Re: Interoperability and competition [was: Google, etc, and their proprietary protocols]

Mark Nottingham <mnot@mnot.net> Tue, 01 December 2020 00:44 UTC

Return-Path: <mnot@mnot.net>
X-Original-To: ietf@ietfa.amsl.com
Delivered-To: ietf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5A25F3A13B0 for <ietf@ietfa.amsl.com>; Mon, 30 Nov 2020 16:44:12 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.12
X-Spam-Level:
X-Spam-Status: No, score=-2.12 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=mnot.net header.b=XG0DGzLT; dkim=pass (2048-bit key) header.d=messagingengine.com header.b=LX0xHKjM
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id tCXfXncLy5_9 for <ietf@ietfa.amsl.com>; Mon, 30 Nov 2020 16:44:10 -0800 (PST)
Received: from out4-smtp.messagingengine.com (out4-smtp.messagingengine.com [66.111.4.28]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2E4E73A1574 for <ietf@ietf.org>; Mon, 30 Nov 2020 16:43:09 -0800 (PST)
Received: from compute2.internal (compute2.nyi.internal [10.202.2.42]) by mailout.nyi.internal (Postfix) with ESMTP id 3994B5C0118; Mon, 30 Nov 2020 19:43:08 -0500 (EST)
Received: from mailfrontend2 ([10.202.2.163]) by compute2.internal (MEProxy); Mon, 30 Nov 2020 19:43:08 -0500
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mnot.net; h= content-type:mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; s=fm1; bh=q xlefSgMNc1HouqYJgvslPG3fuligY9hU77aLqOPru8=; b=XG0DGzLTVruPD/Ehj M9lrFOQ0K9GAGLn85x0wZ6B2CMjcdGxa2lLR6g0WkLg6kaNdvnOGquvLbSaU3/bh qvjfZVhDT8p97PbT7Le0koCzE/Mw/ymj49W997mfwJ4o/mT4k3/ZdMxqqlfqR9dM I1gS3Fal2Zu5g02hiSkngOpCmcRYAB2zn0fCd2SMcN4W99FYmsBpXRJd9dNJEAIJ XJPeBkLdR2vi0dVAxAj2eKzDSx/t335osRpmPoFQI4XsXTIaVKDfV4/LdHXdH99U wM9zzVsx2EGDex+WIPDG719CoOeIoBWzxVy1Nf6YlTpthEprjgsgdwwna1Y3AVbF liNuw==
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-transfer-encoding:content-type :date:from:in-reply-to:message-id:mime-version:references :subject:to:x-me-proxy:x-me-proxy:x-me-sender:x-me-sender :x-sasl-enc; s=fm1; bh=qxlefSgMNc1HouqYJgvslPG3fuligY9hU77aLqOPr u8=; b=LX0xHKjMm/4M0fh3REZnwfvxMiECvDFyXN6tefiTmLjKqROFhhpe1xUcL bVTqLXOHRo20vWj1+uhJGBfppgEAd2jn53wv+JI4bxgxD9IJfG+BNjWly7ysSiAL HwHkU/f2BUj3tjUMK132L5RxmGzqCVFa94wfp8rjA+NKdpP0jf07xLvdI4Z8MXBd S1O4JzxFHBzr162xJiYt4jzCZsLLXCd61MQLNwpDmalojqd8l2WGTul+jkOO17Nd 54HILKlhHtyoQnQ3NNftgIQQuWItBSJ7+1zI3rAtlvH/W48z91c2xUGeHXrR8ZxT yj+sgt+Y1aLGPLkilT+/pv3hPwZ3Q==
X-ME-Sender: <xms:m5HFX8B_zUWzvGimx0Qy7QXeP9pT1uejiwEcehBJLOovo9BXwL02Lw> <xme:m5HFX-gAPObIHE1z3GWFlhY3qfcxstujvmuOgcICax49_EqzAerySqeeT7JCLvC43 LmPmImA9HUEZOxjtw>
