Minutes of the 2024-09-18 IAB Business Meeting 1. Administrivia 1.1. Attendance Present: Matthew Bocci Alissa Cooper Roman Danyliw (IETF Chair) Dhruv Dhody Liz Flynn (IETF Secretariat) Wes Hardaker Cullen Jennings Suresh Krishnan Cindy Morgan (IAB Executive Administrative Manager) Ryan Polk (ISOC Liaison) Tommy Pauly (IAB Chair) Alvaro Retana Sabrina Tanamal (IANA Liaison) Christopher Wood Greg Wood Qin Wu Regrets: Mirja Kühlewind Colin Perkins (IRTF Chair) David Schinazi John Scudder (IESG Liaison) Observers: Warren Kumari 1.2. Agenda bash and announcements 1.3. Meeting Minutes The following meeting minutes were approved: • 2024-09-04 business meeting - (submitted 2024-09-04) 1.4. Action Item Review Done: • 2024-09-04: Cindy Morgan to subscribe Cullen Jennings to the IETF- W3C Coordination list. • 2024-09-04: Alissa Cooper to ask Mallory Knodel to put her in touch with the people who wrote the rejoinder to the GDC open letter. On Hold: • 2023-06-07: Dhruv Dhody and Wes Hardaker to track adding IAB review of proposed WG charters to the Datatracker. See https://github.com/ietf-tools/datatracker/issues/5849 • 2024-04-17: Cindy Morgan to update the timeline for the 2025 ICANN NomCom Liaison appointment once the list of positions being filled is available. • 2024-06-24: Dhruv Dhody to coordinate a panel or other activity for APRICOT 2025/APNIC 59. - Check back October 2024 In Progress: • 2024-03-17: Liaison Managers to follow up with Martin Thomson about liaison manager for W3C. • 2024-06-12: Mirja Kühlewind to work with Wes Hardaker on prioritizing the current list of IAB requests for the Tools Team. • 2024-06-25: 2024-06-24: Suresh Krishnan to draft a document obsoleting RFC 3113 (Update RFC3113 to in only high level details of the collaboration (3GPP-IETF co-ordination team) and move the details to a Wiki. Remove references to technology and org structure items that will become out of date quickly. • 2024-06-26: Suresh Krishnan, Warren Kumari, Dhruv Dhody, and Éric Vyncke will work on text around limited domains. • 2024-09-04: Liaison Coordinators to update RFC 4052 to improve documentation about liaison relationships. • 2024-09-04: Suresh Krishnan to provide contacts for the people at Cisco working on Tesla Transport Protocol over Ethernet (TTPoE). New: • 2024-09-18: Cindy Morgan to update the NEMOPS Workshop page in the Datatracker and send out the call for papers. • 2024-09-18: Alissa Cooper to reach out to contacts at ANSI and ask for more information on the upcoming ANSI Consortia Roundtable. • 2024-09-18: Suresh Krishnan to reach out to Stephen Farrell about possible guest speakers for IAB Open. Done: 1.5. IAB Document Status Update - No Updates This Week Datatracker: https://datatracker.ietf.org/stream/iab/ • draft-iab-bias-workshop-report-02 Sent to the RFC Editor : Informational IAB Shepherd: Suresh Krishnan • draft-edm-protocol-greasing-03 Maintaining Protocols Using Grease and Variability I-D Exists, IAB stream IAB Shepherd: Not assigned 1.6. IAB Review of WG Charters Datatracker: https://datatracker.ietf.org/group/chartering/ • Getting Ready for Energy-Efficient Networking (GREEN) Area: OPS Internal Review IESG Telechat: (2024-09-19) IAB Reviewer: Alvaro Retana • MODeration PrOceDures (MODPOD) Area: GEN Internal Review IESG Telechat: (2024-09-19) IAB Reviewer: Qin Wu (Review sent 2024-09-11) • Secure Shell Maintenance (SSHM) Area: SEC External Review IESG Telechat: (2024-09-19) IAB Reviewer: Cullen Jennings (Review sent 2024-09-06) 1.7 IAB Appointments • IRTF Chair - Call for Nominations ended 2024-09-10 Cindy Morgan reminded members of the interview committee to fill out a Doodle for interview scheduling. 