[ncc-services-wg] Re: Allow DNSMON services to monitor ENUM domains

On 08.10 12:14, Jim Reid wrote:
> ... 
> I was deliberately vague here. :-) It could be the Tier-1 operator.  
> Or it might be the government/regulator. It depends on the national  
> circumstances. <CC>.e164.arpa  is a National Resource, just like a  
> country's territory and air space. Nobody should be poking around in  
> <CC>.e164.arpa without proper authority. Just like we usually have to  
> show passports when crossing borders.

I have never understood this argument really.  The DNS can be viewed as
a mechanism to publish information to the Internet at large.  Why would
it be improper to query the published information as long as such
querying does not degrade the service, e.g. constitute a DoS attack? 

So imagine the following hypothetical future situation: ENUM is widely
used in -say- Germany and hence the DNS service of 9.4.in-addr.arpa. 
has become operationally important to ISPs in the RIPE region; SKYPE is
a thing of the past, etc..  Now suddenly customers of ISPs are
having difficulties getting their calls connected.  A quick analysis
suggests that the DNS service for 9.4.in-adr.arpa. is not always
reachable.  The ISPs ask the RIPE NCC both as RIPE participants and as
RIPE NCC members to monitor the quality of this DNS service which is
critical to their business.  The NCC complies.  Next Merkel calls Pawlik
and says: "Dear Axel, you are poking around in my people's ENUM servers,
please stop that".  What should Axel's answer be:

1) "Dear Angela, I am so sorry that I poked into your national assets. 
It was the members that made me do it; but of course I will stop if you
take offense."

2) "Dear Angela, our member's have some problems that may have been
caused by data about your national assets not being available as it
should be.  Our members really have a need to know at any time if this
is the reason for their customers complaining to them.  Hence we will
continue to monitor.  By the way: we are generally regarded as a highly
professional and neutral source of such operational measurements."

I would expect that most of the RIPE NCC members and RIPE participants
would choose 2. I am also quite sure that the call would never happen 
becuase noone publishing something on the Internet really assumes
that they can stop it from being accessed and monitored. Otherwise
Merkel would have to call Google many times a day.

Tounge in-cheeckly your's 

Daniel