<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=us-ascii"><meta name=Generator content="Microsoft Word 14 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:Consolas;
panose-1:2 11 6 9 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";
color:black;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
pre
{mso-style-priority:99;
mso-style-link:"HTML Preformatted Char";
margin:0in;
margin-bottom:.0001pt;
font-size:10.0pt;
font-family:"Courier New";
color:black;}
span.HTMLPreformattedChar
{mso-style-name:"HTML Preformatted Char";
mso-style-priority:99;
mso-style-link:"HTML Preformatted";
font-family:Consolas;
color:black;}
span.EmailStyle19
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.apple-converted-space
{mso-style-name:apple-converted-space;}
span.EmailStyle21
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body bgcolor=white lang=EN-US link=blue vlink=purple><div class=WordSection1><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>Hi Andrew,<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>I think before we start thinking about an IGF+ we need to be thinking about getting some kind of "formalization" (democratization etc.) in the MS processes that are at the core of the IGF etc. Until experiences like mine with the selection process for the ECWG are worked through and some determination is made as to what constitutes a "stakeholder" group and under what sort of governance/transparency/accountability structures those operate within I think it is seriously premature to be thinking about an IGF that is capable of working through to Soft Law or whatever. This isn't to say that we should be working in that direction but just to say that if the fundamentals aren't taken care of, everything that follows is suspect.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>M<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><div><div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in'><p class=MsoNormal><b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif";color:windowtext'>From:</span></b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif";color:windowtext'> bestbits-request@lists.bestbits.net [mailto:bestbits-request@lists.bestbits.net] <b>On Behalf Of </b>Andrew Puddephatt<br><b>Sent:</b> Sunday, August 25, 2013 7:38 PM<br><b>To:</b> bestbits@lists.bestbits.net<br><b>Subject:</b> [bestbits] RE: IGF plus<o:p></o:p></span></p></div></div><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><span lang=EN-GB style='font-family:"Calibri","sans-serif";color:#215968'>Hi everyone<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB style='font-family:"Calibri","sans-serif";color:#215968'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-GB style='font-family:"Calibri","sans-serif";color:#215968'>I’m collecting material and ideas for the debate on internet governance that is coming up. One of the option that has surfaced at previous meetings is that of an IGF plus – an IGF with powers to make Recommendations or Declarations – soft law in effect. I’m interested in whether anyone has written a paper on this or has an material relevant to the idea and how it would work in a multi-stakeholder environment (I’m assuming that, however constructed, any recommendations/declarations would require consensus among participants). Anything out there I’m not aware of?<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB style='font-family:"Calibri","sans-serif";color:#215968'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-GB style='font-family:"Calibri","sans-serif";color:#215968'>One model I’m interested in (in terms of mandate) is the World Health Organisation (WHO) which acts as <span style='background:white'>a coordinating body for global health policy which is then implemented by national and international health agencies. The WHO primarily makes recommendations and has no power to directly intervene in national health systems but is widely respected. It monitors threats to public health and has its own projects and programmes. But the WHO is governmental and frequently gets caught up in international geo-politics although there are now calls for it to become multi-stakeholder and involve philanthropic foundations, businesses, public/private partnerships and civil society.<o:p></o:p></span></span></p><p class=MsoNormal><span lang=EN-GB style='font-family:"Calibri","sans-serif";color:#215968;background:white'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-GB style='font-family:"Calibri","sans-serif";color:#215968;background:white'>Any thoughts at this stage are most welcome.