The policy proposal was precisely suggesting XARF, not enforcing it.

It is the smarter and cheaper way to resolve the problem for everyone.

I usually send (automated) in order of 1.000-1.500 abuse reports per day. It will be impossible to handle even just 1% if I need to fill-in forms. I'm sure I'm not alone on that.

If you want to keep the forms, they can still exist, just provide the XARF for automatically filling the form.

There is no way to assume that victims must pay for the cost of abuse reporting. We will need to scale this to governments and consumer associations at some point. I will much prefer that the technical community is able to avoid that and resolve in a smarter way.

Regards,
Jordi
@jordipalet



El 18/2/21 21:01, "anti-abuse-wg en nombre de John Levine" <anti-abuse-wg-bounces@ripe.net en nombre de johnl@taugh.com> escribió:

    In article <DB8PR09MB3324537F4168BEA955A0AB07CD859@DB8PR09MB3324.eurprd09.prod.outlook.com> you write:
    >Abuse reports are a nuisance � anyone who thinks otherwise needs to get their head examined.

    Of course they are.  But abuse from your customers is a nuisance, too, and if you have any sense
    you will welcome reports about it so you can fix the problem before everyone else blocks you in
    self-defense.

    >However a lot of us will deal with abuse reports, but will not put up
    with people telling us how we should receive them.

    There are standard ways to send abuse reports, like ARF defined in RFC
    5965 and IODEF defined in RFC 7970. Smart people realize that when we
    send you an abuse report, we are doing it for your benefit, and you
    will accept them.

    Report web forms are out of the question because they do not scale. I
    send about a hundred abuse reports a day about spam received from all
    over the Internet, and I have no interest in using your form or anyone
    else's to make a manual special case for under 1% of my reports.

    R's,
    John




**********************************************
IPv4 is over
Are you ready for the new Internet ?
http://www.theipv6company.com
The IPv6 Company

This electronic message contains information which may be privileged or confidential. The information is intended to be for the exclusive use of the individual(s) named above and further non-explicilty authorized disclosure, copying, distribution or use of the contents of this information, even if partially, including attached files, is strictly prohibited and will be considered a criminal offense. If you are not the intended recipient be aware that any disclosure, copying, distribution or use of the contents of this information, even if partially, including attached files, is strictly prohibited, will be considered a criminal offense, so you must reply to the original sender to inform about this communication and delete it.