Re: Anonymity versus Pseudonymity (was Re: [87attendees] procedural question with remote participation)

2013-08-05 Thread John C Klensin


--On Sunday, August 04, 2013 19:31 + Ted Lemon
ted.le...@nominum.com wrote:

 If you came to the IETF and were working for company X,
 registered pseudonymously, and didn't disclose IPR belonging
 to you or company X, and then later company X sued someone for
 using their IPR, you and company X would get raked over the
 coals, jointly and severally; the deliberate attempt to
 deceive would make things worse for you.   And that's the
 point: to provide you with a strong disincentive to doing such
 a thing.   So whether the rules prevent you from being
 anonymous, or prevent you from suing, everybody's happy.

If company X wanted to collaborate with Yoav in preserving his
pseudonym (i.e., not disclosing the binding to his name), they
could presumably file a disclosure without identifying the
particular employee for whom the disclosure was made.
Especially with the ambiguities created by anonymous and
pseudonymous remote participation, I assume we would not decline
to post an IPR disclosure from an organization on the grounds
that we didn't know who was affiliated with it who participated
in the IETF.

 (IANAL, so I'm just explaining my understanding of the
 situation.)

ditto.

best,
  john







Re: Anonymity versus Pseudonymity (was Re: [87attendees] procedural question with remote participation)

2013-08-04 Thread Ted Lemon
On Aug 3, 2013, at 10:23 PM, Yoav Nir y...@checkpoint.com wrote:
 The participation in the IETF is already pseudonymous. I have a driver's 
 license, a passport, and a national ID card, all proving that my name is 
 indeed Yoav Nir. But I have never been asked to present any of them at the 
 IETF. I claim to work for Check Point, and my email address tends to suggest 
 it, but a lot of participants use gmail addresses.

So, you pay cash when you register?

It would probably be difficult to keep your identity secret if there were a 
discovery process during a patent trial.  You would also have to lie on the 
stand, and risk severe repercussions if your lie were revealed.

So yes, this is a problem, but it's not clear to me that it's a serious problem.



Re: Anonymity versus Pseudonymity (was Re: [87attendees] procedural question with remote participation)

2013-08-04 Thread Yoav Nir

On Aug 4, 2013, at 9:09 PM, Ted Lemon ted.le...@nominum.com wrote:

 On Aug 3, 2013, at 10:23 PM, Yoav Nir y...@checkpoint.com wrote:
 The participation in the IETF is already pseudonymous. I have a driver's 
 license, a passport, and a national ID card, all proving that my name is 
 indeed Yoav Nir. But I have never been asked to present any of them at the 
 IETF. I claim to work for Check Point, and my email address tends to suggest 
 it, but a lot of participants use gmail addresses.
 
 So, you pay cash when you register?

No, I use a credit card in the name of my company's head of purchasing, so 
not in my name. 

 It would probably be difficult to keep your identity secret if there were a 
 discovery process during a patent trial.  You would also have to lie on the 
 stand, and risk severe repercussions if your lie were revealed.

I would never lie at trial. But the name I use at trial doesn't go back to the 
IETF.

 So yes, this is a problem, but it's not clear to me that it's a serious 
 problem.

I don't think it's a serious problem anyway, but the IETF does not collect 
enough data to track you down as a condition for participation. So tracking 
you down becomes the lawyer's problem, not something that the IETF can give 
away.

Yoav



Re: Anonymity versus Pseudonymity (was Re: [87attendees] procedural question with remote participation)

2013-08-04 Thread Ted Lemon
On Aug 4, 2013, at 3:06 PM, Yoav Nir y...@checkpoint.com wrote:
 No, I use a credit card in the name of my company's head of purchasing, so 
 not in my name. 

Why wouldn't that be sufficient to identify you?   Is the head of purchasing 
going to protect your anonymity?

 I would never lie at trial. But the name I use at trial doesn't go back to 
 the IETF.

If you came to the IETF and were working for company X, registered 
pseudonymously, and didn't disclose IPR belonging to you or company X, and then 
later company X sued someone for using their IPR, you and company X would get 
raked over the coals, jointly and severally; the deliberate attempt to deceive 
would make things worse for you.   And that's the point: to provide you with a 
strong disincentive to doing such a thing.   So whether the rules prevent you 
from being anonymous, or prevent you from suing, everybody's happy.

