That is assuming you want a horse of course (sorry ;-)

 

From: iot-discussion [mailto:iot-discussion-bounces@ripe.net] On Behalf Of Richard Lamb
Sent: Wednesday, August 9, 2017 9:27 AM
To: Marco Hogewoning <marcoh@ripe.net>; Patrik Fältström <paf@frobbit.se>
Cc: iot-discussion@ripe.net
Subject: Re: [iot-discussion] Proposed US legislation

 

I agree that at least requiring an audited SDLC (software development lifecycle) plan might be useful (like we created for dnssec root ops).  However, besides the auditor cost$, beware the “designed by committee” problem.  Ive had good and bad experiences here but bad for those coming out of IGOs – sometimes the result is a camel and not a horse.  -Rick

 

 

From: Marco Hogewoning [mailto:marcoh@ripe.net]
Sent: Wednesday, August 9, 2017 12:41 AM
To: Patrik Fältström <paf@frobbit.se>
Cc: Richard Lamb <richard.lamb@icann.org>; iot-discussion@ripe.net
Subject: Re: [iot-discussion] Proposed US legislation

 

 

 

 

Groet,

 

MarcoH

-- 

Sent from a small touch screen, apologies for typos

On 9 Aug 2017, at 07:59, Patrik Fältström <paf@frobbit.se> wrote:

On 8 Aug 2017, at 16:01, Marco Hogewoning wrote:

Still on the fence whether this can only be solved by hard regulation and liability or whether we as industry can still create enough of a cultural shift to “do the right thing” under our own momentum.


Require just like in other environmental discussions (glass recycling etc) that the manufacturers present a responsibility/management process for the whole lifecycle of the "thing", and we will be done. Including destruction, recycling of material etc.

  paf

 

Yups, such a solution would ultimately be the thing to have. You are right in that at the meta level this is just a sustainability issue.

 

Big question, would the current IG eco system be up to the task of defining the requirements, have the different stakeholders implement their part of the solution and in the end collectively provide enough incentive for the system to be (self) enforced.

 

And if that is not the case, how likely would a multi-lateral solution be? And more importantly, how to ensure we at least can give input to that process, we are after all the experts.

 

Oh and of course when we do get this invite, what are we going to say and is there any chance we coordinate ourselves to a coherent strategy.

 

Sounds like there is still enough to talk about, fancy a trip to Leeds?

 

Groet,

 

MarcoH

-- 

Sent from a small touch screen, apologies for typos