- cooperation-wg - mailman.ripe.net

European Commission opens consultation on revising EU Cybersecurity Act (CSA)
by Romain Bosc 16 Apr '25

16 Apr '25

Hi colleagues, FYI the European Commission has opened a consultation on the evaluation and revision of the EU Cybersecurity Act (CSA): https://ec.europa.eu/info/law/better-regulation/have-your-say/initiatives/1… This call for evidence on the CSA revision is part of the Commission’s simplification agenda, and covers the evaluation and revision of ENISA's mandate and the European Cybersecurity Certification Framework (ECCF), as well as applicable cybersecurity requirements and reporting obligations. As the briefing document attached to the webpage notes, *"the revision of the CSA is an opportunity to further simplify cybersecurity relevant requirements across horizontal and sector-specific acts to facilitate effective implementation, reduce the administrative burden and ensure a business-friendly environment."* The consultation is running until 20 june. Best regards Romain -- Romain Bosc Sr Public Policy & Governance Officer RIPE NCC E: rbosc(a)ripe.net

1 0

My latest RIPE Labs article: Why Effective Digital Governance Begins with Understanding the Internet Itself
by Hisham Ibrahim 14 Apr '25

14 Apr '25

Dear all, I’ve put together a RIPE Labs article on why effective digital governance must begin with a clear understanding of how the Internet actually works. I’d really value your feedback and reflections. Cheers Hisham https://labs.ripe.net/author/hisham_ibrahim/why-effective-digital-governanc…

1 0

WSIS+20 and IGF 2025 – Updates and Upcoming Activities
by Desiree Miloshevic 05 Apr '25

05 Apr '25

Dear members This is a brief summary of recent and upcoming activities related to the UN World Summit on the Information Society (WSIS). • WSIS+20 Review Modalities On 26 March, the UN General Assembly adopted resolution A/RES/79/277 outlining the modalities for the WSIS+20 review process. See https://documents.un.org/doc/undoc/ltd/n25/066/55/pdf/n2506655.pdf <https://documents.un.org/doc/undoc/ltd/n25/066/55/pdf/n2506655.pdf> • CSTD Draft Report The UN Commission on Science and Technology for Development (CSTD) has published its draft report on the 20-year review of WSIS outcomes. The report will be discussed during the CSTD session on 9 April.  The final report and accompanying resolution will be submitted to ECOSOC by the end of June 2025.  Link: https://unctad.org/system/files/official-document/wsis20_cstd-report_en.pdf <https://unctad.org/system/files/official-document/wsis20_cstd-report_en.pdf> • IGF 2025 – 20th Annual Forum The 20th Internet Governance Forum, themed "Building Digital Governance Together," will take place on 23–27 June 2025 in Norway.  More details and registration (for online or in-person participation) are available at:  https://www.igf2025.no <https://www.igf2025.no/> <https://www.igf2025.no/> • IGF 2025 Programme Development IGF MAG members are currently reviewing proposals submitted through the open call by stakeholders worldwide. Final selection of sessions will be discussed at the upcoming Open Consultation and MAG Meeting, taking place 14–17 April in Geneva.  List of submitted proposals: https://intgovforum.org/en/workshop-proposals-2025 <https://intgovforum.org/en/workshop-proposals-2025> • Government and IGO Proposals Proposals submitted by governments and intergovernmental organisations (IGOs) under the Open Forum category are also listed here:  https://intgovforum.org/en/workshop-proposals-2025 <https://intgovforum.org/en/workshop-proposals-2025> Desiree -- RIPE Coop WG Co-Chair

1 0

CRA - draft Implementing Act and corresponding Annex
by Desiree Miloshevic 03 Apr '25

