<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=utf-8"><meta name=Generator content="Microsoft Word 12 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Cambria;
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:"Helvetica Neue";
panose-1:0 0 0 0 0 0 0 0 0 0;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.m242127909979704102gmail-author-206426180
{mso-style-name:m_242127909979704102gmail-author-206426180;}
p.m242127909979704102gmail-m-8193431418494155754msolistparagraph, li.m242127909979704102gmail-m-8193431418494155754msolistparagraph, div.m242127909979704102gmail-m-8193431418494155754msolistparagraph
{mso-style-name:m_242127909979704102gmail-m-8193431418494155754msolistparagraph;
mso-margin-top-alt:auto;
margin-right:0cm;
mso-margin-bottom-alt:auto;
margin-left:0cm;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
span.EmailStyle19
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:70.85pt 70.85pt 70.85pt 70.85pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-US link=blue vlink=purple><div class=WordSection1><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>I fully agree with Elizabeth. For the reasons given in the ISOC submission, which I will repeat below, the criticized provision of the GCA is indeed outside the mandate agreed by the ITU Member States in Resolution 130.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>Since ISOC is the ITU member with the most expertise in the topic of whether encryption should be weakened to facilitate law enforcement, I think that it is ISOC’s responsibility to make the point referred to above.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>Resolves 3 of Resolution 130, cited in the ISOC submission, states that ITU’s work should not include: “areas related to Member States' application of legal or policy principles related to … content and cybercrime, which are within their sovereign rights”.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>Whereas the criticized GCA provision, also cited in the ISOC submission, states that Member States are encouraged to explore mechanisms that facilitate “lawful access to the content of communications where end-to-end encryption has been implemented.”<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>Since “content and cybercrime” are out of scope, so is anything related to “lawful access to content”.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><br>Best,<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>Richard<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><div style='border:none;border-left:solid blue 1.5pt;padding:0cm 0cm 0cm 4.0pt'><div><div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0cm 0cm 0cm'><p class=MsoNormal><b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>From:</span></b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'> Chapter-delegates [mailto:chapter-delegates-bounces@elists.isoc.org] <b>On Behalf Of </b>Chokri Ben Romdhane via Chapter-delegates<br><b>Sent:</b> Wednesday, 10 February 2021 21:52<br><b>To:</b> Elizabeth Oluoch; ISOC Chapter Delegates<br><b>Subject:</b> Re: [Chapter-delegates] ISOC Submission to the ITU Second Open Online Consultation on the Draft Guidelines for the Utilization of the GCA<o:p></o:p></span></p></div></div><p class=MsoNormal><o:p> </o:p></p><div><p class=MsoNormal>Hi Elizabeth ,<o:p></o:p></p><div><p class=MsoNormal>In my opinion the main issue with the CGA recomandation that it's open the door to a "lawful"access to the end to end encrypted communications! which will compromise. the security of a lot of internet activities. so no need to stress on ITU mandate. <o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>Chokri<o:p></o:p></p><div><p class=MsoNormal><o:p> </o:p></p></div></div></div><p class=MsoNormal><o:p> </o:p></p><div><div><p class=MsoNormal>Le mer. 10 févr. 2021 20:46, Elizabeth Oluoch <<a href="mailto:oluoch@isoc.org">oluoch@isoc.org</a>> a écrit :<o:p></o:p></p></div><blockquote style='border:none;border-left:solid #CCCCCC 1.0pt;padding:0cm 0cm 0cm 6.0pt;margin-left:4.8pt;margin-right:0cm'><div><div><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'>Hi Chokri,<o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'> <o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'>Thank you for your feedback and your support of ISOC’s submission. I would like to respond to your suggestion and share why we raise the matter of the ITU’s mandate and why it’s important to convey that in the submission. <o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'> <o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'>We endeavor not to tell the ITU what it can or cannot do. The recommendation for lawful access to content is intended to be used within the Legal Measures Pillar or Area of the GCA. However, the main Cybersecurity Resolution (Res. 130) is clear that “areas that deal with Member States’ application of legal or policy principles related […] to content and cybercrime” are National matters. It is on this basis that we take the view that the recommendation exceeds the ITU’s mandate. Mandate considerations are an important factor for some in these discussions. If it’s not within the mandate, then it should not be discussed or considered.<o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'> <o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'>Thanks again.<o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'> <o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'>Best regards,<o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'>Elizabeth <o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'> <o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'> <o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'> <o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'> <o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'> <o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'> <o:p></o:p></p><div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0cm 0cm 0cm'><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><b><span style='color:black'>From: </span></b><span style='color:black'>Chokri Ben Romdhane <<a href="mailto:chokribr@gmail.com" target="_blank">chokribr@gmail.com</a>><br><b>Date: </b>Wednesday, February 10, 2021 at 10:25 AM<br><b>To: </b>Audio Conferencing Conferencing Info <<a href="mailto:oluoch@isoc.org" target="_blank">oluoch@isoc.org</a>><br><b>Cc: </b>"<a href="mailto:chapter-delegates@elists.isoc.org" target="_blank">chapter-delegates@elists.isoc.org</a>" <<a href="mailto:chapter-delegates@elists.isoc.org" target="_blank">chapter-delegates@elists.isoc.org</a>><br><b>Subject: </b>Re: [Chapter-delegates] ISOC Submission to the ITU Second Open Online Consultation on the Draft Guidelines for the Utilization of the GCA</span><o:p></o:p></p></div><div><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'> <o:p></o:p></p></div><div><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'>Hi Elizabeth,<o:p></o:p></p><div><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'>I globally support the ISOC submission and I agree that there is no l<i><span style='font-size:11.5pt;font-family:"Helvetica Neue","serif"'>awful "access to the content of communications where end-to-end encryption has been implemented." </span></i><o:p></o:p></p></div><div><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'> <o:p></o:p></p></div><div><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span class=m242127909979704102gmail-author-206426180><span style='font-size:10.5pt;font-family:"Helvetica Neue","serif"'>But let me disagree with this sentence <i>"this recommendation exceeds the mandate of the ITU"</i> , </span>in my opinion the ITU is the specialized agency mandated by the UN to play a leading role in cybersecurity matters .