<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 12 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:Consolas;
panose-1:2 11 6 9 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p
{mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
pre
{mso-style-priority:99;
mso-style-link:"HTML Preformatted Char";
margin:0in;
margin-bottom:.0001pt;
font-size:10.0pt;
font-family:"Courier New";}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
{mso-style-priority:99;
mso-style-link:"Balloon Text Char";
margin:0in;
margin-bottom:.0001pt;
font-size:8.0pt;
font-family:"Tahoma","sans-serif";}
span.HTMLPreformattedChar
{mso-style-name:"HTML Preformatted Char";
mso-style-priority:99;
mso-style-link:"HTML Preformatted";
font-family:Consolas;}
span.EmailStyle21
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.BalloonTextChar
{mso-style-name:"Balloon Text Char";
mso-style-priority:99;
mso-style-link:"Balloon Text";
font-family:"Tahoma","sans-serif";}
.MsoChpDefault
{mso-style-type:export-only;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">The reject will likely alert us but my systems are not setup to wait 10+ day and then have to go sort out fixing it. I’m worried this is probably going to break
some of that. Legacy Centurylink going back thru the Qwest side have done a pretty good job of submitting to whois, other companies we have purchased not so well and we’re working to improve that but it’s a constant battle of staff and use of time. We won’t
allocate folks to go chase down customers to click off approval. Asking to do on the phone also not likely as a great many of offerings are moving to more automation. We have entire service classes that can be ordered online, instantly provisioned and activated
and then the customer plugs into a prewired/fiber’d port never once interacting with a human. Concerned about both 10 limbo and the loss of info that might be a lead for LEO’s at the very least. I’ve used at least company name and phone number 100’s of times
when the poc was old outdated as a starting point in trying to reach folks for issues it would be unfortunate not to have at least.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">From:</span></b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif""> Jason Schiller [mailto:jschiller@google.com]
<br>
<b>Sent:</b> Wednesday, April 18, 2018 9:01 AM<br>
<b>To:</b> Delacruz, Anthony B<br>
<b>Cc:</b> ARIN-PPML List<br>
<b>Subject:</b> Re: [arin-ppml] Draft Policy 2017-12: Require POC Validation Upon Reassignment<o:p></o:p></span></p>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<p class="MsoNormal">Anthony,<o:p></o:p></p>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">I hear you. And I think we should try a "lets do better" approach.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">I think the goal here is to get good SWIP data, and make sure the <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">contact info is correct.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">This specific approach is an attempt to prevent a SWIP targeting<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">a (wrong) unwitting victim. <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">In your case I believe you are suggesting you collected the proper <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">contact info, and explained it will be included in the SWIP, and <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">verified that they don't have a pre-existing OrgID or POC, to<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">SWIP to. But then they drop the ARIN email. And the SWIP<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">gets rejected.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Rejected SWIPs from email templates get an email<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">from ARIN Hostmaster <<a href="mailto:hostmaster@arin.net">hostmaster@arin.net</a>><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">with a subject including --REJECTED<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<div>
<p class="MsoNormal">Is this sufficient for you to track down the <o:p></o:p></p>
</div>
</div>
<div>
<p class="MsoNormal">customers who didn't ack, and fix this issue?<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Is there a better way to loop the ISP back in<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">and unwedge the stuck request?<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Would an ARIN Online page of here are all the SWIPs<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">that cannot be SWIP'd due to pending ACK help?<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">A button to resend the request (while your customer <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">is on the phone)? <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Are you concerned about the 10 days it is in limbo?<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">Or the long term stuff that never gets acked?<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">__Jason<o:p></o:p></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<div>
