<!DOCTYPE html>
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<p>I participated in the survey and think it is good to also have a
public discussion.</p>
<p>Users of Open Source projects are responsible themselves for what
they use. You want to use a free image editor? fine, go ahead! <br>
</p>
<p>I use FOSS and also produce a FOSS package.<br>
What I find reasonable for a FOSS package is:<br>
- clear instructions on how to build the software<br>
- use or provide a stable software repository<br>
- respond to serious software issues; response may be fix,
workaround, or statement of "will not fix" but must respond within
5 business days.<br>
- clearly communicate what functionality the software offers and
what level(s) of support a user is given.<br>
Privacy etc. is already regulated so does not need attention here.</p>
<p>Of course we can add a long list of wishes and nice to haves but
IMHO this list should not be regulated since it has a high
potential to kill open source projects. <br>
</p>
<p>There might be persons who consider Linux/bind/project-XYZ
"critical" and therefore think these projects must be regulated or
else bad things happen...<br>
If a government wants to impose rules for special/critical
software that cost time or money for these open source projects,
then the government must be as restrictive as possible with
regulation, must pay for all costs to comply to these rules to the
open source projects, and must have patience for implementation of
compliance. Note that the government does not have to regulate
open source projects; it may also allocate a budget to develop an
alternative for the open source software without impacting
existing open source software.<br>
</p>
<p>Marcus<br>
</p>
<p><br>
</p>
<p><br>
</p>
<div class="moz-cite-prefix">On 28/01/2025 17:26, Victoria Risk
wrote:<br>
</div>
<blockquote type="cite"
cite="mid:00B41524-B18A-4B73-9F71-38B6E4F5F46E@isc.org">
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
<span
style="white-space: pre-wrap; caret-color: rgb(33, 37, 41); color: rgb(33, 37, 41); font-family: system-ui, -apple-system, "Segoe UI", Roboto, "Helvetica Neue", Arial, "Noto Sans", "Liberation Sans", sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol", "Noto Color Emoji"; background-color: rgb(255, 255, 255);">Hello BIND users-</span>
<div><span
style="white-space: pre-wrap; caret-color: rgb(33, 37, 41); color: rgb(33, 37, 41); font-family: system-ui, -apple-system, "Segoe UI", Roboto, "Helvetica Neue", Arial, "Noto Sans", "Liberation Sans", sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol", "Noto Color Emoji"; background-color: rgb(255, 255, 255);">
</span></div>
<div><span
style="caret-color: rgb(33, 37, 41); color: rgb(33, 37, 41); font-family: system-ui, -apple-system, "Segoe UI", Roboto, "Helvetica Neue", Arial, "Noto Sans", "Liberation Sans", sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol", "Noto Color Emoji"; white-space: pre-wrap; background-color: rgb(255, 255, 255);">Did you know that there is significant momentum building to regulate software, including open source, in at least Europe and the US (and possibly elsewhere as well), in order to improve cybersecurity? Do you think this regulation will improve cybersecurity for your operations? What are the opportunities and pitfalls you can envision?</span></div>
<div><span
style="caret-color: rgb(33, 37, 41); color: rgb(33, 37, 41); font-family: system-ui, -apple-system, "Segoe UI", Roboto, "Helvetica Neue", Arial, "Noto Sans", "Liberation Sans", sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol", "Noto Color Emoji"; white-space: pre-wrap; background-color: rgb(255, 255, 255);">
</span></div>
<div><span
style="caret-color: rgb(33, 37, 41); color: rgb(33, 37, 41); font-family: system-ui, -apple-system, "Segoe UI", Roboto, "Helvetica Neue", Arial, "Noto Sans", "Liberation Sans", sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol", "Noto Color Emoji"; white-space: pre-wrap; background-color: rgb(255, 255, 255);">Some of you use open source DNS implementations every day. Please take a few minutes to share any positive or negative impacts of regulation you anticipate on the infrastructure you support. Your comments will be summarized, and may be quoted directly (anonymously) in a report that the ICANN SSAC will provide to regulators and policy makers who are developing regulations for open source. </span><span
style="white-space: pre-wrap; caret-color: rgb(33, 37, 41); color: rgb(33, 37, 41); font-family: system-ui, -apple-system, "Segoe UI", Roboto, "Helvetica Neue", Arial, "Noto Sans", "Liberation Sans", sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol", "Noto Color Emoji"; background-color: rgb(255, 255, 255);">
</span><span style="background-color: rgb(255, 255, 255);"><font
color="#212529"
face="system-ui, -apple-system, Segoe UI, Roboto, Helvetica Neue, Arial, Noto Sans, Liberation Sans, sans-serif, Apple Color Emoji, Segoe UI Emoji, Segoe UI Symbol, Noto Color Emoji"><span
style="white-space-collapse: preserve;"></span></font></span></div>
<div><br>
</div>
<div>Thank you for taking the time to support this effort.</div>
<div><br>
</div>
<div>Vicky</div>
<div><span
style="white-space: pre-wrap; caret-color: rgb(33, 37, 41); color: rgb(33, 37, 41); font-family: system-ui, -apple-system, "Segoe UI", Roboto, "Helvetica Neue", Arial, "Noto Sans", "Liberation Sans", sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol", "Noto Color Emoji"; background-color: rgb(255, 255, 255);">
</span></div>
<div><span
style="white-space: pre-wrap; caret-color: rgb(33, 37, 41); color: rgb(33, 37, 41); font-family: system-ui, -apple-system, "Segoe UI", Roboto, "Helvetica Neue", Arial, "Noto Sans", "Liberation Sans", sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol", "Noto Color Emoji"; background-color: rgb(255, 255, 255);">----
ICANN's Security and Stability Advisory Committee [1] is attempting to document the operational reliance on Free and Open Source Software (FOSS) in the Internet’s domain name infrastructure to inform policy discussions regarding the security of software and critical infrastructure.
