<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<p><font size="+1"><font face="Lucida Grande">I did not comment on
all the below, see inline</font></font><br>
</p>
<div class="moz-cite-prefix">On 2018-03-02 08:09, farzaneh badii
wrote:<br>
</div>
<blockquote type="cite"
cite="mid:CAN1qJvDT18t_+DTSuv4BXg-mFyAfhmmrc1DzrN9w6K2ZsF6T8A@mail.gmail.com">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<div dir="ltr">
<div class="gmail_default"
style="font-family:verdana,sans-serif">ok let me know we need
to send it to ICANN staff before the meeting.</div>
</div>
<div class="gmail_extra"><br clear="all">
<div>
<div class="gmail_signature" data-smartmail="gmail_signature">
<div dir="ltr">
<div><font face="verdana, sans-serif">Farzaneh </font></div>
</div>
</div>
</div>
<br>
<div class="gmail_quote">On Fri, Mar 2, 2018 at 8:07 AM,
Stephanie Perrin <span dir="ltr"><<a
href="mailto:stephanie.perrin@mail.utoronto.ca"
target="_blank" moz-do-not-send="true">stephanie.perrin@mail.utoronto.ca</a>></span>
wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0
.8ex;border-left:1px #ccc solid;padding-left:1ex">
<div text="#000000" bgcolor="#FFFFFF">
<p><font size="+1"><font face="Lucida Grande">Looks fine.
Sponsors are the accredited registrars, so will make
"or" an "and" on that slide<span class="HOEnZb"><font
color="#888888"><br>
</font></span></font></font></p>
<span class="HOEnZb"><font color="#888888">
<p><font size="+1"><font face="Lucida Grande">SP</font></font><br>
</p>
</font></span>
<div>
<div class="h5">
<div class="m_3922386946642098308moz-cite-prefix">On
2018-03-01 22:45, farzaneh badii wrote:<br>
</div>
<blockquote type="cite">
<div dir="ltr">
<div class="gmail_default">
<div class="gmail_default"><font face="verdana,
sans-serif">I have made it a bit brief. here
are the changes I made:</font></div>
<div class="gmail_default"><font face="verdana,
sans-serif"><br>
</font></div>
<div class="gmail_default"><font face="verdana,
sans-serif">I removed page 3 (relevant
privacy laws). <b>(I think people need to
understand the landscape is bigger than
GDPR) </b></font></div>
</div>
</div>
</blockquote>
</div>
</div>
</div>
</blockquote>
</div>
</div>
</blockquote>
<blockquote type="cite"
cite="mid:CAN1qJvDT18t_+DTSuv4BXg-mFyAfhmmrc1DzrN9w6K2ZsF6T8A@mail.gmail.com">
<div class="gmail_extra">
<div class="gmail_quote">
<blockquote class="gmail_quote" style="margin:0 0 0
.8ex;border-left:1px #ccc solid;padding-left:1ex">
<div text="#000000" bgcolor="#FFFFFF">
<div>
<div class="h5">
<blockquote type="cite">
<div dir="ltr">
<div class="gmail_default">
<div class="gmail_default"><font face="verdana,
sans-serif">Page five, I just added a brief
definition of WHOIS and deleted the rest of
what you had.</font></div>
</div>
</div>
</blockquote>
</div>
</div>
</div>
</blockquote>
</div>
</div>
</blockquote>
<blockquote type="cite"
cite="mid:CAN1qJvDT18t_+DTSuv4BXg-mFyAfhmmrc1DzrN9w6K2ZsF6T8A@mail.gmail.com">
<div class="gmail_extra">
<div class="gmail_quote">
<blockquote class="gmail_quote" style="margin:0 0 0
.8ex;border-left:1px #ccc solid;padding-left:1ex">
<div text="#000000" bgcolor="#FFFFFF">
<div>
<div class="h5">
<blockquote type="cite">
<div dir="ltr">
<div class="gmail_default">
<div class="gmail_default"><font face="verdana,
sans-serif"> I am not sure about keeping
slide 7. It is long and very complicated. </font></div>
</div>
</div>
</blockquote>
</div>
</div>
</div>
</blockquote>
</div>
</div>
</blockquote>
<font face="verdana, sans-serif">I will not go through it, just want
them to realize this is not new and we have been fighting this
fight a very long time. SOme need to know history so as not to
reinvent our position on this.....</font><br>
<blockquote type="cite"
cite="mid:CAN1qJvDT18t_+DTSuv4BXg-mFyAfhmmrc1DzrN9w6K2ZsF6T8A@mail.gmail.com">
<div class="gmail_extra">
<div class="gmail_quote">
<blockquote class="gmail_quote" style="margin:0 0 0
.8ex;border-left:1px #ccc solid;padding-left:1ex">
<div text="#000000" bgcolor="#FFFFFF">
<div>
<div class="h5">
<blockquote type="cite">
<div dir="ltr">
<div class="gmail_default">
<div class="gmail_default"><font face="verdana,
sans-serif">If you think you can make a
brief remark about the long struggle then
good idea. But going to thick whois and thin
whois too much will be confusing. I removed
some of the principles or made them shorter.
