[HR-rt] Fwd: Notes from human rights review team november 4th IETF 103 - quick question

Corinne Cath <corinnecath@gmail.com> Mon, 05 November 2018 05:59 UTC

Return-Path: <cattekwaad@gmail.com>
X-Original-To: hr-rt@ietfa.amsl.com
Delivered-To: hr-rt@ietfa.amsl.com
Received: from localhost (localhost []) by ietfa.amsl.com (Postfix) with ESMTP id B3B26128CB7 for <hr-rt@ietfa.amsl.com>; Sun, 4 Nov 2018 21:59:58 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.989
X-Spam-Status: No, score=-1.989 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, T_FREEMAIL_DOC_PDF=0.01] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([]) by localhost (ietfa.amsl.com []) (amavisd-new, port 10024) with ESMTP id RPzz5VvpO9j9 for <hr-rt@ietfa.amsl.com>; Sun, 4 Nov 2018 21:59:55 -0800 (PST)
Received: from mail-wr1-x42d.google.com (mail-wr1-x42d.google.com [IPv6:2a00:1450:4864:20::42d]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B6802120072 for <hr-rt@irtf.org>; Sun, 4 Nov 2018 21:59:54 -0800 (PST)
Received: by mail-wr1-x42d.google.com with SMTP id i17-v6so8035810wre.7 for <hr-rt@irtf.org>; Sun, 04 Nov 2018 21:59:54 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to; bh=5uYxGhilzmoFK0XJLPeTwWn6+dO3YCbV9mkaY7hkEBY=; b=gK3AbaQ5pzf197hxf/9IK2aVKaBvPQEIkfXvp8d1bjbUV6NF9b8t/Ri3XYeGLtfY52 NI/YDcx8gc1McEjAhVSKFhELNUIty9svsmSFg106DRHEAV/VCfJgjGIjBQs4Qg6pVYni vSoSqXMeHIV2loI4UWtGXxVM/qDqRKQ966V4oQjJJTogvtMEqEYMGxYIDMGfDSnkrieD 0mQ6srpemof/9tQ4Ae2c0Chc1EB1FovkH33THcQJ6RO62AMbZaWF7j8VyDqk/2ShLsX6 ZSgvw8VB+tXjFwlFHe841dq4XixrLgHrMHTRpYhklEXujZpDxcX9hsuiCuQZ/+/9ItnC fYKQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to; bh=5uYxGhilzmoFK0XJLPeTwWn6+dO3YCbV9mkaY7hkEBY=; b=l0iehuRiaH3L4am0haCojRu7RJcErqgwgnM6SMpwEUZvHFEeA+vwp6m2XgASgb+L5D L+5g9DJfMMo3IHQqzcVatiinnTPveZPoqEhspPBDTOLT7T8Lpjk2gsNDWzCxqG+5/cO6 gHw10J4ZYyUioYaxHWPjvxdsrmr8dwj7t6bTLG1yHRNPOpx7bW3svWD+n8NU7+le0Wkd cyGvJSha97wpCEXeJgwRF49p9OX2ObPMuGkDcesNJyJHZcWpwZZacWSVnayRuOHYwj7A /1Ejcp6UqYb5cD60Gl5rKgZM0lpL+CNCB/ciuSfnLuIz7Ck+lzTs6B2E7VQ2cgXTLQeq 4UpA==
X-Gm-Message-State: AGRZ1gILnTFV2rx3kGyCXN+sjkSteIM/INN6SAeKRv/okQPWSyc4YXpR 5DcD6oaZgan6YdurqZt6wzr/TCCJiNygK8GqTHnmpg==
X-Google-Smtp-Source: AJdET5dNm59HLAOp+LRceX1cQMoM0g2LRRB1FiRKWHh8pw7ojNQ1fbaw+sEFlzoL1KkmJQ2ml1kCviLSlvr+QsMdCtI=
X-Received: by 2002:adf:a78a:: with SMTP id j10-v6mr11265676wrc.286.1541397592486; Sun, 04 Nov 2018 21:59:52 -0800 (PST)
MIME-Version: 1.0
References: <CAD499eJ7_j8zE1NYmYYHyt5HkDMYy-M8P8gBGgKD9ccGyePkyg@mail.gmail.com>
In-Reply-To: <CAD499eJ7_j8zE1NYmYYHyt5HkDMYy-M8P8gBGgKD9ccGyePkyg@mail.gmail.com>
From: Corinne Cath <corinnecath@gmail.com>
Date: Mon, 5 Nov 2018 12:59:14 +0700
Message-ID: <CAD499eLxLPgN0YCJR1e1Mvi18By6hR+893N+myn-wdmf2nGu-A@mail.gmail.com>
To: hr-rt@irtf.org
Content-Type: multipart/mixed; boundary="000000000000f5653f0579e497f6"
Archived-At: <https://mailarchive.ietf.org/arch/msg/hr-rt/xlEwd-AEGbPa3dN4qtefoZknsxc>
Subject: [HR-rt] Fwd: Notes from human rights review team november 4th IETF 103 - quick question
X-BeenThere: hr-rt@irtf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Human Rights Protocol Considerations Review Team <hr-rt.irtf.org>
List-Unsubscribe: <https://www.irtf.org/mailman/options/hr-rt>, <mailto:hr-rt-request@irtf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/hr-rt/>
List-Post: <mailto:hr-rt@irtf.org>
List-Help: <mailto:hr-rt-request@irtf.org?subject=help>
List-Subscribe: <https://www.irtf.org/mailman/listinfo/hr-rt>, <mailto:hr-rt-request@irtf.org?subject=subscribe>
X-List-Received-Date: Mon, 05 Nov 2018 05:59:59 -0000