<p class="MsoNormal">On Tue, Apr 17, 2018 at 4:54 PM Delacruz, Anthony B <<a href="mailto:Anthony.DeLaCruz@centurylink.com">Anthony.DeLaCruz@centurylink.com</a>> wrote:<o:p></o:p></p>
</div>
<blockquote style="border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in">
<div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="color:#1F497D">Howdy folks I very much hope I’m not a significant part of this problem but we do submit 50-100 reassigns a week. If there is any evidence of us causing
trouble in the data I’d be happy to try to run it down and improve. As noted by others we do this primarily to offload abuse but also to assist LEO’s and to be upfront with the community how our space is being use. We also try as hard as we can to populate
those records with valid info and have our sales guys collect and input into our system then the provisioning team validates at turn up and the system auto generates at activation the record. I worry greatly that if an entry we send up goes unvalidated for
10 days that it must be deleted. I think you are going to be losing a lot of good data of legit usage simply because folks maybe too lazy to click off on an acknowledgment. If implemented I could be sending all these updates and not seeing them appear and
wondering till 10 days down the road which ones I have to reattempt? Will there be a notification back that the record did not populate? That reattempt piece will be a lot of fun to workout with our IT guys I can tell you it’ll just be dropped for a long time
until they work out the code to automate and thus usability of whois will be impacted.</span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="color:#1F497D"> </span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="color:#1F497D"> </span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="color:#1F497D">Anthony Delacruz</span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="color:#1F497D">Senior Lead Engineer</span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="color:#1F497D">IP Admin Backbone Planning and Design</span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="color:#1F497D">Office: +1 703 363 8503
</span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="color:#1F497D"><a href="mailto:Anthony.DeLaCruz@CenturyLink.com">Anthony.DeLaCruz@CenturyLink.com</a></span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="color:#1F497D"><a href="mailto:ipadmin@centurylink.com" target="_blank">ipadmin@centurylink.com</a></span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="color:#1F497D"> </span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="color:#1F497D"> </span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="color:#1F497D"> </span><o:p></o:p></p>
<div>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">From:</span></b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif""> ARIN-PPML [mailto:<a href="mailto:arin-ppml-bounces@arin.net" target="_blank">arin-ppml-bounces@arin.net</a>]
<b>On Behalf Of </b>John Santos<br>
<b>Sent:</b> Tuesday, April 17, 2018 1:58 PM<br>
<b>To:</b> <a href="mailto:arin-ppml@arin.net" target="_blank">arin-ppml@arin.net</a><br>
<b>Subject:</b> Re: [arin-ppml] Draft Policy 2017-12: Require POC Validation Upon Reassignment</span><o:p></o:p></p>
</div>
</div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
<p>I think anyone who supplies someone else's email address to a third party without their permission is responsible for any mail they receive. Unless a SWIPer has permission from their customer to SWIP the customer's email address, the ISP doing the SWIPing
is responsible, not ARIN. If they do this repeatedly or as a matter of course, they should be barred from SWIPing and any subnets they have previously SWIPed should revert to them, making them responsible for all network abuse and connectivity problems originating
from those subnets.<o:p></o:p></p>
<p>Isn't the entire point of SWIP to allow ISPs to offload the abuse and other points of contact to their customers, who presumably are more capable of dealing with the issues? And shouldn't the customers expect to receive email at those POC addresses as part
of that? Either the ISP has explained that to their customers, who have agreed to this, in which case no mail sent to them as a consequence is SPAM, or the ISP has not, in which case the POC (and SWIP) should be removed or never allowed in the first place.<o:p></o:p></p>
<p> <o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">On 4/17/2018 11:11 AM, Christian Tacit wrote:<o:p></o:p></p>
</div>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">Hi Jason,<o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">After discussion with staff, I can report that it would be much easier to send a notification to the email that is swipped as the POC but to add in any type of ACK or NACK turns
it into a very, very heavy lift for the organizations as it completely changes the flow. Furthemore, the addition of a requirement for a response could end up creating issues (whether real or perceived) that ARIN would be sending UCE (Unsolicited Commercial
