No, the scope is clearly stated with "Mozilla’s Data Privacy Principles
continue to inform how we build our products and services, manage user
data, and select and interact with partners – while shaping our public
policy and advocacy work.", from the blog post.

IRC logs *are* user data.  irc.mozilla.org *is* a Mozilla service.  Both
are subject to Mozilla policies.

On Fri, Jan 23, 2015 at 5:44 PM, Benjamin Kerensa <[email protected]>
wrote:

> On Fri, Jan 23, 2015 at 5:32 PM, Yvan Boily <[email protected]> wrote:
>
>>
>>
>> On Fri, Jan 23, 2015 at 5:16 PM, Benjamin Kerensa <
>> [email protected]> wrote:
>>
>>>
>>>
>>> On Fri, Jan 23, 2015 at 5:08 PM, Gavin Sharp <[email protected]>
>>> wrote:
>>>
>>>> I should perhaps clarify, though, that I don't really think there's a
>>>> need for a project-wide policy to enforce that channels must be
>>>> logged, and that's probably what Yvan is reacting strongly to. Most of
>>>> the important public IRC channels are already being publicly logged,
>>>> as mentioned, and where they aren't it's easy enough to reach out to
>>>> the channel owner and change that.
>>>>
>>>
>>> Right and my proposal is to have global policy including which channels
>>> must be exempt due to sensitive discussions (I can think of a handful
>>> myself) and then create a process for starting logging and opting out of
>>> channel logging by a channel owner.
>>>
>>
>> Requiring channel owners to opt out of public logging to a Mozilla
>> resources on behalf of their users (imo) is not consistent with the
>> published data privacy principles
>> <https://blog.mozilla.org/privacy/2014/11/11/mozillas-data-privacy-principles-revisited/>.
>> Not the least of which is the No Suprises - many users would be surprised
>> to learn that after years of telling users "we don't log irc", we start
>> logging it and publishing it.
>>
>> I understand that users cannot control data that may be collected and
>> republished by individuals, but this discussion isn't about what *others*
>> are doing with data, it's about what Mozilla is doing with data.
>>
>
> That blog post was written within the scope of our products and end users
> not our project, tools or contributors.
>
>
>>
>>
>>> But having them hosted at something like irclogs.mozilla.org and
>>> searchable versus glob hosting them all makes more sense imho.
>>>
>>> At the end of the day thought I imagine unless someone disabled the
>>> default logging on the ircd that Mozilla technically already globally logs
>>> all user communications even though in private message. Whether they
>>> disabled it or not I am unsure and how long those logs are retained I am
>>> unsure and who has access I am unsure.
>>>
>>> Default Inspircd config has all user input/output logged by default:
>>>
>>> https://gitorious.org/inspircd/inspircd/source/911e33e3995509afa4cf3ea8fae0ddca2dad78dc:conf/inspircd.conf.example#L706
>>>
>>>
>> It is my understanding that we retain only enough logs to satisfy
>> operational needs, although I can inquire with operations team if you would
>> like.
>>
>
>
>
_______________________________________________
governance mailing list
[email protected]
https://lists.mozilla.org/listinfo/governance

Reply via email to