(IANAL, so I'm just explaining my understanding of the situation.)




Re: Anonymity versus Pseudonymity (was Re: [87attendees] procedural question with remote participation)

2013-08-03 Thread Abdussalam Baryun
Hi Adam,

I don't agree with you. I am a remote participant (2 years and never
attended meetings) in the IETF organisation, do you think that IETF is
fare in treating remote participants? I think the current IETF
direction is in favor of attended-meeting participants, so IMHO one
reason of some hidding their name is because the IETF still is not yet
able to control wrong behaviour of participants who think they are
well known. Thoes wrong behavior abuse peoples rights in IETF. If some
are well known, the reason is because they got better opportunity in
going to meetings, or that majority of participants are from two
regions (North America+Europe).

For me the IETF reputation is about 40% (evaluated by asking close
friends that did not participate and including the way I was treated
within 2 years), still needs more work to build its reputation (e.g. I
think some old participants need guidance to IETF visions). For me
participants' good reputation depend on their reactions: if I get a
nice reply from them, or if they don't only respond to known people,
or if they acknowledge efforts, or if they encourage other into IETF
visions, or if they provide good ideas/inputs, or if they manage
work/WG/IETF well, etc.

In IETF volunteers' reputations SHOULD always be high and respected,
but seems like the IETF give chance for abuse so its reputation makes
some people prefer to be anonymous so they try to save their self
reputation. We in IETF SHOULD not focus on people's reputation, we
SHOULD focus on ideas, reasons, work-quality, documents/RFCs
reputations and process-procedures reputations. We are here to
document IETF reputation but not to document a person reputation or
even his/her name. A person's name for me is only important when I
want to refer to his/her review, draft, idea, etc. Don't forget that
in procedure; any input into IETF is own also by IETF no matter what
was the name given, so bad behaviour makes IETF reputation bad and
then some people leave, or make anonymous names, or don't participate
just listen. IMO, the majority of subscribers (in WGs) are listeners
with zero participation.

AB

On 8/2/13, Adam Roach a...@nostrum.com wrote:
 Moving to ietf@ietf.org, since I think this is not in any way specific
 to Berlin.


 On 8/2/13 12:24, Olle E. Johansson wrote:
 In rtcweb we have remote participants that prefer anonymity for a number
 of reasons.

 I'm going to make a broad assumption that the number of reasons all
 relate to privacy. If that is incorrect, please weigh in.

 The question is how this is handled in regards to note well, when they
 want jabber scribes to relay opinions or proposals to the meeting.

 Just a note for the future. I think we should allow anonymous listeners,
 but should they really be allowed to participate?


 We had a previous conversation around pseudonyms, which I think
 concluded that pseudonyms are pretty much okay (and impossible to
 reliably detect anyway).

 Given this fact, someone can protect their identity through use of a
 consistent pseudonym. This has the property of developing a persona
 behind that pseudonym that the working group members can reasonably
 interact with.

 By contrast, attempting to participate in a truly anonymous fashion
 rather than participating with a pseudonym seems to have very little
 justification, with significant potential drawback for the working
 group. The privacy implications are pretty much identical, but it
 provides the illusion that one can act in a way that has no impact on a
 persona's reputation. IMHO, this is ripe for bad behavior, bad faith
 participation, and other abuses.

 Given the availability of pseudonymous participation, I don't think we
 need to tolerate anonymous participation.

 /a




Re: Anonymity versus Pseudonymity (was Re: [87attendees] procedural question with remote participation)

2013-08-03 Thread Olle E. Johansson

2 aug 2013 kl. 14:13 skrev Scott Brim scott.b...@gmail.com:

 I'm completely against participating anonymously because of IPR issues.
 I'm mostly against pseudonymous participation for the same reason.  I
 need to be able to know who I'm dealing with, in order to know if there
 are IPR issues that should be brought up.

THat's exactly the problem. Unfortunately the world requires the IETF to
manage IPR. There's a reason why we need to be strict with the note well.
Anonymous remote *PARTICIPATION* breaks the requirements of the
note well acceptance in my view. 