Email) (SPAM) to all of those contacts as we do not have a formal relationship with them.<o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">Chris<o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><br>
Christian S. Tacit,<br>
Tacit Law<br>
<br>
P.O. Box 24210 RPO Hazeldean<br>
Kanata, Ontario<br>
K2M 2C3 Canada<br>
<br>
Tel: +1 613 599 5345<br>
Fax: +1 613 248 5175<br>
E-mail: <a href="mailto:ctacit@tacitlaw.com" target="_blank"><span style="color:#0563C1">ctacit@tacitlaw.com</span></a><br>
<br>
This message is intended only for the use of the individual or entity to which it is addressed and may contain information that is subject to copyright, privileged, confidential, proprietary or exempt from disclosure under applicable law. If you are not the
intended recipient or the person responsible for delivering the message to the intended recipient, you are strictly prohibited from disclosing, distributing, copying or in any way using this message. If you have received this communication in error, please
notify the sender and destroy or delete copies you may have received.<o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><b>From:</b> Jason Schiller
<a href="mailto:jschiller@google.com" target="_blank"><jschiller@google.com></a> <br>
<b>Sent:</b> April 16, 2018 3:05 PM<br>
<b>To:</b> Christian Tacit <a href="mailto:ctacit@tacitlaw.com" target="_blank"><ctacit@tacitlaw.com></a><br>
<b>Cc:</b> ARIN-PPML List <a href="mailto:arin-ppml@arin.net" target="_blank"><arin-ppml@arin.net></a><br>
<b>Subject:</b> Re: [arin-ppml] Draft Policy 2017-12: Require POC Validation Upon Reassignment<o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">Chris,<o:p></o:p></p>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">Thanks. <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">One of the problems with POC validation is that ARIN tries to validate all POCS, and does not have a relationship with some.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">There is a proposal to reduce the validation to only the set of POCs that ARIN has a direct relationship with.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">This is problematic because it is through this annual validation that one finds they have become a POC on some resource.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">So without out the annual check, those organizations will NOT have the awareness and knowledge to resolve that issue between themselves.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">The solution is a bi-directional check. <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">I think the ARIN objection is that it is problematic for the SWIPee to modify the record of the SWIPer.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">But I see no problem with the SWIPee getting notified, or even ACKing or NACKIing the SWIP.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">__Jason<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
</div>
</div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
<div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">On Sat, Apr 14, 2018 at 2:23 PM Christian Tacit <<a href="mailto:ctacit@tacitlaw.com" target="_blank">ctacit@tacitlaw.com</a>> wrote:<o:p></o:p></p>
</div>
<blockquote style="border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-top:5.0pt;margin-right:0in;margin-bottom:5.0pt">
<div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">Hi Jason,<o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">Although I did look into the issue raised by your March 15 email promptly after receiving it. I inadvertently forgot to reply to you. Please accept my apology.
<o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">Based on ARIN Staff input, a major impediment to the proposed Section 3.8 is that ARIN cannot be involved in the contractual relationship between its customer and any of the customer’s
customers. The ARIN customer may be submitting a simple reassignment, precisely because it wants to maintain control over POC records. Examples may include branches located in different states of an entity that may want to use address information corresponding
to its head office and or other locations in which it has a presence. If there is a dispute with an entity that already has an OrgID with ARIN and its upstream provider on how to register the entity’s reassignments, those organizations will have the awareness
and knowledge to resolve that issue between themselves. <o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">Chris<o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><b>From:</b> Jason Schiller <<a href="mailto:jschiller@google.com" target="_blank">jschiller@google.com</a>>
<br>
<b>Sent:</b> March 15, 2018 4:29 PM<br>
<b>To:</b> Christian Tacit <<a href="mailto:ctacit@tacitlaw.com" target="_blank">ctacit@tacitlaw.com</a>><br>
<b>Cc:</b> <a href="mailto:arin-ppml@arin.net" target="_blank">arin-ppml@arin.net</a><br>
<b>Subject:</b> Re: [arin-ppml] Draft Policy 2017-12: Require POC Validation Upon Reassignment<o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
