Re: [hrpc] Censorship

Bill Woodcock <woody@pch.net> Fri, 11 March 2022 12:48 UTC

Return-Path: <woody@pch.net>
X-Original-To: hrpc@ietfa.amsl.com
Delivered-To: hrpc@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A8BE53A09F9 for <hrpc@ietfa.amsl.com>; Fri, 11 Mar 2022 04:48:02 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.11
X-Spam-Level:
X-Spam-Status: No, score=-2.11 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=pch.net
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id pQ0Z9zX6wFoy for <hrpc@ietfa.amsl.com>; Fri, 11 Mar 2022 04:47:57 -0800 (PST)
Received: from mail.pch.net (keriomail.pch.net [206.220.231.84]) (using TLSv1.1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CAE663A0DD8 for <hrpc@irtf.org>; Fri, 11 Mar 2022 04:47:57 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=pch.net; s=mail; h=from:subject:date:message-id:to:mime-version:content-type:in-reply-to: references; bh=/J5lbFupRJ8Nis7XnYHr54qh4p48i52IHYpKbva2Vec=; b=xr8ZVIBKPJjqMrTmnHGwam3vxlR2MSre9PvwoiYQFR/DdplsGc4olBV8PZTIbebG5wpsLi/iMlA93 sbRhtbjUE+SgmKfuHANTJdia02MGf9/AV99Rrhe/qLJD34/ufANJiyTZByYN5nt4VNnfU+5t1xn2tN XpkPHeSEDpaSJPlMmKgeInKbsSws/BKKnH5rzPXJ9hzd1xdYUF7r7qKIjW18Gmy34WzGHv3QVoBDn9 iLzhPP0aFTUrhv95fF/7hvw2J/jJHdQJnvZhzaxer24Yo4BQZyTVo+XhgnyDtY5X9aVX0WRojWBdXO gQIEn1+/tRo1udowwb2bRof5hDlKrig==
X-Footer: cGNoLm5ldA==
Received: from smtpclient.apple ([69.166.14.6]) by mail.pch.net (Kerio Connect 9.2.7 patch 3) with ESMTPS (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256 bits)) for hrpc@irtf.org; Fri, 11 Mar 2022 04:47:56 -0800
From: Bill Woodcock <woody@pch.net>
Content-Type: multipart/signed; boundary="Apple-Mail=_C8D3A867-0499-41C4-971C-FE581C0D3ABF"; protocol="application/pgp-signature"; micalg="pgp-sha256"
Mime-Version: 1.0 (Mac OS X Mail 15.0 \(3693.60.0.1.1\))
Date: Fri, 11 Mar 2022 13:47:51 +0100
References: <669686052.184329.1646989079672@appsuite-gw2.open-xchange.com> <AFDE14D7-A5A1-4009-9E8D-C77D4984EDDA@pch.net> <254407218.184957.1646992776229@appsuite-gw2.open-xchange.com> <EA324F84-FAE9-4F76-A25A-0044BD5BE34C@pch.net> <d85efa68-9ec3-be29-b70d-7efcf6278f91@lear.ch>
To: "hrpc@irtf.org" <hrpc@irtf.org>
In-Reply-To: <d85efa68-9ec3-be29-b70d-7efcf6278f91@lear.ch>
Message-Id: <A47E849E-3DEB-4A07-8078-2799E8BEA2B2@pch.net>
X-Mailer: Apple Mail (2.3693.60.0.1.1)
Archived-At: <https://mailarchive.ietf.org/arch/msg/hrpc/_ML4Z__RGvJsfDqDYbU2uaHXbxk>
Subject: Re: [hrpc] Censorship
X-BeenThere: hrpc@irtf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: hrpc discussion list <hrpc.irtf.org>
List-Unsubscribe: <https://www.irtf.org/mailman/options/hrpc>, <mailto:hrpc-request@irtf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/hrpc/>
List-Post: <mailto:hrpc@irtf.org>
List-Help: <mailto:hrpc-request@irtf.org?subject=help>
List-Subscribe: <https://www.irtf.org/mailman/listinfo/hrpc>, <mailto:hrpc-request@irtf.org?subject=subscribe>
X-List-Received-Date: Fri, 11 Mar 2022 12:48:03 -0000


> On Mar 11, 2022, at 1:00 PM, Eliot Lear <lear@lear.ch> wrote:
> The reason I believe that this RG is an appropriate venue to discuss your communique is that each of the assertions you and others make seem to me closer to research questions.

Thank you.  If we stray outside the range of what you consider appropriate, please say so.

> My own view is that if the Internet community could effectively contribute to forcing Russia out of Ukraine, we have a moral obligation to do so.  However, I don't believe we can effectively contribute to that goal at the governance level, and maybe not at any other level.

Well, I think the question isn’t an absolute one… the question isn’t whether the Internet community can force Russia out of Ukraine.  The question is whether the Internet community can effect sanctions that act appropriately and effectively as sanctions in the general case where sanctions are being applied.  My suspicion is that the Internet community will be considerably more conservative about the application of sanctions than individual governments are.  But in cases of humanitarian crisis, the Internet community may also be quicker to act, or more willing to act on things that governments are hesitant to, lest they disrupt their westphalianism and open themselves to criticism as well.

