Re: [weirds] I-D Action: draft-hollenbeck-dnrd-ap-query-00.txt

[Eric Brunner-Williams <[e-mail]>]

On 5/2/12 12:02 AM, John Levine wrote:

>> at least European database law.
> I know that many people believe that, but I'm fairly sure you're
> mistaken.  (Feel free to provide case law.)

case law would be definitive if europe was a common law jurisdiction,
as most of it isn't, prudent reading of the data protection directive
literature could support the belief you are sure is mistaken.

the authors of the w3c p3p spec (self included) anticipated that
personally identifying information was present in, or derivable from,
a portion of an ipv4 endpoint identifier. the spec group as a whole
settled on a /24 as sufficiently anonymous, i thought a larger bit
mask was prudent. i understand you think us mistaken, not as to fact,
but as to necessity.

> As I pointed out to someone else, anyone can get zone file access for
> gTLDs which provides all of that information and more.

the gtld registries are permitted by their contract with the party
currently executing the iana contract to make zone file access subject
to conditions. the aggregate of the initial access cost (in time and
{e}paper touched and the conditions on continuous access, one of which
includes the bandwidth/storage cost of transferring the zone file of
principal interest, as well as access policy updates, are sufficiently
large to distinguish this use case from an unauthenticated transaction
with a payload containing a query with search terms to be executed by
the server.

-e