Re: Future Handling of Blue Sheets

Russ Housley <housley@vigilsec.com> Thu, 24 May 2012 18:42 UTC

Return-Path: <housley@vigilsec.com>
X-Original-To: ietf@ietfa.amsl.com
Delivered-To: ietf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8C5CD21F84EA for <ietf@ietfa.amsl.com>; Thu, 24 May 2012 11:42:47 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -102.551
X-Spam-Level:
X-Spam-Status: No, score=-102.551 tagged_above=-999 required=5 tests=[AWL=0.048, BAYES_00=-2.599, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WG6lWhU2+1va for <ietf@ietfa.amsl.com>; Thu, 24 May 2012 11:42:47 -0700 (PDT)
Received: from odin.smetech.net (mail.smetech.net [208.254.26.82]) by ietfa.amsl.com (Postfix) with ESMTP id 19E6321F84A1 for <ietf@ietf.org>; Thu, 24 May 2012 11:42:47 -0700 (PDT)
Received: from localhost (unknown [208.254.26.81]) by odin.smetech.net (Postfix) with ESMTP id B640E9A4727 for <ietf@ietf.org>; Thu, 24 May 2012 14:43:04 -0400 (EDT)
X-Virus-Scanned: amavisd-new at smetech.net
Received: from odin.smetech.net ([208.254.26.82]) by localhost (ronin.smetech.net [208.254.26.81]) (amavisd-new, port 10024) with ESMTP id TjCxEe8CIRJT for <ietf@ietf.org>; Thu, 24 May 2012 14:42:38 -0400 (EDT)
Received: from [192.168.2.100] (pool-96-255-42-75.washdc.fios.verizon.net [96.255.42.75]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by odin.smetech.net (Postfix) with ESMTP id 072539A4725 for <ietf@ietf.org>; Thu, 24 May 2012 14:43:04 -0400 (EDT)
Content-Type: text/plain; charset="us-ascii"
Mime-Version: 1.0 (Apple Message framework v1084)
Subject: Re: Future Handling of Blue Sheets
From: Russ Housley <housley@vigilsec.com>
In-Reply-To: <CAJNg7V+9+_mab9SJQeM9jnwpObcwjVq=351WNwt2NeMstvQwBA@mail.gmail.com>
Date: Thu, 24 May 2012 14:42:45 -0400
Content-Transfer-Encoding: quoted-printable
Message-Id: <AD67670C-4A2B-4F50-B25F-77EC38DB6E24@vigilsec.com>
References: <201205101732.q4AHWQnP028852@fs4113.wdf.sap.corp> <4FABFE13.3020800@gmail.com> <367E45C5495F9BDB6E24C211@PST.JCK.COM> <6.2.5.6.2.20120510123935.094139d0@resistor.net> <CAJNg7V+9+_mab9SJQeM9jnwpObcwjVq=351WNwt2NeMstvQwBA@mail.gmail.com>
To: IETF <ietf@ietf.org>
X-Mailer: Apple Mail (2.1084)
X-BeenThere: ietf@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: IETF-Discussion <ietf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ietf>, <mailto:ietf-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/ietf>
List-Post: <mailto:ietf@ietf.org>
List-Help: <mailto:ietf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ietf>, <mailto:ietf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 24 May 2012 18:42:47 -0000

> For what it is worth, here is my opinion on this subject (which I was
> asked to post here).
> 
> I see  possible privacy law problems with posting the blue sheets, so
> I would not.
> 
> I see a good reason to scan and have images of new blue sheets, make
> it easier to respond to subpoenas.
> 
> I do see a historical benefit to keeping the blue sheets (as blue
> sheets, not just scans), and the expense
> of doing so is minimal, so I would urge that their archiving be continued.

During the IESG off-site meeting, this topic received quite a bit of discussion.  The IESG recognized that blue sheet information is valuable for peer pressure to abide by the IPR rules.  In contrast, I understand the concerns that have been raised on this thread.  As a result, I am looking into a mechanism where a datatracker password is needed to get the blue sheet images.  This would be the same password that an IETF community participant will to use with the soon-to-be-released Internet-Draft Tracking features (see RFC 6293).  These accounts are available to anyone; however, the need for an account to access blue sheet images raises the bar for access.  Additionally, the need for an account will keep the blue sheet images hidden from web crawlers.

Thanks to Ted hardie for the question that lead to this potential solution.

Russ