RE: [gnso-ff-pdp-may08] Please review and respond - Fast Flux WG

["Mike Rodenbaugh" <icann@xxxxxxxxxxxxxx>]

I will continue in the group and as GNSO Council liason.  I think the best
next steps are to prepare a final report with recommendations for the
Council to consider.  Those can be process and/or policy recommendations. 

For example, we could recommend the Council consider a further process that
follows on the work of this group, and devises an industry data-sharing
process and protocol so that fast flux attacks are reported more widely and
quickly.  That group could also publish an advisory as to how to avoid,
detect, monitor and mitigate the attacks.  I am sure there are other
elements we have discussed, that could also be ripe for further discussion.

We could also recommend that registrant verification, 'rapid takedown'
procedures and other methods be considered to mitigate the volume of
criminal behavior more generally.  That work is (or easily could be) in the
remit of the current Registration Abuse Policies Working Group.  I suggest
we recommend to the Council that the RAP-WG specifically address broader
abuse issues like those, while this FF-WG continues on issues specific to
mitigation of fast flux DNS exploits.

Sorry I cannot make the call this Friday either, as I have a court hearing
for a client that morning.

Thanks,
Mike

Mike Rodenbaugh
Rodenbaugh Law
548 Market Street
San Francisco, CA  94104
+1.415.738.8087
www.rodenbaugh.com


-----Original Message-----
From: owner-gnso-ff-pdp-may08@xxxxxxxxx
[mailto:owner-gnso-ff-pdp-may08@xxxxxxxxx] On Behalf Of Marika Konings
Sent: Friday, March 20, 2009 11:45 AM
To: Fast Flux Workgroup
Subject: [gnso-ff-pdp-may08] Please review and respond - Fast Flux WG

Dear All,

Following the low attendance on the last two calls, I would like to ask you
to indicate whether you are still interested in participating in the Fast
Flux Working Group. There are still a number of important tasks ahead such
as the creation of the final report which incorporates the public comments
received and a discussion and decision on which recommendations, if any, the
group is willing to support as a whole in the final report. Those on the
call today already had a brief exchange of views on next steps and all
seemed to support the review and integration of the public comments received
into the final report. There was some discussion whether the work of this
group should be handed over to the Registration Abuse Policies (RAP) WG, but
there was no agreement on that approach and some questioned whether this
issue would be in scope of the RAP WG. Due to the limited number of
participants on the call, it was decided to postpone any decision to a next
meeting in order to give those of you that were not able to join the
opportunity to indicate whether you are still interested and available to
participate, and provide you with an opportunity to share your views on next
steps on the mailing list or on the next call.

The next conference call has been scheduled for Friday 27 March at 15.00
UTC. The call details will be posted shortly.

I look forward to receiving your feedback.

Thanks,

Marika