/O


Re: Anonymity versus Pseudonymity (was Re: [87attendees] procedural question with remote participation)

2013-08-03 Thread Scott Brim
AB, saving your entire message for context ... You're fixing the wrong
problem.  The problem is not finding a way to cloak so some unspecified
person doesn't experience abuse.  It's important that we all know who we
are dealing with.  The problem, rather, is what is leading you to think
anonymity might be useful, i.e. the alleged abuse itself.

Scott

On 08/03/13 02:41, Abdussalam Baryun allegedly wrote:
 Hi Adam,
 
 I don't agree with you. I am a remote participant (2 years and never
 attended meetings) in the IETF organisation, do you think that IETF is
 fare in treating remote participants? I think the current IETF
 direction is in favor of attended-meeting participants, so IMHO one
 reason of some hidding their name is because the IETF still is not yet
 able to control wrong behaviour of participants who think they are
 well known. Thoes wrong behavior abuse peoples rights in IETF. If some
 are well known, the reason is because they got better opportunity in
 going to meetings, or that majority of participants are from two
 regions (North America+Europe).
 
 For me the IETF reputation is about 40% (evaluated by asking close
 friends that did not participate and including the way I was treated
 within 2 years), still needs more work to build its reputation (e.g. I
 think some old participants need guidance to IETF visions). For me
 participants' good reputation depend on their reactions: if I get a
 nice reply from them, or if they don't only respond to known people,
 or if they acknowledge efforts, or if they encourage other into IETF
 visions, or if they provide good ideas/inputs, or if they manage
 work/WG/IETF well, etc.
 
 In IETF volunteers' reputations SHOULD always be high and respected,
 but seems like the IETF give chance for abuse so its reputation makes
 some people prefer to be anonymous so they try to save their self
 reputation. We in IETF SHOULD not focus on people's reputation, we
 SHOULD focus on ideas, reasons, work-quality, documents/RFCs
 reputations and process-procedures reputations. We are here to
 document IETF reputation but not to document a person reputation or
 even his/her name. A person's name for me is only important when I
 want to refer to his/her review, draft, idea, etc. Don't forget that
 in procedure; any input into IETF is own also by IETF no matter what
 was the name given, so bad behaviour makes IETF reputation bad and
 then some people leave, or make anonymous names, or don't participate
 just listen. IMO, the majority of subscribers (in WGs) are listeners
 with zero participation.
 
 AB
 
 On 8/2/13, Adam Roach a...@nostrum.com wrote:
 Moving to ietf@ietf.org, since I think this is not in any way specific
 to Berlin.


 On 8/2/13 12:24, Olle E. Johansson wrote:
 In rtcweb we have remote participants that prefer anonymity for a number
 of reasons.

 I'm going to make a broad assumption that the number of reasons all
 relate to privacy. If that is incorrect, please weigh in.

 The question is how this is handled in regards to note well, when they
 want jabber scribes to relay opinions or proposals to the meeting.

 Just a note for the future. I think we should allow anonymous listeners,
 but should they really be allowed to participate?


 We had a previous conversation around pseudonyms, which I think
 concluded that pseudonyms are pretty much okay (and impossible to
 reliably detect anyway).

 Given this fact, someone can protect their identity through use of a
 consistent pseudonym. This has the property of developing a persona
 behind that pseudonym that the working group members can reasonably
 interact with.

 By contrast, attempting to participate in a truly anonymous fashion
 rather than participating with a pseudonym seems to have very little
 justification, with significant potential drawback for the working
 group. The privacy implications are pretty much identical, but it
 provides the illusion that one can act in a way that has no impact on a
 persona's reputation. IMHO, this is ripe for bad behavior, bad faith
 participation, and other abuses.

 Given the availability of pseudonymous participation, I don't think we
 need to tolerate anonymous participation.

 /a




RE: Anonymity versus Pseudonymity (was Re: [87attendees] procedural question with remote participation)

2013-08-03 Thread l.wood

AB,

You write
Some people prefer to be anonymous so they try to save their self reputation

Are you pursuing this line of argument because, after
- campaigning for but failing to achieve the abolition of April 1 RFCs
- campaigning for but failing to achieve an acknowledgement in a MANET draft 
you didn't write.
- campaigning for changes to the posting summary that now regularly lists you 
as Number One poster on this list

You believe that your reputation is harmed, would require saving for meaningful 
interaction, and that you need pseudonymity?

