<h1 class="title" id="page-title">Draft Statement of ICANN's Role and Remit in Security, Stability and Resiliency of the Internet's Unique Identifier Systems</h1> <div id="addthis"><div class="addthis_toolbox addthis_default_style ">
<a class="atc_s addthis_button_compact"><span></span></a><a href="http://www.icann.org/en/news/public-comment/draft-ssr-role-remit-17may12-en.htm#" title="View more services" class="addthis_button_expanded">http://www.icann.org/en/news/public-comment/draft-ssr-role-remit-17may12-en.htm</a><br>
<a href="http://www.icann.org/en/news/public-comment/draft-ssr-role-remit-17may12-en.htm#" title="View more services" class="addthis_button_expanded">1</a></div></div> <div class="article">
<div class="field field-name-body field-type-text-with-summary field-label-hidden clearfix">
<div class="field-items">
<div class="field-item even"><table class="convey">
<tbody><tr class="light">
<td colspan="2">Comment/Reply Periods <sup>(*)</sup></td>
<td colspan="3" rowspan="3">Important Information Links</td>
</tr>
<tr>
<td class="light"><strong>Comment Open:</strong></td>
<td>17 May 2012</td>
</tr>
<tr>
<td class="light"><strong>Comment Close:</strong></td>
<td>16 June 2012</td>
</tr>
<tr>
<td class="light"><strong>Close Time (UTC):</strong></td>
<td>23:59 UTC</td>
<td colspan="3"><a href="http://www.icann.org/en/news/announcements/announcement-17may12-en.htm">Public Comment Announcement</a></td>
</tr>
<tr>
<td class="light"><strong>Reply Open:</strong></td>
<td>17 June 2012</td>
<td colspan="3"><a href="mailto:draft-ssr-role-remit@icann.org">To Submit Your Comments (Forum)</a></td>
</tr>
<tr>
<td class="light"><strong>Reply Close:</strong></td>
<td>16 July 2012</td>
<td colspan="3"><a href="http://forum.icann.org/lists/draft-ssr-role-remit/">View Comments Submitted</a></td>
</tr>
<tr>
<td class="light"><strong>Close Time (UTC):</strong></td>
<td>23:59 UTC</td>
<td colspan="3">Report of Public Comments</td>
</tr>
<tr class="light">
<td colspan="5">Brief Overview</td>
</tr>
<tr>
<td class="light"><strong>Originating Organization:</strong></td>
<td colspan="4"><abbr title="Internet Corporation for Assigned Names and Numbers">ICANN</abbr> Security Team</td>
</tr>
<tr>
<td class="light"><strong>Categories/Tags:</strong></td>
<td colspan="4">Security/Stability</td>
</tr>
<tr>
<td class="light"><strong>Purpose (Brief):</strong></td>
<td colspan="4"><abbr title="Internet Corporation for Assigned Names and Numbers">ICANN</abbr> is seeking community feedback on a draft statement of <abbr title="Internet Corporation for Assigned Names and Numbers">ICANN</abbr>'s
Role and Remit in Security, Stability & Resiliency of the
Internet's Unique Identifier Systems. This is intended to provide a
clear and enduring explanation of <abbr title="Internet Corporation for Assigned Names and Numbers">ICANN</abbr>'s role and remit in this area, and also will inform <abbr title="Internet Corporation for Assigned Names and Numbers">ICANN</abbr>'s consideration of the Security, Stability & Resiliency of the <abbr title="Domain Name System">DNS</abbr> Review Team's draft <a href="http://www.icann.org/en/news/public-comment/ssrt-draft-report-15mar12-en.htm">Recommendations #1 and #3</a>.</td>
</tr>
<tr>
<td class="light"><strong>Current Status:</strong></td>
<td colspan="4">Open for public comment</td>
</tr>
<tr>
<td class="light"><strong>Next Steps:</strong></td>
<td colspan="4">Comments will be collected and incorporated into a final statement, which would then become <abbr title="Internet Corporation for Assigned Names and Numbers">ICANN</abbr>'s clear and enduring statement of <abbr title="Internet Corporation for Assigned Names and Numbers">ICANN</abbr>'s role and remit in relation to the security, stability and resiliency of the Internet's unique identifier systems.</td>
</tr>
<tr>
<td class="light"><strong>Staff Contact:</strong></td>
<td colspan="2">Patrick Jones</td>
<td class="light"><strong>Email:</strong></td>
<td><a href="mailto:patrick.jones@icann.org?subject=More%20information%20on%20the%20DRAFT%20Statement%20of%20ICANN%27s%20Role%20and%20Remit%20in%20Security,%20Stability%20and%20Resiliency%20of%20the%20Internet%27s%20Unique%20Identifier%20Systems%20public%20comment%20period">patrick.jones@icann.org</a></td>
