<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <meta name="Generator" content="Microsoft Word 15 (filtered medium)"> <style></style> </head> <body lang="EN-US" link="blue" vlink="purple"> <div class="WordSection1"> Dear Elad,<o:p></o:p> <o:p> </o:p> <o:p> </o:p> I was one of them who appreciated your idea and promoted, but to keep the discussion on this forum will not earn you much. You need to put this on the table to the right forum so it can be treated seriously and healthy debate make it acceptable.<o:p></o:p> <o:p> </o:p> I hope you track down your path towards next stage.<o:p></o:p> <o:p> </o:p> regards<o:p></o:p> <o:p> </o:p> <div> Atif Naveed<o:p></o:p> </div> <o:p> </o:p> <div> <div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in"> From: members-discuss <members-discuss-bounces@ripe.net> On Behalf Of Elad Cohen Sent: Monday, April 27, 2020 3:09 PM To: anthony.somerset@cloudunboxed.net; 'Cynthia Revstr�m' <me@cynthia.re>; 'Sascha Luck [ml]' <ripe-md@c4inet.net> Cc: members-discuss@ripe.net Subject: Re: [members-discuss] Regarding Elad Cohen's nomination and emails<o:p></o:p> </div> </div> <o:p> </o:p> <div> Anthony,<o:p></o:p> </div> <div> <o:p> </o:p> </div> <div> Everything that you wrote here are false and incorrect, I only responded to a person that was called an antisemitic and a racist, not by me, but by many other people in the Nanog list.<o:p></o:p> </div> <div> <o:p> </o:p> </div> <div> <ul style="margin-top:0in" type="disc"> <li class="MsoNormal" style="color:black;mso-list:l0 level1 lfo1">There is comments that “could” be considered defamatory – especially when there is limited to no evidence to prove the comment<o:p></o:p></li><li class="MsoNormal" style="color:black;mso-list:l0 level1 lfo1">You continue to harass/bully/attack other members of the list just because they don’t agree with your opinion<o:p></o:p></li><li class="MsoNormal" style="color:black;mso-list:l0 level1 lfo1">You are continuing to throw accusations around again without material evidence.<o:p></o:p></li><li class="MsoNormal" style="color:black;mso-list:l0 level1 lfo1">You are wishing to run for a position of authority which arguably calls you to a far higher standard with regards to how you put your message across<o:p></o:p></li></ul> </div> <div> <o:p> </o:p> </div> <div> <o:p> </o:p> </div> <div> My comments below in green regarding the fallacies that you raised:<o:p></o:p> </div> <div> <o:p> </o:p> </div> <div> <ul style="margin-top:0in" type="disc"> <li class="MsoNormal" style="color:black;mso-list:l1 level1 lfo2">The required infrastructure globally would be phenomenal - Spamhaus already have such infrastructure in place and they are being sponsored (they don't sell a service at spamhaus.org), so it is feasible<o:p></o:p></li><li class="MsoNormal" style="color:black;mso-list:l1 level1 lfo2">It would also require far more systems level expertise than is realised (think database replication/caching etc) – especially when you compare this to say, operating one of the root level nameservers or AS112 or RPKI - If system are designed well and developed well then maintenance is low, I don't see this problem as you do<o:p></o:p></li><li class="MsoNormal" style="color:black;mso-list:l1 level1 lfo2">It would for many place an unacceptable “single” point of failure in your proposed system - Bgp anycast deployment will avoid it<o:p></o:p></li><li class="MsoNormal" style="color:black;mso-list:l1 level1 lfo2">Who would pay for this service? How? What is the pricing model? - RIRs + ccTLDs Registries , and after it the many site owners that will want their newsletters to reach the mailboxes with 100% reliability<o:p></o:p></li><li class="MsoNormal" style="color:black;mso-list:l1 level1 lfo2">Centralising the management has issues - for stability issues bgp anycast will be used, for security and privacy issues - hashing will be used, currently each newsletter subscribers are also centralized, for example mailchimp is a centralized service with many 'mailing list' email addresses. And mailing lists owner will not be obligated to use NoSpam.org - they will still be able to use MailChimp or to save their newsletter system locally - in this case they shouldn't send newselleter with links/images/url's - if their subscribers are using upgraded email clients, simple mailing lists with simple plain text will reach the inboxes - no matter if the domain owner will choose to create a mailing list through NoSpam.org or to implement it on his server with a 3rd party newsletter software.