Re: [db-wg] ORG record vetting ?

Randy Bush via db-wg wrote on 29/07/2019 14:40:

i am not speaking for or against, as i do not understand what the threat model is.

the idea is that some org objects are created by users and inserted into the ripe database while others are subject to due diligence by the ripe ncc. I.e. there's a qualitative difference in data quality between the two, but there is no way of distinguishing between them. There are ways of flagging whether this process was carried out. One option would be to use a binary flag. Another would be to implement a datestamp for the last due diligence process carried out if it's not been set by the NCC. Lack of data could be flagged by either the absence of the parameter or else use 0000-00-00T00:00:00Z. Nick