July 2019 - UA-discuss - lists.iana.org

RFC 8398 "Internationalized Email Addresses in X.509 Certificates" implementation
by Dmitry Belyavsky Aug. 28, 2020

Aug. 28, 2020

Hi all, Coordination Center for TLD .RU/.РФ is happy to announce a draft implementation of RFC 8398 "Internationalized Email Addresses in X.509 Certificates" for OpenSSL: https://cctld.ru/en/news/news_detail.php?ID=21240 The implementation and some test examples are available for download here: https://cctld.ru/files/books/EAI.pdf (in Russian) Direct links: Draft implementation - https://cctld.ru/files/eai/rfc8398.diff Test examples - https://cctld.ru/files/eai/root.tar.gz Instructions - https://cctld.ru/files/eai/README.8398 The implementation covers the following cases: - Displaying the EAI in X.509 certificates - Verifying NameConstraints in X.509 certificate chains of trust - Matching EAIs in X.509 with provided EAI. Feel free to test the patch and send feedback to pr(a)cctld.ru or to me directly. -- SY, Dmitry Belyavsky

8 10

Universal Acceptance now on Wikipedia...https://en.wikipedia.org/wiki/Universal_Acceptance
by Don Hollander July 9, 2020

July 9, 2020

A nice way to end a fairly productive year. Plans coming up: There will be a Universal Acceptance gathering on Monday the 8th of January in Hong Kong with the Hong Kong IT Community. This is being organised by .asia, ISOC HK and UASG. If you’ve not yet received an invitation but will be in Hong Kong that afternoon, please let me know and we’ll organise one. 15:00 - 18:00 at the Sheraton. The UASG Coordination Group will be meeting on Tuesday the 9th of January and the morning of the 10th if necessary, also in Hong Kong. The agenda will be out next week. Full remote participation will be available if there’s interest. There will be a meeting of EAI operators on the 11th and 12th in Guangzhou, China, hosted by Coremail and CNNIC. If you are an EAI practitioner and would like to participate and have not otherwise registered, please let me know. I expect that we’ll have remote participation facilities. The UASG is expecting another UA Workshop on Day 0 of the ICANN meeting in Puerto Rico as well as a public update session during the week. Dates and venues still to be confirmed. Happy New Year to everyone. If you’re out celebrating, please get home safe. Don Don Hollander Universal Acceptance Steering Group www.uasg.tech don.hollander(a)icann.org Skype: don_hollander

12 17

Some Recommendations in Working Groups
by richard nims Aug. 18, 2019

Aug. 18, 2019

Hello, everyone. Bessie, we all have volunteered to contribute in few working groups, I extant some recommendations in my individual capacity. In today’s environment, standards play a critical role in effective working of any working groups. Thus responsibility for how a standard evolves begins in our working group as-well. I recommend we establish the necessary framework for a sound standardization process. For groups i have applied for i.e. EAI and Technology working group I have below recommendations: *Fundamental Principles of Operation* For the development of standards, openness and due process are mandatory. Openness means that any person who has, or could be reasonably expected to have, a direct and material interest, and who meets the requirements of these procedures has a right to participate by: a) Attending working group meetings b) Becoming a member of the working group c) Expressing a position for chair of working group and its basis, Due process is based upon equity and fair play. The standards development process should strive to have both a balance of interests and not be dominated by any single interest category. *Election of Chair of working group: *The UASG administrative group must get elections done for every working group. The interested members of the working group must file self-nomination or any member of working group should nominate, fundamentally that individual member nominated shall not be on any position in UA administrative group or any other working groups at the same time. Members of the working group should only be allowed to cast the vote and select chair of working group. *Working Group: *Working group member should be individual. Each member is expected to attend meetings. We must record attendance at meetings via teleconferencing and/or electronic means, e.g., Internet conferencing, shall count towards the attendance requirements apart from F2F meeting during ICANN or other events. *Responsibilities of Working Group: * Set goals and deadlines and adhere to them Prioritize work to best serve the group and its goals Get the materials available for community related to working of group Maintain lists of unresolved issues, action items, and assignments. The working group will engage in a fact-finding effort of the perceived problems raised in there space and what are the possible solutions, and what are the pros and cons relating these possible solutions. What activities are actually underway, how extensive are they. The Working Group can circulated surveys to gather facts about the technical and issues raised by services currently being provided in there space. Kind wishes Richard Nims

8 7

Re: [UA-discuss] [Ext] Re: Draft Charter for Local Initiatives
by Sarmad Hussain Aug. 1, 2019