<o:p></o:p></li><li class="MsoNormal" style="color:black;mso-list:l1 level1 lfo2">DATA protection/GPDR compliance – just because its hashed doesn’t make you any less responsible - There will be a checkbox in the registration form for the end-user for accepting terms and privacy policy, and any domain owner that will open an account at NoSpam.org will also have a checkbox that he read the terms and privacy policy.<o:p></o:p></li><li class="MsoNormal" style="color:black;mso-list:l1 level1 lfo2">Risk of hash collisions? – is this an issue to be concerned about? It's a good point, hashes can be splited - meaning that each email address will have two hashes - for the two parts before and after @ , in order to minimize the risk of hash collision, in a rare case of collision the end-user will see a newsletter that was emailed directly to him but the user didn't subscribe for it, the user will be able to blacklist.<o:p></o:p></li><li class="MsoNormal" style="color:black;mso-list:l1 level1 lfo2">Like Root Certificates – getting mail client vendors to update just for your system is going to be exceptionally difficult if not impossible) - once the 5 RIRs and the ccTLDs are ready for this task - I believe that with all of their power it will be possible to recruit client vendors to update.<o:p></o:p></li></ul> <o:p> </o:p> </div> <div> <o:p> </o:p> </div> <div> Respectfully,<o:p></o:p> </div> <div> Elad<o:p></o:p> </div> <div class="MsoNormal" align="center" style="text-align:center"> <hr size="2" width="98%" align="center"> </div> <div id="divRplyFwdMsg"> From: <a href="mailto:anthony.somerset@cloudunboxed.net">anthony.somerset@cloudunboxed.net</a> <<a href="mailto:anthony.somerset@cloudunboxed.net">anthony.somerset@cloudunboxed.net</a>> Sent: Monday, April 27, 2020 2:35 PM To: Elad Cohen <<a href="mailto:elad@netstyle.io">elad@netstyle.io</a>>; 'Cynthia Revstr�m' <<a href="mailto:me@cynthia.re">me@cynthia.re</a>>; 'Sascha Luck [ml]' <<a href="mailto:ripe-md@c4inet.net">ripe-md@c4inet.net</a>> Cc: <a href="mailto:members-discuss@ripe.net">members-discuss@ripe.net</a> <<a href="mailto:members-discuss@ripe.net">members-discuss@ripe.net</a>> Subject: RE: [members-discuss] Regarding Elad Cohen's nomination and emails <o:p></o:p> <div> <o:p></o:p> </div> </div> <div> <div> Wow well over 100 emails over the weekend on this topic…<o:p></o:p> <o:p></o:p> For the record – I have no ties to the Spamhaus project, I don’t personally use it and I can’t say I knowingly know anyone connected to the project in any material way<o:p></o:p> <o:p></o:p> Elad – your behaviour and your responses continue to be inflammatory in nature (among other things) despite a good many people saying enough now. Please just stop.<o:p></o:p> <o:p></o:p> Its one thing to have an opinion and air it – I would not want to prevent this from happening but its another thing entirely when<o:p></o:p> <o:p></o:p> <ul style="margin-top:0in" type="disc"> <li class="MsoNormal" style="mso-list:l3 level1 lfo3">There is comments that “could” be considered defamatory – especially when there is limited to no evidence to prove the comment<o:p></o:p></li><li class="MsoNormal" style="mso-list:l3 level1 lfo3">You continue to harass/bully/attack other members of the list just because they don’t agree with your opinion<o:p></o:p></li><li class="MsoNormal" style="mso-list:l3 level1 lfo3">You are continuing to throw accusations around again without material evidence.<o:p></o:p></li><li class="MsoNormal" style="mso-list:l3 level1 lfo3">You are wishing to run for a position of authority which arguably calls you to a far higher standard with regards to how you put your message across<o:p></o:p></li></ul> <o:p></o:p> Remember you have a right to your opinion, just like we also respectively have the right not to listen to it and/or pick it apart as long as we all keep things civilised and follow the relevant good conduct guidelines in effect.