[dns-wg] Fwd: Remote session on NIS2 Directive: Video and slides

[Chris Buckridge]

Dear DNS Working Group participants,

The RIPE Cooperation Working Group held a session earlier last week to discuss 
some of the issue surrounding the EU’s recent legislative proposal for a 
revised directive on security of networks and information services (often 
referred to as NIS2).

It was noted in the discussion that these issues would be of interest to some 
of the DNS Working Group members, so I am sharing below a link to the archived 
video, slides and some notes on the session.

As noted, the RIPE NCC intends to respond to the current European Commission 
open consultation (which closes on 18 March), and we will share that response 
to the community.

Best regards,
Chris

> Begin forwarded message:
> 
> From: Chris Buckridge mailto:chr...@ripe.net>>
> Subject: [cooperation-wg] Remote session on NIS2 Directive: Video and slides
> Date: 11 March 2021 at 15:32:50 CET
> To: RIPE Cooperation Working Group  <mailto:cooperation...@ripe.net>>
> 
> Dear Working Group,
> 
> Following up on the remote session held on 9 March dedicated to discussion of 
> the EU NIS2 Directive, we have published video of the Zoom session, minutes 
> from the session (including relevant links), and the slides from Marco’s 
> presentation:
> https://www.ripe.net/participate/ripe/wg/active-wg/coop/remote-sessions/remote-session-9-march-2021
>  
> <https://www.ripe.net/participate/ripe/wg/active-wg/coop/remote-sessions/remote-session-9-march-2021>
> 
> I mentioned during the session the input of various colleagues in pulling 
> this information together - I accidentally failed to note the input of our 
> Senior Legal Counsel Maria Stafyla. I reference it now both to acknowledge 
> her efforts, but also to confirm that with her input, this presentation 
> reflects our best understanding of the legal situation (as well as the 
> political and policy dimensions).
> 
> We will share our response to the current consultation in a separate note.
> 
> Best regards,
> 
> Chris Buckridge
> Head of External Relations
> RIPE NCC




signature.asc
Description: Message signed with OpenPGP

Re: [dns-wg] DNS4EU?

[Chris Buckridge]

Hi Hank, all,

I don’t have a lot that I can add to what Nick and Stephane have already 
posted. But I will note that the European Commission has scheduled one of the 
regular meetings of its High Level Group on Internet Governance (HLIG) for this 
Wednesday; portions of those meeting agendas are generally open to industry 
stakeholders, and Wednesday’s agenda includes an update on DNS4EU.

The information page for the HLIG is here:
https://ec.europa.eu/transparency/expert-groups-register/screen/expert-groups/consult?lang=en&groupId=2450&fromMeetings=true&meetingId=23922

It’s not clear whether registration for the meeting is still open at this 
point, but minutes are published publicly, and the RIPE NCC can report back to 
this working group if there are any updates of note.

Best regards,
Chris

> On 8 Nov 2021, at 14:15, Stephane Bortzmeyer  wrote:
> 
> On Mon, Nov 08, 2021 at 07:12:38AM +0200,
> Hank Nussbacher  wrote
> a message of 34 lines which said:
> 
>>   Does anyone have further insight into the European initiative
>>   known as DNS4EU?
> 
> There is very little actual information published on this project.
> 
> According to some rumors, it would be a public DNS resolver, with
> built-in censorship (for the laws of 27 countries).
> 
> dns4eu.eu has been registered by DG Connect
> 
> 
> 
> 



signature.asc
Description: Message signed with OpenPGP

Re: [dns-wg] DNS4EU?

[Chris Buckridge]

Hi Hank, all,

A number of us from the RIPE NCC (and others from the RIPE community) were in 
yesterday’s HLIG meeting.

There was a presentation on DNS4EU, and I’m trying to track down those slides 
and whether they’ll be made public - at this point, there’s nothing on the 
site, but we’ll certainly share any slides (or a public report on the meeting) 
when they become available.

The significant output was that the Commission expects to have a public Call 
for Proposals around the end of this year, as part of Connecting Europe 
Facility (CEF 2) programme, for an EU-governed public DNS resolver service. 
Obviously the CfP will contain more detail when it is made public.

This is also in line with the Commission’s statement back in June 2021 in 
section 1.6 of this document:
https://data.consilium.europa.eu/doc/document/ST-10137-2021-ADD-1/en/pdf

In the meantime, others may be able to share insights, and we will share links 
to public documents from yesterday’s session as we obtain them.

