[Community-Discuss] ID verification on the Database Working Group mailing list

Mon Jan 24 09:13:13 UTC 2022

That’s the point, we don’t have that problem in the IETF or any other RIR.

So, I think is fair that you look for solutions where you have problems or you may have them.

Anyway, I know that other RIRs are watching the verification process in AFRINIC so to implement also themselves, just as preventive measure, and I think it is very smart doing so.

Regards,

Jordi

@jordipalet

El 24/1/22 9:46, "Mike Silber" <silber.mike at gmail.com> escribió:

Andrew

You make some good points. Not sure if the IETF also has an issue with sock-puppets, astroturfing and posters using pseudonyms?Maybe you can enlighten us?

My personal view is that the key point that is missing [and the *real* issue on the mailing list] is not identity verification, but failure to disclose affiliation.

Along with the suggestions you made [code of conduct, well enforced] is a disclosure requirement [see ICANN’s SOI / statement of interest process for all working groups as an example].

I have no issue with comments from users using pseudonyms - provided they have a complete SOI setting out their affiliations to avoid the *real* concern with such users, namely sock-puppets and astroturfing.

Looking forward to your feedback.

Mike

On 24 Jan 2022, at 09:22, Andrew Alston via Community-Discuss <community-discuss at afrinic.net> wrote:

If AfriNIC chooses to remove me from the lists because I refuse to hand over ID documents – while they are quite ok with taking my money as an authorized admin contact – then in effect, they are no longer providing the service that a full RIR providers to other members, based on a requirement that they have no mandate to implement.

AfriNIC cannot guarantee the security of information provided.

AfriNIC has no way to verify that the documents submitted are valid

AfriNIC has no mandate from its member base to request for and hold sensitive personal information.

To be blunt – I will be giving AfriNIC no such documents – if they choose to remove me from the lists and remove my say in this community and in their processes as a result – either admit at that point that AfriNIC is no more than a book keeper to me – and discount my fees accordingly – or – I will take whatever action I deem necessary to deal with what I view as a flagrant, unsanctioned move by an organization that is meant to be bottom up but has now just lost the plot.

I might point out that – no other RIR has such a requirement.  Nor does the IETF.  What they do to solve the issues on their lists is they enforce a code of conduct, complete with an appeal process and a sergeant at arms who’s job it is to deal with violations of the code of conduct.  They sure as hell don’t ask for sensitive documents to prove who people are – that’s insane.

Andrew

From: Owen DeLong via Community-Discuss <community-discuss at afrinic.net> 
Sent: Thursday, January 20, 2022 9:51 PM
To: AFRINIC Communication <comms at afrinic.net>
Cc: Community Discuss <community-discuss at afrinic.net>
Subject: Re: [Community-Discuss] ID verification on the Database Working Group mailing list

The form requires one to agree to submit to an unspecified online identity verification process. This is not reasonable. The process should be spelled out in detail prior to demanding that someone agree to submit to it. 

While I favor a reasonable identity verification process, the document linked has no relationship to such a thing and is, instead a contract of attainder which should not be allowed. 

Owen

On Jan 20, 2022, at 10:46, Owen DeLong <owen at delong.com> wrote:

The requirements are expressed in sexist terms. Arguably a violation of the very CoC it alleges to bind one to strict adherence. 

Perhaps this should be reviewed and amended?

Owen

On Jan 20, 2022, at 04:52, AFRINIC Communication <comms at afrinic.net> wrote:

Dear colleagues,

AFRINIC is now introducing  an ID verification process for our mailing lists. This is part of our “Know Your Customer” (KYC) measures that aims at addressing any abuses on the AFRINIC community mailing lists and making our online community a place where people can better engage and learn from and with their peers.

The ID verification will start its application with the Database Working Group mailing list and will follow a simple process, before embarking on the other AFRINIC community mailing lists. Thank you for your constructive feedback as we seek to continue improving the process.

You are kindly invited to start the process by filling out this form: https://verification.afrinic.net/

Subscribers to this mailing list have until the 20th of February 2022 to complete their ID verification.

We encourage all subscribers to take necessary steps before the above timeframe has elapsed.

Kindly note that after the 20th of February 2022, the messages of the subscribers who have not completed the KYC check will be automatically rejected.

Regards,
AFRINIC Team

………………………………………………..

Chers collègues,

AFRINIC introduit un processus de vérification d'identité pour nos listes de diffusion. Ceci fait partie de nos mesures "Know Your Customer" (KYC) qui visent à traiter tout abus sur les listes de diffusion de la communauté AFRINIC et à faire de notre communauté en ligne un lieu où les gens peuvent mieux s'engager et apprendre de et avec leurs collègues.

La vérification d'identité commencera par la liste de diffusion du Groupe de travail sur les bases de données (DBWG) et suivra un processus simple, avant de s'étendre aux autres listes de diffusion de la communauté AFRINIC. Nous vous remercions de vos commentaires constructifs, car nous cherchons à continuer à améliorer le processus.

Vous êtes cordialement invités à commencer le processus en remplissant ce formulaire : https://verification.afrinic.net/.
Les abonnés à cette liste de diffusion ont jusqu'au 20 février 2022 pour procéder à la vérification de leur identité.

Nous encourageons tous les abonnés à prendre les mesures nécessaires avant que le délai ci-dessus ne soit écoulé. 

Veuillez noter qu'après le 20 février 2022, les messages des abonnés qui n'auront pas effectué la vérification KYC seront automatiquement rejetés.

Cordialement,
L'équipe AFRINIC_______________________________________________
Community-Discuss mailing list
Community-Discuss at afrinic.net
https://lists.afrinic.net/mailman/listinfo/community-discuss

_______________________________________________
Community-Discuss mailing list
Community-Discuss at afrinic.net
https://lists.afrinic.net/mailman/listinfo/community-discuss

_______________________________________________ Community-Discuss mailing list Community-Discuss at afrinic.net https://lists.afrinic.net/mailman/listinfo/community-discuss 

**********************************************
IPv4 is over
Are you ready for the new Internet ?
http://www.theipv6company.com
The IPv6 Company

This electronic message contains information which may be privileged or confidential. The information is intended to be for the exclusive use of the individual(s) named above and further non-explicilty authorized disclosure, copying, distribution or use of the contents of this information, even if partially, including attached files, is strictly prohibited and will be considered a criminal offense. If you are not the intended recipient be aware that any disclosure, copying, distribution or use of the contents of this information, even if partially, including attached files, is strictly prohibited, will be considered a criminal offense, so you must reply to the original sender to inform about this communication and delete it.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.afrinic.net/pipermail/community-discuss/attachments/20220124/cccfa699/attachment.html>