[dns-wg] DNS4EU?

Hi Hank, all,

Apologies for the delay here - was hoping to have some more substantial information, but in the absence of that, our colleagues at the European Commission have been able to share the content of the four slides that they delivered at last month’s HLIG meeting.

The slides were as follow:

1. DNS Resolution Markets: Problems
* Consolidation (+DoH)
* Incidents affecting large DNS resolvers
* Data Protection Rights
* Prevention of Cyberattacks; Virus; Malware

2. DNS4EU: Concept
* DNS4EU is conceived as an alternative to existing DNS resolution services, increasing overall internet resilience, and offering European citizens and private and public organizations the capacity to access the web with a high-quality and free service, based in the EU, that guarantees data protection according to EU rules and increases the protection from malware, phishing and cyberattacks.

3. DNS4EU: Characteristics
* Have a large footprint within the EU, enabling paid premium services such as specific performance and security criteria for vertical sectors (health, transport, industry, finance, etc.) or enhanced security (filtering, 24x7 support) for companies.
* Be fully transparent and compliant with the GDPR.
* Offer state-of-the art, ad-hoc DNS filtering against phishing or malware based on existing global thread feeds and own feeds.
* Conform to the latest security and privacy technological standards, including DoH.
* Develop wholesale discovery and resolution services for other digital service providers, including ISPs and Cloud service providers.

4. DNS4EU: Next Steps
* Pending confirmation: Connecting Europe Facility (CEF2) – European Cloud
* Federation Initiative
* 50% of the initial infrastructure investment
* Expected publication of the call: End of 2021
* Conform to the latest security and privacy technological standards, including DoH.
* Federated Structure: High-quality consortiums, potentially including vertical industries, to best increase the footprint and customer base of DNS4EU in the EU, reduce costs through shared resources, operations and cyber security feeds, and ensure the long-term sustainability of DNS4EU

——

The Commission staff have also expressed their interest in any feedback from this working group that might help “fine tune the proposal” (I believe the discussion here has already provided some relevant insights). However, at this point, the next step is likely to be publication of the call for proposals, as referenced in the fourth slide above.

Cheers
Chris


> On 8 Nov 2021, at 14:54, Chris Buckridge <chrisb at ripe.net> wrote:
> 
> Hi Hank, all,
> 
> I don’t have a lot that I can add to what Nick and Stephane have already posted. But I will note that the European Commission has scheduled one of the regular meetings of its High Level Group on Internet Governance (HLIG) for this Wednesday; portions of those meeting agendas are generally open to industry stakeholders, and Wednesday’s agenda includes an update on DNS4EU.
> 
> The information page for the HLIG is here:
> https://ec.europa.eu/transparency/expert-groups-register/screen/expert-groups/consult?lang=en&groupId=2450&fromMeetings=true&meetingId=23922
> 
> It’s not clear whether registration for the meeting is still open at this point, but minutes are published publicly, and the RIPE NCC can report back to this working group if there are any updates of note.
> 
> Best regards,
> Chris
> 
>> On 8 Nov 2021, at 14:15, Stephane Bortzmeyer <bortzmeyer at nic.fr> wrote:
>> 
>> On Mon, Nov 08, 2021 at 07:12:38AM +0200,
>> Hank Nussbacher <hank at efes.iucc.ac.il> wrote
>> a message of 34 lines which said:
>> 
>>>  Does anyone have further insight into the European initiative
>>>  known as DNS4EU?
>> 
>> There is very little actual information published on this project.
>> 
>> According to some rumors, it would be a public DNS resolver, with
>> built-in censorship (for the laws of 27 countries).
>> 
>> dns4eu.eu has been registered by DG Connect
>> <https://en.wikipedia.org/wiki/Directorate-General_for_Communications_Networks,_Content_and_Technology>
>> 
>> 
>> 
> 

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: Message signed with OpenPGP
URL: </ripe/mail/archives/dns-wg/attachments/20211215/29fa53b6/attachment.sig>