[arin-ppml] Petition Underway - Policy Proposal 95: CustomerConfidentiality - Time Sensitive

[James Hess]

On Tue, Feb 2, 2010 at 5:26 AM,  <michael.dillon at bt.com> wrote:
> A 10th grade kid's extracurricular activities have nothing
> whatsoever to do with the school's network. We've already
> been told that this is a small photography business that
> has a server colocated with their local ISP. Since the

_A server colocated with their local ISP_   stop. One server does not
justify a /29,  it doesn't have to be SWIP'ed or listed in WHOIS.

> business owners are experts in photography, it is reasonable
> to assume that the server and networking expertise comes
> from outside the photography business. [...]
Yes.   And part of that  "networking expertise"  includes providing
someone to contact about abuse and other abuses.

> tech support as and when needed, not on retainer and not
> on-call 24x7. It is also reasonable to assume that they
If they are not on-call 24x7,  then the contact information provided
should be contact information that goes to a  "Voicemail service"
when the contact is not on call.

It is not an issue with the registry if someone chose to provide a
phone number capable of disrupting an  off-call admin.   Generally,
the phone numbers used should be ones that belong to the organization,
 that only work when an admin is available.

Important networks should have someone on call 24x7.

> Why on earth do you want to polute the whois directory with
> thousands of phone numbers for 10th grader's mobile phones?

This is a classic example of a straw man argument.
In no way, shape or form, does current policy imply polluting the
directory with 10th graders'   mobile phone numbers.

Nothing says mobile phones must be in the directory.    No ARIN policy
says that contacts must be reachable  24x7,  or that mobile phone
numbers must be provided.

It is advisable that someone be available to answer the phone 24x7 for
the contact number,  for important networks,  it is not required.

The contact doesn't have to be one person,  and  hiring or otherwise
providing contacts  is part of the cost you bear in connecting to the
internet.

Even if your network is too small for a SWIP or WHOIS listing to be
required,  legitimate ISPs/collocation providers  always require a
phone number.

And the collocated server adminned by the 10th grader  might get
turned off, if the number provided to the ISP  does not get answered,
even without SWIP listings of contacts.

> Then the whois directory needs a system for recording stuff like:
> "Technical contact is attending school between the hours of
> 8:30 to 4:30 EST, Mondays thru Fridays. Saturdays from 10:00 to
> 12:00 he is playing baseball. Contactable at (604)555-1234
> other times except when he is on a hot date which is most
> likely Thursday thru Saturday evenings EST."

That's called unpredictable availability of the technical contact. It
is not suitable for important networks,  but there is no ARIN rule
against it.

The  dedicated 'phone number'  provided to ARIN for WHOIS can simply
contain a voicemail message explaining it,  when called while the
contact is out.

I  believe there is a  "Comment:"  attribute provided by WHOIS.
It could be populated via SWIP,  or  the ISP could populate its whois
server with that.


--
-J