SSAC Advisory Regarding the Centralized Zone Data Service (CZDS) and Registry Operator Monthly Activity Reports (R-1)
| Date Issued | Document | Reference ID | Current Phase |
|---|---|---|---|
| SSAC Advisory Regarding the Centralized Zone Data Service (CZDS) and Registry Operator Monthly Activity Reports (R-1) | SAC097 | DEFERRED |
DESCRIPTION
The SSAC recommends that the ICANN Board suggest to ICANN Staff to consider revising the CZDS system to address the problem of subscriptions terminating automatically by default, for example by allowing subscriptions to automatically renew by default. This could include an option allowing a registry operator to depart from the default on a per-subscriber basis, thereby forcing the chosen subscriber to reapply at the end of the current term. The CZDS should continue to provide registry operators the ability to explicitly terminate a problematic subscriber’s access at any time.
DEPENDENCIES
The CZDS 3.0 project has been placed on hold to prioritize work on the Registration Data Request Service (RDRS), formerly referred to as the Whois Disclosure System (WDS), as directed by the ICANN board resolutions from the special meeting of the ICANN board held on 27-February-2023. Work is currently paused until the CZDS 3.0 project is prioritized again in the future.
STATUS UPDATES
| Date | Phase | Type | Status Updates |
|---|---|---|---|
| Phase 4 | Phase Change | Now in Phase 4: Deferred |
| Phase 4 | Dependencies | The CZDS 3.0 project has been placed on hold to prioritize work on the Registration Data Request Service (RDRS), formerly referred to as the Whois Disclosure System (WDS), as directed by the ICANN board resolutions from the special meeting of the ICANN board held on 27-February-2023. Work is currently paused until the CZDS 3.0 project is prioritized again in the future. | |
| Phase 4 | Phase Update |
|
| Phase 4 | AP Feedback | Is there any additional work planned under recommendation 1 or will it be closed out now? |
| Phase 4 | Phase Update | Support of automatic renewal of zone file access as the default system behavior has been deployed in the CZDS system on 15-November-2022. Registry operators were notified a month in advance and given the opportunity to opt out. In parallel, the development team is also working on improving the system usability to make it easier for registry operators to manage the configuration for automatic renewal of their current CZDS requests going forward. Enhancements in availability and performance for the zone download service are also in progress. In the future the system will also support automatic compliance escalation of unattended access requests in pending status. |
| Phase 4 | AP Feedback | Thank you for the update. We look forward to the final implementation which should address this recommendation. |
| Phase 4 | Phase Update | The ICANN org provided SSAC a briefing on the CZDS 3.0 project during the ICANN75 annual general meeting detailing the completed and upcoming project milestones. Work on the CZDS system continues to include functionality to support automatic renewal of zone file access as the default system behavior. In parallel, the development team is also working on improving the system availability and performance for the zone download service. In the future the system will also support automatic compliance escalation of unattended access requests in pending status. |
| Phase 4 | Phase Update | The ICANN org continues work on the CZDS 3.0 project, the following milestones have been completed: On 25-April-2022 the CZDS system also offers requestors the option to cancel their pending requests if desired, which was functionality that the community asked for. On 24-May-2022 infrastructure updates were deployed to the CZDS system to improve performance and service availability for users downloading gTLD zone files. On 28-June-2022 support was added in the CZDS system to allow zone file access requestors to submit an access extension request prior to expiration of their current access, which makes it possible for users to retain uninterrupted access to already authorized zone files as long as the registry operator approves such requests prior to expiration. Optional email notifications for registry operators were also improved to provide a summary of received requests in a single daily digest as opposed to individual notifications. Future project milestones still in development include functionality to support automatic renewal of zone file access as the default system behavior, and automatic compliance escalation of unattended access requests in pending status. |
