- cooperation-wg - mailman.ripe.net

Making the internet more secure: An invitation
by Wout de Natris 17 Jun '21

17 Jun '21

Dear colleagues, On Monday 28 June at 11.30 UTC (13.30 CET) the Dynamic Coalition on Internet Standards, Security and Safety presents itself, its three working groups that started in 2021 and their respective workplans and mission statements. You are kindly invited to join this virtual workshop. A more secure and safer Internet, ICT and IoT, is in the interest of every end user. Whether corporate, public services or individuals, all end users should be adequately protected by state of the art security, available in the form of Internet standards and ICT/IoT best practices concerning security. Presently these standards and best practices are seriously underused, leaving the world at large, and its private and public interests, less protected than is currently possible. The DC-ISSS aims to ensure that standards and best practices play their full role in addressing these challenges through establishing the conditions for their wider, more effective and more rapid adoption by key decision-takers in the implementation chain. Said deployment is of direct interest to your organisation. Closing the gap between the theory and the practices of digital security is the main theme of the DC’s working groups. The gap between the theory of roadmaps on IoT security and secure-by-design devices and sensors. The gap between current tertiary schooling in cyber security curricula and the demands industry and other employers make on, not only, educational facilities but also those graduating there. The gap between the necessity of a more secure digital environment and the lack of active, security demand and thus offer of security. Deployment equals a significantly higher level of protection against the exploitation of vulnerabilities, hacks and extortion. It’s in your interest. In this session the current three working groups: security by design – Internet of Things; education and skills and; procurement, supply chain management and the creation of a business case for deployment will present their respective plans for 2021. These plans will be published shortly on the IGF website here: (https://www.intgovforum.org/multilingual/content/dynamic-coalition-on-inter…) On the same page you can join the email list of the DC-ISSS. The second half of the session is your opportunity to raise questions, suggest research or direction, to add expertise and knowledge to the programme. The DC-ISSS Leadership team is open to have one on one sessions during EuroDIG or after. Please let us know if you are interested to learn more. The DC-ISSS is in need of support. 1) Contributions in kind in the form of knowledge and expertise. 2) Introductions to experts and expert organisations. 3) Financial contributions to conduct the research, the writing of reports, to conduct active outreach and allow for support, coordination and presentations. We look forward to welcoming you on Monday 28 June, 11.30 UTC (13.30 CEST). Do not forget to register on the EuroDIG website in order to participate. (https://www.eurodig.org/get-involved/register-for-eurodig-2021/) 25 June at the latest. Best regards, Wout de Natris Coordinator DC-ISSS DC-ISSS: Making the Internet more secure and safer - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - De Natris Consult Kamerlingh Onnesstraat 43 Tel: +31 648388813 2014 EK Haarlem Skype: wout.de.natris denatrisconsult(a)hotmail.nl<mailto:denatrisconsult@hotmail.nl> http://www.denatrisconsult.nl Blog http://woutdenatris.wordpress.com

1 0

Recording and Slide deck available for Webinar and Roundtable on Understanding the UK Online Safety Bill
by Olivier MJ Crépin-Leblond 14 Jun '21

14 Jun '21

Dear Colleagues, The UK Chapter of the Internet Society recently held a Webinar and Roundtable on the new Draft UK Online Safety Bill and several people suggested that I post an announcement on the RIPE cooperation WG mailing list, once the Webinar's recording was made available. Well, if you have missed this excellent Webinar and Roundtable, or simply want to watch it again, the recording and the slide deck are now available here <https://isoc-e.org/understanding-the-uk-online-safety-bill/>. As a reminder, the Bill contains several far reaching proposals including some suggesting that Encryption should be weakened through various methods. This has generated much pushback from UK entities and the Internet Society has drafted an online letter to members of the UK Parliament, co-signed by dozens of organisations, that “End-to-End Encryption keeps us safe”. The joint statement will go live on Monday 14th June 2021 at 9am UK time on the Global Encryption Website <https://www.globalencryption.org/> and will also be printed in the 14 June edition of the House. <https://www.politicshome.com/thehouse/magazine.htm> The draft Bill is published at https://www.gov.uk/government/publications/draft-online-safety-bill <https://www.gov.uk/government/publications/draft-online-safety-bill> The repercussions of this Bill reach way further than just affecting the United Kingdom - this could be a blueprint for many other countries to follow - and the consequences could be terrible. Thus, since this is in draft form, it is important to pay attention now, as there is still time to suggest and design better solutions than the ones that will end up doing more harm than good. Agenda 1. Welcome & Introduction (Olivier Crépin-Leblond) 2. Brief presentation of the Proposed Bill — Heather Burns – Open Rights Group 3. Panellists – Richard Allan – https://www.ricallan.uk/ <https://www.ricallan.uk/> and Blog posting on https://www.regulate.tech/uk-draft-online-safety-bill-24th-may-2021/ <https://www.regulate.tech/uk-draft-online-safety-bill-24th-may-2021/> – Robin Wilton – Internet Society – Chris Yapp – linkedin.com/in/chris-yapp-b626522 <https://www.linkedin.com/in/chris-yapp-b626522> 4. Open discussion 5. Next Steps Watch this Webinar to discover what might be tomorrow's paradigm shift that will affect businesses, civil society, end users and even the political space and Press freedom. The recording and the slide deck used are available here <https://isoc-e.org/understanding-the-uk-online-safety-bill/>. Best regards, Olivier MJ Crépin-Leblond contact(a)isoc-e.org

