Re: Github, sanctions, and the IETF

Christian Huitema <huitema@huitema.net> Wed, 10 August 2022 20:18 UTC

Return-Path: <huitema@huitema.net>
X-Original-To: ietf@ietfa.amsl.com
Delivered-To: ietf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0B9E3C13CCE6 for <ietf@ietfa.amsl.com>; Wed, 10 Aug 2022 13:18:03 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.909
X-Spam-Level:
X-Spam-Status: No, score=-6.909 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, NICE_REPLY_A=-0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Xy35YhaBsLD2 for <ietf@ietfa.amsl.com>; Wed, 10 Aug 2022 13:18:00 -0700 (PDT)
Received: from mx36-out10.antispamcloud.com (mx36-out10.antispamcloud.com [209.126.121.30]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D83B6C13CCE4 for <ietf@ietf.org>; Wed, 10 Aug 2022 13:18:00 -0700 (PDT)
Received: from xse100.mail2web.com ([66.113.196.100] helo=xse.mail2web.com) by mx256.antispamcloud.com with esmtp (Exim 4.92) (envelope-from <huitema@huitema.net>) id 1oLs9L-00062T-AW for ietf@ietf.org; Wed, 10 Aug 2022 22:17:58 +0200
Received: from xsmtp22.mail2web.com (unknown [10.100.68.61]) by xse.mail2web.com (Postfix) with ESMTPS id 4M31T04gDHz5Sn for <ietf@ietf.org>; Wed, 10 Aug 2022 13:17:40 -0700 (PDT)
Received: from [10.5.2.13] (helo=xmail03.myhosting.com) by xsmtp22.mail2web.com with esmtps (TLS1.0:DHE_RSA_AES_256_CBC_SHA1:256) (Exim 4.92) (envelope-from <huitema@huitema.net>) id 1oLs96-0001JF-Gk for ietf@ietf.org; Wed, 10 Aug 2022 13:17:40 -0700
Received: (qmail 22472 invoked from network); 10 Aug 2022 20:17:39 -0000
Received: from unknown (HELO [192.168.1.106]) (Authenticated-user:_huitema@huitema.net@[172.58.43.187]) (envelope-sender <huitema@huitema.net>) by xmail03.myhosting.com (qmail-ldap-1.03) with ESMTPA for <fernando@gont.com.ar>; 10 Aug 2022 20:17:39 -0000
Content-Type: multipart/alternative; boundary="------------ckKHpMNRL6K08gOWfvgd01t4"
Message-ID: <46e93d42-0be3-e054-d5a2-8a87490e8372@huitema.net>
Date: Wed, 10 Aug 2022 13:17:39 -0700
MIME-Version: 1.0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:91.0) Gecko/20100101 Thunderbird/91.11.0
Subject: Re: Github, sanctions, and the IETF
Content-Language: en-US
To: Fernando Gont <fernando@gont.com.ar>, Tim Bray <tbray@textuality.com>
Cc: IETF-Discussion Discussion <ietf@ietf.org>
References: <953c702b-2055-5e0c-115e-6bcc923834d4@gont.com.ar> <CAHBU6ivULhDOhFSq0Ftsw=5Svmq=jKRN12Od8pKQ3hKh88pH1A@mail.gmail.com> <372682e8-7d47-5768-fde8-aecca62f5eb3@gont.com.ar>
From: Christian Huitema <huitema@huitema.net>
In-Reply-To: <372682e8-7d47-5768-fde8-aecca62f5eb3@gont.com.ar>
X-Originating-IP: 66.113.196.100
X-Spampanel-Domain: xsmtpout.mail2web.com
X-Spampanel-Username: 66.113.196.0/24
Authentication-Results: antispamcloud.com; auth=pass smtp.auth=66.113.196.0/24@xsmtpout.mail2web.com
