Re: [hrpc] ***SPAM**** Re: Censorship

Mallory Knodel <mknodel@cdt.org> Tue, 15 March 2022 14:51 UTC

Return-Path: <mknodel@cdt.org>
X-Original-To: hrpc@ietfa.amsl.com
Delivered-To: hrpc@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3DD593A1446 for <hrpc@ietfa.amsl.com>; Tue, 15 Mar 2022 07:51:41 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.11
X-Spam-Level:
X-Spam-Status: No, score=-2.11 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, NICE_REPLY_A=-0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cdt.org
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id PbjuYIsMyL_H for <hrpc@ietfa.amsl.com>; Tue, 15 Mar 2022 07:51:34 -0700 (PDT)
Received: from mail-oo1-xc34.google.com (mail-oo1-xc34.google.com [IPv6:2607:f8b0:4864:20::c34]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 283673A14CF for <hrpc@irtf.org>; Tue, 15 Mar 2022 07:51:34 -0700 (PDT)
Received: by mail-oo1-xc34.google.com with SMTP id q1-20020a4a7d41000000b003211b63eb7bso24514846ooe.6 for <hrpc@irtf.org>; Tue, 15 Mar 2022 07:51:34 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cdt.org; s=google; h=message-id:date:mime-version:user-agent:subject:content-language:to :cc:references:from:in-reply-to:content-transfer-encoding; bh=zYFZo9mTCGw8mz0Rp7tR8FNgUszskTydZyWCxFhtFYk=; b=HftWUS6BeQNRxD3dn49zWYArUqGAE54Nt/2+t3ZPPjLk/uBPxIZe1zlVmWEZZ4V4c4 7yIMzK3iCqspHoe9cjGTZSgV4oFWlUu6DQvYJGFybFq0cujondRKhTxfR9domMNAQEeZ p1/TumLDBJlzGHVLZZe2nScnlZWTzzmT0Hlq0=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:message-id:date:mime-version:user-agent:subject :content-language:to:cc:references:from:in-reply-to :content-transfer-encoding; bh=zYFZo9mTCGw8mz0Rp7tR8FNgUszskTydZyWCxFhtFYk=; b=Tea+ebkTGAUwmdVweTEpeId1Fs8JH2hvY7Rw+oeLGE8LKGKvxx07x+KuDh0+auXISo ymsZXkEzwRH7JE+W2FIlkuGgh1BvPozHV0dbspLgkM30ZCVb5So12ckXmE07AuHfmORp IzEtmZ+lTmHQLs+Vbxcigictm42S2FYQrpBJG0zUm+zDk/WojqVfdsozIHtR16HD1xML jEY2dsw4Wa3us3YcSTiF1X9as4LtH+him8YE1nk03frjdBV3FzSsm3TXQGwrp1fZFvxO h9z2SrsTyo0yAP3uCYVCbp95eQx0+k9n5EgQ72mSgbElgHPamSJ5Xl3iChRaAc8bpkYX xuTA==
X-Gm-Message-State: AOAM532ClmGOahWi+Duh9Mle3eapVgnMVlI2Nf52tDekhZhtle3ky2q7 KXhdmVj7FxmfpDO1OFvW/EfflsJcIt/d5w==
X-Google-Smtp-Source: ABdhPJyP/4E7sdZx7/w+cGCEPrgZXT+Dn4/wA2Ffs2GOJUcPkEA+oAf1z3pBvgrUHJal6i8MIXNLyQ==
X-Received: by 2002:a05:6870:631a:b0:d1:7d97:806 with SMTP id s26-20020a056870631a00b000d17d970806mr1734862oao.8.1647355892604; Tue, 15 Mar 2022 07:51:32 -0700 (PDT)
Received: from [172.20.4.70] ([4.17.95.171]) by smtp.gmail.com with ESMTPSA id f7-20020a056830264700b005b2503422d4sm9451832otu.81.2022.03.15.07.51.32 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Tue, 15 Mar 2022 07:51:32 -0700 (PDT)
Message-ID: <5293c470-c994-5fbb-67f5-8e996f8288f9@cdt.org>
Date: Tue, 15 Mar 2022 10:50:40 -0400
MIME-Version: 1.0
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:98.0) Gecko/20100101 Thunderbird/98.0
Content-Language: en-US
To: Stephen Farrell <stephen.farrell@cs.tcd.ie>, Jens Finkhaeuser <jens@interpeer.io>, Andrew Sullivan <ajs@anvilwalrusden.com>
Cc: hrpc@irtf.org
References: <1779273019.188450.1647022617139@appsuite-gw2.open-xchange.com> <AF3A93BB-04A7-4E5F-B88A-CD441369874E@nohats.ca> <1bf024c5-9044-f806-9ce9-7a3377045f48@lear.ch> <25132.19040.388723.228805@gargle.gargle.HOWL> <B41A8BB3-BBF3-4D53-A14D-E1CE4BC782DF@pch.net> <20220313214033.rysyxmydzda2v3kw@crankycanuck.ca> <DgjJ0pvzPp-nRdnSldzL0wBJfaVS74YhB-k_2rln_6ucqpbfaVYynous2WNiSrd2uZ26kaBCYfL8WauDvRvD6WYVePDWrm8zpxSfgd6BRzM=@interpeer.io> <20220314151111.eird5poe2scjoywn@crankycanuck.ca> <fa9562f7-415e-a335-be05-2b137c0a3a21@nielstenoever.net> <20220314192902.fjag7xp6jkprdiyg@crankycanuck.ca> <nTwqrqnZd6czoxYmGRXMNcr-f0rxCBjA88flQjqwNM22eFfnuvGiE-dm8_LkgyhYNVb6MA4DtATpins_9JBV_9jlV7Zeb-CYUchFkeSlot8=@interpeer.io> <af2b4edb-8c23-fd0e-e2a1-b0def85ad34b@cs.tcd.ie>
From: Mallory Knodel <mknodel@cdt.org>
In-Reply-To: <af2b4edb-8c23-fd0e-e2a1-b0def85ad34b@cs.tcd.ie>
Content-Type: text/plain; charset="UTF-8"; format="flowed"
Content-Transfer-Encoding: 8bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/hrpc/xQgexll2qzKdYWbht_GE-HKuzOI>
Subject: Re: [hrpc] ***SPAM**** Re: Censorship
X-BeenThere: hrpc@irtf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: hrpc discussion list <hrpc.irtf.org>
List-Unsubscribe: <https://www.irtf.org/mailman/options/hrpc>, <mailto:hrpc-request@irtf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/hrpc/>
List-Post: <mailto:hrpc@irtf.org>
List-Help: <mailto:hrpc-request@irtf.org?subject=help>
List-Subscribe: <https://www.irtf.org/mailman/listinfo/hrpc>, <mailto:hrpc-request@irtf.org?subject=subscribe>
X-List-Received-Date: Tue, 15 Mar 2022 14:51:42 -0000