</tr>
<tr class="light">
<td colspan="5">Detailed Information</td>
</tr>
<tr>
<td colspan="5" class="light"><strong>Section I: Description, Explanation, and Purpose</strong></td>
</tr>
<tr>
<td colspan="5">
<h4>17 May 2012</h4>
<p><abbr title="Internet Corporation for Assigned Names and Numbers">ICANN</abbr>
is seeking community feedback on its draft response to Recommendations
#1 and #3 from the Security, Stability & Resiliency Review Team (SSR
RT). The response is intended to provide a clear and enduring statement
of <abbr title="Internet Corporation for Assigned Names and Numbers">ICANN</abbr>'s role and remit in relation to the security, stability and resiliency of the Internet's unique identifier systems.</p>
<p><strong>Recommendation 1</strong> of the draft report from the SSR RT states that <abbr title="Internet Corporation for Assigned Names and Numbers">ICANN</abbr> should "publish a single, clear and consistent statement of its SSR remit and limited technical mission." (15 Mar 2012).</p>
<p>Specific guidance is sought on:</p>
<ol><li>What does it mean "to coordinate at the overall level the global Internet's system of unique identifiers"?</li><li>What are the limits of that coordination role?</li><li>What does it mean to ensure the security and stability of the global Internet's unique identifier systems?</li>
</ol>
<p><strong>Recommendation 3</strong> states "<abbr title="Internet Corporation for Assigned Names and Numbers">ICANN</abbr> should document and clearly define the nature of the SSR relationships it has within the <abbr title="Internet Corporation for Assigned Names and Numbers">ICANN</abbr> community in order to provide a single focal point for understanding the interdependencies within the organizations."</p>
<p>Consistent with this recommendation, it would be helpful to receive community feedback on <abbr title="Internet Corporation for Assigned Names and Numbers">ICANN</abbr>'s
SSR relationships with others in the Internet ecosystem, including
groups such as the root server operators, RIRs, Registrars, standards
bodies, law enforcement, CERTs, and operational security communities
such as the Conficker Working Group, MAAWG, etc.</p>
<p>Open questions include:</p>
<ol><li>What is <abbr title="Internet Corporation for Assigned Names and Numbers">ICANN</abbr>'s coordination role with root server operators? This relates to Recommendation 1, question 1.</li><li>Should <abbr title="Internet Corporation for Assigned Names and Numbers">ICANN</abbr> develop a process for transitioning a root server should a root server operator cease that role?</li>
<li>What is <abbr title="Internet Corporation for Assigned Names and Numbers">ICANN</abbr>'s scope of responsibility for addressing an attack against root servers, or "against the <abbr title="Domain Name System">DNS</abbr>" in general?</li>
</ol>
<p>Community input on this draft statement of role and remit in SSR is
encouraged, and comments may be submitted on this statement and the FY
13 SSR Framework through 16 June 2012 23:59 UTC (with a Reply Comment
Period open from 17 June to 16 July 2012 23:59 UTC).</p>
<p>Further community consultations will occur at the upcoming <abbr title="Internet Corporation for Assigned Names and Numbers">ICANN</abbr> meeting in Prague, Czech Republic in June 2012.</p>
</td>
</tr>
<tr>
<td colspan="5" class="light"><strong>Section II: Background</strong></td>
</tr>
<tr>
<td colspan="5"><h4>Draft Statement of <abbr title="Internet Corporation for Assigned Names and Numbers">ICANN</abbr>'s Role and Remit in Security, Stability and Resiliency of the Internet's Unique Identifier Systems</h4>
<p><abbr title="Internet Corporation for Assigned Names and Numbers">ICANN</abbr>
acts within its Bylaws to support a multi-stakeholder model
collaborating to ensure the security, stability and resiliency of the
Internet's unique identifiers.</p>
<p><abbr title="Internet Corporation for Assigned Names and Numbers">ICANN</abbr>'s Security Stability and Resiliency (SSR) role and remit is based on the following terminology:</p>
