1

Some Elements of InternetSome Elements of InternetGovernanceGovernance

Peter Dengate ThrushPeter Dengate ThrushChairman, ICANN Board of DirectorsChairman, ICANN Board of Directors

APTLD Meeting

Noumea, 8 April 2011

TodayToday’’s Agendas Agenda Brief history of the development of the InternetBrief history of the development of the Internet

Emergence of ICANN as global resource coordinatorEmergence of ICANN as global resource coordinator

What ICANN doesWhat ICANN does

What ICANN does not doWhat ICANN does not do

Signing the Root; introducing Security Extensions to DNSSigning the Root; introducing Security Extensions to DNS

Internationalising domain namesInternationalising domain names

Affirmation of CommitmentsAffirmation of Commitments

New gTLDsNew gTLDs

IPv4 – IPv6IPv4 – IPv6

ConclusionsConclusions

ORIGINS OF THE INTERNETORIGINS OF THE INTERNET United States Government (Department of Defence) funding United States Government (Department of Defence) funding

packet switching research by industry contractors.packet switching research by industry contractors.

The Advanced Research Project Agency in the 1960The Advanced Research Project Agency in the 1960’’s – s – ARPAnet.ARPAnet.

29 October 1969: Stanford Research Institute and UCLA linked.29 October 1969: Stanford Research Institute and UCLA linked.

December 1969, 4 Nodes; Needed a December 1969, 4 Nodes; Needed a ““file coordinatorfile coordinator””- Jon - Jon Postel, graduate research student at UCLAPostel, graduate research student at UCLA

The functions collectively become known as the Internet The functions collectively become known as the Internet Assigned Numbers Authority (IANA).Assigned Numbers Authority (IANA).

Many other networks being developed; FidoNet, BitNet, BBS Many other networks being developed; FidoNet, BitNet, BBS UUCP, x.25 Sublink ( Italy) NPL( UK)UUCP, x.25 Sublink ( Italy) NPL( UK)

THE FIRST THE FIRST ““INTERNETINTERNET””Commercial use of the military ARPANET was prohibited.Commercial use of the military ARPANET was prohibited.Other networks being developed by other USG agencies, Other networks being developed by other USG agencies, including NASA, CSNET, NSFNET and DoE. Heavy including NASA, CSNET, NSFNET and DoE. Heavy investment by USG continued. investment by USG continued. National Science Foundation (NSF) awarded statutory National Science Foundation (NSF) awarded statutory authority by USG to support the scientific backbone of the authority by USG to support the scientific backbone of the Internet. Internet. Funding to IBM, MSI and Merit which results in the NSF Funding to IBM, MSI and Merit which results in the NSF NET. Becomes connected to ARPAnet…the Internet emerges. NET. Becomes connected to ARPAnet…the Internet emerges. 1992 Congress approves commercial activity on NSF NET.1992 Congress approves commercial activity on NSF NET.7/1992 NSF signs dotcom contract with Networks Solutions7/1992 NSF signs dotcom contract with Networks Solutions

INTERNET ADDRESSESINTERNET ADDRESSES

Every host computer on the Internet has a numerical address:

• 202.49.154.176• IANA allocates blocks of addresses to “volunteer”

regional registries• ARIN, RIPE, LACNIC AFRINIC and APNIC

allocate addresses to ISPs on demand.Addresses are the most crucial resource of the

internet.

TOP LEVEL DOMAIN TOP LEVEL DOMAIN NAMESNAMES

1.generic1.generic Top Level Domains ( Top Level Domains (““gTLDsgTLDs””); and); and2. country code2. country code Top Level Domains ( Top Level Domains (““ccTLDsccTLDs””))

gTLDsgTLDs were: .arpa, .mil, .gov, .edu, .int, .net, .org, were: .arpa, .mil, .gov, .edu, .int, .net, .org, and .comand .com