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB style='font-family:"Calibri","sans-serif";color:#215968;background:white'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-GB style='font-family:"Calibri","sans-serif";color:#215968;background:white'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-GB style='font-family:"Calibri","sans-serif";color:#215968;background:white'><o:p> </o:p></span></p><p class=MsoNormal style='margin-bottom:12.0pt'><span lang=EN-GB style='font-family:"Calibri","sans-serif";color:#215968;background:white'>And I guess a lot of you have seen this piece from the Financial Times re the surveillance issue and a proposal from the IETF</span><span lang=EN-GB style='font-family:"Arial","sans-serif"'><br><br></span><span lang=EN-GB style='color:windowtext'><o:p></o:p></span></p><p class=MsoNormal style='line-height:13.5pt'><i><span lang=EN-GB style='font-family:"Calibri","sans-serif"'>Key architects of the internet have started to fight back against <a href="http://www.ft.com/intl/cms/s/0/a56b054e-fa58-11e2-98e0-00144feabdc0.html?siteedition=intl" title="US spying comes under fresh attack"><span style='color:#2E6E9E'>US and UK snooping programmes</span></a> by drawing up an ambitious plan to defend traffic over the world wide web against mass surveillance. The <a href="http://www.ietf.org/" title="The Internet Engineering Task Force (IETF) - official site"><span style='color:#2E6E9E'>Internet Engineering Task Force</span></a>, a body that develops internet standards, has proposed a system in which all communication between websites and browsers would be shielded by encryption. In practical terms that would be akin to extending the sort of secure communications that banks and retailers like <a href="http://markets.ft.com/tearsheets/performance.asp?s=us:AMZN"><span style='color:#2E6E9E'>Amazon</span></a> use to protect their customers across the world wide web. While <a href="http://www.ietf.org/proceedings/87/slides/slides-87-httpbis-3.pdf" title="IETF slides on HTTP and encryption - Ietf.org"><span style='color:#2E6E9E'>the plan</span></a> is at an early stage, it has the potential to transform a large part of the internet and make it more difficult for governments, companies and criminals to eavesdrop on people as they browse the web. At present, only a fraction of all websites – typically those that handle financial information – encrypt data when communicating with web browsers.<o:p></o:p></span></i></p><p class=MsoNormal style='line-height:13.5pt'><i><span lang=EN-GB style='font-family:"Calibri","sans-serif"'><o:p> </o:p></span></i></p><p class=MsoNormal style='line-height:13.5pt'><i><span lang=EN-GB style='font-family:"Calibri","sans-serif"'>“There has been a complete change in how people perceive the world” since whistleblower Edward Snowden disclosed the extent of US surveillance programmes earlier this summer, said Mike Belshe, a software engineer and IETF member who helped develop <a href="http://markets.ft.com/tearsheets/performance.asp?s=us:GOOG"><span style='color:#2E6E9E'>Google</span></a> web browser Chrome. “Not having encryption on the web today is a matter of life and death,” he said.<o:p></o:p></span></i></p><p class=MsoNormal style='line-height:13.5pt'><i><span lang=EN-GB style='font-family:"Calibri","sans-serif"'><o:p> </o:p></span></i></p><p class=MsoNormal style='line-height:13.5pt'><i><span lang=EN-GB style='font-family:"Calibri","sans-serif"'>The IETF push for greater use of encryption comes alongside calls from top internet and privacy groups for fundamental reforms of the laws governing the web. In a letter to the FT published this weekend, top groups including web founder Tim Berners Lee’s World Wide Web Foundation call for a “reform of the status quo” online. “Online privacy is being eroded at a breakneck speed by blanket surveillance, and unless steps to reform are taken immediately, the notion of free and secure online communications will be relegated to the annals of history,” they write. “Blanket government surveillance by default, with laws enforced in secret, will always be unacceptable.” <o:p></o:p></span></i></p><p class=MsoNormal style='line-height:13.5pt'><i><span lang=EN-GB style='font-family:"Calibri","sans-serif"'><o:p> </o:p></span></i></p><p class=MsoNormal style='line-height:13.5pt'><i><span lang=EN-GB style='font-family:"Calibri","sans-serif"'>The IETF, which operates through the “rough consensus” of its members, has been instrumental in shaping the technical infrastructure of the web since it was founded in 1986. While the body cannot force the adoption of its standards, it is highly influential and its membership includes employees of the world’s biggest internet companies including <a href="http://markets.ft.com/tearsheets/performance.asp?s=us:GOOG"><span style='color:#2E6E9E'>Google</span></a>, <a href="http://markets.ft.com/tearsheets/performance.asp?s=us:MSFT"><span style='color:#2E6E9E'>Microsoft</span></a> and <a href="http://markets.ft.com/tearsheets/performance.asp?s=us:AAPL"><span style='color:#2E6E9E'>Apple</span></a>. But at its conference in Berlin this month, IETF members reached “nearly unanimous consensus” on the need to build encryption into the heart of the web, said Mark Nottingham, a developer who chairs the IETF working group on HTTP, a data access protocol that underpins the web. “There are a lot of people who want this to happen,” he said. <o:p></o:p></span></i></p><p class=MsoNormal style='line-height:13.5pt'><i><span lang=EN-GB style='font-family:"Calibri","sans-serif"'><o:p> </o:p></span></i></p><p class=MsoNormal style='line-height:13.5pt'><i><span lang=EN-GB style='font-family:"Calibri","sans-serif"'>Mr Nottingham cautioned that it was “very early days” and said the proposal would need to undergo extensive discussion within the broad web community before it could be implemented. Exactly how the plan would work has yet to be decided.