2. Monthly Written Reports and Other Brief Updates 2.1 EC Multi-stakeholder Platform for ICT Standardisation Report --Begin EC Multi-stakeholder Platform for ICT Standardisation Report, Mat Ford and Olaf Kolkman-- EC Multi-stakeholder Platform for ICT Standardisation, Meeting 41 Thursday 12th September, 2024 Rolling Plan 2025 The Task Force Rolling Plan is now preparing the Rolling Plan 2025. Input related to IETF/IRTF activity aligned with the EU standardisation policy agenda is captured on the wiki. Updates in this iteration include: - updated to reflect RP2025 structural changes - added updated text on RP Actions - updated references to relevant IETF work including §3.0.2 pquip, §3.0.3 dult, §3.1.2 wimse, §3.1.4 lwig, §3.1.5 spice The deadline for submission of inputs to the Rolling Plan 2025 is September 20th. Standardisation needs for the eIDAS 2.0 Regulation The meeting received a presentation from Stavros Kounis (Enterprise Architect, European Commission) on standardising the EU digital identity wallet ecosystem. They need to reference Technical Specifications (TS, from non- recognised SDOs, including IETF) in their Implementing Acts. EUDI Wallet Architectural Reference Framework currently includes reference to 9 RFCs and 2 Internet-Drafts. Two of these documents have been through the MSP identification process previously. [diagram] [diagram] Implementing Acts will be published in November 2024, March 2025 and May 2025. They can be re-opened and updated annually when new standards and TS become eligible and ready for reference The meeting discussed the suitability of the MSP process to assess TS for eligibility to reference in Implementing Acts. The MSP identification process was put on hold in 2017. In light of the requirements arising from recent legislation, the EC is discussing with their Secretariat General how to proceed in a more efficient way and will try to resume the identification process. The identification process is necessary to demonstrate that recognising TS from a non-recognised SDO will not create a technical barrier to trade. The identification process does not judge technical quality - simply assesses conformance with the Annex 2 criteria of Regulation (EU) No 1025(2012). We (Mat & Olaf) will contact Stavros directly to offer our support. Integrating Human Rights in ICT standardisation The EC presented some considerations relating to integration of ‘EU values’, human rights and ICT Standardisation. Reference was made to the IRTF Human Rights Protocol Considerations Research Group and RFC 8280. Interventions were made to clarify that RFC8280 is output of the IRTF, that the IRTF is a research organisation and as such it does not develop standards of any kind. The meeting’s attention was also drawn to the soon-to-be- published draft-irtf-hrpc-guidelines (actually published as RFC9620 later the same day). Next meeting The next meeting of the platform is foreseen in February 2025 although no date has been finalised at this time. A workshop on cloud interoperability is in planning for the margins of next MSP meeting. --End EC Multi-stakeholder Platform for ICT Standardisation Report, Mat Ford and Olaf Kolkman-- 2.2 IANA Liaison Report --Begin IANA Liaison Report, Sabrina Tanamal-- IANA Services Liaison Report – 18 September 2024 SLA Deliverables Update: ICANN met 100% of processing goal times for the August 2024 monthly statistics report, exceeding the SLA goal to meet 90% of processing goal times. These times include the steps that ICANN has control over and not time it is waiting on requesters, document authors or other experts. Monthly reports can be found at: https://www.iana.org/performance/ietf-statistics Other News: The IETF-IANA Group Meeting was held on 10 September 2024. Meeting minutes will be available at a future IAB Business meeting. --End IANA Liaison Report, Sabrina Tanamal-- 2.3 IRTF Chair Report --Begin IRTF Chair Report, Colin Perkins-- IRTF Chair report to the IAB for the month ending 2024-09-12 Research Groups Discussing ongoing around potential research groups relating to space networking and sustainability. HRPC rechartering remains on hold. ANRP Expect talks by Sawsan El-Zahr and Mingshi Wu at IETF 121 in Dublin. Planning for ANRP in 2025 is ongoing with nominations due to open later this month. ANRW Planning for ANRW 2025 is ongoing. Finalising the closing report on ANRW 2024. Documents and Errata In RG Last Call: draft-irtf-nmrg-ai-challenges draft-irtf-cfrg-dnhpke draft-perkins-irtf-code-of-conduct Waiting for IRTF Chair: draft-irtf-cfrg-opaque Revised I-D Needed draft-irtf-iccrg-rledbat