X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgedujedrudeiuddgvdehucetufdoteggodetrfdotf fvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdfqfgfvpdfurfetoffkrfgpnffqhgen uceurghilhhouhhtmecufedttdenucesvcftvggtihhpihgvnhhtshculddquddttddmne cujfgurheptggguffhrfgjfffgkfhfvffosehtqhhmtdhhtddvnecuhfhrohhmpeforghr khcupfhothhtihhnghhhrghmuceomhhnohhtsehmnhhothdrnhgvtheqnecuggftrfgrth htvghrnhepvdelueetjeeiveeuveelvdduffdvvdfgleekleeiueegffeuffdvueehfeeu vdeinecuffhomhgrihhnpehmnhhothdrnhgvthenucfkphepudduledrudejrdduheekrd dvhedunecuvehluhhsthgvrhfuihiivgeptdenucfrrghrrghmpehmrghilhhfrhhomhep mhhnohhtsehmnhhothdrnhgvth
X-ME-Proxy: <xmx:m5HFX_kqne08BWtu5pyWBuzJdWWw-NoVnyfvpUW20Ahps0nO-xUwfA> <xmx:m5HFXyxu9jDCVfZ3UZ0HI1U-bwomTUC-rtZUKnZmkmAG5HNMh0PmUQ> <xmx:m5HFXxQ1vDRkkmHV-EzQjm9IA_oMCdTxEo9VokhRxlykCKTg1Z8ISA> <xmx:nJHFXzc4XbuJe9LAtG3A0pVI34Q6illwh7qsUWnAYHl6v0GpMdETPg>
Received: from [192.168.7.30] (119-17-158-251.77119e.mel.static.aussiebb.net [119.17.158.251]) by mail.messagingengine.com (Postfix) with ESMTPA id 1844E3064AB2; Mon, 30 Nov 2020 19:43:05 -0500 (EST)
Content-Type: text/plain; charset="us-ascii"
Mime-Version: 1.0 (Mac OS X Mail 14.0 \(3654.20.0.2.21\))
Subject: Re: Interoperability and competition [was: Google, etc, and their proprietary protocols]
From: Mark Nottingham <mnot@mnot.net>
X-Priority: 3
In-Reply-To: <2078008281.28898.1606754188528@appsuite-gw2.open-xchange.com>
Date: Tue, 01 Dec 2020 11:43:02 +1100
Cc: Warren Kumari <warren@kumari.net>, IETF Discussion Mailing List <ietf@ietf.org>
Content-Transfer-Encoding: quoted-printable
Message-Id: <451D5AB5-AF22-44CC-AF49-2A7854F0A68F@mnot.net>
References: <d00258b3-ef73-ee93-a47d-2831738d32d1@mtcc.com> <CAHw9_iLcYFkOuRgiyKLH-OnBs1i+Y-8L4ds3areJiT9EbxFs+w@mail.gmail.com> <63549F4D-B0EF-4B2B-9D55-6131D054A896@mnot.net> <2078008281.28898.1606754188528@appsuite-gw2.open-xchange.com>
To: Vittorio Bertola <vittorio.bertola@open-xchange.com>
X-Mailer: Apple Mail (2.3654.20.0.2.21)
Archived-At: <https://mailarchive.ietf.org/arch/msg/ietf/txWlnp3LzezHcpjiGpVSLi6hlKA>
X-BeenThere: ietf@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: IETF-Discussion <ietf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ietf>, <mailto:ietf-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ietf/>
List-Post: <mailto:ietf@ietf.org>
List-Help: <mailto:ietf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ietf>, <mailto:ietf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 01 Dec 2020 00:44:19 -0000