So, not “can we stop Russia” but “can we place some of the societally-shared costs of Russia’s military connectivity back in their laps, and in the laps of those who are profiting from selling them services?”  Sanctions aren’t absolute, they build friction, a little at a time.

> Your assertions are:
> 
> 
>> 	• ● Disconnecting the population of a country from the Internet is a disproportionate and inappropriate sanction, since it hampers their access to the very information that might lead them to withdraw support for acts of war and leaves them with access to only the information their own government chooses to furnish.
> 
> This is indeed the theory.  Nothing like a live experiment to test it.  Anyone collecting data?

John Kristoff is leading the team that’s instrumenting the technical effects of this particular mechanism.  But that’s a technical measurement, not a geopolitical/economic/societal measurement.  Those are more difficult to do in concrete terms, and I’m _way_ out of my depth there.  One of my weaknesses is that I often suspect most everybody else is as well, at least in quantitative terms.

>> 	• ●  The effectiveness of sanctions should be evaluated relative to predefined goals. Ineffective sanctions waste effort and willpower and convey neither unity nor conviction.
> 
> There's a lot of devil hidden in the detail of "predefined goals", and there is a body of research around this.

There was a lot of text about governments having hundreds or thousands of years of experience in enacting sanctions, and the Internet community just coming in now, and acknowledging that we have much to learn.  I don’t remember offhand how much of that is on the cutting-room floor.

> Also, it doesn't follow that ineffective sanctions fail to convey unity or conviction.  If the goal is to get Russia out of Ukraine and they don't leave, does that mean that the west has failed to convey conviction?

Effectiveness doesn’t need to be measured by results, it can be measured by conviction and intent.  This is the difference between “hopes and prayers” and action.  Action may fail, but it’s not “hopes and prayers” bullshit.

>> 	• ●  Sanctions should be focused and precise. They should minimize the chance of unintended consequences or collateral damage. Disproportionate or over-broad sanctions risk fundamentally alienating populations.
> 
> Again, there is a body of research around this.

Yet it is not guiding the _current_ situation, so we hope to move in the direction of more precision and less collateral damage.

>> 	• ●  Military and propaganda agencies and their information infrastructure are potential targets of sanctions.
> 
> Is this meant to be an exclusive list?

Remember, this is a starting-point for a conversation, not an end-point.  With 87 authors, there was a bell-curve of thinking, which the letter tries to capture.  Everyone agreed on “military and propaganda.”  There was somewhat less agreement about “dual-use” and I think that was excised entirely from the final letter.  At the other end of the spectrum, everyone agreed that civilians should never be directly targeted by Internet sanctions, and civilian connectivity should never be impeded by sanction actions.  Also, government agencies which provide civil and social services shouldn’t be targeted.  There’s a fair bit of room in-between, and an acknowledgement that sanctioned parties may well attempt to use “human shields,” and to the degree that that brings about unintended harm on civilians, that’s on the sanctioned party, not on the sanctioning party.  But I think that’s a finer level of detail than made it out in the final letter, for length reasons rather than disagreement reasons.

>> 	• ●  The Internet, due to its transnational nature and consensus-driven multistakeholder system of governance, currently does not easily lend itself to the imposition of sanctions in national conflicts.
> 
> I have my own view as to why this is true.  But it may be worth elaborating in detail.

Perhaps.  Or we can each recognize what truth we see in this, for our own reasons, and move on to the actual work.  More debate yields better outcomes, at substantially higher costs in slowness and friction and so forth.  I don’t think that’s necessarily a weakness to be addressed; just a feature of multistakeholderism.  To the degree that we can get the full benefit of it, rather than thinking of it as a weakness, I’m happy.

>> 	• ●  It is inappropriate and counterproductive for governments to attempt to compel Internet governance mechanisms to impose sanctions outside of the community’s multistakeholder decision-making process.
> 
> Yeah, this requires a discussion of supremecy and subservience.  Who is supreme and why and where are the guns to back that up?

Guns aren’t the only mechanisms of power.  Money, people, etc.  Which is more powerful, Trinidad & Tobago, because they can issue laws and decrees, or NTT, because they can carry traffic around the world?  Apples and oranges, not a simple comparison.  And there are positive and negative forms of power.  Power demonstrated through denying things to people is negative.  Power demonstrated through creation and generosity is positive.  My open-source, potlatch-economy stripes are showing.  I’ll shut up now.

>> 	• ●  There are nonetheless appropriate, effective, and specific sanctions the Internet governance community may wish to consider in its deliberative processes.

“... after due process and consensus would publish sanctioned IP addresses and domain names in the form of public data feeds in standard forms (BGP and RPZ), to be consumed by any organization that chooses to subscribe to the principles and their outcome.”

Are you asking me to prognosticate on what specific networks or domain names, or categories of networks or domain names, future groups of stakeholders, might choose to include in those feeds?  I can guess that Russian military and propaganda agencies might be included if implementation goes fast enough, but beyond that, I don’t think it’s useful for me to speculate.

And before anyone goes off on the “well it’s irresponsible to build something if you can’t guarantee the outcome of every future decision ever” rant, nothing new is being built here. The mechanisms are all the same as are fully mature for other purposes.  The point here is to make it possible to use those mechanisms to enact sanctions more narrowly, with less humanitarian consequences, than is currently being done.

                                -Bill