Removed : </font></div>
<div class="gmail_default"><font face="verdana,
sans-serif">•Notice of data breach within 72
hours</font></div>
<div class="gmail_default"><font face="verdana,
sans-serif">•Right to be forgotten</font></div>
</div>
</div>
</blockquote>
</div>
</div>
</div>
</blockquote>
</div>
</div>
</blockquote>
<p><font face="verdana, sans-serif">These are important. I will
mention but no time to put everything back in.</font></p>
<blockquote type="cite"
cite="mid:CAN1qJvDT18t_+DTSuv4BXg-mFyAfhmmrc1DzrN9w6K2ZsF6T8A@mail.gmail.com">
<div class="gmail_extra">
<div class="gmail_quote">
<blockquote class="gmail_quote" style="margin:0 0 0
.8ex;border-left:1px #ccc solid;padding-left:1ex">
<div text="#000000" bgcolor="#FFFFFF">
<div>
<div class="h5">
<blockquote type="cite">
<div dir="ltr">
<div class="gmail_default">
<div class="gmail_default"><font face="verdana,
sans-serif">But you are the expert so
correct me if I am wrong.</font></div>
<div class="gmail_default"><font face="verdana,
sans-serif"><br>
</font></div>
<div class="gmail_default">Here:
<div
style="margin-top:20pt;margin-bottom:0pt;margin-left:0.51in;text-align:left;direction:ltr;unicode-bidi:embed;word-break:normal"><font
face="arial, helvetica, sans-serif">•<span
style="color:black">Tiered access means
accreditation and authorization </span><span
style="color:black">…</span><span
style="color:black">no
self-certification, we need standards
and independent audit</span></font></div>
</div>
</div>
<div class="gmail_default"
style="font-family:verdana,sans-serif">In the
newest ICANN model there is no self
certification but reliance on GAC! We need to
mention this.</div>
</div>
</blockquote>
</div>
</div>
</div>
</blockquote>
</div>
</div>
</blockquote>
Actually the GAC model will turn out to be self certification.
Lawyers check, cybercrime orgs check. LEAs Check of course...and
this is the only group they ought to be certifying, and that will
turn out to be self cert as well. There is no independent process,
that is why the Canadian govt (and even APWG) are starting to get
interested in the standards proposal<br>
<blockquote type="cite"
cite="mid:CAN1qJvDT18t_+DTSuv4BXg-mFyAfhmmrc1DzrN9w6K2ZsF6T8A@mail.gmail.com">
<div class="gmail_extra">
<div class="gmail_quote">
<blockquote class="gmail_quote" style="margin:0 0 0
.8ex;border-left:1px #ccc solid;padding-left:1ex">
<div text="#000000" bgcolor="#FFFFFF">
<div>
<div class="h5">
<blockquote type="cite">
<div dir="ltr">
<div class="gmail_default"
style="font-family:verdana,sans-serif"><br>
</div>
<div class="gmail_default"
style="font-family:verdana,sans-serif">In the
following, Why are we jumping the queue about
legitimate purpose? "Cybercrime fighting is a
legitimate reason to disclose but it needs to be
on an accredited basis, anonymized data
analytics, etc." Lets emphasize we have to
first agree on the purpose of WHOIS then we can
get into legitimate interest etc. <br>
</div>
</div>
</blockquote>
</div>
</div>
</div>
</blockquote>
</div>
</div>
</blockquote>
I want to explain the battle that has been going on about legit
purpose for access vs for overall processing. Long hard battle in
RDS group and they still dont get it.....<br>
<blockquote type="cite"
cite="mid:CAN1qJvDT18t_+DTSuv4BXg-mFyAfhmmrc1DzrN9w6K2ZsF6T8A@mail.gmail.com">
<div class="gmail_extra">
<div class="gmail_quote">
<blockquote class="gmail_quote" style="margin:0 0 0
.8ex;border-left:1px #ccc solid;padding-left:1ex">
<div text="#000000" bgcolor="#FFFFFF">
<div>
<div class="h5">
<blockquote type="cite">
<div dir="ltr">
<div class="gmail_default"
style="font-family:verdana,sans-serif"><br>
</div>
<div class="gmail_default"