Now include: .aero, .museum, .pro, .coop, .biz, .info, Now include: .aero, .museum, .pro, .coop, .biz, .info, .name,.asia, .tel, .travel, .cat, .mobi, .jobs .post, .name,.asia, .tel, .travel, .cat, .mobi, .jobs .post, and .xxx ( total of 23)and .xxx ( total of 23)ccTLDsccTLDs are based on a list of accepted abbreviations for are based on a list of accepted abbreviations for

country names, prepared by the International Standards country names, prepared by the International Standards Organisation (ISO 3166-1)Organisation (ISO 3166-1)

There are 243 ccTLDsThere are 243 ccTLDs

THE BEGINNINGS OF THE BEGINNINGS OF CORPORATISATIONCORPORATISATION

Vinton Cerf (the Vinton Cerf (the ““father of the internetfather of the internet””) formed the IAB ) formed the IAB

( Internet Architecture Board) in 1990.( Internet Architecture Board) in 1990. ISOC ( The ISOC ( The ““Internet SocietyInternet Society””) was formed in 1992.) was formed in 1992. IAB became a committee of ISOC.IAB became a committee of ISOC. Postel was founding member of IAB.Postel was founding member of IAB. He was the first individual member of ISOC.He was the first individual member of ISOC. July 1994 Postel proposes to transfer IANA to ISOC.July 1994 Postel proposes to transfer IANA to ISOC.USG questions whether ISOC has jurisdiction and rights.USG questions whether ISOC has jurisdiction and rights.

PRESSURE ON gTLDsPRESSURE ON gTLDs September 1995 Postel proposes additional gTLDs September 1995 Postel proposes additional gTLDs

managed by others.managed by others. 150 new 150 new ““descriptive TLDs – descriptive TLDs – ““.web, .sex,.web, .sex,”” proposed. proposed. 2% of income to go to an ISOC-managed fund.2% of income to go to an ISOC-managed fund. Opposition came from everywhere –Opposition came from everywhere –

Robert Shaw of the ITU;Robert Shaw of the ITU;Trade mark owners (INTA); and Trade mark owners (INTA); and the net community.the net community.

A new, community-wide solution was needed.A new, community-wide solution was needed.

THE INTERNATIONAL AD THE INTERNATIONAL AD HOC COMMITTEEHOC COMMITTEE

Domain names were a public resourceDomain names were a public resource Wholesale/retail splitting desirableWholesale/retail splitting desirable Competitive Registrars introducedCompetitive Registrars introduced Trade mark protection procedures controlled through Trade mark protection procedures controlled through

the Registrarsthe Registrars WIPO administrative challenge panels after 60 day waitWIPO administrative challenge panels after 60 day wait Only seven new gTLDs should be introduced.Only seven new gTLDs should be introduced.

In late 1996 ISOC formed the IAHC, including its previous critics. In early 1997 IAHC reported –IAHC MoU gTLDs

THE US REACTIONTHE US REACTIONThe suggestion that control of the Internet was to move The suggestion that control of the Internet was to move to Geneva resulted in Congressional hearings in the US.to Geneva resulted in Congressional hearings in the US.

Madeline Albright wrote in protest to the ITU.Madeline Albright wrote in protest to the ITU.

Ira Magaziner was appointed convenor of an inter-agency Ira Magaziner was appointed convenor of an inter-agency group on e-commerce.group on e-commerce.

Faced with IAHC Faced with IAHC ““threatthreat””, USG developed a Green Paper., USG developed a Green Paper.

Began to propose industry-led governance of the internetBegan to propose industry-led governance of the internet

Interest piqued around the world, of industry, governments, Interest piqued around the world, of industry, governments, and and ““civil societycivil society””

3 June 1998: after considering Green Paper comments, the 3 June 1998: after considering Green Paper comments, the White Paper released. Key principles of White Paper released. Key principles of ““NewCoNewCo””::

Bottom up processes;Bottom up processes; Industry self-regulation;Industry self-regulation; Transparent;Transparent; Geo-diverse;Geo-diverse; Government-free;Government-free; A role for WIPO;A role for WIPO; Competition.Competition. Followed an International Forum on the White Paper, with Followed an International Forum on the White Paper, with

meetings in Virginia, Geneva, Singapore & Buenos Aires.meetings in Virginia, Geneva, Singapore & Buenos Aires.

