Re: [Eligibility-discuss] Handling the fear of "bogus" recall petitions

Eliot Lear <lear@cisco.com> Fri, 25 October 2019 15:00 UTC

Return-Path: <lear@cisco.com>
X-Original-To: eligibility-discuss@ietfa.amsl.com
Delivered-To: eligibility-discuss@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 19FF4120937 for <eligibility-discuss@ietfa.amsl.com>; Fri, 25 Oct 2019 08:00:08 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -14.501
X-Spam-Level:
X-Spam-Status: No, score=-14.501 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0nzQ7R26XHIU for <eligibility-discuss@ietfa.amsl.com>; Fri, 25 Oct 2019 08:00:05 -0700 (PDT)
Received: from aer-iport-4.cisco.com (aer-iport-4.cisco.com [173.38.203.54]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 78440120936 for <eligibility-discuss@ietf.org>; Fri, 25 Oct 2019 07:59:42 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=6998; q=dns/txt; s=iport; t=1572015582; x=1573225182; h=from:message-id:mime-version:subject:date:in-reply-to:cc: to:references; bh=3uurSRZJ5uB+0MzAA6SnkyFD3L9LGocZJGqxBLDLdQc=; b=PP5/LQ8nNMcYJEz/AXuM5zDjnjyR3LKqODU/EEogOXJZdp07T2yI9ixX McG20uix4AyoU/KkyvQdsNsn530nPlLPZ9oZI0qW4LB5pbHFHnFFptHn2 4QFktU6uhd5Sn0MqtnVOuCZNeRXplW7UpgIM7xmvcV8Wypd47xy6Guyfv o=;
X-Files: signature.asc : 488
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: A0COAACWDLNd/xbLJq1lGQEBAQEBAQEBAQEBAQEBAQEBEQEBAQEBAQEBAQEBgXuBbwWBGE8FIBIqhCiJBIgMf5ovAgcBAQEJAwEBHxABAYRAAoNjOBMCAwkBAQQBAQECAQUEbYU3DIVQAQEBAQIBI0sLBQsLGCoCAlcGE4MiAYJXILFXdYEyhU6EbRCBNoFTilSBf4EQAScfghc1PoQeAYM2MoIsBI0KiSuXMIIugjOBE5FnG44YizukdIMUAgQGBQIVgWkigVgzGggbFTsqAYJBCTUSEBRYgjoXgQQBDIcYhXw/AzCNVAElgjUBAQ
X-IronPort-AV: E=Sophos;i="5.68,229,1569283200"; d="asc'?scan'208";a="18376171"
Received: from aer-iport-nat.cisco.com (HELO aer-core-2.cisco.com) ([173.38.203.22]) by aer-iport-4.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 25 Oct 2019 14:59:40 +0000
Received: from [10.61.195.187] ([10.61.195.187]) by aer-core-2.cisco.com (8.15.2/8.15.2) with ESMTPS id x9PExd5B004250 (version=TLSv1.2 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NO); Fri, 25 Oct 2019 14:59:40 GMT
From: Eliot Lear <lear@cisco.com>
Message-Id: <8D2605D0-33F0-4ED3-A063-A3F1469F3685@cisco.com>
Content-Type: multipart/signed; boundary="Apple-Mail=_03E0EC5F-0A06-44EC-83D3-058637921115"; protocol="application/pgp-signature"; micalg="pgp-sha256"
Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.11\))
Date: Fri, 25 Oct 2019 16:59:38 +0200
In-Reply-To: <865BF4B8-CB57-4586-8C2E-34B5218E53E2@episteme.net>
Cc: Brian E Carpenter <brian.e.carpenter@gmail.com>, adrian@olddog.co.uk, eligibility-discuss@ietf.org
To: Pete Resnick <resnick@episteme.net>
References: <00c801d58a9a$53693c60$fa3bb520$@olddog.co.uk> <CB806045-0E5E-4445-A377-7CD547B9DD90@cisco.com> <010a01d58ac1$c0ab2320$42016960$@olddog.co.uk> <dc3bf13f-0178-8e4c-6680-ae3258ac1a9b@gmail.com> <865BF4B8-CB57-4586-8C2E-34B5218E53E2@episteme.net>
X-Mailer: Apple Mail (2.3445.104.11)
X-Outbound-SMTP-Client: 10.61.195.187, [10.61.195.187]
X-Outbound-Node: aer-core-2.cisco.com
Archived-At: <https://mailarchive.ietf.org/arch/msg/eligibility-discuss/Wz2u3hzkYo7eoVna7Y8G1o315X4>
Subject: Re: [Eligibility-discuss] Handling the fear of "bogus" recall petitions
X-BeenThere: eligibility-discuss@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: <eligibility-discuss.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/eligibility-discuss>, <mailto:eligibility-discuss-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/eligibility-discuss/>
List-Post: <mailto:eligibility-discuss@ietf.org>
List-Help: <mailto:eligibility-discuss-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/eligibility-discuss>, <mailto:eligibility-discuss-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 25 Oct 2019 15:00:08 -0000


> On 25 Oct 2019, at 16:42, Pete Resnick <resnick@episteme.net> wrote:
> 
> Brian and Eliot (and anyone else who shares similar concerns):
> 
> I did not see either of you address Adrian's proposed mitigation: Would requiring some number of physical participants to also sign the petition allay your concerns? If so, what would that number be? If not, why not?