<blockquote>
<p>Security – the capacity to protect and prevent misuse of Internet unique identifiers.</p>
<p>Stability – the capacity to ensure that the system operates as
expected, and that users of the unique identifiers have confidence that
the system operates as expected.</p>
<p>Resiliency – the capacity of the unique identifier system to
effectively withstand/tolerate/survive malicious attacks and other
disruptive events without disruption or cessation of service.</p>
</blockquote>
<p>To coordinate means to actively engage with stakeholders in the global Internet ecosystem to ensure</p>
<ul><li>allocation of the Internet's unique identifiers,</li><li>security, stability and resiliency of the Internet's unique identifiers, and</li><li>operational and policy development functions of the Internet's
unique identifiers is conducted in an open, accountable and transparent
manner and inclusive of the diversity of stakeholders in the ecosystem.</li></ul>
<p>This is a shared responsibility among the community of
multi-stakeholder participants in the Internet ecosystem and not one
borne alone by <abbr title="Internet Corporation for Assigned Names and Numbers">ICANN</abbr> as a singular entity.</p>
<p><abbr title="Internet Corporation for Assigned Names and Numbers">ICANN</abbr>'s SSR role encompasses three categories of responsibilities:</p>
<ol><li><abbr title="Internet Corporation for Assigned Names and Numbers">ICANN</abbr>'s operational responsibilities (internal operations including L-root, <abbr title="Domain Name System">DNS</abbr> operations, <abbr title="DNS Security Extensions">DNSSEC</abbr> key signing operations, <abbr title="Internet Assigned Numbers Authority">IANA</abbr> functions, new <abbr title="Top Level Domain">TLD</abbr> operations, etc);</li>
<li> <abbr title="Internet Corporation for Assigned Names and Numbers">ICANN</abbr>'s
involvement as a coordinator, collaborator and facilitator with the
global community in policy and technical matters related to the
Internet's unique identifiers;</li><li> <abbr title="Internet Corporation for Assigned Names and Numbers">ICANN</abbr>'s engagement with others in the global Internet ecosystem.</li></ol>
<p><abbr title="Internet Corporation for Assigned Names and Numbers">ICANN</abbr>'s technical mission includes</p>
<ul><li>coordinating the allocation of the Internet's unique identifier systems [domain names, Internet Protocol (<abbr title="Intellectual Property; or Internet Protocol">IP</abbr>) addresses, autonomous system (AS) numbers and protocol port and parameter numbers];</li>
<li>coordinating and facilitating the stability, security and resiliency and policy of these systems;</li><li>collaborating in the technical protocol development of these systems;</li><li>maintaining and operating the L-root as a steward for the community;</li>
<li>managing <abbr title="Internet Corporation for Assigned Names and Numbers">ICANN</abbr>'s operations and internal systems; and</li><li>providing a publicly accessible information resource on these
functions for the greater Internet community as a whole to enable it to
function as an organization.</li></ul>
<p>Responsibilities that lie outside <abbr title="Internet Corporation for Assigned Names and Numbers">ICANN</abbr>'s role in SSR include:</p>
<ul><li><abbr title="Internet Corporation for Assigned Names and Numbers">ICANN</abbr> does not play a role in policing the Internet or operationally combatting criminal behaviour;</li><li><abbr title="Internet Corporation for Assigned Names and Numbers">ICANN</abbr> does not have a role in the use of the Internet related to cyber-espionage and cyber-war;</li>
<li><abbr title="Internet Corporation for Assigned Names and Numbers">ICANN</abbr> does not have a role in determining what constitutes illicit conduct on the Internet.</li></ul>
<p><abbr title="Internet Corporation for Assigned Names and Numbers">ICANN</abbr> is not a law enforcement agency, a court of law or government agency. <abbr title="Internet Corporation for Assigned Names and Numbers">ICANN</abbr> cannot unilaterally suspend or terminate domain names. <abbr title="Internet Corporation for Assigned Names and Numbers">ICANN</abbr> is able to enforce its contracts with third parties, including domain name registration providers. Furthermore, <abbr title="Internet Corporation for Assigned Names and Numbers">ICANN</abbr>
