[Chapter-delegates] [SEEKING VIEWS] ISOC letter to ICANN re:DNS security and DNS CERT proposal

[Jean Robert Hountomey]

I agree with most of the part of the letter but I have some concerns about the second paragraph. 

I think that saying so without being clear is arguable because:

1-      DNS-OARC has been launched around 2002 to "respond to DDoS attacks at the Internet's core infrastructure and the vital requirement for a formal coordination system". 

    It was founded by NSF and was a part of part of homeland security initiatives. (http://www.circleid.com/posts/dns_gets_a_formal_coordination_system/).  

The DNS-CERT proposal seems to have most of the part of the original plan drafted for DNS OARC. 

Isn't it a way that though DNS-OARC has achieved great challenges it hasn't yet filled all the needs identified at that time? 

2-      At the DNS SYMAPOSIUM in Feb 2009 in Goergia Tech, http://www.gtisc.gatech.edu/icann09 people present raised five concerns: 

a.       the level of awareness with respect to the DNS is very low

b.       the DNS technical, operational, and security communities are disjointed and in need of a dedicated information sharing and incident response capability. 

c.       the toolset, both technical and non-technical must improve

d.      organizational outsourcing of DNS services based on an incomplete review of information which didn't account for potential reductions in control, visibility, privacy and internal "know how". 

e.      clearer understanding is needed of ICANN's mission and role with respect to security, stability and resiliency of the DNS and the Internet at large. 

 3-      There are many organizations like CERTs, DNS OARC, etc . 

a.       some of them doesn't have an open membership

b.      added to that in some parts of the world there is nothing in terms for collaboration, information sharing.  Speaking from Africa, we have only two certs  (http://www.first.org/members/map/)  in the continent  while the security issue is becoming a big problem for cctlds, ISPs that provide name resolution to their users, IXP etc...  That stressed the need to have something for these people somehow especially these days when the african continent is making big efforts to be connected via different fiber projects.

 

It seems to me that ICANN is trying to tell us that: "the world needs something to be done since a long time and nobody is taking care of it, so if nobody is going to build it, ICANN would ".

The need seems to have been clearly identified and the discussions should be around what we could do and how we could ensure that it is done like you said "in the Internet model". A way for me to achieve this is to raise our voice and all the chapters' voice NOW, and to join all the discussions related to the topic.


Jean-Robert - ISOC TOGO 


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://elists.isoc.org/mailman/private/chapter-delegates/attachments/20100402/b049996b/attachment.htm>