<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
</head>
<body bgcolor="#FFFFFF">
<div>I originally had the same queries, but not anymore.</div>
<div><br>
</div>
<div>If an abuse contact becomes standardized and mandatory then it will be easier to consistently contact the correct contact in organizations that take abuse seriously. </div>
<div><br>
</div>
<div>Unfortunately not all operators take abuse seriously, but that us not going to change anytime soon ( the presentation on reputation at RIPE 61 makes for an interesting read and possible way forward)</div>
<div><br>
</div>
<div>While it would be wonderful if ALL operators took abuse seriously it is futile for the purposes of this proposal.</div>
<div><br>
</div>
<div>Maybe there is an opportunity for this WG to work on operator education, though I am unsure as to the correct protocols and procedures for same</div>
<div><br>
</div>
<div>Regards</div>
<div><br>
</div>
<div>Michele<br>
<br>
Mr. Michele Neylon
<div>Blacknight</div>
<div><a href="http://Blacknight.tel">http://Blacknight.tel</a></div>
<div><br>
</div>
<div>Via iPhone so excuse typos and brevity</div>
</div>
<div><br>
On 17 Nov 2010, at 13:59, "Vissers, Pepijn" <<a href="mailto:P.Vissers@opta.nl">P.Vissers@opta.nl</a>> wrote:<br>
<br>
</div>
<div></div>
<blockquote type="cite">
<div>
<div class="WordSection1">
<p class="MsoPlainText"><span lang="EN-US">Dear list,<o:p></o:p></span></p>
<p class="MsoPlainText"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoPlainText"><span lang="EN-US">On behalf of the Team Internetsafety of the Dutch Telecommunications Authority OPTA, I would like to comment on the draft proposal 2010-08. The Team Internetsafety conducts spam- and malware investigations related
to the Netherlands. Almost all of these investigations have components which require us to use RIPE (or other RIRs) for several pieces of information, most commonly valid abuse contacts for a netblock or ASN.
<o:p></o:p></span></p>
<p class="MsoPlainText"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoPlainText"><span lang="EN-US">We strongly support the mandatory addition of an abuse-mailbox: field in the irt object. However, we see several loopholes in the current contents of the proposal.
<o:p></o:p></span></p>
<p class="MsoPlainText"><span lang="EN-US">1. There is no mention in the policy about the validity of an abuse-mailbox: entry
<o:p></o:p></span></p>
<p class="MsoPlainText"><span lang="EN-US">2. There is no mention in the policy about the responsiveness of an abuse-mailbox: entry
<o:p></o:p></span></p>
<p class="MsoPlainText"><span lang="EN-US">3. There is (logically) no mention in the policy about a periodic check on (1) and (2)
<o:p></o:p></span></p>
<p class="MsoPlainText"><span lang="EN-US">4. There is no mitigating procedure in case of false/missing/invalid/... abuse-mailbox: information<o:p></o:p></span></p>
<p class="MsoPlainText"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoPlainText"><span lang="EN-US">Ad 1: What will stop a RIPE member from entering an invalid e-mail address? If the purpose of the policy is to ‘solve the problem of finding the right abuse contact’, some additional procedure should be in place to
make sure mail to the mentioned abuse-mailbox: does actually arrive somewhere and does not bounce.<o:p></o:p></span></p>
<p class="MsoPlainText"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoPlainText"><span lang="EN-US">Ad 2: A valid e-mail address is no guarantee that abuse mail is being handled or even looked at. Although we recognize it might not be the responsibility of RIPE to ensure a maintainer has a proper abuse policy mechanism
in place, we’d encourage some additional reflection on this issue. <o:p></o:p></span></p>
<p class="MsoPlainText"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoPlainText"><span lang="EN-US">Ad 3: Requiring a field update with each object update is a good idea, however with largely static objects it might be a good idea to periodically check at least (1) and preferably (2).
<o:p></o:p></span></p>
<p class="MsoPlainText"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoPlainText"><span lang="EN-US">Ad 4: If a member (systematically) does not adhere to the mandatory policy, some kind of procedure should be in place to motivate the member to follow procedure. Without 'repercussions', a 'mandatory' policy becomes
just mandatory in name, not in function.<o:p></o:p></span></p>
<p class="MsoPlainText"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoPlainText"><span lang="EN-US">Kind regards,<o:p></o:p></span></p>
<p class="MsoPlainText"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoPlainText"><span lang="EN-US">Pepijn Vissers<o:p></o:p></span></p>
<p class="MsoPlainText"><span lang="EN-US">Team Internetsafety<o:p></o:p></span></p>
<p class="MsoPlainText">OPTA<o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial","sans-serif""><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial","sans-serif""><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial","sans-serif"">-<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial","sans-serif""><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial","sans-serif""><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial","sans-serif""><o:p> </o:p></span></p>
</div>
<br>
<br>
<table bgcolor="white" style="color:black">
<tbody>
<tr>
<td><br>
+++++++++++++++++++++++++++++++++++++++++++++<br>
Disclaimer<br>
Dit e-mailbericht kan vertrouwelijke informatie bevatten of informatie die is beschermd door een beroepsgeheim.<br>
Indien dit bericht niet voor u is bestemd, wijzen wij u erop dat elke vorm van verspreiding, vermenigvuldiging<br>
of ander gebruik ervan niet is toegestaan.<br>
Indien dit bericht blijkbaar bij vergissing bij u terecht is gekomen, verzoeken wij u ons daarvan<br>
direct op de hoogte te stellen via tel.nr 070 315 3500 of e-mail <a href="mailto:mail@opta.nl">mailto:mail@opta.nl</a> en het bericht te vernietigen.<br>
Dit e-mailbericht is uitsluitend gecontroleerd op virussen.<br>
OPTA aanvaardt geen enkele aansprakelijkheid voor de feitelijke inhoud en juistheid van dit bericht en er kunnen <br>
geen rechten aan worden ontleend.<br>
<br>
<br>
This e-mail message may contain confidential information or information protected by professional privilege.<br>
If it is not intended for you, you should be aware that any distribution, copying or other form of use of<br>
this message is not permitted.<br>
If it has apparently reached you by mistake, we urge you to notify us by phone +31 70 315 3500<br>
or e-mail <a href="mailto:mail@opta.nl">mailto:mail@opta.nl</a> and destroy the message immediately.<br>
This e-mail message has only been checked for viruses.<br>
The accuracy, relevance, timeliness or completeness of the information provided cannot be guaranteed.<br>
OPTA expressly disclaims any responsibility in relation to the information in this e-mail message.<br>
No rights can be derived from this message.</td>
</tr>
</tbody>
</table>
</div>
</blockquote>
</body>
</html>