Search RPD Archives
[rpd] Opposing the last call made on the review policy
owen at delong.com
Tue Dec 4 16:29:59 UTC 2018
The random process is a concern as well, but I have less concern with it (assuming it is truly random and I somewhat trust AfriNIC staff to be fair in implementing a technology based randomization process). My bigger problem is with the ability for an arbitrary third party to, under this proposal, make an accusation with no basis in fact and no supporting evidence triggering a huge amount of work on the part of both AfriNIC and the target organization.
Essentially this opens up a new gaping vector for a form of denial of service attack that can be exploited by persons or organizations who wish t cause difficulty for an AfriNIC resource holder.
> On Dec 4, 2018, at 03:08 , Paschal Ochang <pascosoft at gmail.com> wrote:
> This problem is indirectly tied to my concern about this policy which I raised in Dakar and Hammamet as well. I have always pointed out that the selection process adopted by the policy for auditing allows room for witch hunting and the algorithm is not clear on how all companies can be selected at random and still get all of them audited. Secondly a member can target another member without major cause and the consequences for doing so incorrectly is not explicit.
> On Tuesday, December 4, 2018, Frank Habicht <geier at geier.ne.tz <mailto:geier at geier.ne.tz>> wrote:
> On 04/12/2018 02:30, Owen DeLong wrote:
> The review in the RSA does not allow for any random party to force AfriNIC to initiate such a costly and burdensome process against any particular member without probable cause to do so. The proposed policy does.
> Yes. That is my main problem with the proposal. Thanks, Owen, for putting it that clearly.
> a) have the authors accepted this as a valid problem with the proposal?
> b) if yes, was it addressed?
> c) if no, why not?
> silence from authors will be interpreted as non-cooperation regarding valid concerns.
> RPD mailing list
> RPD at afrinic.net <mailto:RPD at afrinic.net>
> https://lists.afrinic.net/mailman/listinfo/rpd <https://lists.afrinic.net/mailman/listinfo/rpd>
> RPD mailing list
> RPD at afrinic.net
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the RPD