[ppml] Policy Proposal 2003-3: Residential Customer Privacy

[william at elan.net]

Provider's abuse contacts can be entered in whois, in fact for "simple reassign" there is no
new ORG created and no special contact there - just a record on who the ip 
block is swipped 

I'm against removing requirement of person's name for swips. It is essential to abuse 
investigations to have a good reference and in particular to be able to correspond
two independent ip ranges (from different ip providers) to the same person or organization
or even to just particular name. Address is nice tool, but I understand how it can be missused
in public records such as whois, the situation is not the same with only the name. 

But I do understand privacy issues  and will consider it to be acceptable compromise
if provider hides real full name by entering something like "John D." instead of
"John Doe" but I do not think it is necessary to change policy to allow for this.

On Fri, 25 Jul 2003, Owen DeLong wrote:

> As someone who has IP allocations in my house, I must say I can see both
> sides to this issue.  However, we aren't necessarily talking about ORGS
> in this case.  It is not unusual today for end-user consumers to have
> multiple computers and receive a /28 or /29 from their provider for those
> computers to share an internet link.  We're talking about a family
> with two working parents and a couple of high-school to college age kids
> all of whom have their own systems, for example.  With the inexpensive
> availablity of DSL and 802.11, this is becoming less common.  This is a
> good thing.  However, I can see the desire of the average household to
> not publish their home address, names, and phone numbers in whois.  I have
> chosen to publish mine, but I can understand many people choosing not to.
> 
> In this case, their provider should still have to account for the space
> to ARIN, but, it is not unreasonable, if the provider chooses to, for the
> provider to take responsibility for handling abuse complaints and contact
> about problems with the network.  If the provider can't contact the customer
> and get the issue resolved, they should turn off their access until it is.
> 
> Owen
> 
> 
> --On Friday, July 25, 2003 12:35 PM -0400 sigma at smx.pair.com wrote:
> 
> >
> >> P.P.S. we are talking about the public whois directory here, not ARIN's
> >> internal
> >> databases which they collect from us under NDA. There will, of course,
> >> be  a lot more
> >> detail about allocations and assignments in ARIN's internal systems.
> >
> > How does moving some WHOIS data into an internal database better serve
> > ARIN's community?  The details of allocations should be as transparent as
> > reasonably possible, and the level of information in WHOIS at present is
> > sufficient except that it lacks verification - which is a different issue.
> >
> > The idea that an organization should opt out of listing any contact
> > addresses because they aren't willing to communicate regarding problems
> > with their netblock seems quite counterproductive.
> >
> > Kevin
> >
>