THE US REACTION

September 13, 1998 draft bylaws of ICANN publishedSeptember 13, 1998 draft bylaws of ICANN published October 2, 1998 ICANN submits proposal to be the NewCo of October 2, 1998 ICANN submits proposal to be the NewCo of

the White Paper.the White Paper. October 7, Amendment 11 to DoCOctober 7, Amendment 11 to DoC’’s contract ( CRADA) with s contract ( CRADA) with

NSI operator of dot com since 1992 NSI operator of dot com since 1992 ““providing for recognition providing for recognition by NSI of NewCo when recognized by the USG in accordance by NSI of NewCo when recognized by the USG in accordance with the provisions of the Statement of Policywith the provisions of the Statement of Policy””

November 10, 1998…NTIA announced reviewing a submission November 10, 1998…NTIA announced reviewing a submission by ICANN on its bylawsby ICANN on its bylaws

ICANN Emerges

November 25, 1998 A Memorandum of Understanding signed November 25, 1998 A Memorandum of Understanding signed between ICANN and DoCbetween ICANN and DoC

““Before making a transition to private sector DNS Before making a transition to private sector DNS management, the DOC requires assurances that management, the DOC requires assurances that the private sector has the capability and resources the private sector has the capability and resources to assume the important responsibilities related to to assume the important responsibilities related to the technical management of the DNS.the technical management of the DNS.””

February 28, 1999 ICANN designated as NewcoFebruary 28, 1999 ICANN designated as Newco September 28, 1999 – New Registry agreement signed between September 28, 1999 – New Registry agreement signed between

ICANN and NSI, providing for multiple registrars in dot com, ICANN and NSI, providing for multiple registrars in dot com, net and orgnet and org

ICANN Emerges

14

BOARD OF DIRECTORS

President and CEO

Governmental Advisory

Committee (GAC)

Root Server System Advisory

Committee (RSSAC)

Security & Stability Advisory

Committee (SSAC)

At Large Advisory

Committee (ALAC)

ICANN Staff

15 voting delegates + 6 non-voting delegates

Nominating Committee

ICANN’s structure

Technical Liaison

Group (TLG)

Internet EngineeringTask Force

(IETF) ASO GNSO CCNSO

Regional Internet Registries ARIN RIPE NCC LACNIC APNIC AfriNIC

gTLD Registries and Registrars Intellectual Property ISPs Businesses Universities Consumers

ccTLD registries (.ae, br, ca, eg, .it, .nz, etc.)

ICANN TodayICANN Today

Offices in:Offices in: HQ in Marina del Rey , LA, USAHQ in Marina del Rey , LA, USA Brussels, BelgiumBrussels, Belgium Washington DCWashington DC SydneySydney Palo Alto*Palo Alto*

Budget Revenue ( to 30 June 2010): US$64MBudget Revenue ( to 30 June 2010): US$64M

Staff: ~ 120Staff: ~ 120

The ICANN MissionThe ICANN Mission

1.1. Coordinates the allocation and assignment of the Coordinates the allocation and assignment of the three sets of unique identifiers for the Internet:three sets of unique identifiers for the Internet:

a.Domain names (forming a system referred to as a.Domain names (forming a system referred to as ““DNSDNS””););

b. Internet protocol (b. Internet protocol (““IPIP””) addresses, autonomous ) addresses, autonomous system (system (““ASAS””) numbers; and ) numbers; and

c. Protocol port and parameter numbers.c. Protocol port and parameter numbers.2. Coordinates the operation and evolution of the DNS 2. Coordinates the operation and evolution of the DNS

root name server system.root name server system.3. Coordinates policy development reasonably and 3. Coordinates policy development reasonably and

appropriately related to these technical functions.appropriately related to these technical functions.