03 Apr '25

Dear Maarten and colleagues Thank you for sharing some of your feedback here on the list. Having seen no volunteers on the list to join you just as yet, and as the deadline for the comments is approaching, perhaps, the co-chairs could draft a statement, based on your list of concerns, and relate it as a feedback to the current draft? The feedback itself should not represent any commercial interests or interest of any manufacturer but precisely comment on the broadness of the terms used such as “network management system”. We would of course, run the draft by our members to see if there’s any objection or support for it. Desiree — RIPE Coop WG Co-chair >> On 28 Mar 2025, at 15:27, Maarten Aertsen <maarten(a)nlnetlabs.nl> wrote: >> >> Thanks Romain, hi list, >> >> On Mon Mar 17, 2025 at 11:52 CET, Romain Bosc wrote: >>> For those following the CRA, the European Commission has published the >>> draft Implementing Act and corresponding Annex, including the technical >>> description for the categories of important and critical products with >>> digital elements: >>> >>> https://ec.europa.eu/info/law/better-regulation/have-your-say/initiatives/1… >>> >>> >>> The draft is open for feedback until April 15. The final version of the Act >>> is due to be adopted by the European Commission by 11 December 2025 >>> (Article 7, CRA). >> >> I have looked at the Annex, which provides "technical descriptions" for a number of product categories in wide use in the RIPE community: VPNs, "network management systems", "Public key infrastructure and digital certificate issuance software", and "Physical and virtual network interfaces" and "Routers, modems intended for the connection to the internet, and switches". >> >> Depending on how these product categories will be scoped by the EC in these technical descriptions, *Manufacturers* face a higher or lower burden when performing conformity assessment under the CRA. >> >> I believe some of these descriptions lead to unexpected outcomes and I wonder if there's others on this list interested to cooperate on a bit of analysis and file a joint comment if we find something to contribute. If so, let me know. >> >> kind regards, Maarten >> >> >> >> Two examples to provide some flavour of what this document entails: >> >> The category of >> >>> 6. Network management systems >> >> is described as >> >>> Products with digital elements that collect information about and allow the configuration of network elements, such as servers, routers, switches, workstations, printers or mobile devices. >>> This category includes but is not limited to network management systems that can be deployed on premise or on cloud. >> >> It appears to me that this broad description would include many networking products, including say a software implementation of the ARP protocol to map IP addresses to MAC addresses on common LAN networks, because it collects such mappings, thereby collecting information about and by doing so configuring network elements. >> That's perhaps theoretical. But what about a DHCP product? BGP? Authoritative DNS? Are these all intended to be scoped as a "network management system", an "important product" in the context of the CRA? >> >> I had always expected the category of "network management systems" to be about centralized frequency scheduling in mobile networks, optical configuration for cable systems or other centralized control plane management software, but I guess we'll find out. >> >> --- >> >> The category of >> >>> Public key infrastructure and digital certificate issuance software >> >> is described as >> >>> Products with digital elements used as part of a public key cryptography scheme to manage asymmetric cryptographic keys and digital certificates, including their creation, issuance, distribution, validation, renewal, storage or revocation. >>> This category includes but is not limited to key management systems, digital certificate management systems and online certificate status protocol responders. >> >> Here, I wonder if the use of the words "validation", "storage" and "distribution" broaden it so much it would even include the relying party side of a PKI, ie. the side that does not commonly handle private key material. >> >> >> >> P.S. >> >> For those that have followed along about open source software scoping of the CRA; the above is orthogonal to that topic, because only 'Manufacturers' (those that make their product available on the market in a commercial activity) face the obligation to perform conformity assessment. Many open source projects will either be out of scope entirely, or considered to be an 'open source software steward'. Finally, for Manufacturers that release their product as open source software, there is the option of publishing technical documentation and thereby being allowed to follow the regime for normal products. >> >> -- >> Maarten Aertsen >> senior internet technologist, NLnet Labs >> ----- >> To unsubscribe from this mailing list or change your subscription options, please visit: https://mailman.ripe.net/mailman3/lists/cooperation-wg.ripe.net/ >> As we have migrated to Mailman 3, you will need to create an account with the email matching your subscription before you can change your settings. >> More details at: https://www.ripe.net/membership/mail/mailman-3-migration/ >

1 0

Nigel Hickson
by Constanze.Buerger＠bmi.bund.de 02 Apr '25

02 Apr '25

Dear Paul, My name is Constanze Bürger I' am a RIPE Community member since years. It's so sad to hear this news. I met Nigel 15 years ago, and he was an advisor to me—highly experienced in technology and politics, and above all, so charming. Always with a boyish twinkle in his eye. I will miss him and gladly support any expression of appreciation. Constanze Bürger Masters Degree in Computer Science Federal Ministry of the Interior and Community Central Office for the Detection of Foreign Information Manipulation PHONE +491778663280 E-MAIL Constanze.Buerger(a)bmi.bund.de -----Ursprüngliche Nachricht----- Von: Johan Helsingius via cooperation-wg <cooperation-wg(a)ripe.net> Gesendet: Dienstag, 1. April 2025 11:11 An: cooperation-wg <cooperation-wg(a)ripe.net> Betreff: [cooperation-wg] Nigel Hickson Some very sad news. -------- Forwarded Message -------- Subject: Nigel Hickson Date: Mon, 31 Mar 2025 13:31:08 +0000 From: Blaker, Paul (DSIT) <paul.Blaker(a)dsit.gov.uk> OFFICIAL Dear colleagues I’m extremely sad to let everyone in MIGG-UK know that Nigel Hickson died over the weekend following a long battle with cancer. He was hugely loved by his team here in DSIT and by friends and colleagues in the UK and around the world, and he will be sorely missed. Nigel made a huge contribution over a forty year career. He worked in a number of government departments in the UK as well as roles in the Government of Bermuda, the Confederation of British Industry and of course eight years at ICANN. He was committed to his work and he was an outstanding champion of a free, open and secure Internet. He stepped down as vice-chair of the GAC only a few weeks ago at the ICANN meeting in Seattle and I know how much it meant to him to receive the thanks and best wishes of so many good friends and colleagues there. My team is planning to put together a memorial book that we can give to his family to commemorate his contribution and to celebrate his memory. If you would like to include a message then please email me and we will paste it into the book. We are in touch with his family and we will pass on any more information that becomes available. I know this news will be upsetting for many people. Our hearts go out to his family and to all those who will miss him. Nigel has left us many great achievements and a great legacy – and most of all he has left us with many warm and happy memories of a wonderful man and a great friend. with best regards, Paul Paul Blaker Head of ITU and Internet Governance Department for Science, Innovation & Technology United Kingdom Tel: +44 (0) 7515 701352 www.gov.uk/dsit <http://www.gov.uk/dsit> | https://twitter.com/SciTechgovuk OFFICIAL ----- To unsubscribe from this mailing list or change your subscription options, please visit: https://mailman.ripe.net/mailman3/lists/cooperation-wg.ripe.net/ As we have migrated to Mailman 3, you will need to create an account with the email matching your subscription before you can change your settings. More details at: https://www.ripe.net/membership/mail/mailman-3-migration/

