[ncc-services-wg] @EXT: RE: 2018-05 New Policy Proposal (Publication of Legal Address of Internet Number Resource Holder)

Il 10/10/18 13:21, Marcolla, Sara Veronica ha scritto:

> What would you think if the proposal would be adjusted in that way (to 
> publish the _registration number and the country of registration for 
> resource holder_)?

That's what I suggested as a last resort, so I cannot disagree.
But for your purpose I think it's completely useless, a waste of time 
and resources. They will make fun of you for years, I'm already smiling.

The information in the whois is usually provided by the same guy you 
will be looking for.
If I were a detective, I would trust whois less than a drunk fortune-teller.

Imagine a scenario like this:
Alice is a LIR, Bob is Alice's customer. Bob rents a /29 to Charlie. Bob 
dutifully informs Alice to register the /28 inetnum object to Charlie. 
Data pops out in the whois.
Charlie attacks a bank in the United Arab Emirates, then he runs with 
the emirati dirham without paying Bob.
Dubai police calls you and asks to catch the rascal.

Question:
If Charlie give Bob a satisfactory advanced untraceable payment and some 
random company data (maybe gathered from the whois, how fun), will or 
will not the whois lookup give Charlie even more advance in the run?

Ok, I know, in real life Charlie would simply crack Dave's smart teapot, 
but the scenario is real. This is how people usually work in 
businessland: they pursue payments not truth or perfection.

Whois is not and will never be a reliable source of information.
Whois is not even good to track allocations, if I had a cent for every 
spam email from unallocated address space I would have enough money to 
buy the internet.

Regards,

-- 
Nik Soggia - TELNET S.r.l.              Phone: +39-0382-529751
Via Buozzi, 5 - 27100 Pavia, Italy        Fax: +39-0382-528074