5 Current Challenges5 Current Challenges

Enhancing the security of the InternetEnhancing the security of the Internet Internationalising the namesInternationalising the names Switching from direct oversight by the US DoC, Switching from direct oversight by the US DoC,

to community accountability to community accountability Introducing possibly thousands of new gTLDS Introducing possibly thousands of new gTLDS

under the new procedureunder the new procedure The completion of IPv4 allocation in 2011/2012, The completion of IPv4 allocation in 2011/2012,

and the slow uptake of IPv6and the slow uptake of IPv6

What ICANN does not doWhat ICANN does not do

Content regulationContent regulation Provide Spam protectionProvide Spam protection Protection of Children onlineProtection of Children online Detection and remediation of revenue fraudDetection and remediation of revenue fraud Address the digital divideAddress the digital divide Lay cables, or build networksLay cables, or build networks Develop or deal in applicationsDevelop or deal in applications Design or approve technical standards for the Design or approve technical standards for the

Internet…..Internet….. And much, much more!And much, much more!

The Internet EcosystemThe Internet Ecosystem

ISOC; outreach, training, promoting open use ISOC; outreach, training, promoting open use and development of the Internet for alland development of the Internet for all

IETF; internet technical standardsIETF; internet technical standards World Wide Web Consortium; develops web World Wide Web Consortium; develops web

standardsstandards IGF; multistakeholder ( civil society, technical IGF; multistakeholder ( civil society, technical

communities and governments) can discuss communities and governments) can discuss public policy aspects of the Internetpublic policy aspects of the Internet

ICANN has a narrow technical mandate in a ICANN has a narrow technical mandate in a broad and vibrant ecology.broad and vibrant ecology.

Explaining DNS: Data FlowExplaining DNS: Data Flow

AuthoritativeServer

Recursive Server

(eg.ISP)

resolver

Zone administrator

Zone file

Dynamicupdates

1

2

Slaves(Distributed

Copies)

3

4

5

DNS Vulnerabilities DNS Vulnerabilities

AuthoritativeServer

RecursiveServer

( eg.ISP)

resolver

Zone administrator

Zone file

Dynamicupdates

1

2

Slaves( Distributed

Copies)

3

Server protection

4

5

Corrupting dataImpersonating master

Unauthorized updates

Cache impersonation

Cache pollution byData spoofing

Data protection

Altered zone data

russ.mundy@cobham.comruss.mundy@cobham.com

Authoritative ServerAdministrator

Recursive ServerAdministrator

EndUser

Simple IllustrationSimple Illustrationof DNS Componentsof DNS Components

ZoneData

AuthoritativeServer

RecursiveServer

Client

I need to have aWWW record

Add publish

1. Request www

4. www is 1.2.3.4

2. R

equest w

ww

3. w

ww

is 1.2

.3.4

Zone Administrator

russ.mundy@cobham.comruss.mundy@cobham.com

Authoritative ServerAdministrator

Recursive ServerAdministrator

EndUser

Simple AdditionSimple Additionof DNSSECof DNSSEC

(there are both much more and less complex setups than this)(there are both much more and less complex setups than this)

ZoneData

AuthoritativeServer

ValidatingRecursiveServer

Client

I need to have a signed WWW record

Add publish

1. Request www

4. www is 1.2.3.4

2. R

equest w

ww

3. w

ww

is 1.2

.3.4

SignedData

sign

Zone Administrator

new

Internationalised Domain Internationalised Domain NamesNames

United Arab Emirates United Arab Emirates ماراتماراتاا ..Saudi Arabia Saudi Arabia السعوديةالسعودية..Russian Federation .Russian Federation .рфрфEgypt Egypt مصرمصر..China .China . 中国 中国 and .and . 中國 中國Taiwan .Taiwan . 台灣 台灣 and .and . 台湾台湾Hong Kong Hong Kong .. 香港香港

