Re: [irsg] Minutes being messed with?

Sandra Murphy <sandy@tislabs.com> Wed, 07 August 2019 21:35 UTC

Return-Path: <sandy@tislabs.com>
X-Original-To: wgchairs@ietfa.amsl.com
Delivered-To: wgchairs@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 98D4B120116 for <wgchairs@ietfa.amsl.com>; Wed, 7 Aug 2019 14:35:36 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.233
X-Spam-Level:
X-Spam-Status: No, score=-1.233 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_SOFTFAIL=0.665, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0ID54PFc3v-E for <wgchairs@ietfa.amsl.com>; Wed, 7 Aug 2019 14:35:35 -0700 (PDT)
Received: from walnut.tislabs.com (walnut.tislabs.com [192.94.214.200]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7C16F1200DF for <wgchairs@ietf.org>; Wed, 7 Aug 2019 14:35:35 -0700 (PDT)
Received: from nova.tislabs.com (unknown [10.66.1.77]) by walnut.tislabs.com (Postfix) with ESMTP id A563428B0041; Wed, 7 Aug 2019 17:35:34 -0400 (EDT)
Received: from [127.0.0.1] (localhost.localdomain [127.0.0.1]) by nova.tislabs.com (Postfix) with ESMTP id 8CF0F1F804E; Wed, 7 Aug 2019 17:35:34 -0400 (EDT)
Content-Type: text/plain; charset="utf-8"
Mime-Version: 1.0 (Mac OS X Mail 11.5 \(3445.9.1\))
Subject: Re: [irsg] Minutes being messed with?
From: Sandra Murphy <sandy@tislabs.com>
In-Reply-To: <b87b83df-28c6-5496-1c18-9f8f2e7f6a36@bluepopcorn.net>
Date: Wed, 07 Aug 2019 17:35:33 -0400
Cc: Sandra Murphy <sandy@tislabs.com>, IETF WG Chairs <wgchairs@ietf.org>
Content-Transfer-Encoding: quoted-printable
Message-Id: <57C5429D-1225-47F5-B10D-B48DF8A74DA3@tislabs.com>
References: <2C180C92-9DE3-416B-8A6B-7765BCAEEDB1@eggert.org> <DB7PR07MB51483F20F4261CDE848E3EAFE0DD0@DB7PR07MB5148.eurprd07.prod.outlook.com> <1f00cab2-991f-7f0c-f061-a692f10cad16@gmail.com> <A6240C58-14C4-4900-A9CD-86779D7A44BC@eggert.org> <DB7PR07MB51487A4B4E8F38979893FFE4E0DD0@DB7PR07MB5148.eurprd07.prod.outlook.com> <92621f1a-7050-1558-86dc-1836e17c6f7c@bluepopcorn.net> <473915be-8fe1-ba82-fb30-8bd05751cb32@levkowetz.com> <CAOdDvNqDZN6kR_jv+Em3PoSR9sWx8U2JTLWFzJtCVY=QZrsS3A@mail.gmail.com> <7466_1564562703_5D41550F_7466_455_3_65b0b515-b273-177b-84ce-210ef716f0cd@orange.com> <DBFDF146-C2AD-49A8-AED0-B7112733D29E@gmail.com> <A09242D6-B4A5-49AE-9CFD-78E34FB638FE@tzi.org> <B8AE42B2-8A28-4041-AD2F-0136900BAE4F@gmail.com> <8B059BA9-B235-4A1E-9AC2-5339C1C9CE13@akamai.com> <7df564fa-5940-4c92-1d73-856bffc81ce1@bluepopcorn.net> <F7ECF7DB-9639-40EA-9774-82DB940FA342@tislabs.com> <b87b83df-28c6-5496-1c18-9f8f2e7f6a36@bluepopcorn.net>
To: Jim Fenton <fenton@bluepopcorn.net>
X-Mailer: Apple Mail (2.3445.9.1)
Archived-At: <https://mailarchive.ietf.org/arch/msg/wgchairs/Sg2Ia2PyFSiSLAxjK4rHjRiP9qQ>
X-BeenThere: wgchairs@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Working Group Chairs <wgchairs.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/wgchairs>, <mailto:wgchairs-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/wgchairs/>
List-Post: <mailto:wgchairs@ietf.org>
List-Help: <mailto:wgchairs-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/wgchairs>, <mailto:wgchairs-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 07 Aug 2019 21:35:37 -0000


> On Aug 7, 2019, at 1:43 PM, Jim Fenton <fenton@bluepopcorn.net> wrote:
> 
> On 8/7/19 10:36 AM, Sandra Murphy wrote:
>> I had a similar thought about barriers. How many ietf attendees have
>> datatracker accounts? (could be that only the number of datatracker
>> accounts is known.) what is the process for getting an account? (if it
>> is automated and responds quickly, the barrier is small). 
> 
> 
> I can't remember quite what is involved, but you can go to
> datatracker.ietf.org/accounts/create and try it out :)

have one or two.  wouldn’t be a good test.

> 
>> but - why does the minute taker having a datatracker account make anyone feel better?  I’ve lost track - what problem does having a datatracker account solve?
> 
> 
> We had a situation where some of the WG notes were overwritten,
> apparently by translations into other languages. This raised the
> awareness that it would be possible for a malicious user to interfere
> with notetaking in this way, particularly if it is done during the
> meeting (making it harder to revert the changes). Requiring a
> datatracker login would add accountability.

OK, the problem solved is the deliberate attempt to “mess with” the minutes, not the accidental user slip-up.

In that case, I’d say the datatracker account process is too friendly to prevent or add accountability:

Please enter your email address in order to create your datatracker account.

Your email (lowercase)

<click on> Create account

Of course, there could be an involved vetting process behind that "Create account", but I don’t think so.

—Sandy

> 
> -Jim
>