Cheers
Chris


> On 11 Nov 2021, at 07:29, Hank Nussbacher  wrote:
> 
> On 08/11/2021 15:54, Chris Buckridge wrote:
> 
> Anyone here attend yesterday's HLIG meeting and can share a presentation or 
> meeting notes?
> 
> Thanks,
> Hank
> 
>> Hi Hank, all,
>> 
>> I don’t have a lot that I can add to what Nick and Stephane have already 
>> posted. But I will note that the European Commission has scheduled one of 
>> the regular meetings of its High Level Group on Internet Governance (HLIG) 
>> for this Wednesday; portions of those meeting agendas are generally open to 
>> industry stakeholders, and Wednesday’s agenda includes an update on DNS4EU.
>> 
>> The information page for the HLIG is here:
>> 
>> https://ec.europa.eu/transparency/expert-groups-register/screen/expert-groups/consult?lang=en&groupId=2450&fromMeetings=true&meetingId=23922
>> 
>> 
>> It’s not clear whether registration for the meeting is still open at this 
>> point, but minutes are published publicly, and the RIPE NCC can report back 
>> to this working group if there are any updates of note.
>> 
>> Best regards,
>> Chris
>> 
>> 
>>> On 8 Nov 2021, at 14:15, Stephane Bortzmeyer 
>>>  wrote:
>>> 
>>> On Mon, Nov 08, 2021 at 07:12:38AM +0200,
>>> Hank Nussbacher
>>> 
>>>  wrote
>>> a message of 34 lines which said:
>>> 
>>> 
>>>>   Does anyone have further insight into the European initiative
>>>>   known as DNS4EU?
>>>> 
>>> There is very little actual information published on this project.
>>> 
>>> According to some rumors, it would be a public DNS resolver, with
>>> built-in censorship (for the laws of 27 countries).
>>> 
>>> dns4eu.eu has been registered by DG Connect
>>> 
>>> <https://en.wikipedia.org/wiki/Directorate-General_for_Communications_Networks,_Content_and_Technology>



signature.asc
Description: Message signed with OpenPGP

Re: [dns-wg] DNS4EU?

[Chris Buckridge]

Hi Hank, all,

Apologies for the delay here - was hoping to have some more substantial 
information, but in the absence of that, our colleagues at the European 
Commission have been able to share the content of the four slides that they 
delivered at last month’s HLIG meeting.

The slides were as follow:

1. DNS Resolution Markets: Problems
* Consolidation (+DoH)
* Incidents affecting large DNS resolvers
* Data Protection Rights
* Prevention of Cyberattacks; Virus; Malware

2. DNS4EU: Concept
* DNS4EU is conceived as an alternative to existing DNS resolution services, 
increasing overall internet resilience, and offering European citizens and 
private and public organizations the capacity to access the web with a 
high-quality and free service, based in the EU, that guarantees data protection 
according to EU rules and increases the protection from malware, phishing and 
cyberattacks.

3. DNS4EU: Characteristics
* Have a large footprint within the EU, enabling paid premium services such as 
specific performance and security criteria for vertical sectors (health, 
transport, industry, finance, etc.) or enhanced security (filtering, 24x7 
support) for companies.
* Be fully transparent and compliant with the GDPR.
* Offer state-of-the art, ad-hoc DNS filtering against phishing or malware 
based on existing global thread feeds and own feeds.
* Conform to the latest security and privacy technological standards, including 
DoH.
* Develop wholesale discovery and resolution services for other digital service 
providers, including ISPs and Cloud service providers.

4. DNS4EU: Next Steps
* Pending confirmation: Connecting Europe Facility (CEF2) – European Cloud
* Federation Initiative
* 50% of the initial infrastructure investment
* Expected publication of the call: End of 2021
* Conform to the latest security and privacy technological standards, including 
DoH.
* Federated Structure: High-quality consortiums, potentially including vertical 
industries, to best increase the footprint and customer base of DNS4EU in the 
EU, reduce costs through shared resources, operations and cyber security feeds, 
and ensure the long-term sustainability of DNS4EU

——

The Commission staff have also expressed their interest in any feedback from 
this working group that might help “fine tune the proposal” (I believe the 
discussion here has already provided some relevant insights). However, at this 
point, the next step is likely to be publication of the call for proposals, as 
referenced in the fourth slide above.

Cheers
Chris


> On 8 Nov 2021, at 14:54, Chris Buckridge  wrote:
> 
> Hi Hank, all,
> 
> I don’t have a lot that I can add to what Nick and Stephane have already 
> posted. But I will note that the European Commission has scheduled one of the 
> regular meetings of its High Level Group on Internet Governance (HLIG) for 
> this Wednesday; portions of those meeting agendas are generally open to 
> industry stakeholders, and Wednesday’s agenda includes an update on DNS4EU.
> 
> The information page for the HLIG is here:
> https://ec.europa.eu/transparency/expert-groups-register/screen/expert-groups/consult?lang=en&groupId=2450&fromMeetings=true&meetingId=23922
> 
> It’s not clear whether registration for the meeting is still open at this 
> point, but minutes are published publicly, and the RIPE NCC can report back 
> to this working group if there are any updates of note.
> 
> Best regards,
> Chris
> 
>> On 8 Nov 2021, at 14:15, Stephane Bortzmeyer  wrote:
>> 
>> On Mon, Nov 08, 2021 at 07:12:38AM +0200,
>> Hank Nussbacher  wrote
>> a message of 34 lines which said:
>> 
>>>  Does anyone have further insight into the European initiative
>>>  known as DNS4EU?
>> 
>> There is very little actual information published on this project.
>> 
>> According to some rumors, it would be a public DNS resolver, with
>> built-in censorship (for the laws of 27 countries).
>> 
>> dns4eu.eu has been registered by DG Connect
>> <https://en.wikipedia.org/wiki/Directorate-General_for_Communications_Networks,_Content_and_Technology>
>> 
>> 
>> 
> 



