[dbwg] Draft for proposal for Whois AUP

[william at elan.net]

I have draft read for my last proposal - this is to change current bulk 
whois data only AUP to general Whois AUP. It requires for all whois 
queries (no matter what protocol - which is meant to include rwhois, ldap, 
protocol developed by crisp WG or any other protocal that ARIN may want to 
use) to include a link to whois aup and for those that need access to 
entire data (including through ftp but also including other means such as 
cdrom, etc) to have to sign bulk whois aup agreement (as is done already) 
but does allow that once signed same access can be used more then one 
time with new agreement having to be signed after one month.

The draft is available at:
http://www.elan.net/~william/arin_proposal_whois_aup.htm

Please comment what needs to be included in AUP, what needs to be changed 
in the draft, etc. etc. I'll submit this as actual proposal no later then 
Friday and if no substantial comments are received then on Wednesday.

Here is a text version of the current draft:
---------------------------------------------------------------------

This proposal changes current Bulk Whois Acceptable Use Policy to become 
general Whois Acceptable Use policy that would apply to all whois queries.

In particular:

1. A new acceptable use policy called "Whois Acceptable Use Policy" is to 
be published on ARIN website as follows:

"The ARIN Whois Data is for Internet operations and technical research 
purposes pertaining to Internet Operations only. It may not be used for 
advertising, direct marketing, marketing research or similar purposes. Use 
of ARIN whois date for these activities is explicitly forbidden. ARIN 
requests to be notified 
of any such activities or suspicions thereof.

ARIN reserves the right to restrict access to the whois database in its 
sole discretion to ensure operational stability. ARIN may may restrict or 
terminate your access to the whois database for failure to abide by these 
terms of use."

2. Access to whois data with individual queries (such as by using whois 
protocol) must in the output either include entire 'ARIN Whois Acceptable 
Use Policy' in the comments or provide a one-line statement that data is 
provided and can only be used according to 'ARIN Whois Acceptable Use 
Policy' with a link to where the policy is published on ARIN website.

3. High frequency individual query access and access to either entire 
whois database or large portion of it must be provided with authentication 
to persons and organizations authorized by ARIN. These organizations must 
sign 'Acceptable Use Policy for Bulk Copies of ARIN Whois Data' agreement 
which shall include 'Whois Acceptable Use Policy' and additional statement 
that

"Redistributing bulk ARIN Whois Data is explicitly forbidden. It is 
permissible to publish data on an individual query or small number of 
queries at a time basis as long as reasonable precautions are taken to 
prevent automated querying by database harvesters"

Organizations that need access to ARIN whois data on regular basis maybe 
required to resubmit the agreement on monthly basis at which time 
authentication settings may need to be changed.