Hi SM, RFC6302 should be positioned in its context: i.e., how to meet regulatory requirements in some countries when address sharing is in use. A discussion on the background (with a concise discussion on solution flavors and some hints on time duration to store log data) is available at: http://tools.ietf.org/html/rfc6269#section-12 and http://tools.ietf.org/html/rfc6269#section-13.1.
The reco in RFC6302 aims to ease handling abuse claims and avoid revealing the identity of a large number of subscribers. FYI, the penal procedure in France has been updated in August 2013 to take into account address sharing in particular, see for instance http://www.legifrance.gouv.fr/affichCodeArticle.do?idArticle=LEGIARTI000028053220&cidTexte=LEGITEXT000006071154 where "additional information" should be provided in addition to the IP address for abuse claims). Privacy-related considerations and other side effects of storing IP addresses (including IP tracking) should be discussed IMHO independently of RFC6302. For example, the concrete case led by the CNIL in France: http://www.cnil.fr/linstitution/actualite/article/article/ip-tracking-conclusions-de-lenquete-conjointe-menee-par-la-cnil-et-la-dgccrf/?tx_ttnews[backPid]=91&cHash=6c52ebf7fc988c0c7fe49410c4e69342. Cheers, Med >-----Message d'origine----- >De : Int-area [mailto:[email protected]] De la part de S Moonesamy >Envoyé : lundi 16 juin 2014 11:48 >À : Alain Durand; Igor Gashinsky; Donn Lee; Scott Sheppard >Cc : Linus Nordberg; [email protected] >Objet : [Int-area] Logging Recommendations for Internet-Facing Servers > >Hello, > >In the wake of the revelations about surveillance there has been some >concerns about RFC 6302. I would be grateful if the authors of RFC >6302 could review the comments at >http://www.ietf.org/mail-archive/web/ietf-privacy/current/msg00454.html >and provide some feedback. > >Regards, >S. Moonesamy > >_______________________________________________ >Int-area mailing list >[email protected] >https://www.ietf.org/mailman/listinfo/int-area _______________________________________________ Int-area mailing list [email protected] https://www.ietf.org/mailman/listinfo/int-area
