hello DNS wg, I ask for your help to inform policy makers of specific concerns in the DNS community. ICANN's Security and Stability Advisory Committee [1] is attempting to document the operational reliance on Free and Open Source Software (FOSS) in the Internet’s domain name infrastructure to inform policy discussions regarding the security of software and critical infrastructure. Our work aims aim to clear up misinformed assumptions by regulators and policy makers that may threaten the FOSS development and supply model, impacting operators of the Internet’s domain and routing systems. Please contribute your professional experience and opinion with a response to an anonymous qualitative survey: https://ec.europa.eu/eusurvey/runner/SSAC-open-source-software-in-DNS-and-re... Our report will be published on the ICANN website [2], with a target publication date in June. The survey will be closed for new submissions at the end of February anywhere on earth. Considering many of you use open source DNS implementations ever day, we ask you to help us make visible the scope and scale of FOSS in Internet infrastructure and share positive/negative impact of regulation you anticipate on the infrastructure you support. kind regards, Maarten [1] https://www.icann.org/en/ssac [2] https://www.icann.org/en/ssac/publications # What is SSAC? The Security and Stability Advisory Committee advises the ICANN community and ICANN Board on security and integrity matters related to Internet naming and address systems. We perform ongoing threat assessment and risk analysis to assess principal threats to stability and security of these systems. SSAC publications are available from https://www.icann.org/en/ssac/publications # What software are you looking at? Our focus is on recursive & authoritative nameservers, RDAP/WHOIS, EPP/registry and escrow functions. # Anonymous? We use the European Commission's EUsurvey tool, configured not to log IP addresses or other information with the potential to identify you. Your (anonymous) comments may be reprinted as entered in the report, if there is personally identifying information / personal data included in your comments, we will edit that from your remarks. -- Maarten Aertsen senior internet technologist, NLnet Labs