does play a role in supporting the work of law enforcement or
government agencies in carrying out legitimate actions at their request.</p>
<p><abbr title="Internet Corporation for Assigned Names and Numbers">ICANN</abbr>
plays the same part as any interested stakeholder with regards to
Internet protocols; evolution of Internet protocols and related
standards are not under the purview of <abbr title="Internet Corporation for Assigned Names and Numbers">ICANN</abbr>.</p>
</td>
</tr>
<tr>
<td colspan="5" class="light"><strong>Section III: Document and Resource Links</strong></td>
</tr>
<tr>
<td colspan="5"><h4>Learn more about <abbr title="Internet Corporation for Assigned Names and Numbers">ICANN</abbr>'s SSR role and remit</h4>
<p>Specific information in support of this technical mission is described in <abbr title="Internet Corporation for Assigned Names and Numbers">ICANN</abbr>'s Security, Stability and Resiliency Framework (<a href="https://www.icann.org/en/about/staff/security">https://www.icann.org/en/about/staff/security</a>). This annual document explains the connection between <abbr title="Internet Corporation for Assigned Names and Numbers">ICANN</abbr>'s role and remit in <abbr title="Domain Name System">DNS</abbr> Security, Stability and Resiliency, <abbr title="Internet Corporation for Assigned Names and Numbers">ICANN</abbr>'s Strategic and Operational Planning and its related SSR programs and initiatives for each fiscal year.</p>
<p>Translations of the draft statement, and links to the FY 13 SSR Framework will be posted as soon as possible.</p>
</td>
</tr>
<tr>
<td colspan="5" class="light"><strong>Section IV: Additional Information</strong></td>
</tr>
<tr>
<td colspan="5"><h4>Appendix – Background</h4>
<p><abbr title="Internet Corporation for Assigned Names and Numbers">ICANN</abbr>
was founded in 1998 to coordinate the Internet's unique identifier
systems for worldwide public benefit to enable a single, global
interoperable Internet [United States Department of Commerce, Statement
of Policy, Management of Internet Names and Addresses, 5 June 1998, 63
Fed. Reg. 31741 (commonly known as the White Paper), <a href="http://www.icann.org/en/about/agreements/white-paper">http://www.icann.org/en/about/agreements/white-paper</a>]. <abbr title="Internet Corporation for Assigned Names and Numbers">ICANN</abbr>
operates in an open, accountable and transparent multi-stakeholder
model that reflects the diversity of all Internet users as a whole.</p>
<p>Since its formation, stability of the Internet has been a central priority for <abbr title="Internet Corporation for Assigned Names and Numbers">ICANN</abbr> [<abbr title="Internet Corporation for Assigned Names and Numbers">ICANN</abbr> Articles of Incorporation, 21 November 1998, <a href="http://www.icann.org/en/about/governance/articles">http://www.icann.org/en/about/governance/articles</a>]. Security and reliability of the Internet's unique identifiers are important parts of stability.</p>
<p>According to <abbr title="Internet Corporation for Assigned Names and Numbers">ICANN</abbr>'s Bylaws (most recently updated on 16 March 2012) [<abbr title="Internet Corporation for Assigned Names and Numbers">ICANN</abbr> Bylaws, dated 16 March 2012, Mission & Core Values, <a href="http://www.icann.org/en/about/governance/bylaws#I">http://www.icann.org/en/about/governance/bylaws#I</a>], <abbr title="Internet Corporation for Assigned Names and Numbers">ICANN</abbr>'s
mission is "to coordinate, at the overall level, the global Internet's
systems of unique identifiers, and in particular to ensure the stable
and secure operation of the Internet's unique identifier systems. In
particular, <abbr title="Internet Corporation for Assigned Names and Numbers">ICANN</abbr>:</p>
<ol><li> Coordinates the allocation and assignment of three sets of unique identifiers for the Internet, which are
