Promoting DNSSEC Implementation in Africa's TLD registries

Summary

DNSSEC is important because it adds security to the Domain Name System (DNS) protocol by enabling DNS responses to be validated. Specifically, DNSSEC provides origin authority, data integrity, and authenticated denial of existence.

Why its important to AfRALO and African Internet Users ?

Africa has a low DNSSEC implementation compared to the rest of the world.

Action Items

• Promote DNSSEC and raise awareness among African ALS about the importants of DNSSEC implementation in their ccTLD registries.

• Coordinate with ICANN and AfTLD in organizing DNSSEC session for AfRALO ALSs

Registration Directory Service (RDS) and Whois

Summary

RDS and Whois are pertinent issues that relate to the ownership of Domain names. Currently information on Domain ownership are published publicly. There is a strong drive to protect registration data and improve accuracy and access to generic top-level domain registration data, as well as consider safeguards for protecting such data.

Why it's important to AfRALO and African Internet Users ?

In the current RDS and Whois WG there is little participation from Africa despite the issue being relative to the Internet and Domain System in the region. Despite the fact that the pertinent issues that affect the registry have less reports coming from Africa Region and documentation regarding to the violation of Whois records that are publicly limited - there is a need for strong awareness in the the policy discussion and recommendations given that could affect the RDS implementation in Africa region.  

Action Items

• Promote RDS - Whois and raise awareness among African ALS about the importance of RDS implementation.

• Coordinate with ICANN and GNSO - RDS WG to have a session to explain the relevance of AFRALO participation in the RDS PDP

• Request members from AFRALO who are passionate and willing to join the WG to become members to enhance African views and contribute to the Policy recommendations

More information on the RDS can be found https://www.icann.org/resources/reviews/specific-reviews/whois

ICANN's Accountability and Transparency

Summary

ICANN’s core mission is to coordinate, at the overall level, the global Internet’s systems of unique identifiers, and in particular to ensure the stable and secure operation of the Internet’s unique identifiers.

ICANN operates on a multi-stakeholder model that brings all interested parties together to discuss policy issues that fall within ICANN’s areas of responsibility. It follows a bottom-up model of policy development and relies on consensus from its stakeholders. For this model to operate effectively, ICANN needs to encourage participation, instill trust, make information accessible, and have sound dispute and review mechanisms.

ICANN believes that transparency and accountability are the foundations that support these elements in its operating model.

Why its important to AfRALO and African Internet Users ?

Afralo and African Internet Users need to understand the ICANNs multistakeholder process and how it ensures Accountability and Transparency.

Action Items

• Conduct a session on the processes to engage members to understand clearly the Accountability and Transparency Processes

• Seek feedback on the current Accountability and Transparent Process

General Data Protection Regulation (GDPR) and Privacy

Summary

Why its important to AfRALO and African Internet Users ?

With reference to the Map above, the grey areas marks quite a few number of countries in Africa that has some or no proper privacy laws and may need to adopt some level of adoption. This calls for the African community to be alerted on the impact of the GDPR the fact that it will affect the African Economies especially the Economies of scale which is very important.

Action Items

• African Region to build capacity and justify their policies in reference to how the GDPR affects the region

• examine how the regulations will affect the African organizations and countries

• raise awareness on the purpose of the GDPR to mitigate any risks that may result from non compliance;