Aug. 1, 2019

Dear Roberto, Thank you for your input and support for local initiatives. It has been the intention to keep the charter for local initiative at high-level and flexible, while also keeping a focus on the UASG FY20 Action Plan. It is anticipated that there will be differences in how different local Initiatives may want to address the UA issues locally, and the proposal they develop will capture such solutions (and differences). However, please share if there are any particular clauses within the charter which you consider restrictive and suggestions on how these may be addressed. It is left to the community on how they would like to see a particular local initiative organized geographically. We anticipate different models, which could be limited to a country or territory, or may involve multiple countries (e.g. Middle East). These local initiatives will be working closely with other UASG Working Groups (on technology, EAI, Measurements and Communications) and UA-discuss list, which will allow the UASG community to work collaboratively and leverage the significant expertise available. We are aiming to start the work with the proposed model, while reviewing its effectiveness over time; this will allow us to adapt it as needed moving forward based on the experience gained. We look forward to your further feedback. Regards, Sarmad From: Roberto Gaetano <roberto_gaetano(a)hotmail.com> Date: Tuesday, July 23, 2019 at 3:19 AM To: Sarmad Hussain <sarmad.hussain(a)icann.org> Cc: Universal Acceptance <ua-discuss(a)icann.org> Subject: [Ext] Re: [UA-discuss] Draft Charter for Local Initiatives Dear Sarmad - and all, Kudos for the initiative. I personally believe that we need to promote local initiatives. This said, I wonder whether a formal charter so detailed will address best the need of getting more input from the local communities. Let’s put aside for the moment some objections on whether “one size fits all” and therefore whether a formally centralised decided charter will be the best option, and go to some o the practical aspects. I have no idea on what is the (geographical) size of the local initiative that is envisaged by this proposal. Are we talking about regions like “Middle East” or “Latin America”, or are we narrowing down to “South Caucasus” or even language minorities? In the former case, it might become a formal ratification of what can already exist - maybe using the ICANN regions as a model - but like almost every formalisation of the existent will not add anything that is really creating new opportunities. The latter case would be more interesting by far. But in this case, are we sure that a local, motivated and enthusiastic but resources-limited, community could comply with a charter like this? Maybe there are not enough local developers or experts, considering the detail of the required roles? My personal opinion - but I don’t want to get into philosophy - is that while the local communities can be by far our best option to identify the problems and the issues that have local impact due to the local specificity, the technical solution might best be addressed by a wide collaboration by technical experts. In simple words, the technical solution to an issue manifesting itself in Latin America can come from an expert living in SE-Asia. However, I might have missed some points in the initiative - in this case I would appreciate feedback helping me understand better. Cheers, Roberto On 19.07.2019, at 08:08, Sarmad Hussain <sarmad.hussain(a)icann.org<mailto:sarmad.hussain@icann.org>> wrote: Dear all, Based on the UASG’s FY20 Action Plan [uasg.tech]<https://urldefense.proofpoint.com/v2/url?u=https-3A__uasg.tech_wp-2Dcontent…>, please find attached the draft charter for the Local Initiatives for your review and feedback. You are requested to share comments on ua-discuss(a)icann.org<mailto:ua-discuss@icann.org> email distribution list by 31 July, 2019. Regards, Sarmad <UASG Local Initiative - Charter 20190719.pdf> _______________________________________________ By submitting your personal data, you consent to the processing of your personal data for purposes of subscribing to this mailing list accordance with the ICANN Privacy Policy (https://www.icann.org/privacy/policy [icann.org]<https://urldefense.proofpoint.com/v2/url?u=https-3A__www.icann.org_privacy_…>) and the website Terms of Service (https://www.icann.org/privacy/tos [icann.org]<https://urldefense.proofpoint.com/v2/url?u=https-3A__www.icann.org_privacy_…>). You can visit the Mailman link above to change your membership status or configuration, including unsubscribing, setting digest-style delivery or disabling delivery altogether (e.g., for a vacation), and so on.

2 2

Draft Charter for Local Initiatives
by Sarmad Hussain July 31, 2019

July 31, 2019

Dear all, Based on the UASG’s FY20 Action Plan<https://uasg.tech/wp-content/uploads/2019/06/UASG-FY20-Action-Plan.pdf>, please find attached the draft charter for the Local Initiatives for your review and feedback. You are requested to share comments on ua-discuss(a)icann.org<mailto:ua-discuss@icann.org> email distribution list by 31 July, 2019. Regards, Sarmad