| Phase 4 | Phase Update | ICANN's response to SSAC's question 2: What are the differences between what the SSAC recommended in SAC097 and the current state of affairs? According to the SSAC097, in June 2017, 45% of gTLDs were reporting the zfa-password field accurately. The outreach efforts by the ICANN Org resulted with this ratio of accuracy increase to 86% of the gTLDs. ICANN org’s outreaches continue, and the Registry Monthly Reporting FAQ, which will be published in Q2 2022 is expected to provide support to have remainder of the gTLDs report this field accurately. During the conversations between SSAC and registry operators, it was clarified that ICANN Org cannot measure the accuracy of the web-based WHOIS query statistics accuracy. Therefore, it is not possible for ICANN Org to compare the past status of the issue with the current state by itself. ICANN Org is looking forward to supporting the SSAC leadership in their work with the TechOps group. |
| Phase 4 | Phase Update | ICANN's response to SSAC's question 1: Are the changes that have been made currently in production? Detailed information about the issue and solutions were communicated with the registry operators and their technical service providers directly by ICANN Org and generated awareness about using the data provided by the zfa-password reports at czds.icann.org. The Registry Monthly Reporting FAQ (to be published in March 2022) is expected to provide more information about the zfa-password issue and support outreach efforts to create further awareness not only about the zfa-password field but in general about the Registry Monthly Reporting. As a result of the conversations between the SSAC and registry operators, the SSAC leadership agreed to work with the registry operators in the TechOps group to help generate solutions to issues related to reporting web-based WHOIS query statistics. |
| Phase 4 | Phase Update | The CZDS 3.0 project has started recently, which among other things will address the SAC097 recommendations related to CZDS including support for zone file access extension prior to their expiration date, automatic renewal of access as the default system behavior, and automatic compliance escalation of unattended access requests in pending status. ICANN org plans to release this new functionality to CZDS in phases during the following months, and is available to provide a briefing to SSAC on the CZDS 3.0 project if it is of interest. |
| Phase 4 | AP Feedback | SSAC asked the following two questions regarding the SAC097 updates: 1) Are the changes that have been made currently in production? 2) What are the differences between what the SSAC recommended in SAC097 and the current state of affairs? |
| Phase 4 | Phase Update | New functionality for automated renewal of access by default was proposed and discussed with CZDS users, the RySG and SSAC to incorporate their feedback. The development of the functional changes is pending prioritization and incorporation to ICANN's frozen development pipeline. |
| Phase 4 | Phase Update | Despite not implementing new features to CZDS, ICANN org did work to expand the utility of CZDS by adding the five largest legacy gTLDs, .biz, .com, .info, .net, and .org and most others to the platform as their contracts were being renewed or revised. |
| Phase 4 | Phase Update | As previously communicated, the ICANN org team analyzed this request and is preparing to implement. This is identified as a priority for development. However, implementation requires development to CZDS to enable this feature. Currently ICANN org is completing the migration of the registrar portal and contractual compliance modules to the Naming Service portal (NSp), which also is the platform registries utilize to access CZDS. Once those platform migrations complete, ICANN can initiate product enhancements such as this for CZDS. At this time a timeline is not available, but it is not likely that the feature would be available before the end of 2QCY21. In addition to this feature development, ICANN org has worked to enhance the value of CZDS to users by adding legacy gTLDs to the platform. In July, access to the .com zone file migrated to CZDS, and now the five largest legacy gTLDs (.com, .net, .org, .info, and .biz) use CZDS in addition to all new gTLDs and several of other legacy gTLDs. |
| Phase 4 | Phase Update | The requirements to update CZDS to was provided to the development teams. The original plan was to have the software development start in 2020 Q2 but due to higher priority items on the development roadmap, CZDS development was delayed. ICANN Org is working on an organization-wide update to the roadmap, which will be provided as soon as it becomes available. |
| Phase 4 | Phase Update | Due to additional updates to the roadmap, substantial updates for new features on CZDS is expected to be available in 2QFY20. |
| Phase 4 | Phase Update | CZDS platform migration is complete, making it possible to add new features to address the problem of gaps in user access to zone files. The feature has been scoped and is in the process of being added to the next product road map for future system enhancements. A target completion date is not yet available, but a more substantive update should be available in 1QFY2020. |