draft-irtf-coinrg-use-cases IRSG Review: draft-fluhrer-lms-more-parm-sets Revised I-D Needed draft-irtf-cfrg-kangarootwelve draft-irtf-cfrg-aead-properties draft-irtf-nmrg-green-ps Sent to the RFC Editor: draft-irtf-hrpc-guidelines AUTH48 Other Activities Diversity travel grants for IETF 121 in Dublin announced, with eight awards being made (3 female; awardees from Middle East, South America x2, Africa x2, Europe x2, and North America). IRTF Code of Conduct is in last call. Discussion of an IRTF conflict of interest policy is ongoing. --End IRTF Chair Report, Colin Perkins-- 2.4 ISOC Liaison Report --Begin ISOC Liaison Report, Ryan Polk-- Internet Society Liaison Report - September 2024 Ryan Polk, Internet Society Liaison to the Internet Architecture Board Policy Development Process: A Policy Framework for Internet Intermediaries The Internet Society developed a draft Policy Framework for Internet Intermediaries. This is an output of our 2024 Action Plan project, Guiding Constructive Internet Policy, where the Internet Society explores policy principles and gather insights on intermediary protections or liability from around the world. Our work in this area is in response to increasing limits to or conditions on intermediary liability protections, which could negatively affect the Internet ecosystem. The draft document is available for comment as part of the Internet Society’s Policy Development Process until 11 October 2024. Please find links to the document and the form to share your feedback, here: [link redacted] US White House Releases Routing Security Roadmap In early September, the White House Office of the National Cyber Director (ONCD) released its Roadmap to Enhancing Internet Routing Security. Overall, the Roadmap is quite good. The roadmap focuses on recommendations for the Federal Government to improve its own networks and some recommendations for best practices for industry. Importantly, the Roadmap avoids suggesting top-down mandates for the private sector. The threat of top-down regulation is the concern we still have for the FCC’s forthcoming rules on BGP security. We are hopeful that this Roadmap can act as a counterweight to any inclinations from the FCC (or others in the administration) to make top-down rules for routing security. The roadmap also puts into motion the process to require that any operator that provides network services to the federal government must follow strong routing security practices for those services. This will be good for the Federal government, but perhaps even more importantly it will set a strong example for major private network service customers (like major non-tech corporations) to demand good routing security practices in the services those customers acquire. The Internet Society engaged with ONCD for over a year to provide input into the development of the Roadmap. The Internet Society is happy with the outcome. Additionally, it seems like most of the experts from the private sector are also happy with the roadmap as well. Please let Ryan Polk (polk@isoc.org) and John Morris (morris@isoc.org) know if you have any questions about the new roadmap or the state of play on routing security in the US. 4th Annual Global Encryption Day – 21 October 2024 On October 21st, the Global Encryption Coalition will host its 4th annual Global Encryption Day, a Global Day of Action to promote and defend the use of strong encryption around the world. As part of the Global Encryption Day, over fifty organizations will be hosting local events. In past years, these local events have included policy workshops, technical trainings, and even street protests in support of encryption. GEC will also host its 2nd Encryption Summit: Encrypting today to safeguard tomorrow. With encryption facing some of its strongest challenges, including potentially threatening regulations in the European Union, this year is more important than ever for the community to stand up for encryption. If anyone on the Internet Architecture Board would like to learn more about Global Encryption Day 2024 and how to get involved, please email Paula Bernardi (bernardi@isoc.org) or Sebastian