<div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">This problem is not scoped only to with a new POC is created.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">This was also supposed to be a check in 3.7 to insure a resource is not<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">randomly SWIP'd to a pre-existing org.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">3.8 was intended to chatch when a resource is SWIP'd to a pre-existing org, <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">but that org ID is not used, and that org's address is put into a reassign simple.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
</div>
<div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">I don't see how this is not implementable..<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">- If the compnay name is a match for something ARIN already has a relationship with,<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> then they should have good contact info.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">- If the contact info is a known address of a compnay that ARIN already has a <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> relationship with, then they should have good contact info for that compnay.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">- If all else fails they can send a post card to the mailing address.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">At a mimimum, if the post card is undeliverable, or a holder of the the post card<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">contacts ARIN, they should revoke the SWIP.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">___Jason<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
</div>
</div>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">On Mon, Mar 12, 2018 at 5:47 PM, Christian Tacit <<a href="mailto:ctacit@tacitlaw.com" target="_blank">ctacit@tacitlaw.com</a>> wrote:<o:p></o:p></p>
<blockquote style="border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-top:5.0pt;margin-right:0in;margin-bottom:5.0pt">
<div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:14.0pt">Dear Community Members,</span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:14.0pt"> </span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:14.0pt">The shepherds for the Draft Policy 2017-12: Require POC Validation Upon Reassignment, are making two changes to its text.</span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:14.0pt"> </span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:14.0pt">First, the problem statement is being expanded a bit to explain how POCs for reassigned blocks can be assigned without the knowledge of the individuals
so assigned under the present policy.</span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:14.0pt"> </span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:14.0pt">Second, proposed section 3.8 has been deleted. This is because it is unintentionally misleading because a simple reassignment results in a customer
identifier versus an OrgID. There is no contact information contained in a simple reassignment other than street address that could be used for notification, and thus it does not appear that the proposed NRPM 3.8 policy text is implementable. Even if notification were
possible, the “OR postal address” in this section may also cause significant problems for some companies as many companies have the same name associated with many different locations and there are several locations that have many companies registered there.</span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:14.0pt"> </span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:14.0pt">Based on these changes, the revised text reads:</span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:14.0pt"> </span><o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt;line-height:18.0pt;background:white"><strong><span style="font-size:14.0pt;font-family:"Calibri","sans-serif";border:none windowtext 1.0pt;padding:0in">Version Date: March 12, 2018</span></strong><o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt;line-height:18.0pt;background:white"><strong><span style="font-size:14.0pt;font-family:"Calibri","sans-serif";border:none windowtext 1.0pt;padding:0in"> </span></strong><o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt;line-height:18.0pt;background:white"><strong><span style="font-size:14.0pt;font-family:"Calibri","sans-serif";border:none windowtext 1.0pt;padding:0in">Problem Statement:</span></strong><o:p></o:p></p>
<p style="margin-bottom:6.0pt;line-height:18.0pt;background:white;font-variant-ligatures:normal;font-variant-caps:normal;text-align:start;text-decoration-style:initial;text-decoration-color:initial;word-spacing:0px">
<span style="font-size:14.0pt">Some large ISPs assign individuals to be POCs for reassigned blocks without consultation of the individual they are inserting into Whois. For example, during the reassignment/reallocation process, some large ISPs automatically
create POCs from their customer’s order form. This process is automated for many ISPs and therefore the resulting POCs are not validated prior to being created in the ARIN Whois database. This creates unknowing POCs that have no idea what Whois is or even
