[anti-abuse-wg] centralized abuse whois

Leo Vegoda wrote:
> Hi Frank,
>
> Frank Gadegast wrote:
>
> [...]
>
>>>> The main problem is, that IANA should be responsible
>>>> for that, but they will not create a technical service
>>>> for the public.
>>>
>>> Can you please expand upon that?
>
> [...]
>
>> So, it only tells me the reponsible RIR.
>> Now I know its RIPE, then I have to ask RIPE
>> (and when IANA tells me APNIC, I might have to
>>    ask APNIC first, wich tells me, its KRNIC ...)
>>
>> There might be more, when using options, but I would
>> like a command like the following wich would
>> return one single line
>>
>> # whois -h abuse.iana.org 85.237.64.1
>> abuse at powerweb.de
>>
>> So, there should be an interface between IANA
>> and all RIRs to query abuse contacts,
>> IANA knows at least, which RIR to ask.
>
> We could implement an active referral service if there was strong demand
> for it.

The problem is how to estimate a demand for people, that are no "pros"
and have no idea, that they would probably like this central service.

I believe that there are no members on this list, that do not know
how to find an abuse contact with current tools, so this list
would not be representative ... even the RIRs members itself would
not be representative ...

> However, I wonder whether taping lots of whois servers together
> with web interfaces and scripting is the right way to go. As I understand
> it, the protocol being developed by the IETF's WEIRDS WG "SHOULD be able
> to deliver a reply that is effectively a referral or redirect to another
> server" as well as supporting internationalised addresses and so forth.

URL ?

> That might be a better way to go.

But why do things always need to be complicated ? Using this way,
it would not work during the next 5 years ...
Remember how long it took, to have the abuse-c and the -b option
at RIPE ...

And involving groups and standards and all the like would end up
in an interface so complicated, that it isnt usefull for normal
people anymore, it will be full of options, explanations, dos
and donts, funny APIs based on pretty seldom standards and the like ...

The more easy way would probably be:
- IANA tells the RIRs to implement a whois like the "whois -b" from RIPE
   only reachable from IANAs servers (lets say until August ;o)
- IANA creates the new whois under abuse.iana.org, and referres the
   queries and standarizes the output

I would estimate about 1/2 hour work on IANAs side ...

Done, bingo.

> Regards,
>
> Leo


Kind regards, Frank