Re: Harassment, abuse, accountability. and IETF mailing lists

"Murray S. Kucherawy" <superuser@gmail.com> Sun, 05 June 2022 22:55 UTC

Return-Path: <superuser@gmail.com>
X-Original-To: ietf@ietfa.amsl.com
Delivered-To: ietf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 39B85C14CF08; Sun, 5 Jun 2022 15:55:59 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -7.108
X-Spam-Level:
X-Spam-Status: No, score=-7.108 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id PiX3Z8qDVTyb; Sun, 5 Jun 2022 15:55:58 -0700 (PDT)
Received: from mail-io1-xd35.google.com (mail-io1-xd35.google.com [IPv6:2607:f8b0:4864:20::d35]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4B436C14F612; Sun, 5 Jun 2022 15:55:58 -0700 (PDT)
Received: by mail-io1-xd35.google.com with SMTP id d7so4106033iof.10; Sun, 05 Jun 2022 15:55:58 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=HBlGPdZgnuJarwZ6/AbAeAL6IMc6ecAtmyujYi386PQ=; b=SICIkVCS4iCbrh0TnSxmN0MHZXmWnH6mqBRlKLcc90pmpTbN8UPcjeIGkl8mplLt73 5pQVx8YLpDbEACDtmqDJpf973k43Wxfl5yjmRu4xM+I3vvt4xzI3EESupy3LToyyVRPF AkJ8vEzmJHF+caXJ4mug/LnpagybPeAHU3jizInlf2KB9Vbs5YpVqWEx5F+80R3KnT09 OWVWQCuopriZlkP1hYQVDXqJXE17BmEoXVNYKzlc/PqUE6Ab9B2I1sISeHMZmSou0TaQ PpYOq9WqKt41KaZ8eYzTAbAirsgDmWqLhSXE5ZwX5q4bLzZpYGjADYuWtyCF8Jz8Avut 3ywQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=HBlGPdZgnuJarwZ6/AbAeAL6IMc6ecAtmyujYi386PQ=; b=y8iURDyuY85rGW99McrhGLXOHDW7U2YVYeII8id21oGKzaikpYhj33lmx+7Wc3yKeF KROCr/zeSdW7vG3Ik3yO2Z+ero/Yj5Xbvd7dYIHl8oMOoqgMl+8C2GcbU/dtC04v05LA zBL47UY+bsocdLGAm2nlhCyRODtCgrgTCRWTopPonSVSB067yKmHs0BA4z3N5fQvFFmF YyY7MPYGZVece3H8eSOnW8oQN24baSe/8wcxuE2aQsDJTxFBPweouXS/R9Y0YjsS++AR uvxoEUZNh8Q4GXLSqjAZOSDPHWrJpDZtHUsnf4GNizKYFottcv561DH/GrtjfynAuo00 vkwQ==
X-Gm-Message-State: AOAM5323bBW0uZHjN1bSpcFvbnrpRWRsziAUKKllHXOpmqf2HwXBkutF xnci6nAC3/63IcL5q7FBJRp65ot4g8OtxcwUl7g=
X-Google-Smtp-Source: ABdhPJy48bMepa5zOhnuAQn8f4jkjU1C0UEagsf7AjGAfIlNK6MXYQGBOFijEzkayZ6eP1DSfYyHrn80Wqly3ktF5Z4=
X-Received: by 2002:a05:6638:248c:b0:32e:be23:7160 with SMTP id x12-20020a056638248c00b0032ebe237160mr11974537jat.311.1654469757409; Sun, 05 Jun 2022 15:55:57 -0700 (PDT)
MIME-Version: 1.0
References: <16C5EC99A155D55344E1F195@PSB> <5a53fa11-8138-2261-0e30-ae603b064cc8@network-heretics.com> <452764b0-a758-874a-2ce5-122f9d0de763@gmail.com> <4520B31984B329BF6936113D@PSB> <6298831D.8030605@btconnect.com> <941D4EB9-8EDF-4612-AD55-251C381C09FB@episteme.net> <e1d5ba16-8c12-cd30-ea4c-762b9225cee4@gmail.com> <10863445C94B1C12A5973429@PSB>
In-Reply-To: <10863445C94B1C12A5973429@PSB>
From: "Murray S. Kucherawy" <superuser@gmail.com>
Date: Sun, 05 Jun 2022 15:55:46 -0700
Message-ID: <CAL0qLwbbD894jV6oJ2x6mncNcrDpXX6=_32TG2_X8vYTPo8v9w@mail.gmail.com>
Subject: Re: Harassment, abuse, accountability. and IETF mailing lists
To: John C Klensin <john-ietf@jck.com>
Cc: Brian E Carpenter <brian.e.carpenter@gmail.com>, Pete Resnick <resnick@episteme.net>, tom petch <daedulus@btconnect.com>, IETF discussion list <ietf@ietf.org>, ART ADs <art-ads@ietf.org>
Content-Type: multipart/alternative; boundary="0000000000002e9e2805e0bb42aa"
Archived-At: <https://mailarchive.ietf.org/arch/msg/ietf/tR40vJFwT7891EbayLmPf7W2R6g>
X-BeenThere: ietf@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: IETF-Discussion <ietf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ietf>, <mailto:ietf-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ietf/>
List-Post: <mailto:ietf@ietf.org>
List-Help: <mailto:ietf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ietf>, <mailto:ietf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sun, 05 Jun 2022 22:55:59 -0000

