[gnso-rds-pdp-wg] On unauthenticated vs gated access (was Re: Reputation systems are not just nice to have)

[Andrew Sullivan]

On Tue, Oct 03, 2017 at 07:53:55PM -0400, allison nixon wrote:
> What problem would this be intended to solve?

The problem that nobody has any idea who is collecting this data, and
that some of it is personal data.  

> Researchers wont be caught out by it because by and large we use
> aggregators, and the whois audit logs will summarily be full of "i am whois
> aggregator X and my purpose is to aggregate whois" and they will have the
> full support of the community, as they fulfill critical parts of the anti
> abuse purpose.

But then, of course, we can have meaningful discussions about what
kinds of clients are querying and at what volumes.  One thing I'm
finding pretty frustrating about all this discussion is that we're
having most of it in the complete absence of any data.

The legal memo we received made me believe that some sort of
accounting of who gets the data under what conditions would be a
necessary but not sufficient condition for publication of certain
kinds of data.

> This is part of the personal responsibility they need to take when they
> venture out into the internet, which they should learn sooner rather than
> later that it will not guarantee their safety.

I believe the history of "we need more user education" to solve
problems on the Internet suggests that it is not a great plan.

A

-- 
Andrew Sullivan
ajs at anvilwalrusden.com