Yes.  Adrian is offering a an approximation method, which may limit access initially to some in favor of simplicity.  I think two meetings is sufficient.  Is it two meetings EVER or two out of the last N?  Dunno.

Eliot

> 
> pr
> 
> On 24 Oct 2019, at 21:55, Brian E Carpenter wrote:
> 
>> Adrian,
>> 
>>> I think you are worried about "gaming the system"
>> 
>> That may be so, but:
>> 
>>> c.  Those who have never attended.
>> 
>> also seems to me to be a proxy for "Those who have very limited personal
>> knowledge of the person being recalled, so may not be capable of fair
>> assessment of their conduct."
>> 
>> Personally I'm more worried about that than the risk of gaming or DOSsing
>> the system. Now while it's true that a non-attendee might have frequently
>> met the recallee at (say) ITU-T meetings, it's still probably the best proxy
>> we've got for "very limited personal knowledge". Assuming, of course, that
>> we think such personal knowledge is needed.
>> 
>> Regards
>>   Brian
>> 
>> On 25-Oct-19 12:21, Adrian Farrel wrote:
>>> Hey Eliot,
>>> 
>>>> But I liked Barry’s groupings:
>>>> 
>>>> a.  Those who have attended in person 3/5 (status quo)
>>>> b.  Those who have previously attended attended in person
>>>>   but are now remote.
>>>> c.  Those who have never attended.
>>>> 
>>>> I don’t think many people could seriously object to group (b) being
>>>> added.  The concern is primarily with group (c).  There is also a certain
>>>> amount of skin in the game that may be of value.  The skin in the game
>>>> could take the form of meeting attendance or having written an RFC or
>>>> having had a draft adopted by a WG.  These are all pretty good indicators
>>>> and there may be others (open source authors having implemented a
>>>> spec, for instance).  The idea is not to set the bar too high for people who
>>>> are using our stuff, but high enough still that gaming would be unlikely.
>>>> 
>>>> Thoughts?
>>> 
>>> I fear the wheel may come off your Gedankenexperiment as you introduce ever more subcategories of participant.
>>> c.i. Never attended but been a remote participant for 7 years
>>> c.ii. Never attended and no RFC published, but 3 WG drafts
>>> c.iii. Never attended but made significant contributions to mailing list discussions in more than 4 WGs
>>> c.iv. Never attended and never had an RFC published, but chaired a WG
>>> 
>>> And so on. I am pretty sure you can't parameterise this successfully and, while you might know it when you see it, that means that you cannot properly write down what it would mean to be "a participant in good standing."
>>> 
>>> But let's take a leaf out of Ekr's book and try to understand what problem you are solving.
>>> 
>>> I think you are worried about "gaming the system". So, what is the real risk?
>>> Presumably that a number (G.T. 0) of recalls petitions are filed without due cause, and that those petitions would do enough harm to the IETF that it would merit making a statement that some people are not considered of sufficient standing to have their concerns addressed by a recall petition. And what is that potential harm?
>>> - Reputational damage to the "accused"? That was suggested
>>>  as a reason against the ombudsteam, and I cannot see why
>>>  anyone considers being falsely accused and then found not
>>>  guilty to be harmful to their reputation.
>>> - Cost to the IETF in terms of wasted effort. Yes, a small number
>>>  of hours of a few people could be wasted reading the petition
>>>  and supporting material. But that doesn't sound like a big cost.
>>> - The ISOC chief has to find a recall panel chair. I hear him when
>>>   he says this is a big deal, but I don't think it is such a challenge.
>>>   It is certainly nothing compared to finding a NomCom chair
>>>   since the recall panel has a fixed and focused short-duration
>>>   task.
>>> Are there other costs/harms? Maybe there could be if there was a flurry of recalls. But surely that would show up.
>>> 
>>> But I will still maintain that the 3-of-5 rule, or something similar (since 3-of-5 is required for physical, we might require 5-of-5 by remote when no more than 2-of-5 has been physical), is enough to handle any gaming of the system. And should gaming show up (which it would, I think, although I caution against anyone saying that a recall that fails is anything other than a legitimate concern correctly expressed) then we could easily revisit this. That is, we can use DevOps principles to refine as necessary, yet make incremental and beneficial changes.
>>> 
>>> To make clear my reverse problem statement. I am only somewhat concerned that remote participants might at some future time have grounds for requesting a recall. Frankly, I think there are probably other ways of addressing the issues that arise (although I will confess that I only feel confident in those other ways after 20 years participating and 6 years on the IESG, so perhaps remote participants might feel the need of a more blunt instrument). No, what worries me is what we say to the 850 or so people who register and participate remotely at IETF meetings when we state that they do not have the right of any involvement in a procedure designed to rectify iniquity.
>>> 
>>> Best,
>>> Adrian
>>> 
> 
> 
> --
> Pete Resnick http://www.episteme.net/
> All connections to the world are tenuous at best