<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
I spend a great deal of time dealing with and thinking like "bad actors" on the internet. Anything that would entail requirements for abuse contacts is open to, honestly, abuse. If people are getting swatted over Instagram and Twitter accounts, how much
<b>abuse</b> is ARIN and the average small to mid-size organization going to tolerate?</div>
<div style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<ol style="margin-top: 0px; margin-bottom: 0px;" data-editing-info="{"applyListStyleFromLevel":false,"orderedStyleType":4}" start="1">
<li style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); list-style-type: "(1) ";">
<div role="presentation">A company with deep pockets is being "named and shamed" in this email thread. What if someone there unleashes a deluge of falsified requests to a large number of internet sites which implicate the person who brought them up in this
policy thread? DNS amplification-style attacks are easy enough to achieve.</div>
</li><li style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); list-style-type: "(2) ";">
<div role="presentation">Actually, it was an entirely different entity who wanted it to look like the company with deep pockets in #1, just to deflect blame from themselves with the obvious scapegoat.</div>
</li><li style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); list-style-type: "(3) ";">
<div role="presentation">If someone dumps a few thousand emails per hour into abuse@<your domain here> and you are required to generate a ticket and respond, can they break a ticketing system or the admins who have to respond? How long until a "bad actor"
can justifiably point to policy and claim you are not following it? How can I automate this to make my "take domains offline-as-a-service" company more profitable?</div>
</li><li style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); list-style-type: "(4) ";">
<div role="presentation">There is grey market for almost everything. IPv4 and domain names can be lucrative. A policy that would prompt ARIN to reclaim resources from people who do not fit a "required performance metric" make the process easier and give me
a legal option to achieve my goals.</div>
</li></ol>
<div style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
I would encourage a stronger focus on promoting "good netizen" behaviour than creating a policy which can be used to malicious effect. I thought of those 4 examples in about 5 minutes. If I have learned one thing, it is that people way smarter than I am probably
have a list of 40 items and are already looking at implementation options.</div>
<div style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Best regards,</div>
<div style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Brad</div>
<div style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
*The opinions and beliefs expressed in this email are mine alone and do not reflect the opinions and beliefs of my employer.*</div>
<div style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
</body>
</html>