who ARIN is at the time they receive the annual POC validation email. It can also create multiple POCs per email address causing that same person to receive a multitude of POC Validation emails each year.</span><o:p></o:p></p>
<p style="margin-bottom:6.0pt;line-height:18.0pt;background:white"><span style="font-size:14.0pt">This policy proposal seeks to improve the situation where a POC is unwittingly and unintentionally inserted into Whois.</span><o:p></o:p></p>
<p style="margin-bottom:6.0pt;line-height:18.0pt;background:white;font-variant-ligatures:normal;font-variant-caps:normal;text-align:start;text-decoration-style:initial;text-decoration-color:initial;word-spacing:0px">
<span style="font-size:14.0pt">It also seeks to mitigate the significant amount of time that ARIN staff reports that they spend fielding phone calls from POCs who have no idea they are in Whois.</span><o:p></o:p></p>
<p style="margin-bottom:6.0pt;line-height:18.0pt;background:white;font-variant-ligatures:normal;font-variant-caps:normal;text-align:start;text-decoration-style:initial;text-decoration-color:initial;word-spacing:0px">
<span style="font-size:14.0pt">Finally, it is hopeful that this proposal will improve the overall POC validation situation, by forcing ISPs and customers to work together to insert proper information into Whois at the time of sub-delegation.</span><o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt;line-height:18.0pt;background:white;font-variant-ligatures:normal;font-variant-caps:normal;text-align:start;text-decoration-style:initial;text-decoration-color:initial;word-spacing:0px">
<strong><span style="font-size:14.0pt;font-family:"Calibri","sans-serif";border:none windowtext 1.0pt;padding:0in"> </span></strong><o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt;line-height:18.0pt;background:white"><strong><span style="font-size:14.0pt;font-family:"Calibri","sans-serif";border:none windowtext 1.0pt;padding:0in">Policy statement:</span></strong><o:p></o:p></p>
<p style="margin-bottom:6.0pt;line-height:18.0pt;background:white;font-variant-ligatures:normal;font-variant-caps:normal;text-align:start;text-decoration-style:initial;text-decoration-color:initial;word-spacing:0px">
<span style="font-size:14.0pt">Insert one new section into NRPM 3:</span><o:p></o:p></p>
<p style="margin-bottom:6.0pt;line-height:18.0pt;background:white;font-variant-ligatures:normal;font-variant-caps:normal;text-align:start;text-decoration-style:initial;text-decoration-color:initial;word-spacing:0px">
<span style="font-size:14.0pt">3.7 New POC Validation Upon Reassignment</span><o:p></o:p></p>
<p style="margin-bottom:6.0pt;line-height:18.0pt;background:white;font-variant-ligatures:normal;font-variant-caps:normal;text-align:start;text-decoration-style:initial;text-decoration-color:initial;word-spacing:0px">
<span style="font-size:14.0pt">When an ISP submits a valid reallocation or detailed reassignment request to ARIN which would result in a new POC object being created, ARIN must (before otherwise approving the request) contact the new POC by email for validation.
ARIN's notification will, at a minimum, notify the POC of:</span><o:p></o:p></p>
<p style="margin-bottom:6.0pt;line-height:18.0pt;background:white;font-variant-ligatures:normal;font-variant-caps:normal;text-align:start;text-decoration-style:initial;text-decoration-color:initial;word-spacing:0px">
<span style="font-size:14.0pt">- the information about the organization submitting the record; and<br>
- the resource(s) to which the POC is being attached; and<br>
- the organization(s) to which the POC is being attached.</span><o:p></o:p></p>
<p style="margin-bottom:6.0pt;line-height:18.0pt;background:white;font-variant-ligatures:normal;font-variant-caps:normal;text-align:start;text-decoration-style:initial;text-decoration-color:initial;word-spacing:0px">
<span style="font-size:14.0pt">If the POC validates the request, the request shall be accepted by ARIN and the new objects inserted into Whois. If the POC does not validate the request within 10 days, ARIN must reject the request.</span><o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt;line-height:18.0pt;background:white;font-variant-ligatures:normal;font-variant-caps:normal;text-align:start;text-decoration-style:initial;text-decoration-color:initial;word-spacing:0px">
<strong><span style="font-size:14.0pt;font-family:"Calibri","sans-serif";border:none windowtext 1.0pt;padding:0in"> </span></strong><o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt;line-height:18.0pt;background:white"><strong><span style="font-size:14.0pt;font-family:"Calibri","sans-serif";border:none windowtext 1.0pt;padding:0in">Timetable for implementation:</span></strong><span style="font-size:14.0pt"> Immediate</span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:14.0pt"> </span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:14.0pt">Comments from the community are welcome!</span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:14.0pt"> </span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;margin-bottom:12.0pt"><span style="font-size:14.0pt"><br>
Christian S. Tacit</span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
</div>
</div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><br>