2 1

Nigel Hickson
by Johan Helsingius 01 Apr '25

01 Apr '25

Some very sad news. -------- Forwarded Message -------- Subject: Nigel Hickson Date: Mon, 31 Mar 2025 13:31:08 +0000 From: Blaker, Paul (DSIT) <paul.Blaker(a)dsit.gov.uk> OFFICIAL Dear colleagues I’m extremely sad to let everyone in MIGG-UK know that Nigel Hickson died over the weekend following a long battle with cancer. He was hugely loved by his team here in DSIT and by friends and colleagues in the UK and around the world, and he will be sorely missed. Nigel made a huge contribution over a forty year career. He worked in a number of government departments in the UK as well as roles in the Government of Bermuda, the Confederation of British Industry and of course eight years at ICANN. He was committed to his work and he was an outstanding champion of a free, open and secure Internet. He stepped down as vice-chair of the GAC only a few weeks ago at the ICANN meeting in Seattle and I know how much it meant to him to receive the thanks and best wishes of so many good friends and colleagues there. My team is planning to put together a memorial book that we can give to his family to commemorate his contribution and to celebrate his memory. If you would like to include a message then please email me and we will paste it into the book. We are in touch with his family and we will pass on any more information that becomes available. I know this news will be upsetting for many people. Our hearts go out to his family and to all those who will miss him. Nigel has left us many great achievements and a great legacy – and most of all he has left us with many warm and happy memories of a wonderful man and a great friend. with best regards, Paul Paul Blaker Head of ITU and Internet Governance Department for Science, Innovation & Technology United Kingdom Tel: +44 (0) 7515 701352 www.gov.uk/dsit <http://www.gov.uk/dsit> | https://twitter.com/SciTechgovuk OFFICIAL

1 0

EU Cyber Resilience Act (CRA) draft implementing act open for feedback
by Romain Bosc 28 Mar '25

28 Mar '25

Colleagues, For those following the CRA, the European Commission has published the draft Implementing Act and corresponding Annex, including the technical description for the categories of important and critical products with digital elements: https://ec.europa.eu/info/law/better-regulation/have-your-say/initiatives/1… The draft is open for feedback until April 15. The final version of the Act is due to be adopted by the European Commission by 11 December 2025 (Article 7, CRA). All best Romain -- Romain Bosc Sr Public Policy & Governance Officer RIPE NCC E: rbosc(a)ripe.net

2 1

Endorsement deadline for Five Point Plan on WSIS Modalities Plan
by Desiree Miloshevic 24 Mar '25

24 Mar '25

Dear colleagues During the last ICANN82 meeting, the following document was mentioned in a public session the Five-Point Plan for an Inclusive WSIS+20 Review. Please note that endorsements will close at the end of today. https://docs.google.com/document/d/1MSxPHLqC18M5-u7H_1vNHMU_ls0fKFZ0_upZ1oR… Desiree Miloshevic — RIPE Coop WG Co-Chair

1 0

RIPE NCC Roundtable Meeting Report
by Johan Helsingius 19 Mar '25

19 Mar '25

All 3 of us coop co-chairs attended the RIPE NCC European Roundtable on Internet governance in Brussels on 19 February. We had some very interesting presentations and even more interesting discussions during the breaks. Many thanks to Romain Bosc and the rest of the NCC staff! The meeting report is available at the link below: https://www.ripe.net/meetings/roundtable/roundtable-meeting-europe-feb2025/… Julf, Achilleas and Desiree

1 0

European Commission 2025 Work Programme published
by Romain Bosc 13 Feb '25

13 Feb '25

Colleagues The European Commission has published its 2025 Work Programme https://commission.europa.eu/strategy-and-policy/strategy-documents/commiss… The annex document has a table listing all legislative and non-legislative initiatives -- including the Digital Networks Act which is scheduled for Q4 2025. https://commission.europa.eu/document/download/7617998c-86e6-4a74-b33c-249e… All the best Romain -- Romain Bosc Sr Public Policy & Governance Officer RIPE NCC E: rbosc(a)ripe.net

1 0