> On 1 Dec 2020, at 3:36 am, Vittorio Bertola <vittorio.bertola@open-xchange.com> wrote:
> 
> 
> 
>> Il 28/11/2020 02:52 Mark Nottingham <mnot@mnot.net> ha scritto:
>> 
>> So, what's interesting to me here is that we have a very good 
>> possibility of at least one, and perhaps many, jurisdictions 
>> imposing interoperability requirements on various digital platforms
>> as a remedy for competition issues.*
> 
> I am quite involved in the European one, so I am happy to see this mentioned here. Also, it is rare to have opportunities to discuss this topic with non-Europeans and with people from the global platforms, and it is a pity.

It seems like there's been a lot more interest in places like Australia and even the US with recent reports. :)


>> A third option that hasn't been discussed as much is leveraging 
>> existing SDOs to do the technical work that enables interoperability
>> -- ideally using already-existing protocols and formats where 
>> necessary. 
> 
> This is the likely model in Europe, where the Commission already has procedures to "recognize" standards developed by SDOs and bless them. There would still be a regulatory authority (a single European one or a constellation of national ones) that would define the policy objectives, but then the SDOs would be scouted to find suitable existing standards, or to see if any of them wants to develop one.
> 
>> There are lots of open questions about how this would work, but 
>> first I wonder how the IETF would react -- if a competition 
>> authority came to us and said "if you create a standard that 
>> promotes interoperability for scope _foo_ in timeframe _bar_ using
>> your normal process, we will leverage that in our remedy", would we 
>> rise to the occasion? 
> 
> I'd also like to know. However, I'd say that if Europe ever wanted to do something like this, perhaps the first door that would be knocked upon would be ETSI, not the IETF. This is due not just to the basic fact that the "E" in ETSI stands for European, but also to the fact that, in the general perception, the IETF does not seem to like cooperating with governments, or even to recognize them a role.

That's interesting. I'd characterise it slightly differently -- the IETF does not like cooperating with governments on projects that are perceived as harming the Internet. From what I've seen there's pretty strong concern held by many here about consolidation of power on the Internet, and a fair amount of experience in areas that could be helpful (e.g., JSON formats, Atom publishing, HTTP APIs), so it might be a good fit.

ETSI is an attractive venue (that unfortunately I haven't participated in yet), but I'd be concerned that the membership rules and weighted voting procedures could affect the result; many of the potential work items here (e.g., APIs for social networking) would benefit from broad participation and a focus on end user needs, rather than being unduly influenced by large corporate concerns. I can imagine that some big vendors would still be attracted to unwieldy solutions like SOAP here...

Of course, if the work items were just lightweight profiles of existing specifications (e.g., Atom, ActivityStreams, etc.), that might be workable. I see that ETSI has the ability to enter into a Partnership Project; for some items, perhaps it might be worth considering use of that mechanism to involve orgs like the IETF.


> Also, there is indeed some concern that open, consensus-based SDOs where the global platforms are strongly represented could fail in producing any suitable standard, as such a standard would negatively affect the interests of a significant part of the participants, which would thus prevent consensus from ever being reached.  This explains, for example, why the bylaws of the GAIA-X Foundation(*) exclude non-European companies (including European subsidiaries of non-European groups) from applying for leadership positions.

Absolutely; that's a risk that's going to be very front-of-mind for venues like the W3C. However, if Europe tries to keep too tight of a hold on the reins, it's going to make it look like a regional solution, and increase the chances of fragmentation.

It's also interesting to me when the IETF is portrayed as being vendor-driven/owned. While it's certainly dominated by tech people, and they have a number of limitations, I think most vendors would say that they do not feel in control of the discussions here; there are too many individuals who prioritise the Internet overall over their employer at the moment (acknowledging that some of them prioritise their view of the technology, rather than the users of the Internet in doing so).

In any of these fora, the practicalities of decision-making under these conditions needs some consideration. For example, if a competition authority tells BigPlatformCorp that it must expose an API to be standardised by the FooWG, how does the FooWG consider input from BigPlatformCorp participants? What if those participants say that BigPlatformCorp can't implement a proposal -- how do you evaluate and weigh that objection (e.g., how much should their costs be considered)? Will appeals from them be handled in a special way? If the normal process isn't adequate to achieve the outcome you want, would adopting special rules to accommodate a mandate from a competition authority cause anti-trust issues in other jurisdictions? And so on.


>> Past history like DNT in the W3C suggests that there's a will in at 
>> least some standards fora to provide affordances for the law. 
> 
> I would not mention DNT to governments as an example of how this cooperation can work, given its total failure...

:)  Yes, that wasn't done well; it always seemed like an instance of hope-based standardisation. I think we'd all benefit if there was some more thought (and research?) about why it did, and how we could do better.

Cheers,



--
Mark Nottingham   https://www.mnot.net/