Hi,

On 3/14/22 7:43 PM, Stephen Farrell wrote:
> On 14/03/2022 20:17, Jens Finkhaeuser wrote:
>> Bill's last reply and my reading of the paper suggests that the main
>> point here is to create a defensible position for network operators
>> against too much filtering: they can hardly be accused of doing
>> nothing if they filter something. And if the filters are created
>> carefully by a multi-stakeholder organization in full consideration
>> of their impact on human rights, calls for stricter measures
>> automatically cast a bad light on the party doing the calling - and
>> network operators may use that in the Internet's favour.
> But aside from considering efficacy, do we have any examples
> of blocklists for which the evidence justifying a block, and
> all the process steps leading to a decision to add an entry,
> are public?

I have seen leaked lists but none are public. Some stretching into the 
tens of thousands. Some mandatory, some as guidance.

This speaks to yet another paradox of this exercise. If you publish the 
blocklist and make recommendations on how to do it technically then you 
are facilitating circumvention. As Andrew said before, you can be 
proportionate (and accountable) but then you are ineffective.

This itself is a proportionality test. And I don't believe the authors 
have presented a tradeoff that is proportionate given the political 
risks. I'll answer Bill's previous question to me about political risks. 
In the case of censoring, or boycotting through internet cutoff, the 
Russian military, you are:

  * Provoking Russia on national security and it will have ramifications 
at the UN on the cybercrime treaty and any future hope of a 
cybersecurity treaty,

  * Giving Russia an excuse to continue building its own internet, 
splintering further away,

  * Undermining civil society's prior positioning firmly against all 
internet censorship even to advocate for carve outs in sanctions,

  * Normalising blocking by intermediaries that haven't the in-house 
capacity to take a political position, when instead we should be helping 
build their capacity to resist unjust blocking,

  * Moving out of alignment what is best for the internet and what is 
best for people,

  * Making more incoherent messaging and guidance about is "right" to 
do, not less.

  * Abstracting the nascent capacity to govern the internet with 
political considerations away from where those decisions should instead 
be made.

> It might be that if the proponents here fleshed out the idea
> another level deeper, then it'd be easier to understand just
> what's envisaged. Personally, I can't really see how to setup
> anything resembling what's envisaged, but I may be missing
> something.

This is what I have said, though not to the list: Follow through with 
the blocklist as proposed. Who are you waiting for to start this work?

As Bill said, no one has to ask permission to do things like this on the 
internet. So do the thing. Form your group and give the world a 
blocklist. Of course you'll never get the civil society sector to come 
to consensus about it, so you can't call it that (as you do in your 
letter). The list will represent the views of the people who are in the 
group. If your advice has managed to persuade everyone, is valuable, is 
actionable and makes a difference, then your idea will succeed.

Gentle reminder to everyone in the discussion that we are meant here to 
identify research topics related to human rights and internet protocols.

My view on that is that I do see potential here, but it is as I have 
said already: what's important is for each existing internet governance 
body to identify objectionable behaviour within its mandate and to 
document how objectionable behaviour is actioned. HRPC could could 
survey the existing space for best practice and how that has already 
been done. Then outline how existing guidance might play out in various 
scenarios like war, what we think might be missing, and make 
recommendations for how to do fill those gaps.

-Mallory

-- 
Mallory Knodel
CTO, Center for Democracy and Technology
gpg fingerprint :: E3EB 63E0 65A3 B240 BCD9 B071 0C32 A271 BD3C C780