style="font-family:verdana,sans-serif">Also we
should mention that we want data minimization
(get rid of Thick WHOIS as much as possible) <br>
</div>
</div>
</blockquote>
</div>
</div>
</div>
</blockquote>
</div>
</div>
</blockquote>
then leave thick WHOIS in the other slide, that is why it is in
there....but dont worry I will deal with it in a minute or two. We
need to question what is behind current endorsement of thick whois
model (transfer of all data to Verisign e.g.??)<br>
<blockquote type="cite"
cite="mid:CAN1qJvDT18t_+DTSuv4BXg-mFyAfhmmrc1DzrN9w6K2ZsF6T8A@mail.gmail.com">
<div class="gmail_extra">
<div class="gmail_quote">
<blockquote class="gmail_quote" style="margin:0 0 0
.8ex;border-left:1px #ccc solid;padding-left:1ex">
<div text="#000000" bgcolor="#FFFFFF">
<div>
<div class="h5">
<blockquote type="cite">
<div dir="ltr">
<div class="gmail_default"
style="font-family:verdana,sans-serif"><br>
</div>
<div class="gmail_default"
style="font-family:verdana,sans-serif">Thanks
for doing this. we will have 45 minutes to go
through your slides and ask questions and then
ICANN staff (Theresa and Akram) will be with us
and we can discuss the new ICANN model. </div>
<div class="gmail_default"
style="font-family:verdana,sans-serif"><br>
</div>
<div class="gmail_default"
style="font-family:verdana,sans-serif"><br>
</div>
<div class="gmail_default"
style="font-family:verdana,sans-serif">I also
made your background less interesting. Sorry :)</div>
</div>
</blockquote>
</div>
</div>
</div>
</blockquote>
</div>
</div>
</blockquote>
I love that background but I guess yours is ok. I like the ink
blots to symbolize all the screwups....<br>
<blockquote type="cite"
cite="mid:CAN1qJvDT18t_+DTSuv4BXg-mFyAfhmmrc1DzrN9w6K2ZsF6T8A@mail.gmail.com">
<div class="gmail_extra">
<div class="gmail_quote">
<blockquote class="gmail_quote" style="margin:0 0 0
.8ex;border-left:1px #ccc solid;padding-left:1ex">
<div text="#000000" bgcolor="#FFFFFF">
<div>
<div class="h5">
<blockquote type="cite">
<div dir="ltr">
<div class="gmail_default"
style="font-family:verdana,sans-serif"><br>
</div>
<div class="gmail_default"
style="font-family:verdana,sans-serif"><br>
</div>
<div class="gmail_default"
style="font-family:verdana,sans-serif">Best </div>
<div class="gmail_default"
style="font-family:verdana,sans-serif"><br>
</div>
<div class="gmail_default"
style="font-family:verdana,sans-serif">Farzaneh </div>
<div class="gmail_default"
style="font-family:verdana,sans-serif"><br>
</div>
<div class="gmail_default"
style="font-family:verdana,sans-serif"><br>
</div>
<div><br>
</div>
<div class="gmail_default"
style="font-family:verdana,sans-serif"><br>
</div>
<div class="gmail_default"
style="font-family:verdana,sans-serif"><br>
</div>
</div>
<div class="gmail_extra"><br clear="all">
<div>
<div
class="m_3922386946642098308gmail_signature"
data-smartmail="gmail_signature">
<div dir="ltr">
<div><font face="verdana, sans-serif">Farzaneh
</font></div>
</div>
</div>
</div>
<br>
<div class="gmail_quote">On Thu, Mar 1, 2018 at
7:38 PM, Stephanie Perrin <span dir="ltr"><<a
href="mailto:stephanie.perrin@mail.utoronto.ca" target="_blank"
moz-do-not-send="true">stephanie.perrin@mail.<wbr>utoronto.ca</a>></span>
wrote:<br>
<blockquote class="gmail_quote" style="margin:0
0 0 .8ex;border-left:1px #ccc
solid;padding-left:1ex">
<div text="#000000" bgcolor="#FFFFFF">
<p><font size="+1"><font face="Lucida
Grande">first draft, tell me what you
want....</font></font></p>
<p><font size="+1"><font face="Lucida
Grande">cheers Steph</font></font><br>
</p>
</div>
</blockquote>
</div>
<br>
</div>
</blockquote>
</div>
</div>
</div>
</blockquote>
</div>
<br>
</div>
</blockquote>
</body>
</html>