Schonfeld (schonfeld@isoc.org). UN Summit for the Future – 22-23 September 2024 The Summit of the Future (SotF) will take place from 22-23 September 2024, where head of governments and states will consider the Pact of the Future, to which the Global Digital Compact (GDC) will be annexed. At this stage, the GDC is still being negotiated by a small number of governments who have expressed that they are not prepared to adopt the fourth revision of the GDC. We understand that if the document is not adopted during the Summit of the Future, that the GDC may be passed to the United Nations General Assembly, to be adopted as a stand alone resolution, which will not require consensus. The Internet Society plan to attend the SotF to closely monitor the developments around the GDC and will report back to the IAB regarding the outcomes. --End ISOC Liaison Report, Ryan Polk-- 2.5 IAB Outreach Coordinator Report --Begin IAB Outreach Coordinator Report, Dhruv Dhody-- There were no outreach activities by the IAB this month. Some "individuals" participated in outreach: - Mirja participated in a panel and joined the task force for the German ministry for digitals (BMDV). - Mirjam participated in APNIC 58 and Africa Internet Summit panels. Some key upcoming events of importance are: - Summit of Future in NYC (Sept 2024) (GDC) - ITU-WTSA/GSS in New Delhi (Oct 2024) (Roman) - ANSI Consortia Roundtable in DC (Oct 2024) (?) - inSIG in Bangalore (Oct 2024) (Dhruv) - Grace Hopper in Philadelphia (Oct 2024) IAB NEMOPS workshop outreach plan - NANOG92 and ARIN54 in Toronto (Oct 2024) (Qin, Warren, Kent) - RIPE89 in Prague (Oct 2024) (Benoit, Med) - LACNIC42/LACNOG, Paraguay (Oct 2024) (Benoit) - AutoConn2 in Denver (Nov 2024) (Mahesh) - APRICOT2025/APNIC59 (Dhruv) - NANOG93 (Suresh) News: - IAB decided to participate in APRICOT2025/APNIC59 in Feb 2025. The venue is moved from Dhaka to a yet-to-be-announced location. - We still need to shortlist an internet governance event for 2025 (IGF 2025, ICANN events, WSIS+20,...) --End IAB Outreach Coordinator Report, Dhruv Dhody-- 2.6 Tools Liaison Report --Begin Tools Liaison Report, Wes Hardaker-- Here are some notes from yesterday’s tools team meeting. Full official meeting agenda/minutes: https://notes.ietf.org/tools-team-20240910 E-Mail processing - Proper evaluation of SES header rewriting of mail headers for DKIM/DMARC underway - it’s a problem and no immediate solutions available - will cause a significant delay zulip upgrade - staying on the version 8.x series even though 9.x releases have been started meetecho update - the LLC is moving some meetecho functionality to meetecho.ietf.org - datatracker integration coming - note: meetecho player is open sourced - past recording links will be there for example - this is an advantage over youtube as you get syncronized chat/etc - example recordings from 120: https://www.meetecho.com/ietf120/recordings/ Datatracker notes - lots of bot DDoS attacks that are slipping through cloudflare - fortunately most are short lived - blocking things as they come right now - whack-a-mole though - in general the IT transition projects are definitely over the critical hump Accessibility report of HTML and SVG for RFCs - detailed report (37 pages) - blog post to be published (very) shortly - next will be guidelines for authors - right now many HTML’s are inside html PRE blocks - these will need a significant amount of work to get fixed (likely will need grant funding) --End Tools Liaison Report, Wes Hardaker-- 2.7 ICANN Liaison Report --Begin ICANN Liaison Report, Harald Alvestrand-- 2024-09-18 ICANN report This report covers the time from mid-August to Mid-September 2024, which includes the ICANN Board workshop in Los Angeles. Changes in the Board There have been a number of changes announced in the board. All of these (with one exception) are effective as of the end of the next ICANN meeting in Istanbul, November 2024. - Harald Alvestrand is being replaced by David Lawrence (decision by IAB) - Danko Jevtovic and Edmund Chung are being replaced by Amitabh Singhal and Miriam Sapiro (decision by Nomcom) - Katrina Saki has resigned