[arin-ppml] Clarify /29 assignment identification requirement

[John Curran]

On Apr 28, 2012, at 3:50 PM, William Herrin wrote:
> 
> Of the four folks across this conversation who've levied complaints
> about ARIN asking for customer identities for /32 users, none have
> expressed that ARIN inquired into customer identities for their
> dynamic pools and one expressly stated that ARIN didn't ask about the
> much larger dynamic pools at all. Four does not make a statistical
> sample but it does suggest a pattern.

Indeed, it is an outline of a pleasant pattern that such information 
isn't generally needed nor requested.
 
> ...
> Per your statement above, ARIN considers itself at liberty to inquire
> into the personally identifiable information (PII) of the smallest and
> most ephemeral consumers of addresses among the ISP's customers during
> an ISP's application for addresses. Is that correct?

Interesting phrasing, but could be literally correct (even if taken 
to extreme...)  I would have said it as thus:

"In the absence of specific guidance from the community, ARIN will 
request sufficient supporting details as necessary to verify a request."

> Folks, is that what we want?

A most excellent question, and one which the community should
definitely discuss.  I'd ask that we set aside (temporarily)
the question of retention of such detail, as it is apparent 
that ARIN retaining of such detail past an approved request 
should not be necessary (but we'll need to do some work to make
sure this is the case.)

Thanks,
/John

John Curran
President and CEO
ARIN