| Phase 4 | Phase Update | CZDS re-platforming completed in January 2019, enabling the development of SAC097 recommendation about CZDS. ICANN org is working to implement improved features to enable the term of access to registry zone files to be extended prior to expiration. The completion is currently targeted by the end of 2Q2019. |
| Phase 4 | Phase Update | On 23 June 2018, the Board accepted this advice and directed the ICANN President and CEO or his designee to implement an auto-renew feature in the CZDS system (https://www.icann.org/resources/board-material/resolutions-2018-06-23-en#1.g). |
| Phase 4 | Phase Change | Now in Phase 4: Implement |
| Phase 3 | Board Update | Resolved (2018.06.23.10), the Board adopts the scorecard titled "ICANN Board Action for SSAC Advice Documents SAC047, SAC058, SAC061, SAC090, and SAC097 (08 June 2018)" [PDF, 182 KB], and directs the President and CEO or his designee(s) to implement the advice as described in the scorecard. SAC097 Recommendation 1 Board Action: The Board accepts this advice and directs the ICANN President and CEO or his designee to implement an auto-renew feature in the CZDS system. See full resolution at and scorecard at https://www.icann.org/resources/board-material/resolutions-2018-06-23-en#1.g. |
| Phase 3 | Phase Update | ICANN received SSAC's approval of understanding and is in the process of evaluating the advice. The ICANN organization understands SAC097 Recommendation 1 to mean that the ICANN organization should consider revising the Central Zone Data Service (CZDS) system to address the problem of subscriptions terminating automatically by default. The ICANN organization understands that the SSAC recommends instead that the CZDS have automatic renewal as the default. The ICANN organization also understands Recommendation 1 to mean that the CZDS system could include an option allowing a registry operator to depart from the default on a per-subscriber basis, thereby forcing the chosen subscriber to reapply at the end of the current term. The ICANN organization also understands Recommendation 1 to mean that the CZDS should continue to provide registry operators the ability to explicitly terminate a problematic subscriber's access at any time. This understanding was confirmed by the SSAC on 18 August 2017. |
| Phase 3 | Phase Change | Now in Phase 3: Evaluate & Consider |
| Phase 2 | AP Feedback | SSAC confirmed Understanding. |
| Phase 2 | Phase Update | The ICANN organization understands SAC097 Recommendation 1 to mean that the ICANN organization should consider revising the Central Zone Data Service (CZDS) system to address the problem of subscriptions terminating automatically by default. The ICANN organization understands that the SSAC recommends instead that the CZDS have automatic renewal as the default. The ICANN organization also understands Recommendation 1 to mean that the CZDS system could include an option allowing a registry operator to depart from the default on a per-subscriber basis, thereby forcing the chosen subscriber to reapply at the end of the current term. The ICANN organization also understands Recommendation 1 to mean that the CZDS should continue to provide registry operators the ability to explicitly terminate a problematic subscriber's access at any time. This understanding was sent to the SSAC on 10 July 2017. |
| Phase 2 | Board Understanding | The ICANN organization understands SAC097 Recommendation 1 to mean that the ICANN organization should consider revising the Central Zone Data Service (CZDS) system to address the problem of subscriptions terminating automatically by default. The ICANN organization understands that the SSAC recommends instead that the CZDS have automatic renewal as the default. The ICANN organization also understands Recommendation 1 to mean that the CZDS system could include an option allowing a registry operator to depart from the default on a per-subscriber basis, thereby forcing the chosen subscriber to reapply at the end of the current term. The ICANN organization also understands Recommendation 1 to mean that the CZDS should continue to provide registry operators the ability to explicitly terminate a problematic subscriber's access at any time. |
| Phase 2 | Phase Update | ICANN has confirmed receipt of the advice document. Currently, this item is being review for ICANN's understanding of the advice. |
| Phase 2 | Phase Change | Now in Phase 2: Understand |
| Phase 1 | Phase Update | ICANN acknowledged receipt of Advice. |
| Phase 1 | Phase Update | SSAC published SAC097: SSAC Advisory Regarding the Centralized Zone Data Service (CZDS) and Registry Operator Monthly Activity Reports Link: https://www.icann.org/en/system/files/files/sac-097-en.pdf. |
| Phase 1 | Phase Change | Now in Phase 1: Receive & Acknowledge |
