<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body style="overflow-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;"><br><div><blockquote type="cite"><div>Le 7 avr. 2023 à 14:32, Renard, Kenneth D CTR USARMY DEVCOM ARL (USA) via rssac-caucus <rssac-caucus@icann.org> a écrit :</div><br class="Apple-interchange-newline"><div><meta charset="UTF-8"><div class="WordSection1" style="page: WordSection1; caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;"><div style="margin: 0in; font-size: 10pt; font-family: Calibri, sans-serif;"><span style="font-size: 11pt;">I support this change. This would also leave bullet #2 in section 4 as ‘overcome-by-events’. For reference, ARL (h-root) currently answers this question in a very vague way, only mentioning which resolver package we use and OS/software choices that “…follow best practices for secure systems”.<o:p></o:p></span></div><div style="margin: 0in; font-size: 10pt; font-family: Calibri, sans-serif;"><span style="font-size: 11pt;"><o:p> </o:p></span></div><div style="margin: 0in; font-size: 10pt; font-family: Calibri, sans-serif;"><span style="font-size: 11pt;">I would also be agreeable to the *<b>RSS</b>* publishing an aggregate of OS, resolver software, etc (see list from section 3.6) from all RSOs. </span></div></div></div></blockquote><div><br></div><div>A published aggregate would have value to the community, since it will demonstrate the level of diversity the RSS has. Who runs what is in my book less interesting. The document may say that the details are shared within the RSOs (as Liman is proposing) and to whoever will create the aggregate list. The aggregate may say the general information without too much details: for example, it could list “Bind” as a DNS server without telling the exact version. </div><div><br></div><div>Marc.</div><div><br></div><br><blockquote type="cite"><div><div class="WordSection1" style="page: WordSection1; caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;"><div style="margin: 0in; font-size: 10pt; font-family: Calibri, sans-serif;"><span style="font-size: 11pt;">This was mentioned on the call yesterday. The mechanics of that aggregation/publication might fall to root-ops or RSS GS and probably does not belong in this document. <o:p></o:p></span></div><div style="margin: 0in; font-size: 10pt; font-family: Calibri, sans-serif;"><span style="font-size: 11pt;"><o:p> </o:p></span></div><div style="margin: 0in; font-size: 10pt; font-family: Calibri, sans-serif;"><span style="font-size: 11pt;">-Ken<o:p></o:p></span></div><div style="margin: 0in; font-size: 10pt; font-family: Calibri, sans-serif;"><span style="font-size: 11pt;"><o:p> </o:p></span></div><div style="margin: 0in; font-size: 10pt; font-family: Calibri, sans-serif;"><span style="font-size: 11pt;"><o:p> </o:p></span></div><div style="border-width: 1pt medium medium; border-style: solid none none; border-color: rgb(181, 196, 223) currentcolor currentcolor; border-image: none; padding: 3pt 0in 0in;"><p class="MsoNormal" style="margin: 0in 0in 12pt 0.5in; font-size: 10pt; font-family: Calibri, sans-serif;"><b><span style="font-size: 12pt;">From:<span class="Apple-converted-space"> </span></span></b><span style="font-size: 12pt;">rssac-caucus <<a href="mailto:rssac-caucus-bounces@icann.org" style="color: blue; text-decoration: underline;">rssac-caucus-bounces@icann.org</a>> on behalf of Lars-Johan Liman <<a href="mailto:liman@netnod.se" style="color: blue; text-decoration: underline;">liman@netnod.se</a>><br><b>Date:<span class="Apple-converted-space"> </span></b>Friday, April 7, 2023 at 4:52 AM<br><b>To:<span class="Apple-converted-space"> </span></b>RSSAC Caucus <<a href="mailto:rssac-caucus@icann.org" style="color: blue; text-decoration: underline;">rssac-caucus@icann.org</a>><br><b>Subject:<span class="Apple-converted-space"> </span></b>[URL Verdict: Neutral][Non-DoD Source] [RSSAC Caucus] Suggested change to RSSAC001v2: publish -> share.<o:p></o:p></span></p></div><div><div style="margin: 0in 0in 0in 0.5in; font-size: 10pt; font-family: Calibri, sans-serif;"><span style="font-size: 11pt;">Hi!<br><br>Late to the game, as always (sorry!), I've found a passage in RSSAC001v2<br>which I thought the WP already had handled, as it was discussed prior to<br>establishing the WP. To me it's a reminiscence from the past that has<br>turned into a warning light. It's the text about "to publish ...<br>implementation details".<br><br>While that might have been acceptable for systems in the role of<br>critical infrastructure on the Internet 20 years ago, I would strongly<br>argue that that is no longer the case. With the constant onslaught of<br>attacks that we see on today's internet, divulging implementation<br>details publically must be seen as rather bad advice. Security is<br>paramount for the root server system and all other critical<br>infrastructure systems.<br><br>That said, diversity within the RSS is an important property of the<br>system, and at least the RSOs must be able to collaborate around<br>implementations to ensure some degree of diversity.