<ol class="lower-alpha"><li> Domain names (forming a system referred to as <abbr title="Domain Name System">DNS</abbr>);</li><li> Internet protocol ("<abbr title="Intellectual Property; or Internet Protocol">IP</abbr>") addressees and autonomous system ("AS") numbers; and</li>
<li> Protocol port and parameter numbers.</li></ol>
</li><li> Coordinates the operation and evolution of the <abbr title="Domain Name System">DNS</abbr> root name server system.</li><li> Coordinates policy development reasonably and appropriately related to these technical functions."</li>
</ol>
<p><abbr title="Internet Corporation for Assigned Names and Numbers">ICANN</abbr>
acknowledges responsibility in its core values for "preserving and
enhancing the operational stability, reliability, security, and global
interoperability of the Internet."</p>
<p>From 1998 to 2009, <abbr title="Internet Corporation for Assigned Names and Numbers">ICANN</abbr>
operated under a set of transition agreements with the United States
Department of Commerce, known as the Memorandum of Understanding
[Memorandum of Understanding between the US Department of Commerce and <abbr title="Internet Corporation for Assigned Names and Numbers">ICANN</abbr>, 25 November 1998, <a href="http://www.icann.org/en/about/agreements/mou-jpa/icann-mou-25nov98-en.htm">http://www.icann.org/en/about/agreements/mou-jpa/icann-mou-25nov98-en.htm</a>] (and later Joint Project Agreement) [Joint Project Agreement, dated 29 September 2006, <a href="http://www.icann.org/en/about/agreements">http://www.icann.org/en/about/agreements</a>]. Collaboration by <abbr title="Internet Corporation for Assigned Names and Numbers">ICANN</abbr> in technical coordination of the Internet's unique identifiers was a central theme in these agreements.</p>
<p>On 30 September 2009, <abbr title="Internet Corporation for Assigned Names and Numbers">ICANN</abbr> and the United States Department of Commerce entered into the Affirmation of Commitments [<a href="http://www.icann.org/en/about/agreements/aoc/affirmation-of-commitments-30sep09-en.htm">http://www.icann.org/en/about/agreements/aoc/affirmation-of-commitments-30sep09-en.htm</a>].
The Affirmation of Commitments "institutionalized and memorialized the
technical coordination of the Internet's domain name and addressing
system (<abbr title="Domain Name System">DNS</abbr>), globally by a private sector led organization."</p>
<p>The Affirmation of Commitments requires periodic reviews of <abbr title="Internet Corporation for Assigned Names and Numbers">ICANN</abbr>'s
execution on its plans and processes related to operational stability,
reliability, resiliency, security and global interoperability of the <abbr title="Domain Name System">DNS</abbr>
[Affirmation of Commitments, Section 9.2]. A Security, Stability and
Resiliency Review Team commenced its work in October 2010, and published
its initial report for public comment on 15 March 2012 [<a href="http://www.icann.org/en/news/public-comment/ssrt-draft-report-15mar12-en.htm">http://www.icann.org/en/news/public-comment/ssrt-draft-report-15mar12-en.htm</a>].</p>
<p>The Security, Stability and Resiliency Review Team recommended that <abbr title="Internet Corporation for Assigned Names and Numbers">ICANN</abbr>
"publish a single, clear and consistent statement of its SSR remit and
limited technical mission." (See Recommendation 1, draft report dated 15
Mar 2012).</p>
<p>Consistent with this recommendation, this draft statement of <abbr title="Internet Corporation for Assigned Names and Numbers">ICANN</abbr>'s
SSR role and remit has been developed based on its foundational
documents, previous SSR Plans and Frameworks, and the SSR Review Team
draft report. This statement is being published for community
consultation along with <abbr title="Internet Corporation for Assigned Names and Numbers">ICANN</abbr>'s FY 13 Security, Stability and Resiliency Framework.</p>
</td>
</tr>
</tbody></table>
<br>
<p><em>(*) Comments submitted after the posted Close Date/Time are not
guaranteed to be considered in any final summary, analysis, reporting,
or decision-making that takes place once this period lapses.</em></p></div>
</div>
</div>
</div>