums that are currently being missed?

Hi Wes,

So the big over arching question after enumerating threats is, okay so
what do we do about them? And I don't think the answer is always a
technical or operations one. There may be some larger policy answers or
answers that could impact an entire ecosystem like the DNS.

That was vague but I was particularly interested in understanding more
about the threat of DoH and what mitigation RSSAC proposes. I also have
interest in DDoS mitigation.

-Mallory

-- 
Mallory Knodel
Head of Digital :: article19.org
gpg fingerprint :: E3EB 63E0 65A3 B240 BCD9  B071 0C32 A271 BD3C C780