6 5

Legacy Technologies and Universal Acceptance
by Michael Casadevall July 22, 2019

July 22, 2019

Hey all, So following with the Tech WG call earlier today, I branched a question on legacy technologies and their interactions with UASG. I don't think it's a secret that a *lot* of infrastructure on the Internet often runs on either old versions of modern programming languages, is entirely obsolete, or otherwise not the forefront for new developments. I want to open a broader discussion on how we should handle these types of cases; i.e., document ways to implement/store IDN/EAIs? For context, here's a few places where Unicode either wasn't supported at the time, or are just obsolete but still common. This isn't an exhaustive list, just an idea of the types of systems that I know are still around at least to some extent. == Mainframe Systems/EBCDIC == Mainframes aren't obsolete by any measure, but due to backwards compatibility, most of them don't even use ASCII as a standard encoding but the EBCDIC specification, such as z/OS. Often times these systems host databases and reporting software (Mainframe DB2, not to be confused with the more common DB2), and still have production code written in COBOL, RPG, and other programming languages that have moved on to greener pastures. While these systems may not necessarily be directly webfacing, storing user information and email addresses (as well as communication with SMTP servers) is common, as well as text based systems interacting with these in the form of terminal emulator/3270 entry systems. == Visual Basic 6/ASP (not .NET) === VB6 is (sadly) not dead, and I know a fair number of organizations which can't migrate to VB.NET. The basic String data type in VB6 does support Unicode due to its COM hertiage, but much of the VB6 ecosystem still runs on codepages and older technologies for internationalization support. That being said, having a COM object for EAI/IDNs is much more doable here than some other systems. == dBase == Still exists (http://www.dbase.com/) and even still supports the MS-DOS versions (last update 2018!). There's no public documentation that I can find in a brief glance that talks about Unicode support. Obviously I could find more, but this gives an operating system, programming language, and database where Unicode is either non-standard or non-existent but may be used with handling IDN or EAI storage. Michael

2 1

Universal Acceptance Steering Group (UASG) - Draft Charter for Local Initiatives
by Ahlam M. Abu-Jadallah July 22, 2019

July 22, 2019

Dears, This is Ahlam M. Abu-Jadallah, the technical representative of .jo and IDN ccTLD of Jordan (.الاردن) Kindly find attached the Draft Charter for Local Initiatives with some comments or questions from my side, I hope they are fruitful for the initiative. Thank you. ______________________________ National Information Technology Center Ahlam M. Abu-Jadallah Information Technology Department Tel: 962.6.5300222 Fax: 962.6.5300277 متمو.الاردن <https://twitter.com/NITCJordan> https://twitter.com/NITCJordan <https://www.facebook.com/NITCJordan> https://www.facebook.com/NITCJordan <https://www.linkedin.com/company/nitcjordan> https://www.linkedin.com/company/nitcjordan ______________________________ Register your Arabic Domain Name under .alordun. For more information, please visit our website <http://سجل.الاردن/> http://سجل.الاردن Disclaimer: The message contained in this e-mail along with the attachments (if present) are meant for the use of the intended recipient only. If you are not the intended recipient, please notify the sender immediately. Any unauthorized disclosure, copying, distribution of or taking any action in reliance on the contents of the information contained herein is strictly prohibited.

1 0

Request for review: Report on Evaluation of Websites for Acceptance of E-mail Addresses, 2019
by Sarmad Hussain July 17, 2019

July 17, 2019

Dear all, Please find attached a recent study undertaken on the request of UASG on the Global Evaluation of Websites for Acceptance of E-mail Addresses 2019, for your review and feedback. Please send your feedback on ua-discuss(a)icann.org<mailto:ua-discuss@icann.org> list (visit https://uasg.tech/subscribe to subscribe) by 29 July. We look forward to your input. Regards, Sarmad

10 25

UA session at APrIGF 2019: "Universality of the DNS"
by Jennifer Chung July 17, 2019

July 17, 2019

Dear Colleagues, We will be having a session on Universal Acceptance at the Asia Pacific Regional IGF today 15:30-17:00 local / 05:30-07:00 UTC / time conversion link: https://igf.asia/2Z3V54F The session is a merger between ICANN and ICANN APRALO and the discussion will draw upon technical and policy experts from different sub regions in Asia-Pacific to update the community on the opportunities that UA opens up, the risks that exist and the respective roles of stakeholders within the IG community vis-a-vis UA. More details about the session can be found here: https://apps.2019.rigf.asia/submission/proposaldetail?id=364 Join us remotely here: https://igf.asia/aprigf2019-zoom1 Join our livestream here: https://igf.asia/livestream Full conference agenda: https://igf.asia/program For colleagues who are not able to join us live, the session will be transcribed and recorded as well. Best, Jennifer Jennifer Chung Director of Corporate Knowledge DotAsia Organisation | www.dot.asia <http://www.dot.asia>