_______________________________________________<br>
PPML<br>
You are receiving this message because you are subscribed to<br>
the ARIN Public Policy Mailing List (<a href="mailto:ARIN-PPML@arin.net" target="_blank">ARIN-PPML@arin.net</a>).<br>
Unsubscribe or manage your mailing list subscription at:<br>
<a href="http://lists.arin.net/mailman/listinfo/arin-ppml" target="_blank">http://lists.arin.net/mailman/listinfo/arin-ppml</a><br>
Please contact <a href="mailto:info@arin.net" target="_blank">info@arin.net</a> if you experience any issues.<o:p></o:p></p>
</blockquote>
</div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><br>
<br clear="all">
<o:p></o:p></p>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
</div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">--
<o:p></o:p></p>
<div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">_______________________________________________________<o:p></o:p></p>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">Jason Schiller|NetOps|<a href="mailto:jschiller@google.com" target="_blank">jschiller@google.com</a>|571-266-0006<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-family:"Arial","sans-serif""> </span><o:p></o:p></p>
</div>
</div>
</div>
</div>
</div>
</div>
</blockquote>
</div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><br clear="all">
<o:p></o:p></p>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
</div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">--
<o:p></o:p></p>
<div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">_______________________________________________________<o:p></o:p></p>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">Jason Schiller|NetOps|<a href="mailto:jschiller@google.com" target="_blank">jschiller@google.com</a>|571-266-0006<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-family:"Arial","sans-serif""> </span><o:p></o:p></p>
</div>
</div>
</div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;margin-bottom:12.0pt"><br>
<br>
<o:p></o:p></p>
<pre>_______________________________________________<o:p></o:p></pre>
<pre>PPML<o:p></o:p></pre>
<pre>You are receiving this message because you are subscribed to<o:p></o:p></pre>
<pre>the ARIN Public Policy Mailing List (<a href="mailto:ARIN-PPML@arin.net" target="_blank">ARIN-PPML@arin.net</a>).<o:p></o:p></pre>
<pre>Unsubscribe or manage your mailing list subscription at:<o:p></o:p></pre>
<pre><a href="http://lists.arin.net/mailman/listinfo/arin-ppml" target="_blank">http://lists.arin.net/mailman/listinfo/arin-ppml</a><o:p></o:p></pre>
<pre>Please contact <a href="mailto:info@arin.net" target="_blank">info@arin.net</a> if you experience any issues.<o:p></o:p></pre>
</blockquote>
<p class="MsoNormal" style="mso-margin-top-alt:auto;margin-bottom:12.0pt"><o:p> </o:p></p>
<pre>-- <o:p></o:p></pre>
<pre>John Santos<o:p></o:p></pre>
<pre>Evans Griffiths & Hart, Inc.<o:p></o:p></pre>
<pre>781-861-0670 ext 539<o:p></o:p></pre>
</div>
<p class="MsoNormal" align="center" style="text-align:center">This communication is the property of CenturyLink and may contain confidential or privileged information. Unauthorized use of this communication is strictly prohibited and may be unlawful. If you
have received this communication in error, please immediately notify the sender by reply e-mail and destroy all copies of the communication and any attachments.<o:p></o:p></p>
</div>
<p class="MsoNormal">_______________________________________________<br>
PPML<br>
You are receiving this message because you are subscribed to<br>
the ARIN Public Policy Mailing List (<a href="mailto:ARIN-PPML@arin.net" target="_blank">ARIN-PPML@arin.net</a>).<br>
Unsubscribe or manage your mailing list subscription at:<br>
<a href="http://lists.arin.net/mailman/listinfo/arin-ppml" target="_blank">http://lists.arin.net/mailman/listinfo/arin-ppml</a><br>
Please contact <a href="mailto:info@arin.net" target="_blank">info@arin.net</a> if you experience any issues.<o:p></o:p></p>
</blockquote>
</div>
<p class="MsoNormal"><br clear="all">
<o:p></o:p></p>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<p class="MsoNormal">-- <o:p></o:p></p>
<div>
<div>
<p class="MsoNormal"><span style="font-family:"Courier New";color:#555555">_______________________________________________________</span><span style="font-family:"Arial","sans-serif";color:black"><o:p></o:p></span></p>
<div>
<p class="MsoNormal"><span style="font-family:"Courier New";color:black">Jason Schiller|NetOps|<a href="mailto:jschiller@google.com" target="_blank">jschiller@google.com</a>|571-266-0006</span><span style="font-family:"Arial","sans-serif";color:black"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:"Arial","sans-serif";color:black"><o:p> </o:p></span></p>
</div>
</div>
</div>
</div>
<center>This communication is the property of CenturyLink and may contain confidential or privileged information. Unauthorized use of this communication is strictly prohibited and may be unlawful. If you have received this communication in error, please immediately
notify the sender by reply e-mail and destroy all copies of the communication and any attachments.</center>
</body>
</html>