Re: [regext] Privacy and HR considerations for draft-ietf-regext-verificationcode

[Gurshabad Grover <[e-mail]>]

On 13/02/19 8:22 PM, Gould, James wrote:
> 
> Can you provide your latest proposed section(s) on the list for consideration by the WG?  
> 

James, thanks for bumping the thread.

Everyone, thanks for the discussion. I have revised the text based on
the discussion, which you can find below. I realise there are still some
differences in opinion, but I am hopeful we can arrive at agreeable
considerations for the draft. Would appreciate your feedback.

Privacy Considerations
----------------------
The working of this extension depends on the sharing of data of (or
generated by) registrants with the VSP. For example, a verification code
with the "type" attribute set to "registrant" or "domain-registrant" (as
described in the examples in Section 2.1.1) depends on registrants'
personal information, such as contained in the contact mapping object,
being shared with the VSP.

To mitigate the possible negative impact on registrants' privacy,
clients using this extension are encouraged to inform registrants about
the information shared with the VSP.


Human Rights Considerations
---------------------------
The extension may contribute to a domain name filtering and
pre-censorship mechanism. This can negatively impact registrants'
freedom of expression, and may further impede their freedom of assembly
and association, and social and economic rights.

Additionally, this extension may support a paradigm where the VSP's
policies negatively impact registrants' human rights. For example,
depending on the information shared with the VSP (and data sources
already available to it), the VSP may discriminate against registrants
based on registrants' personal characteristics. Even when such
restrictions are not applied, knowledge of the information being shared
with the VSP could create chilling effects on registrants' freedom of
expression, association and assembly.

Clients should consider these possible human rights implications when
offering the use of this extension and advertising support for it in EPP.

/

Thank you.
Gurshabad