On Thu, Jun 2, 2022 at 8:26 PM John C Klensin <john-ietf@jck.com> wrote:

> [...]
>
> Even our announcements of new non-WG lists are part of the
> problem.  As a handy example, an announcement appeared today
> titled "New Non-WG Mailing List: cfbl".  It tells the reader
> where the archives are and how to subscribe.  It tells us that
> it is "intended for discussions relating to the Complaint
> Feedback Loop Address Header", but one needs to be rather
> thoroughly immersed in that corner of the ART area (the
> announcement does say it belongs to that area) to have a clue
> about what that is about.  Either you or I could probably could
> figure out where to look but a newcomer, especially one who did
> not know enough to treat "This list belongs IETF area" (sic) as
> a clue, I think it would be pretty hopeless.  It does tell
> anyone who wants additional information to "please contact the
> list administrators". That, unfortunately, just makes things
> worse: No information in the announcement as to who those people
> might be or how to contact/ reach them, etc.   Someone very
> experienced with the IETF might notice that someone named
> "jpb@cleverreach.com" is copied on the announcement and is not
> the list address itself, but that is not a person's name, it is
> just a hint, it is easily missed, and expecting a newcomer to
> make that inference is, well, unrealistic.  One might reasonably
> try to go to the list's "info" page (disguised in the
> announcement as "To subscribe:") for information about how to
> contact the list administrators, but that page is very similar
> to the 14all list.   In particular, the terms "list
> administrator" or even "administrator" do not even appear on it.
>
> Once upon a time, we required anyone requesting that the IETF
> create or host a list provide a paragraph of description of what
> that list was about, who was expected to participate, and why.
> Apparently that is no longer the case.  If we care about
> openness and transparency, probably not a step in the right
> direction.
>

Speaking for myself and not the IESG:

I was the Area Director that approved this list, so I can clarify what
happened here.

The non-WG list request form includes two fields pertinent to this case.
One of them requests a one-liner to be included on the non-WG
"list-of-lists" page.  It appears that the text that was submitted for this
purpose was replaced with simply "cfbl-address-header", which I agree is
not very descriptive.  I just asked the list manager to update that page
with the one-liner I was given.

The second field asks for a more detailed description, and indicates where
this will be used, in particular in the announcement that's sent to the
community.  The text provided for that field in the form I was sent was
terse, to the point of being unhelpful as John pointed out, and it's my
fault for not catching this and considering where it would be visible.  So,
apologies for that oversight, and I'll be more cautious about it in the
future.  I've asked for something more comprehensive in the way of a
descriptive paragraph. In terms of fixing this, however, there doesn't seem
to be a place where such prose is used outside of the announcement, which
has already been sent, so I'm not sure what to do with it once I have it in
hand.  It doesn't appear to be present on the non-WG lists page or on the
WG's mailman status page, etc.  Perhaps I can get the announcement
re-sent.  At a minimum, I'll send it to the ART area list.

As for whether non-WG lists are any different than WG lists in terms of
management and responsibility, I don't have any reason to think they
warrant any different treatment.  The list administrators should be aware
that they have obligations to manage the list as a WG list would be
managed, that the Note Well applies, and what the remedy procedures are
when problems arise.  I'm generally supportive of the idea of making all of
this more evident in list footers or list management pages where people
might land.  Finally, in the absence of effective management of a list
where problems are happening, I believe suspension or closure of the list
might be warranted until such management can be secured.

-MSK