January 2023 - cooperation-wg

New on RIPE Labs: EuroDIG 2022 Live Blog
by Gergana Petrova 20 Jun '23

20 Jun '23

Dear colleagues, EuroDIG is happening right now with sessions on digital sovereignty and identity, the multistakeholder model of Internet governance, cybersecurity, and much more. RIPE NCC staff is live blogging the event over on RIPE Labs. Stay tuned for updates: https://labs.ripe.net/author/gergana_petrova/eurodig-2022-live-blog/ Best regards, Gergana -- Gergana Petrova Community Development Manager RIPE NCC

1 1

Eco White on EU digital infrastructure debate and Small Task Team open call reminder
by Desiree Miloshevic 26 Jan '23

26 Jan '23

Dear colleagues Please find a link to a recent paper from ECO organisation, regarding pending public EU policy digital infrastructure debate. https://international.eco.de/download/209997/ May we also remind you that our Open call for volunteers to join the Coop WG Task Force - Small Team to work on the community's input on this topic on is still open. Please contact the coop wg co-chairs should you wish to join the group. Thank you Desiree, Julf and Achilleas — Coop WG Co-Chairs

1 0

RIPE NCC Response to Cyber Resilience Act
by Suzanne Taylor 24 Jan '23

24 Jan '23

Dear colleagues, I’d like to thank everyone who shared their thoughts and feedback with us about the potential impact of the Cyber Resilience Act. The RIPE NCC submitted its contribution to the European Commission’s open consultation on the act yesterday. It included the RIPE NCC’s view on how the act could impact our own operations and a number of areas in which we believe further clarity is needed, along with some broader concerns we heard from the RIPE community: https://ec.europa.eu/info/law/better-regulation/have-your-say/initiatives/1… <https://ec.europa.eu/info/law/better-regulation/have-your-say/initiatives/1…> You can find all of the RIPE NCC’s contributions to public policy and Internet governance consultations online: https://www.ripe.net/participate/internet-governance/multi-stakeholder-enga… <https://www.ripe.net/participate/internet-governance/multi-stakeholder-enga…> The RIPE NCC is holding a Roundtable Meeting for Governments and Regulators in Brussels later this week (we look forward to seeing some of you there!), where we will also share our response with those in attendance and highlight the fact that the RIPE community remains a valuable source of technical expertise for public policymakers. Best regards, Suzanne ______________ Suzanne Taylor Public Policy & Internet Governance RIPE NCC www.ripe.net <http://www.ripe.net/>

1 0

Community feedback on EU's proposed Cyber Resilience Act
by Suzanne Taylor 23 Jan '23

23 Jan '23

Dear colleagues, The RIPE NCC is preparing its response to the proposed Cyber Resilience Act, which will detail how we see the regulation impacting our own operations, particularly in light of RIPE Atlas and RPKI and the further need for clarification we see around a number of definitions and points in the current proposal. In addition to our own impact analysis, we’d like to highlight the fact that we’ve also heard feedback on the proposal from within the RIPE community. I’ve drafted a summary of that feedback below, which we intend to include in our submission to the European Commission. If you’re interested in this topic, I would be happy to hear whether you feel I’ve captured the major concerns accurately or whether any major points are missing. I know that some of you are also preparing your own submissions, which I highly encourage. After some back and forth, the deadline for contributions was set to 23 January: https://ec.europa.eu/info/law/better-regulation/have-your-say/initiatives/1… <https://ec.europa.eu/info/law/better-regulation/have-your-say/initiatives/1…> Thank you, Suzanne ******** In addition to the above analysis regarding the CRA’s impact on our own operations, we would like to note several broader concerns that have been discussed within the RIPE community. We do so in our role as secretariat for RIPE, which is an open, inclusive community that welcomes the participation of anyone with an interest in IP-based networking. It is this community that develops policies around the allocation and distribution of Internet number resources (IP addresses and Autonomous Systems) within the RIPE NCC’s service region of Europe, the Middle East and parts of Central Asia, and it is the role of the RIPE NCC to implement these policies, which are developed via a consensus-based, multistakeholder approach. As such, we feel it is important to highlight some of the feedback we’ve heard from the RIPE community at recent RIPE Meetings and on various RIPE mailing lists regarding the potential impact the CRA could have on the open-source community and the development of open-source software and services that play an essential role in the functioning of the open, global Internet. While the European technical community has welcomed the exception for open-source software provided by the proposed text, the exemption applies only to open-source software that is “developed or supplied outside the course of a commercial activity”. This wording leaves a lot of room for interpretation as to what, precisely, constitutes commercial activity, especially when taking into consideration the fact that charging for technical support services is considered commercial activity, as is the monetisation of other services provided via a software-sharing platform. The RIPE community has pointed out that open-source developers often don’t work for an established organisation and are not paid for their efforts in developing software, but may well earn money by contributing support services. As such, the CRA could place undue burden on these developers, who oftentimes contribute to open-source projects as a hobby and for the “good of the Internet”, and who will simply be unable to follow and comply with complex regulatory measures. Alternatively, several not-for-profit organisations contribute open-source software that is widely used by technical operators around the world, yet the definition of commercial activity makes it unclear whether these organisations would be exempt from the CRA or would fall under scope depending on how their software development is funded, whether via a membership, sponsorship, donations or other means. Another concern is that, while larger organisations will be able to afford certification and compliance, smaller players may well be priced out of the market, thereby decreasing competition and innovation — which would move the EU further away from its stated goals, rather than help achieve them. Open-source software developers may simply decide that the cost of compliance within the EU is too high or that the lack of legal clarity is not worth the hassle, which could lead them to placing geographical restrictions on their products. While this may result in better harmonisation within the EU, it would also reduce the availability of open-source software within the EU and would create a more fractured global landscape, which would again be counter to the EU’s ambitions and its recognition of the important role that open-source software development plays in furthering innovation and supporting Internet development. For these reasons, we would urge the European Commission, on behalf of the RIPE community, to further clarify what is meant by “the course of a commercial activity” and to do so with the aim of encouraging and strengthening open-source developers for the common good of the Internet and the European Union. We would also encourage the European Commission to work directly with the open source community and the RIPE community, as a source of technical expertise, when developing proposals for regulatory measures that will have a significant impact on the technical community, the technical operation of the Internet and the Internet landscape within the European Union. For a more detailed discussion of these concerns within the technical community, please consult the following: The EU’s Proposed Cyber Resilience Act Will Damage the Open Source Ecosystem Olaf Kolkman, Internet Society https://www.internetsociety.org/blog/2022/10/the-eus-proposed-cyber-resilie… <https://www.internetsociety.org/blog/2022/10/the-eus-proposed-cyber-resilie…> Open-source software vs. the proposed Cyber Resilience Act NLnet Labs https://blog.nlnetlabs.nl/open-source-software-vs-the-cyber-resilience-act/… <https://blog.nlnetlabs.nl/open-source-software-vs-the-cyber-resilience-act/…> Cyber Resilience Act Effects on OSS (presentation at RIPE 85 Meeting) Maarten Aertsen https://ripe85.ripe.net/archives/video/911/ <https://ripe85.ripe.net/archives/video/911/> ICANN Training Series - Nordic Region: Why some Internet Legislation Might Cause a Headache Lars-Johan Liman, Netnod https://features.icann.org/event/icann-organization/icann-training-series-n… <https://features.icann.org/event/icann-organization/icann-training-series-n…> Archive of discussion on RIPE Cooperation mailing list https://www.ripe.net/ripe/mail/archives/cooperation-wg/2022-October/001609.… <https://www.ripe.net/ripe/mail/archives/cooperation-wg/2022-October/001609.…> ********

