[anti-abuse-wg] 2013-01 New Policy Proposal (Openness about Policy Violations)

Hi Erik,

> I think I understand the intent of the proposal, however I would think I would want a bit more reluctant in going overboard on the transparency. 
> 
> What I read in the proposal is that you want to know if you made a complained, that you want to know the status, steps taken etc.  

Correct

> However until that is processed (resources revoked), is it required to have it published publicly?  I don't think so, especially to avoid slander as the form of attack by anonymous complainers. 
> 
> If someone complains about someone/somebody/resource, should it not be a better way to have that status info between the complainer, the owner of the resource / object and RIPE ?  Especially if you want to make sure that everyone involved is updated about the status.

Ok

> That could be done behind a RIPE NCC account, where the owner of the resource can see who has complained and the complainer can see the status or a ticket status system with a unique ID per entry and a pin number for added safety. 

I still would like to give complainers the option not to have their identity published. That option already exists today and I don't want to remove it. If someone wants to comlain about i.e. a criminal organisation I can understand their need to remain anonymous (at least publicly)

> If there are things that are not correct and resources are revoked, it could be listed somewhere that the resource was revoked based on a violation of the policy, with a key-word indicating why (incorrect contact details or contact lost, returned or policy violation etc. ) 

That is in the proposed 'returned' file.

> Investigated complains, which are processed but no violation, should be communicated back to the complainer, but not posted publicly imho. 

That would be an acceptable compromise for me. 

> The idea of publicly publishing entries about certain resource (holders) based on anonymous complains is something I don't like. 
> Yes I think I understand why one would want to be anonymous in certain cases, but if we are going to publish that kind of data, it should only be the actual problems and not all open and closed cases. 

I still want to have a bit more openness than that. I see that we'll never get consensus on publishing all reports. I wanted to see where the limits are, and publishing everything seems to go too far :-)

I want to suggest the following direction for this proposal:
Change section 1 (1. Transparency on reported policy violations) to:
- RIPE NCC publishes statistics on complaints/reports (number of complaints in each state: new, under investigation, etc)
- RIPE NCC provides a way for the complainer and resource holder to see the progress, keeping the currently existing privacy options

And leave section 2 (2. Transparency on reclaimed resources) as it currently is. I haven't seen any objections to that part yet.

Thanks,
Sander