Skip to main content

截止时间延期:SSAC 组织审核提案征询

安全与稳定咨询委员会 (Security and Stability Advisory Committee, SSAC) 的独立审核提案征询 (Request for Proposal, RFP) 的截止时间现已延期。新截止时间为:太平洋夏令时 (PDT) 2017 年 8 月 21 日晚上 11:59 时。

互联网名称与数字地址分配机构 (Internet Corporation for Assigned Names and Numbers, ICANN) 正在征召一名提供商对安全与稳定咨询委员会 (SSAC) 展开独立评估。

该提供商应当拥有与互联网技术社群、关键域名系统 (Domain Names System, DNS) 基础设施服务一起处理安全事务的知识或经验;理解安全与稳定咨询委员会 (SSAC) 的章程和运营规程[PDF, 420 KB];了解 SSAC 章程中涉及的技术领域,包括互联网名称和地址分配系统的安全性和完整性。

本轮提案征询 (RFP) 旨在确定一名独立审核人,对 SSAC 进行全面评估。审核内容包括但不限于:

  • 对 SSAC 此前审核的实施状况进行评估;
  • 评估 SSAC 是否在 ICANN 架构中有继续存续的必要;
  • 评估 SSAC 履行其职责的效率,并确定是否有必要对其架构或运营进行任何调整来改善其工作效率;和
  • 评估 SSAC 作为一个整体对广大 ICANN 社群负责的程度。

这轮审核预计将在 2017 年 10 月至 2018 年 7 月间进行。如需查看 RFP 的完整概览和时间表,请参见此处 [PDF, 608 KB]

请将《意向书》通过电子邮件的形式发送至:SSACReview-RFP@icann.org。所有提案应在太平洋夏令时 (PDT) 2017 年 8 月 21 日晚上 11:59 时前通过 ICANN 采购工具用电子形式提交,请联系上述电邮地址获取访问采购工具的权利。

背景

根据 ICANN 章程,安全与稳定咨询委员会(即:“Security and Stability Advisory Committee”或“SSAC”)旨在向 ICANN 社群和董事会就互联网名称和地址分配系统的安全性和完整性一题提供建议。该委员会应行使以下职责:

  1. 就安全事务与互联网技术社群和关键域名系统 (DNS) 基础设施服务运营商和经理人进行交流;随着事态和发展的确定,通知根域名服务器运营商社群、顶级域注册管理机构和注册服务机构、反向授权架构运营商(例如 in-addr.arpa 和 ip6.arpa)以及其他相关方。SSAC 应搜集和澄清要求,并将其提供给与 DNS、地址分配系统协议技术修订相关的、以及和运营规划相关的社群。
  2. 持续对互联网命名和地址分配服务进行威胁评估和风险分析,以便评估稳定性和安全性的主要威胁所在,并相应对 ICANN 社群提出意见。SSAC 还应推荐任何必要的审计活动,用于针对已确定的风险和威胁,评估 DNS 和地址分配安全的当前状态。
  3. 与对域名名称和地址分配安全事务负有直接义务的相关方(例如:互联网工程任务组 (IETF)、根服务器系统咨询委员会 (RSSAC)[按照第 12.2(c)(i)节的规定]、地区互联网注册管理机构 (RIR) 和域名注册管理机构等等)进行交流,确保审核小组针对安全风险、各类问题和工作重点所提的建议与现有标准、部署、运营和协调工作能够相互匹配。SSAC 还应监督这类活动,并按照需要将活动进度告知 ICANN 社群和董事会。
  4. 定期就其活动情况向董事会报告。
  5. 向 ICANN 社群和董事会提出政策建议。

More Announcements
Domain Name System
Internationalized Domain Name ,IDN,"IDNs are domain names that include characters used in the local representation of languages that are not written with the twenty-six letters of the basic Latin alphabet ""a-z"". An IDN can contain Latin letters with diacritical marks, as required by many European languages, or may consist of characters from non-Latin scripts such as Arabic or Chinese. Many languages also use other types of digits than the European ""0-9"". The basic Latin alphabet together with the European-Arabic digits are, for the purpose of domain names, termed ""ASCII characters"" (ASCII = American Standard Code for Information Interchange). These are also included in the broader range of ""Unicode characters"" that provides the basis for IDNs. The ""hostname rule"" requires that all domain names of the type under consideration here are stored in the DNS using only the ASCII characters listed above, with the one further addition of the hyphen ""-"". The Unicode form of an IDN therefore requires special encoding before it is entered into the DNS. The following terminology is used when distinguishing between these forms: A domain name consists of a series of ""labels"" (separated by ""dots""). The ASCII form of an IDN label is termed an ""A-label"". All operations defined in the DNS protocol use A-labels exclusively. The Unicode form, which a user expects to be displayed, is termed a ""U-label"". The difference may be illustrated with the Hindi word for ""test"" — परीका — appearing here as a U-label would (in the Devanagari script). A special form of ""ASCII compatible encoding"" (abbreviated ACE) is applied to this to produce the corresponding A-label: xn--11b5bs1di. A domain name that only includes ASCII letters, digits, and hyphens is termed an ""LDH label"". Although the definitions of A-labels and LDH-labels overlap, a name consisting exclusively of LDH labels, such as""icann.org"" is not an IDN."