signature.asc
Description: Message signed with OpenPGP
-- 

To unsubscribe from this mailing list, get a password reminder, or change your 
subscription options, please visit: 
https://lists.ripe.net/mailman/listinfo/dns-wg

Re: [dns-wg] DNS4EU?

[Chris Buckridge]

> On 16 Dec 2021, at 10:10, Hank Nussbacher  wrote:
> 
> On 16/12/2021 10:07, Stephane Bortzmeyer wrote:
>> On Thu, Dec 16, 2021 at 08:59:42AM +0100,
>>  Moritz Müller via dns-wg
>> 
>>  wrote
>>  a message of 179 lines which said:
>> 
>> 
>>> I was wondering: Why does the EC believe that the resolvers users
>>> currently rely on (e.g. provided by their ISP) provide
>>> “low-quality”? Are there any studies about this?
>>> 
>> One possible response is that the people who write these statements
>> don't know what they are talking about. But of course, I cannot
>> believe that. So, another possible response: in Brussels, they see
>> that some users move away from the IAP resolver to a public resolver,
>> so there is probably a reason for that. (Unfortunately, DNS4EU may not
>> address this reason.)
>> 
>> 
> Or simply some politician traveled to Canada and said to his aide "Why can't 
> we do that as well?"
> https://www.cira.ca/cybersecurity-services/canadian-shield

My sense is that discussions around DoH in recent years have given new 
prominence to this particular element in the DNS*, and as Hank notes, newly 
interested policymakers don’t have to look far to find examples of other, more 
state-defined/endorsed approaches. But the expected CfP may provide some more 
clarity on exactly how the Commission sees this evolving.

Chris

* The ongoing Quad9 legal developments in Germany may have also kept the issue 
front of mind… https://www.quad9.net/news/press/german-court-rules-against/


signature.asc
Description: Message signed with OpenPGP
-- 

To unsubscribe from this mailing list, get a password reminder, or change your 
subscription options, please visit: 
https://lists.ripe.net/mailman/listinfo/dns-wg

Re: [dns-wg] DNS4EU?

[Chris Buckridge]

Hi all, 

A further follow-up. The Commission today published the following Call for 
Proposals: 
https://hadea.ec.europa.eu/calls-proposals/equipping-backbone-networks-high-performance-and-secure-dns-resolution-infrastructures-works_en

(hat tip to Anastasia Sendrea, who I don’t think is currently on this list, for 
the heads up)