Lloyd Wood
http://sat-net.com/L.Wood/



From: ietf-boun...@ietf.org [ietf-boun...@ietf.org] On Behalf Of Abdussalam 
Baryun [abdussalambar...@gmail.com]
Sent: 03 August 2013 07:41
To: Adam Roach
Cc: Olle E. Johansson; ietf@ietf.org
Subject: Re: Anonymity versus Pseudonymity (was Re: [87attendees] procedural
question with remote participation)

Hi Adam,

I don't agree with you. I am a remote participant (2 years and never
attended meetings) in the IETF organisation, do you think that IETF is
fare in treating remote participants? I think the current IETF
direction is in favor of attended-meeting participants, so IMHO one
reason of some hidding their name is because the IETF still is not yet
able to control wrong behaviour of participants who think they are
well known. Thoes wrong behavior abuse peoples rights in IETF. If some
are well known, the reason is because they got better opportunity in
going to meetings, or that majority of participants are from two
regions (North America+Europe).

For me the IETF reputation is about 40% (evaluated by asking close
friends that did not participate and including the way I was treated
within 2 years), still needs more work to build its reputation (e.g. I
think some old participants need guidance to IETF visions). For me
participants' good reputation depend on their reactions: if I get a
nice reply from them, or if they don't only respond to known people,
or if they acknowledge efforts, or if they encourage other into IETF
visions, or if they provide good ideas/inputs, or if they manage
work/WG/IETF well, etc.

In IETF volunteers' reputations SHOULD always be high and respected,
but seems like the IETF give chance for abuse so its reputation makes
some people prefer to be anonymous so they try to save their self
reputation. We in IETF SHOULD not focus on people's reputation, we
SHOULD focus on ideas, reasons, work-quality, documents/RFCs
reputations and process-procedures reputations. We are here to
document IETF reputation but not to document a person reputation or
even his/her name. A person's name for me is only important when I
want to refer to his/her review, draft, idea, etc. Don't forget that
in procedure; any input into IETF is own also by IETF no matter what
was the name given, so bad behaviour makes IETF reputation bad and
then some people leave, or make anonymous names, or don't participate
just listen. IMO, the majority of subscribers (in WGs) are listeners
with zero participation.

AB

On 8/2/13, Adam Roach a...@nostrum.com wrote:
 Moving to ietf@ietf.org, since I think this is not in any way specific
 to Berlin.


 On 8/2/13 12:24, Olle E. Johansson wrote:
 In rtcweb we have remote participants that prefer anonymity for a number
 of reasons.

 I'm going to make a broad assumption that the number of reasons all
 relate to privacy. If that is incorrect, please weigh in.

 The question is how this is handled in regards to note well, when they
 want jabber scribes to relay opinions or proposals to the meeting.

 Just a note for the future. I think we should allow anonymous listeners,
 but should they really be allowed to participate?


 We had a previous conversation around pseudonyms, which I think
 concluded that pseudonyms are pretty much okay (and impossible to
 reliably detect anyway).

 Given this fact, someone can protect their identity through use of a
 consistent pseudonym. This has the property of developing a persona
 behind that pseudonym that the working group members can reasonably
 interact with.

 By contrast, attempting to participate in a truly anonymous fashion
 rather than participating with a pseudonym seems to have very little
 justification, with significant potential drawback for the working
 group. The privacy implications are pretty much identical, but it
 provides the illusion that one can act in a way that has no impact on a
 persona's reputation. IMHO, this is ripe for bad behavior, bad faith
 participation, and other abuses.

 Given the availability of pseudonymous participation, I don't think we
 need to tolerate anonymous participation.

 /a




Re: Anonymity versus Pseudonymity (was Re: [87attendees] procedural question with remote participation)

2013-08-03 Thread Yoav Nir

On Aug 3, 2013, at 9:49 AM, Olle E. Johansson o...@edvina.net wrote:

 
 2 aug 2013 kl. 14:13 skrev Scott Brim scott.b...@gmail.com:
 
 I'm completely against participating anonymously because of IPR issues.
 I'm mostly against pseudonymous participation for the same reason.  I
 need to be able to know who I'm dealing with, in order to know if there
 are IPR issues that should be brought up.
 