2 1

ENISA Survey: "Cybersecurity Consumer Outreach Practices"
by Marco Hogewoning 18 May '21

18 May '21

Dear colleagues, I've been asked to encourage you to respond to a short survey by ENISA, which will take approximately 15 minutes of your time. The European Electronic Communications Code (EECC) contains some provisions regarding outreach to costumers and consumers regarding potential cybersecurity threats security incidents and what they can or need to do. Or in the text of the EECC itself (Art, 40, par. 3): “Member States shall ensure that in the case of a particular and significant threat of a security incident in public electronic communications networks or publicly available electronic communications services, providers of such networks or services shall inform their users potentially affected by such a threat of any possible protective measures or remedies which can be taken by the users. Where appropriate, providers shall also inform their users of the threat itself.” Amongst its goals, the survey aims to identify: • Effective solutions and good practices of the cybersecurity consumer outreach by electronic communication providers. • Methods of authorities for supporting the development of customer outreach on cybersecurity. If you have any examples to share, please participate in the survey. Although this survey is organised by ENISA, it is not uncommon for the results of these surveys to form the basis for legislative proposals by the Commission. In that context it is always useful to provide input about industry practices and position in these early stages and be able to inform policy makers about the things that work and the things where change might be needed. The survey can be found at https://ec.europa.eu/eusurvey/runner/ElectronicCommunicationsProvidersConsu… It will close on 20 May 2021, so unfortunately not much time to develop a common position. I would recommend you contribute to this survey on an individual basis. Best, Marco Hogewoning Manager Public Policy and Internet Governance RIPE NCC

1 0

New on RIPE Labs: Caught in the Middle - Regulatory Impact and our Mission as the RIPE NCC
by Alun Davies 12 May '21

12 May '21

Dear colleagues, The increasing rate of conflicting regulatory developments across our service region has become a very real subject of concern for the RIPE NCC. In this new article on RIPE Labs, Athina Fragkouli talks about the impact such developments have on our operations and the principles guiding the work being done to prepare for and mitigate potential challenges: https://labs.ripe.net/author/athina/caught-in-the-middle-regulatory-impact-… Kind regards, Alun Davies RIPE Labs Editor RIPE NCC

1 0

RIPE82 Coop WG agenda
by Desiree Miloshevic 11 May '21

11 May '21

Dear all I am delighted to announce the following RIPE82 Coop WG meeting agenda: Tuesday, May 18th 16:00-17:00 UTC +2 (CET) 1. Welcome & Introductions - 5 min - WG Co-Chairs 2. The Digital Service Act Overview - Agne Kaarlep - European Commission 3. The Digital Service Act - Polina Malaja - Policy Advisor at CENTR Q&A 4. Disposable Identities, the solution to privacy, security and infrastructure in an #IoT world - Rob van Kranenburg, Founder of #Iot Council and #iotoday 5.Q&A We look forward to your comments, questions and seeing you all next week, via Meetecho for now. Desiree — on behalf of WG Co-chairs, Julf and Achilleas

1 0

Update on NIS 2: Proposed amendments by the Parliament alter scope on (root) DNS
by Marco Hogewoning 08 May '21