Our work aims aim to clear up misinformed assumptions by regulators and policy makers that may threaten the FOSS development and supply model, impacting operators of the Internet’s domain and routing systems.
</span><span
style="white-space: pre-wrap; caret-color: rgb(33, 37, 41); color: rgb(33, 37, 41); font-family: system-ui, -apple-system, "Segoe UI", Roboto, "Helvetica Neue", Arial, "Noto Sans", "Liberation Sans", sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol", "Noto Color Emoji"; background-color: rgb(255, 255, 255);">
Our report will be published on the ICANN website [2], with a target publication date in June. The survey will be closed for new submissions at the end of February.
[1] </span><a target="_blank" href="https://www.icann.org/en/ssac"
style="white-space: pre-wrap; box-sizing: border-box; color: rgb(13, 110, 253); font-family: system-ui, -apple-system, "Segoe UI", Roboto, "Helvetica Neue", Arial, "Noto Sans", "Liberation Sans", sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol", "Noto Color Emoji";"
moz-do-not-send="true" class="moz-txt-link-freetext">https://www.icann.org/en/ssac</a><span
style="white-space: pre-wrap; caret-color: rgb(33, 37, 41); color: rgb(33, 37, 41); font-family: system-ui, -apple-system, "Segoe UI", Roboto, "Helvetica Neue", Arial, "Noto Sans", "Liberation Sans", sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol", "Noto Color Emoji"; background-color: rgb(255, 255, 255);">
[2] </span><a target="_blank"
href="https://www.icann.org/en/ssac/publications"
style="white-space: pre-wrap; box-sizing: border-box; color: rgb(13, 110, 253); font-family: system-ui, -apple-system, "Segoe UI", Roboto, "Helvetica Neue", Arial, "Noto Sans", "Liberation Sans", sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol", "Noto Color Emoji";"
moz-do-not-send="true" class="moz-txt-link-freetext">https://www.icann.org/en/ssac/publications</a><span
style="white-space: pre-wrap; caret-color: rgb(33, 37, 41); color: rgb(33, 37, 41); font-family: system-ui, -apple-system, "Segoe UI", Roboto, "Helvetica Neue", Arial, "Noto Sans", "Liberation Sans", sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol", "Noto Color Emoji"; background-color: rgb(255, 255, 255);">
# What is SSAC?
The Security and Stability Advisory Committee advises the ICANN community and ICANN Board on security and integrity matters related to Internet naming and address systems. We perform ongoing threat assessment and risk analysis to assess principal threats to stability and security of these systems.
SSAC publications are available from </span><a target="_blank"
href="https://www.icann.org/en/ssac/publications"
style="white-space: pre-wrap; box-sizing: border-box; color: rgb(13, 110, 253); font-family: system-ui, -apple-system, "Segoe UI", Roboto, "Helvetica Neue", Arial, "Noto Sans", "Liberation Sans", sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol", "Noto Color Emoji";"
moz-do-not-send="true" class="moz-txt-link-freetext">https://www.icann.org/en/ssac/publications</a><span
style="white-space: pre-wrap; caret-color: rgb(33, 37, 41); color: rgb(33, 37, 41); font-family: system-ui, -apple-system, "Segoe UI", Roboto, "Helvetica Neue", Arial, "Noto Sans", "Liberation Sans", sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol", "Noto Color Emoji"; background-color: rgb(255, 255, 255);">
# Anonymous?
We use the European Commission's EUsurvey tool, configured not to log IP addresses or other information with the potential to identify you. Your (anonymous) comments may be reprinted as entered in the report, if there is personally identifying information / personal data included in your comments, we will edit that from your remarks.
--
Vicky Risk</span>
<div><font color="#212529"
face="system-ui, -apple-system, Segoe UI, Roboto, Helvetica Neue, Arial, Noto Sans, Liberation Sans, sans-serif, Apple Color Emoji, Segoe UI Emoji, Segoe UI Symbol, Noto Color Emoji"><span
style="white-space-collapse: preserve; background-color: rgb(255, 255, 255);">Product Manager, <a
href="http://isc.org/" moz-do-not-send="true">ISC.org</a></span></font></div>
</div>
<br>
<fieldset class="moz-mime-attachment-header"></fieldset>
</blockquote>
</body>
</html>