[regext] Re: WGLC: draft-ietf-regext-rdap-geofeed-05

[Jasdip Singh <[e-mail]>]

Thanks, Mario. Will make the section 3 change in the next version.

Jasdip

From: Mario Loffredo <mario.loffredo=[e-mail]>
Date: Wednesday, July 17, 2024 at 3:16 AM
To: Jasdip Singh <[e-mail]>, [e-mail] <[e-mail]>
Subject: [regext] Re: WGLC: draft-ietf-regext-rdap-geofeed-05


Il 17/07/2024 01:01, Jasdip Singh ha scritto:
Hi Mario,

From: Mario Loffredo <mario.loffredo=[e-mail]><mailto:mario.loffredo=[e-mail]>
Date: Tuesday, July 16, 2024 at 9:56 AM
To: [e-mail]<mailto:[e-mail]> <[e-mail]><mailto:[e-mail]>
Subject: [regext] Re: WGLC: draft-ietf-regext-rdap-geofeed-05

Have reviewed this document.

Per what is stated in section 3, it's not clear to me what servers should do whenever the geofeed file exposes the location of an individual.

Neither Section 7 of [I-D.ietf-opsawg-9092-update] seems to clarify this point as it contains only a generic warning (see below):

... In publishing pointers to geofeed files as described in this document, the operator should be aware of this exposure in geofeed data and be cautious....

Should RDAP servers omit to present the geo link  or should they remove from the linked geofeed file the information related to the location of individuals ?
[JS] Since maintaining the public geofeed files from privacy angle, per the guidance from RFC 9092 update, is expected to be the concern of the ISPs,  and not the RDAP server operators, we should clarify this in section 3. How about updating the first paragraph in that section as follows?
Works for me.

“When including a geofeed file URL in an IP Network object, an RDAP server operator SHOULD follow the guidance from Section 7 of [I-D.ietf-opsawg-9092-update] to not accidentally expose the location of an individual.”
---->
“When including a geofeed file URL in an IP Network object, it is expected that the service provider publishing the geofeed file has followed the guidance from Section 7 of [I-D.ietf-opsawg-9092-update] to not accidentally expose the location of an individual.”

Does it mean that the geo link can be redacted ? If so, which redaction method should be used?
[JS] IIRC, we discussed this earlier and decided that redaction does not factor here since the geofeed files are public to start with. Please see section 7.3 change history.

Sorry. I missed that.



Best,

Mario
Thanks for your review,
Jasdip



--

Dott. Mario Loffredo

Senior Technologist

Technological Unit “Digital Innovation”

Institute of Informatics and Telematics (IIT)

National Research Council (CNR)

Address: Via G. Moruzzi 1, I-56124 PISA, Italy

Phone: [phone]

Web: http://www.iit.cnr.it/mario.loffredo