2 1

DNS4EU
by Desiree Miloshevic 13 Jan '23

13 Jan '23

Dear all You may recall that the Coop WG on behalf of its members made its own submission about the EU DNS4EU proposal during the public comment period. The press release, about the winning consortium, might be of interest. https://www.whalebone.io/post/press-release-dns4eu <https://www.whalebone.io/post/press-release-dns4eu> We could consider organising an online interim session on this topic before our next meeting in person, if there’s an interest among members. Your suggestions are welcome. Desiree — Coop WG Co-chair

2 1

Personal update
by Desiree Miloshevic 13 Jan '23

13 Jan '23

Dear members I would like to share a personal update with the group. I’ve started doing consulting work for the RIPE NCC and will be working as such for next several months, on a couple of topics: understanding of South East European country regulatory frameworks for the RIPE NCC operators and Global Digital Compact agenda. I would therefore like to ask if anyone sees any conflicts? I can offer to step down from my role of the Coop WG Co-Chair. Your comments are appreciated. Lack of comments would be interpreted as no objections. Thank you, Desiree — Cooperation WG Co-Chair

3 3

EU policy debate in Q1 2023 - open call for a Small Task Team
by Desiree Miloshevic 10 Jan '23

10 Jan '23

Dear colleagues and members Happy New Year! You might be interested in reading the EURO-IX submission on “fair-share” debate from Jan 3rd: https://www.euro-ix.net/media/filer_public/c7/72/c772acf6-b286-4edb-a3c5-04… The Coop WG Chairs would like to see if there’s an interest from our members to form and join a small task orientated team to work on this topic? Please feel free to express your interest in joining the STT (contributing ideas, holding a pen, etc) on the list or send an email to cooperation-wg-chairs(a)ripe.net. Desiree, Achilleas and Julf — Coop WG Co-Chairs

1 0

RIPE NCC Internet Country Report: The Nordic Region
by Suzanne Taylor 06 Jan '23

06 Jan '23

Dear colleagues, Today we published the latest of our RIPE NCC Internet Country Reports, this time with a focus on the Nordic Region: https://labs.ripe.net/author/suzanne_taylor_muzzin/ripe-ncc-internet-countr… <https://labs.ripe.net/author/suzanne_taylor_muzzin/ripe-ncc-internet-countr…> We examine the major market players, Internet number resource holdings, IPv4 transfers and IPv6 readiness to understand the history and current state of Internet development in this region as well as its capacity for future growth. We also analyse the region's resilience and stability by mapping the relationship between different networks in the countries and regions, their international connectivity to the global Internet, access to K-root, traffic paths and routing security. The RIPE NCC produces these country reports in order to support Internet development and inform discussion among technical communities and policymakers throughout our service region. Please share the report with your colleagues, and we’d be happy to hear your thoughts or to discuss the findings. Best regards, Suzanne _________________ Suzanne Taylor Public Policy & Internet Governance RIPE NCC www.ripe.net <http://www.ripe.net/>

2 1