Idns in RussiaIdns in Russia

The Affirmation of The Affirmation of CommitmentsCommitments

November, 1998 US DoC and ICANN sign MoUNovember, 1998 US DoC and ICANN sign MoU September 2006 MoU becomes a J.P.ASeptember 2006 MoU becomes a J.P.A PresidentPresident’’s Strategy Committee conducts outreach and s Strategy Committee conducts outreach and

consultations on Improving Institutional Confidence consultations on Improving Institutional Confidence May 2009 US Senate Committee hearings in DC, calling May 2009 US Senate Committee hearings in DC, calling

for permanent relationship between USG and ICANNfor permanent relationship between USG and ICANN June 2009 Meetings between DoC and ICANN June 2009 Meetings between DoC and ICANN

leadership at ICANN Sydney meetingleadership at ICANN Sydney meeting June - September 2009 Negotiations…June - September 2009 Negotiations… 30 September 2009, JPA ends30 September 2009, JPA ends 1 October 2009 Affirmation of Commitments signed1 October 2009 Affirmation of Commitments signed

4 reviews, 15 areas of 4 reviews, 15 areas of analysisanalysis

Accountability & Transparency

Accountability & Transparency

Security Stability Resiliency

Security Stability Resiliency

Competition Consumer trust

andchoice

Competition Consumer trust

andchoice

WHOISWHOIS

• Board governance

• GAC role & effectiveness

• Public input reception

• Support of ICANN decisions

• PdP• Implementation

recommend. previous reviews

• Board governance

• GAC role & effectiveness

• Public input reception

• Support of ICANN decisions

• PdP• Implementation

recommend. previous reviews

• DNS security stability resiliency

• Contingency planning

• Clear processes?

• DNS security stability resiliency

• Contingency planning

• Clear processes?

• Effects of new gTLDs: 3Cs

• Effectiveness of processes

• Effectiveness of safeguards

• Effects of new gTLDs: 3Cs

• Effectiveness of processes

• Effectiveness of safeguards

• Policy effectiveness

• Meeting needs of law enforcement.

• Promotion consumers trust

• Policy effectiveness

• Meeting needs of law enforcement.

• Promotion consumers trust

New gTLDsNew gTLDs

Adding new gTLDS is in the DNA of ICANNAdding new gTLDS is in the DNA of ICANN Early rounds; 2000 and 2002Early rounds; 2000 and 2002 Years of work in GNSO from 2005 to 2007 Years of work in GNSO from 2005 to 2007

culminates in recommendations to Board on culminates in recommendations to Board on principles behind addition of new TLDSprinciples behind addition of new TLDS

November 2007 Board asks staff to report on November 2007 Board asks staff to report on implementabilityimplementability

June 2008 Board instructs staff to implementJune 2008 Board instructs staff to implement October 2008 now; 4 draft Applicant October 2008 now; 4 draft Applicant

Guidebooks releasedGuidebooks released

New gTLDs- linguistic communitiesNew gTLDs- linguistic communities

New gTLDs- Geographic New gTLDs- Geographic

New gTLDs-missions, businessesNew gTLDs-missions, businesses

IPv4 depletion – IPv6 IPv4 depletion – IPv6 implementationimplementation

Internet is NOT Internet is NOT running running out of addressesout of addresses Current IPv4 protocol Current IPv4 protocol

assumed that 4 billion assumed that 4 billion addresses would be addresses would be enough, but . . .enough, but . . .

Last IPv4 batch now Last IPv4 batch now allocated to RIRsallocated to RIRs

IPv6 developed in IPv6 developed in 19961996 More than 340 trillion, More than 340 trillion,

trillion, trillion addresses trillion, trillion addresses availableavailable

32

ConclusionsConclusions

ICANN has the support of governments - all of ICANN has the support of governments - all of the G8 and most of the G20 are in the GACthe G8 and most of the G20 are in the GAC

ICANN emerged from the UNICANN emerged from the UN’’s WSIS/WGIG as s WSIS/WGIG as the preferred co-ordinator of these resourcesthe preferred co-ordinator of these resources

113 country code registry managers support the 113 country code registry managers support the ccSNO, and more are joiningccSNO, and more are joining

ICANN policies regulate the generic name ICANN policies regulate the generic name space, coordinate global addressing, and space, coordinate global addressing, and manage the technical parametersmanage the technical parameters

ICANN is one player in the Internet ecosystem.ICANN is one player in the Internet ecosystem.