Cheers
Chris

> On 15 Dec 2021, at 12:30, Chris Buckridge  wrote:
> 
> Hi Hank, all,
> 
> Apologies for the delay here - was hoping to have some more substantial 
> information, but in the absence of that, our colleagues at the European 
> Commission have been able to share the content of the four slides that they 
> delivered at last month’s HLIG meeting.
> 
> The slides were as follow:
> 
> 1. DNS Resolution Markets: Problems
> * Consolidation (+DoH)
> * Incidents affecting large DNS resolvers
> * Data Protection Rights
> * Prevention of Cyberattacks; Virus; Malware
> 
> 2. DNS4EU: Concept
> * DNS4EU is conceived as an alternative to existing DNS resolution services, 
> increasing overall internet resilience, and offering European citizens and 
> private and public organizations the capacity to access the web with a 
> high-quality and free service, based in the EU, that guarantees data 
> protection according to EU rules and increases the protection from malware, 
> phishing and cyberattacks.
> 
> 3. DNS4EU: Characteristics
> * Have a large footprint within the EU, enabling paid premium services such 
> as specific performance and security criteria for vertical sectors (health, 
> transport, industry, finance, etc.) or enhanced security (filtering, 24x7 
> support) for companies.
> * Be fully transparent and compliant with the GDPR.
> * Offer state-of-the art, ad-hoc DNS filtering against phishing or malware 
> based on existing global thread feeds and own feeds.
> * Conform to the latest security and privacy technological standards, 
> including DoH.
> * Develop wholesale discovery and resolution services for other digital 
> service providers, including ISPs and Cloud service providers.
> 
> 4. DNS4EU: Next Steps
> * Pending confirmation: Connecting Europe Facility (CEF2) – European Cloud
> * Federation Initiative
> * 50% of the initial infrastructure investment
> * Expected publication of the call: End of 2021
> * Conform to the latest security and privacy technological standards, 
> including DoH.
> * Federated Structure: High-quality consortiums, potentially including 
> vertical industries, to best increase the footprint and customer base of 
> DNS4EU in the EU, reduce costs through shared resources, operations and cyber 
> security feeds, and ensure the long-term sustainability of DNS4EU
> 
> ——
> 
> The Commission staff have also expressed their interest in any feedback from 
> this working group that might help “fine tune the proposal” (I believe the 
> discussion here has already provided some relevant insights). However, at 
> this point, the next step is likely to be publication of the call for 
> proposals, as referenced in the fourth slide above.
> 
> Cheers
> Chris
> 
> 
>> On 8 Nov 2021, at 14:54, Chris Buckridge  wrote:
>> 
>> Hi Hank, all,
>> 
>> I don’t have a lot that I can add to what Nick and Stephane have already 
>> posted. But I will note that the European Commission has scheduled one of 
>> the regular meetings of its High Level Group on Internet Governance (HLIG) 
>> for this Wednesday; portions of those meeting agendas are generally open to 
>> industry stakeholders, and Wednesday’s agenda includes an update on DNS4EU.
>> 
>> The information page for the HLIG is here:
>> https://ec.europa.eu/transparency/expert-groups-register/screen/expert-groups/consult?lang=en&groupId=2450&fromMeetings=true&meetingId=23922
>> 
>> It’s not clear whether registration for the meeting is still open at this 
>> point, but minutes are published publicly, and the RIPE NCC can report back 
>> to this working group if there are any updates of note.
>> 
>> Best regards,
>> Chris
>> 
>>> On 8 Nov 2021, at 14:15, Stephane Bortzmeyer  wrote:
>>> 
>>> On Mon, Nov 08, 2021 at 07:12:38AM +0200,
>>> Hank Nussbacher  wrote
>>> a message of 34 lines which said:
>>> 
>>>> Does anyone have further insight into the European initiative
>>>> known as DNS4EU?
>>> 
>>> There is very little actual information published on this project.
>>> 
>>> According to some rumors, it would be a public DNS resolver, with
>>> built-in censorship (for the laws of 27 countries).
>>> 
>>> dns4eu.eu has been registered by DG Connect
>>> <https://en.wikipedia.org/wiki/Directorate-General_for_Communications_Networks,_Content_and_Technology>
>>> 
>>> 
>>> 
>> 
> 
> -- 
> 
> To unsubscribe from this mailing list, get a password reminder, or change 
> your subscription options, please visit: 
> https://lists.ripe.net/mailman/listinfo/dns-wg


-- 

To unsubscribe from this mailing list, get a password reminder, or change your 
subscription options, please visit: 
https://lists.ripe.net/mailman/listinfo/dns-wg

[dns-wg] RIPE NCC Open House: DNS4EU - 31 January, 13:00 UTC

[Chris Buckridge]

Hi all, 

The European Commission’s recent launch of a tender process to establish a 
European public DNS resolver service (“DNS4EU”) has generated discussion on 
this list and elsewhere. Reflecting that, the RIPE NCC will hold an ‘Open 
House’ online discussion next Monday, 31 January from 13:00-14:00 UTC 
(14:00-15:00 CET). 

We invite anyone with an interest in this issue to join for an opportunity to 
exchange insight and perspectives. RIPE NCC staff will provide a background 
presentation to kick off the discussion.

You can find additional information and register for the session here: 
https://www.ripe.net/participate/meetings/open-house/ripe-ncc-open-house-dns4eu

I look forward to seeing many of you there next Monday! 

Best regards,

Chris Buckridge
Advisor to the Managing Director, Global Strategic Engagement
RIPE NCC
-- 

To unsubscribe from this mailing list, get a password reminder, or change your 
subscription options, please visit: 
https://lists.ripe.net/mailman/listinfo/dns-wg

[dns-wg] DNS4EU Open House: summary and recording

[Chris Buckridge]

Dear colleagues, 

Thank you to all who joined for the RIPE NCC Open House discussion of DNS4EU on 
Monday, 31 January. We have posted a summary of some key points and links to 
the video archive here: 
https://labs.ripe.net/author/chrisb/dns4eu-ripe-ncc-open-house-discussion/

Cheers
Chris

——
Chris Buckridge
Advisor to the Managing Director, Global Strategic Engagement
RIPE NCC
-- 

To unsubscribe from this mailing list, get a password reminder, or change your 
subscription options, please visit: 
https://lists.ripe.net/mailman/listinfo/dns-wg