<o:p></o:p> <o:p></o:p> This behaviour would quite frankly get you fired at many companies so why do you consider it acceptable here? You ultimately only are making yourself look worse<o:p></o:p> <o:p></o:p> To the Ripe NCC Moderators/Admin team – if there is some formal channel that I can now make my complaint known or to request at the very least an immediate moderation of Elad Cohen’s submissions to this mailing list please urgently advise. I would like to formally agree with Cynthia and others’ complaints on this matter<o:p></o:p> <o:p></o:p> Back to the “idea” that triggered this particular wave of arguments, there are a huge number of fallacies with the idea<o:p></o:p> <o:p></o:p> <ul style="margin-top:0in" type="disc"> <li class="MsoNormal" style="mso-list:l2 level1 lfo4">The required infrastructure globally would be phenomenal<o:p></o:p></li><li class="MsoNormal" style="mso-list:l2 level1 lfo4">It would also require far more systems level expertise than is realised (think database replication/caching etc) – especially when you compare this to say, operating one of the root level nameservers or AS112 or RPKI<o:p></o:p></li><li class="MsoNormal" style="mso-list:l2 level1 lfo4">It would for many place an unacceptable “single” point of failure in your proposed system<o:p></o:p></li><li class="MsoNormal" style="mso-list:l2 level1 lfo4">Who would pay for this service? How? What is the pricing model?<o:p></o:p></li><li class="MsoNormal" style="mso-list:l2 level1 lfo4">Centralising the management has issues<o:p></o:p></li><li class="MsoNormal" style="mso-list:l2 level1 lfo4">DATA protection/GPDR compliance – just because its hashed doesn’t make you any less responsible<o:p></o:p></li><li class="MsoNormal" style="mso-list:l2 level1 lfo4">Risk of hash collisions? – is this an issue to be concerned about?<o:p></o:p></li><li class="MsoNormal" style="mso-list:l2 level1 lfo4">Like Root Certificates – getting mail client vendors to update just for your system is going to be exceptionally difficult if not impossible)<o:p></o:p></li></ul> <o:p></o:p> Now on the matter of centralising the running of such a system is problematic, especially when you consider that this system is fundamentally a trust based system, you are relying in faith that the responsible guardians of said systems are to be trusted to act responsibly and not to the detriment of others. For some operators in the internet space there are known issues of people doing bad stuff (BGP hijacking, internet shutdowns etc) and I know of at least one RIR (not RIPE) that has not exactly operated fully within their own constitutional mandate and processes in recent times. A good friend of mine and work colleague, Andrew Alston, recently wrote a related article about trust and centralisation as it relates to RPKI - <a href="https://www.linkedin.com/pulse/rpki-things-being-considered-andrew-alston/"> https://www.linkedin.com/pulse/rpki-things-being-considered-andrew-alston/</a> a lot of the comments made there probably equally apply to any proposed mail filtering solution.<o:p></o:p> <o:p></o:p> To be totally frank – the only real way to solve the email spam problem is just to turn off email entirely and replace it with some other better architected solution, everything else is realistically a band-aid that people will find ways around.<o:p></o:p> <o:p></o:p> Kind Regards<o:p></o:p> Anthony Somerset<o:p></o:p> <o:p></o:p> <div> <div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in"> From: members-discuss <<a href="mailto:members-discuss-bounces@ripe.net">members-discuss-bounces@ripe.net</a>> On Behalf Of Elad Cohen Sent: Monday, April 27, 2020 12:59 PM To: Cynthia Revstr�m <<a href="mailto:me@cynthia.re">me@cynthia.re</a>>; Sascha Luck [ml] <<a href="mailto:ripe-md@c4inet.net">ripe-md@c4inet.net</a>> Cc: <a href="mailto:members-discuss@ripe.net">members-discuss@ripe.net</a> Subject: Re: [members-discuss] Regarding Elad Cohen's nomination and emails<o:p></o:p> </div> </div> <o:p></o:p> <div> Cynthia,<o:p></o:p> </div> <div> <o:p></o:p> </div> <div> The sick person which you are referring to and is your colleague from "The Spamhaus Project", defamed me for many many months, here in Ripe and in Nanog, he called me by many names without a single proof. He was called an antisemitic and a racist not by me - but by people which are not related to me in Nanog. After many months I provided an official response in Ripe. I didn't hear your voice when he defamed me for many many months with him calling me by many names. So obviously your interests are hidden.<o:p></o:p> </div> <div> <o:p></o:p> </div> <div> In the other working groups - I only replied to him, and I didn't hear your voice regarding your sick colleague initial message with name callings towards me when I only replied to his attack on me. And his personal attack on me is exactly like your personal attack on me now - you are afraid that an alternative solution to "The Spamhaus Project" will be implemented if I will be elected.