<br><br>Therefore I suggest changing the text of [E.3.6-A] to read as follows:<br><br>CURRENT (OLD):<br><br> [E.3.6-A] Each RSO is expected to publish documentation that<br> describes key implementation choices to allow interested members of<br> the Internet community to assess the diversity of implementation<br> choices across the RSS as a whole.<br><br>SUGGESTED (NEW):<br><br> [E.3.6-A] In order to facilitate diversity within the RSS, each RSO<br> is expected to share, under non-disclosure agreement, with the other<br> RSOs, details that describe key implementation choices.<br><br>The explanatory text underneath still works, I believe.<br><br>Note that the suggested text in no way prevents an RSO from sharing<br>implementation details regarding its own installation with anyone it<br>sees fit, but and RSO is expected to share such details with _at_least_<br>the other RSOs.<br><br> Best regards,<br> /Liman<br><br>--<span class="Apple-converted-space"> </span><br>#----------------------------------------------------------------------<br># Lars-Johan Liman, M.Sc. ! E-mail:<span class="Apple-converted-space"> </span><a href="mailto:liman@netnod.se" style="color: blue; text-decoration: underline;">liman@netnod.se</a><br># Senior Systems Specialist ! Tel: +46 8 - 562 860 12<br># Netnod AB, Stockholm ! <span class="Apple-converted-space"> </span><a href="http://www.netnod.se/" style="color: blue; text-decoration: underline;">http://www.netnod.se/</a><br>#----------------------------------------------------------------------<br>_______________________________________________<br>rssac-caucus mailing list<br><a href="mailto:rssac-caucus@icann.org" style="color: blue; text-decoration: underline;">rssac-caucus@icann.org</a><br><a href="https://mm.icann.org/mailman/listinfo/rssac-caucus" style="color: blue; text-decoration: underline;">https://mm.icann.org/mailman/listinfo/rssac-caucus</a><br><br>_______________________________________________<br>By submitting your personal data, you consent to the processing of your personal data for purposes of subscribing to this mailing list accordance with the ICANN Privacy Policy (<a href="https://www.icann.org/privacy/policy" style="color: blue; text-decoration: underline;">https://www.icann.org/privacy/policy</a>) and the website Terms of Service (<a href="https://www.icann.org/privacy/tos" style="color: blue; text-decoration: underline;">https://www.icann.org/privacy/tos</a>). You can visit the Mailman link above to change your membership status or configuration, including unsubscribing, setting digest-style delivery or disabling delivery altogether (e.g., for a vacation), and so on.<o:p></o:p></span></div></div></div><span style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; float: none; display: inline !important;">_______________________________________________</span><br style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;"><span style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; float: none; display: inline !important;">rssac-caucus mailing list</span><br style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;"><a href="mailto:rssac-caucus@icann.org" style="color: blue; text-decoration: underline; font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;">rssac-caucus@icann.org</a><br style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;"><a href="https://mm.icann.org/mailman/listinfo/rssac-caucus" style="color: blue; text-decoration: underline; font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;">https://mm.icann.org/mailman/listinfo/rssac-caucus</a><br style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;"><br style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;"><span style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; float: none; display: inline !important;">_______________________________________________</span><br style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;"><span style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; float: none; display: inline !important;">By submitting your personal data, you consent to the processing of your personal data for purposes of subscribing to this mailing list accordance with the ICANN Privacy Policy (</span><a href="https://www.icann.org/privacy/policy" style="color: blue; text-decoration: underline; font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;">https://www.icann.org/privacy/policy</a><span style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; float: none; display: inline !important;">) and the website Terms of Service (</span><a href="https://www.icann.org/privacy/tos" style="color: blue; text-decoration: underline; font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;">https://www.icann.org/privacy/tos</a><span style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; float: none; display: inline !important;">). You can visit the Mailman link above to change your membership status or configuration, including unsubscribing, setting digest-style delivery or disabling delivery altogether (e.g., for a vacation), and so on.</span></div></blockquote></div><br></body></html>