[ire] New versions of data escrow drafts

[Gustavo Lozano <[e-mail]>]

Colleagues,

New versions of the registry-data-escrow and dndrd-objects-mapping drafts have been published to incorporate suggestions received in this list and by private messages:
http://www.ietf.org/internet-drafts/draft-arias-noguchi-registry-data-escrow-06.txt
http://www.ietf.org/internet-drafts/draft-arias-noguchi-dnrd-objects-mapping-03.txt

As the merge of the CSV draft (dnrd-csv-mapping) with dndrd-object-mapping continues, this minor updates of  registry-data-escrow and dndrd-objects-mapping drafts should clarify some questions and incorporate suggestions received by private messages and in this list from registry operators and data escrow agents.

Main changes are as follows.

draft-arias-noguchi-registry-data-escrow-06:

* The resend attribute is now only used when the escrow deposit must be re-generated by the registry operator because the escrow verification procedure failed at the receiving party.

draft-arias-noguchi-dnrd-objects-mapping-03:

* The resend attribute of the <report> element is now an element (<resend>) and contains the same value as the <rde:deposit> resend attribute.

* Data Escrow Agents must send a notification by each successfully received deposit regardless of the result of the verification process.

* Added XPath attribute to policy object.

* Removed optional <authinfo> from XML schemas since the escrow of that element is not required to be escrowed based on the suggestions received in the list.

-----

* I have received questions regarding how the data escrow agent notifies ICANN the status of escrow deposits, as required in the base agreement of new gTLDs. In the following link http://tools.ietf.org/html/draft-lozano-icann-registry-interfaces-00, you will find the specification of the web services we are implementing for such purpose. This draft will be discussed in another forum.

* I have received questions regarding data escrow extensions and new gTLDs. The base agreement, Specification 2, 3.2 defines: " If a Registry Operator offers additional Registry Services that require submission of additional data, not included above, additional “extension schemas” shall be defined in a case by case base to represent that data. ... ICANN and the respective Registry shall work together to agree on such new objects’ data escrow specifications.". In other words, we are going to validate/approve the data escrow extensions in case of Registry Operators that offer additional Registry Services.

If no additional registry services are offered, the data escrow agent uses this specification; if additional registry services are offered, the data escrow agent uses the extensions validated/approved by ICANN.

-----

* I have received questions regarding the process for encrypting the escrow deposits as required in the base agreement of new gTLDs. I attempt to provide answers as follows:

With the incorporation of CSV as an option for doing registry escrow, there is the possibility of an escrow deposit being an XML file plus potentially several CSV data files. Regardless of doing escrow XML only or with CSV, there is always a XML file generated as described in the registry-data-escrow draft.

This XML file is named following the procedure described in specification 2 of the applicant guidebook. The XML file and potentially the CSV files are always aggregated in a tarball file. For example:

gustavolozano$ ls -lh example_2009-08-02_full_S1_R0.xml
15M example_2009-08-02_full_S1_R0.xml

gustavolozano$ tar -tvf example_2009-08-02_full_S1_R0.tar
example_2009-08-02_full_S1_R0.xml

The tarball is encrypted and optionally compressed by an OpenPGP utility that conforms to RFC4880:

gustavolozano$ gpg --recipient dataescrowagent --output example_2009-08-02_full_S1_R0.ryde --encrypt example_2009-08-02_full_S1_R0.tar

gustavolozano$ ls -lh example_2009-08-02_full_S1_R0.ryde
16K example_2009-08-02_full_S1_R0.ryde

A signature file for the .ryde file is generated:

gustavolozano$ gpg --output example_2009-08-02_full_S1_R0.sig --detach-sig example_2009-08-02_full_S1_R0.ryde

The registry operator would then send the .ryde and .sig file to the data escrow agent.

Questions are suggestions are welcome.

Regards,
Gustavo