<o:p></o:p> </div> <div> <o:p></o:p> </div> <div> Respectfully,<o:p></o:p> </div> <div> Elad<o:p></o:p> </div> <div class="MsoNormal" align="center" style="text-align:center"> <hr size="2" width="98%" align="center"> </div> <div id="x_divRplyFwdMsg"> From: members-discuss <<a href="mailto:members-discuss-bounces@ripe.net">members-discuss-bounces@ripe.net</a>> on behalf of Cynthia Revstr�m <<a href="mailto:me@cynthia.re">me@cynthia.re</a>> Sent: Monday, April 27, 2020 1:50 PM To: Sascha Luck [ml] <<a href="mailto:ripe-md@c4inet.net">ripe-md@c4inet.net</a>> Cc: <a href="mailto:members-discuss@ripe.net">members-discuss@ripe.net</a> <<a href="mailto:members-discuss@ripe.net">members-discuss@ripe.net</a>> Subject: Re: [members-discuss] Regarding Elad Cohen's nomination and emails <o:p></o:p> <div> <o:p></o:p> </div> </div> <div> <div> > The RIPE *NCC* has no business either enforcing "professionality" on the *community* mailing lists - this is the WG chairs' responsibility. <o:p></o:p> <div> <o:p></o:p> </div> <div> AFAIK there are no WG chairs of members-discuss and members-discuss is a mailing list that the RIPE NCC hosts to let RIPE NCC members discuss RIPE NCC membership related topics, so I think they certainly have business enforcing people to be professional on this mailing list.<o:p></o:p> </div> <div> <o:p></o:p> </div> <div> I would also like to add that Elad has multiple times on different mailing lists ignored the WG chairs.<o:p></o:p> </div> <div> Also this is happening across a variety of RIPE/RIPE NCC mailing lists that are all hosted by the RIPE NCC and as such I think it is their business to keep them to a professional standard.<o:p></o:p> </div> <div> <o:p></o:p> </div> <div> > If I'm wrong, where do<o:p></o:p> </div> I submit the list of people I'd like to see excluded from the community? <o:p></o:p> <div> <o:p></o:p> </div> <div> There should not be a long list of people, but when someone is behaving unprofessionally, calling people "coconut", being defamatory towards the RIPE NCC, ignoring WG chairs, I do think that they have gone too far and everything has a limit.<o:p></o:p> </div> <div> Like we wouldn't allow someone to send sales emails to the mailing list as an example, aka limits on what is allowed.<o:p></o:p> </div> <div> <div> <o:p></o:p> </div> <div> - Cynthia<o:p></o:p> </div> </div> </div> <o:p></o:p> <div> <div> On Mon, Apr 27, 2020 at 12:43 PM Sascha Luck [ml] <<a href="mailto:ripe-md@c4inet.net">ripe-md@c4inet.net</a>> wrote:<o:p></o:p> </div> <blockquote style="border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-top:5.0pt;margin-right:0in;margin-bottom:5.0pt"> On Mon, Apr 27, 2020 at 12:02:59AM +0200, Cynthia Revstrm wrote: >I would like to propose that the RIPE NCC ban Elad Cohen from interacting >with the RIPE Community (via Meetings or mailing lists) due to his blatant >disregard for the Code of Conduct and for being hostile towards others in >the community. As the RIPE NCC hosts and manages these lists I think the >RIPE NCC has a responsibility to keep the lists professional and to remove >those who repeatedly ignore what the WG chairs are saying. The RIPE *NCC* has no business either enforcing "professionality" on the *community* mailing lists - this is the WG chairs' responsibility. Nor do I think the NCC should determine who can be a member of the RIPE community or not. If I'm wrong, where do I submit the list of people I'd like to see excluded from the community? I think this proposal is the most out-of-order thing I've yet seen in this thread. rgds, Sascha Luck > >- Cynthia >_______________________________________________ >members-discuss mailing list ><a href="mailto:members-discuss@ripe.net" target="_blank">members-discuss@ripe.net</a> ><a href="https://mailman.ripe.net/" target="_blank">https://mailman.ripe.net/</a> >Unsubscribe: <a href="https://lists.ripe.net/mailman/options/members-discuss/ripe-md%40c4inet.net" target="_blank"> https://lists.ripe.net/mailman/options/members-discuss/ripe-md%40c4inet.net</a> _______________________________________________ members-discuss mailing list <a href="mailto:members-discuss@ripe.net" target="_blank">members-discuss@ripe.net</a> <a href="https://mailman.ripe.net/" target="_blank">https://mailman.ripe.net/</a> Unsubscribe: <a href="https://lists.ripe.net/mailman/options/members-discuss/me%40cynthia.re" target="_blank"> https://lists.ripe.net/mailman/options/members-discuss/me%40cynthia.re</a><o:p></o:p> </blockquote> </div> </div> </div> </div> </div> </body> </html>