JORDI PALET MARTINEZ via anti-abuse-wg wrote on 08/05/2020 12:07:
[Jordi] The job of the RIPE NCC is to implement the policies agreed by the community. Different folks may consider different pieces of all of our policies as "inappropriate" or "arbitrary"
which is fine, mostly. Subject to usual discretion of the RIPE NCC to ignore policy which is harmful to itself or others. Various board members have confirmed in the past that the RIPE NCC will not buy an island if instructed to do so by the RIPE Community.
and the goal is to find a point in the middle, which is what we call consensus.
The goal is to try to find consensus. There's nothing in the concept of consensus about trying to find a point in the middle. If I make a policy proposal to demand that the RIPE NCC buy an island, would it be reasonable to settle on a compromise which involved the RIPE NCC buying only half an island? It's ok for consensus to be that a policy proposal be rejected entirely.
I believe is perfectly understandable the need to avoid using manual forms which don't follow a single standard, which means extra work for *everyone*.
Couple of things on this: - if you want to standardise a mechanism for abuse reporting, then that would be useful and by all means, go ahead with that idea first. There are many forums available for doing this. - your proposal threatens to close down RIPE NCC members if they decline to support abuse reports over email. This is unhinged.
[Jordi] The actual policy has a bigger level of micro-management, by setting one year and not allowing the NCC to change that. I think it is much better to explicitly allow it. One alternative, I will be fine with that, is not define the time at all, and let the NCC to adapt it to the needs. Would you thing this is more appropriate?
The entire policy is poorly thought-through to start with. You can't fix bad policy with minor tweaks around the edges.
[Jordi] What I'm asking here is to make sure that we have stats. I'm not changing what is an actual practice. You can always report to *any* RIR, what you think is wrong and if you're a good internet citizen, you should do that.
If you're a good internet citizen, you have some moral obligation to report abuse to an internet number resources registry? You're completely putting the cart before the horse here. The purpose of the RIRs is number resource registration.
I'm happy if you believe that my wording is not good, and we agree on that goal, to find an alternative one. Any suggestion?
Firstly, if you propose to collect stats about anything, you need to think about what sort of stats should be collected. Secondly, you need to make a credible argument about why the RIPE NCC should be obliged to spend membership funds collecting these stats and why the RIPE NCC is a more appropriate vehicle for collecting these stats than other organisations which specialise in online security and abuse issues, particularly those which already collect statistics about online abuse. Nick