[arin-ppml] LRSA concerns (Re: Policy Proposal: Whois Integrity Policy Proposal)

[William Herrin]

On Wed, Aug 20, 2008 at 9:38 PM, Paul Vixie <vixie at isc.org> wrote:
>> > http://listserv.educause.edu/cgi-bin/wa.exe?A2=ind0804&L=security&P=5103
>>
>> Sweet. I completely missed that one.
>>
>> Under LRSA 15.k., an "evil" ARIN could contract the whois operation to
>> someone incompetent, fail to perform it successfully for 30 days, and
>> based on that failure opt to terminate all LRSA agreements
>> immediately. Since the termination is outside the scope of 14.c., the
>> addresses revert to ARIN per 14.e.
>
> what's your proposed fix?

The contract termination process is the linchpin. Fix that part so
that the registrant holds the power and all the other problems are
academic.

Regards,
Bill Herrin


-- 
William D. Herrin ................ herrin at dirtside.com bill at herrin.us
3005 Crane Dr. ...................... Web: <http://bill.herrin.us/>
Falls Church, VA 22042-3004