2 1

Google Sheets UA oversight
by Mark W. Datysgeld July 8, 2019

July 8, 2019

Hello, everyone. Miguel Estrada from LACTLD brought to my attention that a trick that is being shared among system administrators for Google Sheets is to call the function "=ISEMAIL()", which validates a range of email addresses returning them as TRUE or FALSE. It so happens that this function is not UA-compliant. I bring the question to the UA community of who would be the point person at Google to reach out for this to be filed as an issue internally. Best regards, -- Mark W. Datysgeld from Governance Primer [www.markwd.website] Representing businesses in IG together with AR-TARC and ABES

3 3

Re: [UA-discuss] RFC 8398 `Internationalized Email Addresses in X.509 Certificates` implementation
by Nitin Walia July 4, 2019

July 4, 2019

Dear Dmitry Thanks for sharing this brilliant update. It&rsquos really a great update for EAI Warm Regards Nitin Walia नितिन वालिया Director निदेशक Data Xgen Technologies डाटा एक्सजेन टेक्नोलॉजीज Email: nitin(a)xgenplus.com नितिन(a)xn--v1bmv2ck2cxbe5k8bf.xn--h2brj9c Web: www.xgenplus.com एक्सजेनप्लस.भारत Mobile I whatsapp: +919828025000 Skype id - n_walia From: Dmitry Belyavsky MailId : [92475917]To: ua-discuss@icann.org,ua-eai@icann.orgSubject: [UA-discuss] RFC 8398 "Internationalized Email Addresses in X.509 Certificates" implementationDate: 03 Jul 2019 11:25:34 PM Hi all,Coordination Center for TLD .RU/.РФ is happy to announce a draft implementation of RFC 8398 "Internationalized Email Addresses in X.509 Certificates" for OpenSSL: https://cctld.ru/en/news/news_detail.php?ID=21240The implementation and some test examples are available for download here: https://cctld.ru/files/books/EAI.pdf (in Russian)Direct links:Draft implementation - https://cctld.ru/files/eai/rfc8398.diffTest examples - https://cctld.ru/files/eai/root.tar.gzInstructions - https://cctld.ru/files/eai/README.8398The implementation covers the following cases:- Displaying the EAI in X.509 certificates- Verifying NameConstraints in X.509 certificate chains of trust- Matching EAIs in X.509 with provided EAI.Feel free to test the patch and send feedback to pr(a)cctld.ru or to me directly . -- SY, Dmitry Belyavsky _______________________________________________By submitting your personal data, you consent to the processing of your personal data for purposes of subscribing to this mailing list accordance with the ICANN Privacy Policy (https://www.icann.org/privacy/policy) and the website Terms of Service (https://www.icann.org/privacy/tos) You can visit the Mailman link above to change your membership status or configuration, including unsubscribing, setting digest-style delivery or disabling delivery altogether (e.g., for a vacation), and so on.Do not Remove:[HID]20190703232534349[-HID]

1 0

Public domain/MIT licensed IDN library for C
by Michael Casadevall July 2, 2019

July 2, 2019

Short version: Is anyone aware of an implementation of IDNA2008 that is in the public domain or MIT/BSD licensed? Long version: During a discussion with Paul Hoffman, we were talking about the state of IDN support in at a core programming language level, and my efforts to write a yellow paper showing the full effort required to implement support for IDNs/EAIs we talked about the licensing of libidn2. Specifically, libidn2 is dual-licensed under the GPLv2/LGPLv3. This is rather problematic for implementing IDN support in many applications coded in C/C++. GPLv2 requires that an application that uses libidn be free and open source and compatible the GPLv2 licensing terms which is impossible for any propitiatory software package, or those under a free software but non-GPL compatible license such as the CDDL. LGPLv3 in theory solves this problem, but adds even more complications. LGPL allows libidn2 to linked to proprietary software but only in the form of a shared library (dll or so) file. However, LGPLv3 requires patent grants be given to any user of said library (GPLv3 section 11). This clause adds an extremely high barrier to entry in corporate environment which involves legal questions and may not be surmountable. As we want IDN support to go as far as wide as possible, the best way to accomplish that is an IDNA2008 implementation that is entirely non-embured, either under the MIT license, another weak copyleft license, or ideally in the public domain or CC-0 licenses. I searched around and came up empty but I'm hoping the list can point me in the right direction. Michael

4 4

Mailchimp - Part way there...
by Don Hollander July 2, 2019

July 2, 2019

See this notice in Domain Wire: https://domainnamewire.com/2019/06/28/mailchimp-has-challenges-with-non-asci i-characters/ don

2 1