X-Spampanel-Outgoing-Class: unsure
X-Spampanel-Outgoing-Evidence: Combined (0.15)
X-Recommended-Action: accept
X-Filter-ID: Pt3MvcO5N4iKaDQ5O6lkdGlMVN6RH8bjRMzItlySaT9WLQux0N3HQm8ltz8rnu+BPUtbdvnXkggZ 3YnVId/Y5jcf0yeVQAvfjHznO7+bT5x9j7219Tb9QoiGKb6esGsuKj/EwzSHE5FGYwwjsNRPCOiC WEIQuGbCm8eadTX68DPmD6wdmZPcItWbGe10hXJtXL4FsauCVkDjmcYJdU3yWp7KuHNaaKdg7iBE ZefdsNUFWKwa/wzJUjmazeC7Imca14BihDXmuP+7DmJsYpDsThQ6V51u76v35b1wNe/MvdIASZp0 7mnQqdezZCtq+A712+J9PgaoF8SQHto3le4zsHTaeQtlKubP6iUTjj6yPARK6buALVaA782LKxg6 vRmng8N1aLhXqdc+jC1RcnVud53D5caUhbVtvqItBqoizkEt9O20UjkwI0v+LOlw05G4BS+iyyNq bT8dUMXMJ4tUCMj6G37ZfAMLceP5aNHPt26RBupu5v1nytoNnc138GfEJRQ2qC7jjynPIHPNqSn4 QTXUjLjYWQt1/5xnQymMoPsgr/U0flMcy2Vi/IcBgY4arPaiJ1W6hAyiRC61jekdwIcXNugoOEbH RyFULpSjm7hMIABpqqRGKyDs8xujM3cqKtEyjRS48tkuSWBkVvcslIXvJBmeqmkl1oy1EzQqw+B4 bETqXDG85jsuZ/LCliGhEnFzsC48bTEFY06/YbB87aZA2T1TDpm1DkXX6Es5zXntCB3G1CwpaI3Z 4ESkMWDVJEenxBoIht3V0nekAoxXAkqMUsGwhl8hfRuE6r9HI1yyuLfHqAnAj7rgKH7+eCmmIEpi 63sFwSfW9jf1+atvyVShcA6Xvva2QAVEjpqzANbJ1UfXmet2cbFKoyT/OdZLK3/h3l8c7wYUGZzj CP1GIm0AuXq0T17woJo3avKeADIsy647Mn0zwmGzAi3Zn+YdthRNgs7Ig4l/XErpYn3glZTKFuaT l19W3ISq9+1KiLsESGU+y+fjdgjudZxiTPi+MG1QP35nsYfP84c+RFK3KiZuZ5OAUoGBziSYFLZu u6zX3xxsmqT8l9ARlsTalAaf
X-Report-Abuse-To: spam@quarantine11.antispamcloud.com
Archived-At: <https://mailarchive.ietf.org/arch/msg/ietf/apXF7nMZ5KtcykMd1Ab5jvg2f7U>
X-BeenThere: ietf@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: IETF-Discussion <ietf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ietf>, <mailto:ietf-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ietf/>
List-Post: <mailto:ietf@ietf.org>
List-Help: <mailto:ietf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ietf>, <mailto:ietf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 10 Aug 2022 20:18:03 -0000

On 8/10/2022 12:21 PM, Fernando Gont wrote:
> Hi, Tim,
>
> On 10/8/22 16:13, Tim Bray wrote:
>> It's actually an interesting new kind of thing. When somebody's doing 
>> something that law-enforcement considers wildly illegal and building 
>> their technology on a public open-source hoster, will this sort of 
>> enforcement become routine?  Um, maybe if you're doing something 
>> seriously sketchy, don't do it on GitHub or equivalent?
>
> Please consider some security tools or technologies, which at times 
> are considered illegal or embargoed, and redo the thought experiment...
>
> Aside, there's a difference, maybe, between removing a repo and 
> cancelling a user account? 

Consider a separate thought experiment in which the IETF is running is 
own Gitlab, and hosting the repo for the "blockchain Tornado WG". Then 
the IETF receives a nice request from law enforcement. What happens?

-- Christian Huitema