from the board, citing “personal reasons”, effective immediately. The ccNSO is running a rather slow process to name a replacement. Tripti Sinha (nomcom) and Alan Barrett (ASO) also had terms ending, but were reappointed. New CEO Starting date is now confirmed as December 9. Kurtis will be in Istanbul at the ICANN meeting from Saturday to Monday - this is a chance for the community to meet with him. RDRS (“WHOIS for non-public data”) The number of requests into this system has leveled off - to less than 200 queries per month. That’s not enough to show that it’s worth doing. The most stark statistic presented is the disparity between registrars - one registrar is giving positive responses to almost 50% of the requests so far; another is rejecting all but a small fraction of requests. This points to policy differences between registrars being a major reason for unhappiness among the people querying the system. Apparently Interpol is running a very similar system for their members, which has been developed without public scrutiny - some registrars would rather handle requests under a system that’s been developed in public; that may be a reason to continue the effort. So far, the operating period for the RDRS pilot is 2 years, but we’ll see what happens then. New gTLD program Because of Google’s role as a registrar, I have been asked to recuse myself here, so I don’t have any non-public information to share. It’s public information that the Applicant Support Program (ensuring that applicants from underserved regions can afford to apply for new gTLDs) is worrying people (governments represented in the GAC among them) - mostly they want to be sure that good applications all get funded; the fact that ICANN can’t commit to an unbounded expense bothers them - but the community understands that. This topic won’t go away until all the applications are in. Review Redesign - Holistic Review Pilot The system of reviews set up in the bylaws has been cumbersome, expensive and with results of limited usefulness - but is an important part of accountability. The Holistic Review proposal is to replace it with a review cycle that looks at the whole of ICANN; the pilot (with a review team of 16 people from SO/AC backing it) is trying to make a reasonably lean process, drawing on internal ICANN resources rather than hiring externals. Budget matters It looks like the cuts in June and associated cost-saving measures were enough to bring expense projections into rough alignment with income projections. But disciplining the organization into ensuring stuff is delivered “on time and within budget” is still a task that is far from completed. Legal matters The lawsuit by an ex-employee continues. Lawsuits of this type usually take up to 5 years until they’re finally resolved; it is not a fast process. Next meetings The board has given the go-ahead to meet in Muscat, Oman for the fall 2025 meeting (following Istanbul, Seattle, and Prague). Beyond that, all meetings are still “TBD” (“negotiations are not public yet” - staff is working hard to push the planning cycle out longer, because that usually means we’re able to do it for less). --End ICANN Liaison Report, Harald Alvestrand-- 3. AI Control Workshop Update Suresh Krishan reported that the AI Control Workshop begins tomorrow (2024-09-19) and it will be completely full. IAB members attending are Suresh Krishnan, Alissa Cooper, and Mirja Kühlewind. 4. NEMOPS Workshop Update The IAB agreed to finalize the workshop description and Cindy Morgan will send out the call for papers. 5. ANSI Consortia Roundtable Jay Daley received an invitation to an ANSI Consortia Roundtable on October 17, 1-3 pm ET in Washington DC and forwarded it to the IAB. Alissa Cooper will reach out to ANSI for more information so the IAB can determine if participation would be useful. 6. IAB Open Meeting at IETF 121 Matthew Bocci volunteered to co-chair the IAB Open session at IETF 121. Suresh Krishnan will reach out to Stephen Farrell for input on a locally relevant speaker. 7. Next IAB Meeting The next IAB meeting will be a technical discussion on Censorship Measurements on 2024-09-25.