 THat's exactly the problem. Unfortunately the world requires the IETF to
 manage IPR. There's a reason why we need to be strict with the note well.
 Anonymous remote *PARTICIPATION* breaks the requirements of the
 note well acceptance in my view. 

Hi Olle

The participation in the IETF is already pseudonymous. I have a driver's 
license, a passport, and a national ID card, all proving that my name is indeed 
Yoav Nir. But I have never been asked to present any of them at the IETF. I 
claim to work for Check Point, and my email address tends to suggest it, but a 
lot of participants use gmail addresses.

I had participated in IETF mailing lists for 3 years before ever attending a 
meeting, and I got RFC 4478 published before attending one. At that point, none 
of the IETF regulars had ever seen me - I was just a claimed name on the 
mailing list and on the draft.

As I don't have to prove an identity when registering for meetings, if that had 
been a ruse, I could continue running with it to this day, although by now 
there are two participants who can link the IETF participant with the name I 
use at work. BTW: nobody's stopping anybody from creating a new gmail account 
under the name Yoav Nir, registering to IETF mailing lists, and posting in my 
name. Unless I notice it and cry foul, nobody would be the wiser.

Yoav



Anonymity versus Pseudonymity (was Re: [87attendees] procedural question with remote participation)

2013-08-02 Thread Adam Roach
Moving to ietf@ietf.org, since I think this is not in any way specific 
to Berlin.



On 8/2/13 12:24, Olle E. Johansson wrote:

In rtcweb we have remote participants that prefer anonymity for a number of 
reasons.


I'm going to make a broad assumption that the number of reasons all 
relate to privacy. If that is incorrect, please weigh in.



The question is how this is handled in regards to note well, when they want 
jabber scribes to relay opinions or proposals to the meeting.

Just a note for the future. I think we should allow anonymous listeners, but 
should they really be allowed to participate?



We had a previous conversation around pseudonyms, which I think 
concluded that pseudonyms are pretty much okay (and impossible to 
reliably detect anyway).


Given this fact, someone can protect their identity through use of a 
consistent pseudonym. This has the property of developing a persona 
behind that pseudonym that the working group members can reasonably 
interact with.


By contrast, attempting to participate in a truly anonymous fashion 
rather than participating with a pseudonym seems to have very little 
justification, with significant potential drawback for the working 
group. The privacy implications are pretty much identical, but it 
provides the illusion that one can act in a way that has no impact on a 
persona's reputation. IMHO, this is ripe for bad behavior, bad faith 
participation, and other abuses.


Given the availability of pseudonymous participation, I don't think we 
need to tolerate anonymous participation.


/a



Re: Anonymity versus Pseudonymity (was Re: [87attendees] procedural question with remote participation)

2013-08-02 Thread Scott Brim
I'm completely against participating anonymously because of IPR issues.
 I'm mostly against pseudonymous participation for the same reason.  I
need to be able to know who I'm dealing with, in order to know if there
are IPR issues that should be brought up.


Re: Anonymity versus Pseudonymity (was Re: [87attendees] procedural question with remote participation)

2013-08-02 Thread Brian E Carpenter
On 03/08/2013 00:13, Scott Brim wrote:
 I'm completely against participating anonymously because of IPR issues.
  I'm mostly against pseudonymous participation for the same reason.  I
 need to be able to know who I'm dealing with, in order to know if there
 are IPR issues that should be brought up.

More generally, there are other kinds of conflict of interest, not just
intentional or accidental concealment of IPR, that can be hidden by
anonymity or pseudonymity. It seems to me to be directly against the
principles of open standards openly developed.

Brian



Re: Anonymity versus Pseudonymity (was Re: [87attendees] procedural question with remote participation)

2013-08-02 Thread Lou Berger

+1.



On August 2, 2013 1:13:05 PM Scott Brim scott.b...@gmail.com wrote:

I'm completely against participating anonymously because of IPR issues.
 I'm mostly against pseudonymous participation for the same reason.  I
need to be able to know who I'm dealing with, in order to know if there
are IPR issues that should be brought up.