[governance] "Oversight"

[Norbert Bollow]

John Curran <jcurran at istaff.org> wrote:
> > On Monday, June 4, 2012, John Curran <jcurran at istaff.org> wrote:
> > > Indeed, ICANN can remove entire top-level-domains (such as a ccTLD)
> > > That is going to be the case for some entity no matter how you set up
> > > Internet governance in this area.
> >
> > What if the authority to take such decision was shared among
> > different entities?
> 
> The implementation of such a decision will ultimately occur within a single
> entity, which will exist within the territory of a nation state somewhere.

As long as DNSSEC is not changed from its current specification, I
agree.

However the DNSSEC specification could be changed to allow for
several logically independent signatures per zone, each of
which can be present or not, with the semantics that the zone shall be
considered validly signed if more than half of the expected signatures
are there.

For the root zone I would then propose that it would be reasonable
to have five root zone signing keys.

Each of those root zone signing keys would be entrusted to an
organization on a different continent, with these five organizations
chosen to be as trustworthy as possible, and as independent of each
other as possible, and each protected as well as possible by means of
a suitable host country agreement from legal demands to act contrary
to the agreed procedures for root zone management.

Greetings,
Norbert

-------------- next part --------------
____________________________________________________________
You received this message as a subscriber on the list:
     governance at lists.igcaucus.org
To be removed from the list, visit:
     http://www.igcaucus.org/unsubscribing

For all other list information and functions, see:
     http://lists.igcaucus.org/info/governance
To edit your profile and to find the IGC's charter, see:
     http://www.igcaucus.org/

Translate this email: http://translate.google.com/translate_t