<o:p></o:p></span></i></p><p class=MsoNormal style='line-height:13.5pt'><i><span lang=EN-GB style='font-family:"Calibri","sans-serif"'><o:p> </o:p></span></i></p><p class=MsoNormal style='line-height:13.5pt'><i><span lang=EN-GB style='font-family:"Calibri","sans-serif"'>But at present the idea is to mandate the use of <a href="http://www.ft.com/intl/cms/s/0/d2e6a89c-5a0d-11de-b687-00144feabdc0.html" title="Data fills the airwaves – who is listening ?"><span style='color:#2E6E9E'>Transport Layer Security</span><span style='color:#2E6E9E;text-decoration:none'> </span></a>(TLS), a cryptographic protocol, in the next version of HTTP, which is planned for 2014. It would then be up to companies behind web browsers and web servers to put the new standards into practice. <o:p></o:p></span></i></p><p class=MsoNormal style='line-height:13.5pt'><i><span lang=EN-GB style='font-family:"Calibri","sans-serif"'>Google and Twitter are among several big companies that have <a href="http://lists.w3.org/Archives/Public/ietf-http-wg/2012JulSep/0250.html" title="Twitter on Transport Layer Security - lists.w3.org"><span style='color:#2E6E9E'>long called for</span></a> more encryption of web traffic. Chrome, Google’s popular web browser, already allows people to <a href="https://www.eff.org/https-everywhere" title="HTTPS Everywhere - EFF.org"><span style='color:#2E6E9E'>encrypt their activity</span></a> when browsing any of the company’s websites.<o:p></o:p></span></i></p><p class=MsoNormal style='line-height:13.5pt'><i><span lang=EN-GB style='font-family:"Calibri","sans-serif"'>However, security experts said that while TLS encryption would make surveillance more difficult, it was far from foolproof.<o:p></o:p></span></i></p><p class=MsoNormal style='line-height:13.5pt'><i><span lang=EN-GB style='font-family:"Calibri","sans-serif"'><o:p> </o:p></span></i></p><p class=MsoNormal style='line-height:13.5pt'><i><span lang=EN-GB style='font-family:"Calibri","sans-serif"'>“If you’re looking for a silver bullet to make people’s personal traffic impossible to break, this won’t be it,” said Sam Curry, chief technologist at RSA, a computer security company. Hackers, especially those with substantial computing power, would find ways to crack the encryption or get around it by exploiting other vulnerabilities in the network, he said. Nonetheless, he added: “Anything that improves trust in the digital world is a noble aim.”<o:p></o:p></span></i></p><p class=MsoNormal><i><span lang=EN-GB style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></i></p><p class=MsoNormal><span lang=EN-GB style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-GB style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><div><p class=MsoNormal style='margin-top:7.0pt;line-height:115%;text-autospace:none'><b><span lang=EN-GB style='font-size:11.0pt;line-height:115%;font-family:"Arial","sans-serif";color:#253741'>Andrew Puddephatt</span></b><b><span lang=EN-GB style='font-size:11.0pt;line-height:115%;font-family:"Arial","sans-serif"'> </span></b><span lang=EN-GB style='font-size:11.0pt;line-height:115%;font-family:"Arial","sans-serif"'>| </span><b><span lang=EN-GB style='font-size:11.0pt;line-height:115%;font-family:"Arial","sans-serif";color:#253741'>GLOBAL PARTNERS</span></b><span lang=EN-GB style='font-size:11.0pt;line-height:115%;font-family:"Arial","sans-serif";color:#253741'> DIGITAL<o:p></o:p></span></p><p class=MsoNormal style='line-height:115%;text-autospace:none'><span lang=EN-GB style='font-size:10.0pt;line-height:115%;font-family:"Arial","sans-serif";color:#253741'>Executive Director</span><span lang=EN-GB style='font-size:11.0pt;line-height:115%;font-family:"Arial","sans-serif";color:#FF2126'><o:p></o:p></span></p><p class=MsoNormal style='line-height:115%;text-autospace:none'><span lang=EN-GB style='font-size:10.0pt;line-height:115%;font-family:"Arial","sans-serif";color:#7F7F7F'>Development House, 56–64 Leonard Street, London EC2A 4LT<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB style='font-size:10.0pt;font-family:"Arial","sans-serif";color:#7F7F7F'>T: +44 (0)20 7549 0336 | M: +44 (0)771 339 9597 | Skype: andrewpuddephatt</span><span lang=EN-GB style='font-size:11.0pt;font-family:"Arial","sans-serif";color:#7F7F7F'><br><b>gp-digital.org</b><o:p></o:p></span></p></div><p class=MsoNormal><span lang=EN-GB style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p></div></body></html>