<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=utf-8"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.msonormal0, li.msonormal0, div.msonormal0
{mso-style-name:msonormal;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
span.EmailStyle18
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-US link=blue vlink=purple><div class=WordSection1><p class=MsoNormal>Ayden<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Great question. I use WHOIS as best I can to verify identity when I have a question about it. In my line of work (cybersecurity) this is relatively frequent since I get lots of mail from unknown sources. I agree with James that WHOIS doesn’t fit this function well at all given its known inadequacies as an incomplete and inaccurate data set. But I do find it sometimes useful in that it can help me form a positive or negative opinion that supports or contradicts other evidence I have. So, for this purpose I am most interested in data fields that some might characterize as PII, since my very purpose is personal identification.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Paul<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Paul Rosenzweig<o:p></o:p></p><p class=MsoNormal><a href="mailto:paul.rosenzweig@redbranchconsulting.com"><span style='color:#0563C1'>paul.rosenzweig@redbranchconsulting.com</span></a><o:p></o:p></p><p class=MsoNormal>O: +1 (202) 547-0660<o:p></o:p></p><p class=MsoNormal>M: +1 (202) 329-9650<o:p></o:p></p><p class=MsoNormal>VOIP: +1 (202) 738-1739<o:p></o:p></p><p class=MsoNormal><a href="http://www.redbranchconsulting.com/"><span style='color:#0563C1'>www.redbranchconsulting.com</span></a><o:p></o:p></p><p class=MsoNormal>My PGP Key: <a href="https://keys.mailvelope.com/pks/lookup?op=get&search=0x9A830097CA066684"><span style='color:#0563C1'>https://keys.mailvelope.com/pks/lookup?op=get&search=0x9A830097CA066684</span></a><o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><b>From:</b> NCSG-Discuss [mailto:NCSG-DISCUSS@LISTSERV.SYR.EDU] <b>On Behalf Of </b>Ayden Férdeline<br><b>Sent:</b> Tuesday, July 4, 2017 6:37 AM<br><b>To:</b> NCSG-DISCUSS@LISTSERV.SYR.EDU<br><b>Subject:</b> [INPUT REQUESTED] How do non-commercial Internet users use WHOIS?<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><div><div><p class=MsoNormal>Greetings, all-<o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>Along with Stephanie Perrin and Wendy Seltzer, I am a part of the ICANN GDPR Compliance Consultation Group. This group has been formed to help ICANN gather the information it needs to engage with data protection authorities and to obtain actionable legal advice.<o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>I committed last week to keeping the NCSG updated on the activities of the Consultation Group over the coming months. <o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>In our first meeting, we committed to participating in a data gathering exercise to identify the existing users of WHOIS, what data elements they use, and for what purpose. At this time we are not making the determination as to whether a purpose is legitimate or illegitimate, though that call will come, or if a data element comprises personally identifiable information. For now we are simply trying to include all user categories to get the most complete set of data points.<o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>We are interested in understanding how non-commercial Internet users, who we in the NCSG purport to represent the interests of, use WHOIS. We have conducted some informal consultation among our peers and have been provided with a few use cases, but not too many. It is possible that end users do not use WHOIS widely [and that has been the assumption that has informed previous exercises like this one], but if you, as an end user, do use WHOIS, we would be curious to know for what purpose and which data elements you rely on. Please share your thoughts either on-list or with me privately, if you prefer.<o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>We have a very short turnaround time for this exercise. Our next call is this Thursday, and ICANN staff envision this entire task being completed by next week. The time for you to provide input is thus now. Thanks!<o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>Best wishes,<o:p></o:p></p></div></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><div><div><p class=MsoNormal>Ayden Férdeline<o:p></o:p></p></div><div><p class=MsoNormal><a href="http://www.linkedin.com/in/ferdeline" title="http://www.linkedin.com/in/ferdeline">linkedin.com/in/ferdeline</a><o:p></o:p></p></div></div><div><p class=MsoNormal><o:p> </o:p></p></div></div><div><p class=MsoNormal><o:p> </o:p></p></div></div></body></html>