Dear all,

Please find below my notes of our meeting yesterday. They're quite long but
so was the meeting.

Let me know if I missed anything. I also added them in a doc below.



*Notes Human rights review team 4 November *

*Present: Niels, Mallory, Shivan, Juliana, Gurshabad, Corinne *



*Lessons learned*

*Guidelines draft updates (new version)*


*Reviews as rubberstamps (legitimacy of what we are doing?)*


Reviews done currently:

1)    Marnu

2)    Meeting venue

3)    Suit

4)    Quic

5)    Ipwave

6)    Regex

Upcoming reviews:

1)    captive ports

2)    doh/dot

3)    WebRTC and MDNS

Question: How expanded do we make these reviews?  NTo will do DoH/DoT in
one, ESNI is a different discussion. Maybe we take the information from the
DoH/DoT and turn it in an advocacy paper?

Question: Why review an RFC?  Because it seems that it would be useful to
apply our thumb on the scale. The DoH/DoT discussion is not yet resolved.

Question: Should we turn reviews into RFCs? Its dependent on the consensus
in the group.

If we turn the reviews into RFCs that might also signal legitimacy for a
potential issue paper.

Discussion: what it is the best strategy for doing advocacy at the IETF:
issue paper or formal review. It’s easier to convince people with reviews
than with an issue paper. But an issue paper might be relevant to do for
the wider community. And/and approach.

Discussion: the audience for the reviews is a reoccurring topic of debate
in our meeting.

Shivan mentions WebRTC and MDNS concerns: Mostly the draft is about privacy
now but might have association and accessibility concerns.  Right now, he
has comments, unclear if it’s a good fit for a formal review.

*Lessons learnt:*

·With big and influential drafts, the interview/inductive/ethnographic
approach works well.

·  Gurshabad approach worked well (putting RFC 8280 next to the draft and
match the different questions to different parts of the draft). See here
for his approach: https://pad.riseup.net/p/fsEgWAHneHCS-keep

*Guidelines draft updates (new version):*

1)    Are people engaging with it?

2)    Are people still updating it?

3)    Where is it going?

There are some changes to the guidelines – people who do human rights
reviews should be updating the RFC 8280. When it was written RFC 8280 was
all fiction and speculative, it was done without doing any reviews.

What is the projection for where this is going and how we frame it for

Gurshabad suggested:

-   Mentioning that we do other stuff besides protocols

- The preferable answers should be yes (and) to the questions (up for

- Guidelines could have an appendix with different review examples.

We should consider updating the guidelines with:

-       NTo approach

-       Gurshabad approach

-       Amelia approach

Discussion: should we consider adding a “green consideration” for the
environmental impacts of a protocol?

We can start thinking about new frames and flavors to bring in for reviews,
like we did with feminism:

-       UNGP

-       SDGs

-       Etc.


Discussion: do we do each or some reviews as a project on gitlab?  Maybe
for big or collaborative ones have an issue tracker and tickets?

Because it would be a low entry place for interested people to have a look
at what we do on a public repo and get involved. And means chairs and
others don’t need to hassle people for what is going on with different

Maybe ask on the list if this is a good idea to:

-       Open a ticket when you start you review

-       Close it when you finish

-       And upload it to gitlab

*Reviews as rubberstamps (legitimacy of what we are doing?)*

Discussion: why should people care about our reviews? This came up in
response to some of the reviews we did. Where people questioned why they
should care about our reviews. IRTF chair suggested some changes the
introduction language of reviews. Right now: We find people who are doing
good work and review that (that’s why we review MLS). But It’s harder to
get legitimacy for bad drafts and to get people to care (Regex)

*To do:*

-  Further conversation about issue paper on DoH/DoT

-  Bring some of the discussion points to the HRPC meeting

-  Talk more about who our audiences are for the reviews

- Further develop the draft guidelines (add NTo, Gurshabad, and Amelia

-  Ask list what they think about doing reviews on gitlab

- Give more thought about what our legitimacy model is for reviews

Corinne Cath - Speth
Ph.D. Candidate, Oxford Internet Institute & Alan Turing Institute

Web: www.oii.ox.ac.uk/people/corinne-cath
Email: ccath@turing.ac.uk & corinnecath@gmail.com
Twitter: @C_Cath