[rpd] Publication of Information (Draft-2) - AFPUB-2021-GEN-001-DRAFT02

Sun Nov 14 08:56:52 UTC 2021

Hi Gaby,

Responding below, in-line.

Regards,

Jordi

@jordipalet

El 13/11/21 4:48, "Gaby Giner" <gabyginernetwork at gmail.com> escribió:

Hi Jordi,

Thanks for your explanation of the timeframe.

I am taking the hypothetical stand of businesses that cannot disclose their plans/business out of protecting their interests. It's just that a certain level of privacy is expected esp when a company is starting or making business decisions etc. Disclosing info to AFRINIC in exchange for being allowed resources is like trading in info to a third party that could very well be leaked (let's face it, it happens to corporations/businesses every day). Aside from looking out for traditional corporation privacy pitfalls, they also have to worry about their plans being disclosed to AFRINIC.

[Jordi] The justification of the need is mandatory if you request resources. How much data you provide, it all depends on the “conversation” that you may have with AFRINIC, and I guess it is influenced by “how big” is your request. So, I’m not changing that in the policy proposal. What I’m suggesting is that after 2 years, AFRINIC shall publish a summary, and that summary will be reviewed by both parties. 

Also, I noticed a logical loop in the proposal. You said "Note also that the policy text provides a way to avoid the publication if justified, or to delay it. So if there is a bussiness that really requires having all the resources up-front, AFRINIC agree on that (following the CPM), and it requires more time and can’t be disclosed to protect the business, it is a very valid justification."

Then what is the point of the Publication of Information then if all businesses claim that they 1.) require more time, and 2.) they don't want to disclose information? At this point, actually they have disclosed information already to AFRINIC.

[Jordi] If you have nothing to hide, nothing special, etc., they you will not bother to ask for an extension or a different summary. If you ask for it, may be is time to ensure that all the information is consistent and if you have a valid reason that will create troubles to your business, it is perfectly fine.

This is a hypothetical situation that is close to reality because I am hard-pressed to find a company willing to give out their business plans to a third party and at risk of their competitors.

I hope my points are clear.

Thank you,

Gaby

P.S. my other points in the first email were just grammatical stuff but the above is more important, thanks

On Sat, 13 Nov 2021 at 01:28, JORDI PALET MARTINEZ via RPD <rpd at afrinic.net> wrote:

Hi Gaby, all,

According to existing policies in the CPM, you ask for resources based on justified need.

If the justified need is not for an “immediate use” (1 year seems reasonable, 2 years may be too much already), then there is no sense that you request those resources in advance, or in fact probably AFRINIC will not allocate them and tell you “come back when you’re ready”.

I will understand that a LIR that is deploying a big network with no customers yet, will request a smaller prefix and may be, in the case of IPv6, suggest to AFRINIC that they reserve some contiguos space for the next request. Actually this is already the practice in all the RIRs (sparce allocation).

Note also that the policy text provides a way to avoid the publication if justified, or to delay it. So if there is a bussiness that really requires having all the resources up-front, AFRINIC agree on that (following the CPM), and it requires more time and can’t be disclosed to protect the business, it is a very valid justification.

Regarding the rewording of my last paragraph, may be a language problem not being native speaker, I fail to see what is not clear, and I believe that the staff understood it correctly looking at the IA of the previous version: https://www.afrinic.net/policy/proposals/2021-gen-001-d1#impact

What I’m saying is that in every first “2 years anyversary” of each resourse allocation the policy is “executed” and the summary provided and if agreed, published. Also, I’m stating that the implementation may be phased (slow start) by the staff in such way that there is no need to hire more resources. This is needed because otherwise when the policy is initially implemented there is a high demand of human resources to take over “all” those that already surpassed the 2 years.

I’m not sure to understand your last point.

Regards,

Jordi

@jordipalet

El 12/11/21 11:41, "Gaby Giner" <gabyginernetwork at gmail.com> escribió:

Hi Jordi, hi everybody,

Thanks for a quite insightful proposal. However, this type of proactive action (and the details/parameters that you gave) may not translate well into reality.

Transparency and fairness are important values ofc, given that we operate behind the screen. My concern with the policy would be the parameters that you gave. Do you have a solid statistical basis that says in 2 years, a probable business that asked for resources from AFRINIC would be able to establish their business properly without adverse effects if ever AFRINIC should do as it says in the policy proposal? 

Secondly, your last paragraph:
"This policy shall be implemented in such a way that all the resources allocated/assigned for over 2 years, will be chronologically warned, allowing the staff to process the possible responses of “non-disclosure” without requiring extra human resources."
I'm having trouble understanding this in context with the other content in the proposal. Maybe a rewrite is in order.

Finally, for the first paragraph, I would suggest that it should be rewritten. On the whole, while transparency is good, I think the execution should be considered carefully.

Sincerely, Gaby.

_______________________________________________ RPD mailing list RPD at afrinic.net https://lists.afrinic.net/mailman/listinfo/rpd 

**********************************************
IPv4 is over
Are you ready for the new Internet ?
http://www.theipv6company.com
The IPv6 Company

This electronic message contains information which may be privileged or confidential. The information is intended to be for the exclusive use of the individual(s) named above and further non-explicilty authorized disclosure, copying, distribution or use of the contents of this information, even if partially, including attached files, is strictly prohibited and will be considered a criminal offense. If you are not the intended recipient be aware that any disclosure, copying, distribution or use of the contents of this information, even if partially, including attached files, is strictly prohibited, will be considered a criminal offense, so you must reply to the original sender to inform about this communication and delete it.

_______________________________________________
RPD mailing list
RPD at afrinic.net
https://lists.afrinic.net/mailman/listinfo/rpd

**********************************************
IPv4 is over
Are you ready for the new Internet ?
http://www.theipv6company.com
The IPv6 Company

This electronic message contains information which may be privileged or confidential. The information is intended to be for the exclusive use of the individual(s) named above and further non-explicilty authorized disclosure, copying, distribution or use of the contents of this information, even if partially, including attached files, is strictly prohibited and will be considered a criminal offense. If you are not the intended recipient be aware that any disclosure, copying, distribution or use of the contents of this information, even if partially, including attached files, is strictly prohibited, will be considered a criminal offense, so you must reply to the original sender to inform about this communication and delete it.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.afrinic.net/pipermail/rpd/attachments/20211114/6e289494/attachment-0001.html>