08 May '21

Dear colleagues, We'd like to inform you that some changes have been proposed to NIS 2 that would accommodate some of the concerns raised by the RIPE NCC and the RIPE community. As a quick recap: the European Commission proposed an update to the Network and Information Security Directive, commonly referred to as NIS 2, which would bring the DNS root servers into scope of the directive, resulting in regulatory oversight of the DNS root server operators. Following our response on the NIS 2 proposal in the public feedback process, we reached out to a number of parties involved in the legislative process, including some members of the European Parliament, drawing attention to our concerns. The ITRE committee, which is leading this dossier in the European Parliament, yesterday published its initial report listing a number of proposed amendments. We are happy to see that it has taken on board the concerns we and other community members have raised. In particular, the committee proposes amending the scope of the directive to include: "authoritative domain name resolution services as a service procurable by third-party entities”. We realise this leaves a substantial part of the DNS in scope; however, this change would address the concerns we raised in our response by removing from scope: - DNS root operations - Small and non-commercial operators, such as people running their own DNS servers We are pleased to see these amendments and appreciate the rapporteur, MEP Groothuis, addressing our concerns. The full report is available at: https://www.europarl.europa.eu/doceo/document/ITRE-PR-692602_EN.pdf (The relevant changes are on pages 6, 27 and 57.) As a next step, the ITRE committee is provisionally scheduled to discuss this report on 27 May. We will continue to track the legislative process and keep you informed about the progress. Regards, Marco Hogewoning Manager, Public Policy and Internet Governance RIPE NCC

4 5

New article on RIPE Labs: Artificial Intelligence and Policy-Making Developments
by Athina Fragkouli 21 Apr '21

21 Apr '21

Dear all, I would like to announce a new RIPE Labs article "Artificial Intelligence and Policy-Making Developments – Council of Europe’s CAHAI" published today: https://labs.ripe.net/author/athina/artificial-intelligence-and-policy-maki… <https://labs.ripe.net/author/athina/artificial-intelligence-and-policy-maki…> As the first in a series of articles aimed at exploring how policy-making institutions are reacting to challenges posed by AI, I’ve written about how the Council of Europe seeks to examine the feasibility of a legal framework for the development, design and application of AI. As the series continues, our goal will be to raise awareness of these issues so that the technical community can get involved at the early stages of relevant discussions and provide appropriate input to policy makers. Thank you, Athina Fragkouli Chief Legal Officer RIPE NCC

1 0

New on RIPE Labs: Understanding the European Resolver Policy
by Alun Davies 20 Apr '21

20 Apr '21

Dear colleagues, The European Resolver Policy is intended to provide reassurance to end-users and other stakeholders that personal data gained in the operation of DNS resolution services will not be misused. In this guest post on RIPE Labs, Andrew Campling talks about the aims and benefits of the policy: https://labs.ripe.net/author/andrew_campling/understanding-the-european-res… Kind regards, Alun Davies RIPE Labs Editor RIPE NCC

1 0

RIPE DBTF Feedback
by Boris Duval 14 Apr '21

14 Apr '21

Dear colleagues, I am writing to inform you that the RIPE Database Requirements Task Force (DBTF), is soliciting feedback on recommendations for; PERSON Objects Historical Data Legal Address If you are interested or have any feedback on these topics, then please join the conversation on the RIPE Database WG mailing list so that we can keep all feedback and discussions in one place. Kind regards, Boris on behalf of the DBTF Boris Duval Communications Officer RIPE NCC

1 0

RIPE NCC Response to the Commission adoption of the Critical Entities Resilience Directive
by Suzanne Taylor 09 Apr '21

09 Apr '21

Dear colleagues, The RIPE NCC once again submitted a response to an open consultation held by the European Commission, this time on the adoption of the Critical Entities Resilience (CER) Directive. The CER Directive is a proposed update to the European Critical Infrastructure (ECI) Directive that seeks to protect critical infrastructure within the EU from natural or man-made disruptions, and has been expanded to cover new sectors, including digital infrastructure. The CER Directive is based largely on the definitions set out in the proposed NIS 2 Directive (which we responded to in March), and stipulates how member states will be responsible for protecting those critical entities operating within their borders. Following our NIS 2 response, in which we asked that root server operators be excluded from scope, we urged the Commission to ensure consistency between the NIS 2 and CER Directives to safeguard against the possibility of being exempt from NIS 2 but somehow included in CER. You can find our full response, along with all the other feedback the Commission received, at the bottom of the consultation website: https://ec.europa.eu/info/law/better-regulation/have-your-say/initiatives/1… <https://ec.europa.eu/info/law/better-regulation/have-your-say/initiatives/1…> You can also find our response on our website, along with all the other responses the RIPE NCC has submitted to various consultations: https://www.ripe.net/participate/internet-governance/multi-stakeholder-enga… <https://www.ripe.net/participate/internet-governance/multi-stakeholder-enga…> The European Parliament and Council will now develop their own positions on the CER Directive. We’ll continue to follow developments around this and other digital policy and keep you informed of any updates. In the meantime, please let us know your thoughts or any feedback you have. Best regards, Suzanne _____________ Suzanne Taylor RIPE NCC

1 0