</span><br><span class=m242127909979704102gmail-author-206426180>What I would like to say is that we are not here to comment on the role of ITU , but CGA It would be better to avoid such non consensual conclusions.</span><o:p></o:p></p></div><div><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'> <o:p></o:p></p></div><div><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span class=m242127909979704102gmail-author-206426180>Friendly Regards</span><o:p></o:p></p></div><div><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span class=m242127909979704102gmail-author-206426180>Chokri</span><o:p></o:p></p></div></div><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'> <o:p></o:p></p><div><div><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'>Le ven. 5 févr. 2021 à 17:35, Elizabeth Oluoch via Chapter-delegates <<a href="mailto:chapter-delegates@elists.isoc.org" target="_blank">chapter-delegates@elists.isoc.org</a>> a écrit :<o:p></o:p></p></div><blockquote style='border:none;border-left:solid #CCCCCC 1.0pt;padding:0cm 0cm 0cm 6.0pt;margin-left:4.8pt;margin-top:5.0pt;margin-right:0cm;margin-bottom:5.0pt'><div><div><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span style='font-family:"Cambria","serif"'>Dear Chapter Leaders,</span><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span style='font-family:"Cambria","serif";color:black'> </span><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span style='font-family:"Cambria","serif";color:black'>ISOC has prepared a submission to the <a href="https://www.itu.int/dms_pub/itu-s/md/20/sg/cir/S20-SG-CIR-0055!!PDF-E.pdf" target="_blank">ITU Second Open Online Consultation</a> on the Draft Guidelines for the Utilization of the Global Cybersecurity Agenda (GCA). Our submission responds to a recommendation in the Draft Guidelines that would weaken the security and trust of the Internet. </span><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span style='font-family:"Cambria","serif";color:black'> </span><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span style='font-family:"Cambria","serif";color:black'>We invite you to look at the submission and share any thoughts/suggestion</span><span style='font-family:"Cambria","serif"'>s<span style='color:black'> by <b>Friday, February 12</b>. Kindly send them to <a href="mailto:oluoch@isoc.org" target="_blank">oluoch@isoc.org</a>. </span></span><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span style='font-family:"Cambria","serif";color:black'> </span><o:p></o:p></p><p class=m242127909979704102gmail-m-8193431418494155754msolistparagraph><span style='font-family:"Cambria","serif";color:black'>ISOC’s Submission is here: <a href="https://isoc.box.com/s/w88hd88dmjvuc6w49fb42m0swn5e8f9m" target="_blank">https://isoc.box.com/s/w88hd88dmjvuc6w49fb42m0swn5e8f9m</a></span><o:p></o:p></p><p class=m242127909979704102gmail-m-8193431418494155754msolistparagraph><span style='font-family:"Cambria","serif";color:black'> </span><o:p></o:p></p><p class=m242127909979704102gmail-m-8193431418494155754msolistparagraph><span style='font-family:"Cambria","serif";color:black'>Guidelines for the Utilization of the GCA: <a href="https://www.itu.int/en/action/cybersecurity/Pages/gca-guidelines.aspx" target="_blank">https://www.itu.int/en/action/cybersecurity/Pages/gca-guidelines.aspx</a></span><o:p></o:p></p><p class=m242127909979704102gmail-m-8193431418494155754msolistparagraph><span style='font-family:"Cambria","serif";color:black'> </span><o:p></o:p></p><p class=m242127909979704102gmail-m-8193431418494155754msolistparagraph><span style='font-family:"Cambria","serif";color:black'>Attachments: (1). Guidelines for the Utilization of the Global Cybersecurity Agenda (May 2020); (2). Background on the GCA</span><span style='font-family:"Cambria","serif"'> </span><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span style='font-family:"Cambria","serif"'> </span><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span style='font-family:"Cambria","serif"'>Please let me know if you have any questions.</span><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span style='font-family:"Cambria","serif"'> </span><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span style='font-family:"Cambria","serif";color:black'>Best regards,</span><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span style='font-family:"Cambria","serif";color:black'>Elizabeth </span><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span style='font-family:"Cambria","serif";color:black'> </span><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span style='font-family:"Cambria","serif";color:black'>Elizabeth Oluoch – Do Canto</span><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span style='font-family:"Cambria","serif";color:black'>Senior Policy Advisor</span><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span style='color:black'>Internet Society</span><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'> <o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span style='color:black'> </span><o:p></o:p></p></div></div><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'>_______________________________________________<br>As an Internet Society Chapter Officer you are automatically subscribed<br>to this list, which is regularly synchronized with the Internet Society Chapter Portal (AMS):<br><a href="https://admin.internetsociety.org/622619/User/Login" target="_blank">https://admin.internetsociety.org/622619/User/Login</a><br>View the Internet Society Code of Conduct: <a href="https://www.internetsociety.org/become-a-member/code-of-conduct/" target="_blank">https://www.internetsociety.org/become-a-member/code-of-conduct/</a><o:p></o:p></p></blockquote></div></div></div></blockquote></div></div></div></body></html>