June 2018 - members-discuss - mailman.ripe.net

Re: [members-discuss] Request to update the SSA - Article 2.2, acceptance of documents
by Christian Kratzer 30 Jun '18

30 Jun '18

Hi, On Mon, 25 Jun 2018, John Fitzgerald wrote: > Since we have seen so many invalid certificates and signatures and even big CAs fail, we are voting for the good old paperwork method. I agree. I also cannot understand why this is such a big deal unless you want to create lots of LIR. For any valid business model setting up a lir is a one time thing where I do not worry about 300 EUR costs for paperwork. Greetings Christian -- Christian Kratzer CK Software GmbH Email: ck(a)cksoft.de Wildberger Weg 24/2 Phone: +49 7032 893 997 - 0 D-71126 Gaeufelden Fax: +49 7032 893 997 - 9 HRB 245288, Amtsgericht Stuttgart Mobile: +49 171 1947 843 Geschaeftsfuehrer: Christian Kratzer Web: http://www.cksoft.de/

2 1

Request to update the SSA - Article 2.2, acceptance of documents
by Erik Bais 25 Jun '18

25 Jun '18

Dear members, I like to open a discussion to have the SSA updated into this century .. to allow for acceptance of the documents to be send in via the RIPE NCC Portal ( with SSO ) or send in by email after being signed, or the RIPE NCC to use a method of digital signature like the usage of DocuSign, Echosign or something similar. The acceptance of a digital signature has been allowed by EU law since December 1999, ( EU Directive 99/93/EG - http://eur-lex.europa.eu/legal-content/EN/ALL/?uri=CELEX:31999L0093 ) and implemented in Dutch law since 2003 (http://wetten.overheid.nl/BWBR0015046/2003-05-21 ) We are currently in 2018 and the SSA still refers to a device that most of our children never heard of or have seen ..... named a fax machine… <snip> https://www.ripe.net/publications/docs/ripe-673 Article 2 – General 2.1 The RIPE NCC Standard Service Agreement shall come into effect by means of an offer and an acceptance. 2.2 To enter into the RIPE NCC Standard Service Agreement, the following documents have to be sent to the RIPE NCC by post or fax: · One copy of the RIPE NCC Standard Service Agreement containing the handwritten signature of an authorised representative of the Member · A recent extract from the Commercial Trade Register or equivalent document proving the registration of the Member with the national authorities. Upon receipt of these documents by the RIPE NCC, the RIPE NCC Standard Service Agreement is considered to be concluded. The RIPE NCC shall not commence the provision of the RIPE NCC services until these documents have been received. Conclusion of the RIPE NCC Standard Service Agreement establishes a RIPE NCC membership. </snip> While most of the fax implementations these days, including the one at the RIPE NCC office, is a device that stores an image copy of a document on a server. Not many companies have a paper print fax anymore these days.. That document from those fax or multi-copier devices can then be printed by the local printer or stored digitally in a database attached to a LIR application as an attachment. Similar as if someone would scan the signed SSA and email the document .. However the current wording in the SSA doesn’t allow for that type of scenario .. and it should be updated to a more neutral wording to allow a better usage of technology. If we can sign for a mortgage application in The Netherlands using a digital signature, why can’t we apply for a new LIR with a digital signature. This will also allow for a much smoother new members to complete their application .. Using digital signatures will reduce the fees to DHL, speed up the complete on-boarding process and reduce the handling fees at the RIPE office. <sarcasm> For those that like to keep doing things, like we always did .. The city of Amsterdam is also in the process to dis-allow the usage of horse and carriage in the city. So if someone would like to take a ride by horse carriage to the postal office and use their fax machine there .. that is something that you cannot do for a long time anymore as well … https://www.volkskrant.nl/binnenland/na-bierfiets-is-het-ook-einde-verhaal-… </sarcasm> And for countries that don’t allow the usage of digital signatures or members that don’t want to use the new digital signature system, there is always the option to request the paper SSA to be send via DHL and have it signed and returned. Similar as we are currently also allowing those options for invoices … Kind regards, Erik Bais

14 20

RIPE NCC and the geopolitical situation
by Sascha Luck [ml] 10 Jun '18

10 Jun '18

All, the recent discussion about moving the NCC and the relative political stability of countries in the service region has caused me to think about the RIPE NCC in the current political context. THere appears to be an incipient issue here: 1) Problem statement the current geopolitical situation in the RIPE service region has, unfortunately, greatly degraded in the recent past. There are territorial conflicts (Ukraine/Russia), there are outright civil wars (Syria, Afghanistan) and, perhaps closest to "home", the cold war is back between "The West" and Russia as well as Iran (both in the RIPE service region). The rhetoric in both the EU and NATO (both of which NL is a member of) is becoming increasingly belligerent and there is an increasing likelihood of this stance leading to unilateral sanctions against those seen as "enemies". Since "internet propaganda", "Russian Trolls", etc are now often taking the blame for every ill in Europe, I should be surprised if those didn't also include internet resources. I would not see it without the realm of the possible, that increasing political/legal pressure would be brought on the RIPE NCC to deny service and perhaps revoke resources allocated to these enemies-du-jour. 2) Possible outcomes - Sanctioned countries might take their ball and go elsewhere (another RIR?) - Sanctioned countries might take their resources and set up their own RIR, approved by IANA or, more likely, not. - They might refuse (or be prohibited from) cooperation with the original IANA/RIR/LIR system. - In a worst-case scenario this could lead to the same resources used by "opposing" RIRs and a fracturing of the internet. - In such a case, it is hard to imagine the ITU (as an UN body) *not* taking control of resource management to prevent such a fracture. 3) Mitigations - The only one I can think of is relocating the NCC to a country - if that exists- which is neutral and does not participate in these block fights (Switzerland?, Sweden?). As a question to the board: does the RIPE NCC have any contingency plans to mitigate this situation when it occurs? Kind Regards, Sascha Luck - resources

6 5