Hi Nick

I think you are correct here. I read so many docs before writing this email
I probably confused myself with some of the terminology.

On Thu, 30 Jul 2026 at 23:56, Nick Hilliard <[email protected]> wrote:

> denis walker wrote on 30/07/2026 18:20:
> > You are assuming i meant the RIPE NCC has absolute authority. This is a
> > self regulating industry where we make the rules based on consensus
> > policy. Anyone can propose any change on any mailing list. If a hand
> > full of people say yes, then the rules are changed and everyone must
> > comply. So it's the RIPE community that has absolute authority over the
> > rules. (For now...)
>
> Denis,
>
> What you wrote was this:
>
> > Just as Address Policy limits sub-assignments under contract, we have
> > the absolute authority to limit malicious routing behaviors.
>
>
I think this would be more accurate as:
 Just as Address Policy limits sub-assignments under contract, we have the
absolute authority to limit malicious abuse behaviors under the same
contract.


> Just to avoid any misunderstanding, it's probably worth pointing out
> that limited authority to limit malicious routing behaviors would be the
> purview of national parliaments.  Neither the RIPE Community nor the
> RIPE NCC have this authority.  I'm unclear why the term "absolute
> authority" was introduced into the conversation because this is a
> concept that doesn't generally exist in non-totalitarian societies.
>
> > The reason LIRs do not process abuse reports is because RIPE policy
> > currently makes it entirely free to ignore them. We can only fix this
> > by creating a clear, contractual incentive where permitting systemic
> > abuse carries the risk of registry closure.
>
> You might need to zoom out a bit on this one, but there are plenty of
> reasons that organisations don't process abuse reports.
>
>
Ok 'One of the reasons...' and 'Where this reason applies, we can only fix
this...'


> Also, it's something of an overclaim to say that only the RIPE Community
> can fix this, and only by creating a policy which mandates LIR closure
> for non-compliance.
>

It is not only the RIPE Community that can fix this. The EU/EC can fix it
with legislation. It would be preferable for this industry if this
community can, finally, take some real action. The simple policy I proposed
does not mandate anything about closure. But that is the ultimate sanction
for any LIR that is in persistent violation of RIPE policies.

cheers
denis


>
> Nick
>
-----
To unsubscribe from this mailing list or change your subscription options, 
please visit: https://mailman.ripe.net/mailman3/lists/security-wg.ripe.net/
As we have migrated to Mailman 3, you will need to create an account with the 
email matching your subscription before you can change your settings. 
More details at: https://www.ripe.net/membership/mail/mailman-3-migration/

Reply via email to