Dear Mr. Karrenberg, As a Coordinator of CERT NASK (an IRT established in NASK, POland) I am very interested in project to provide incident responce cordination in Europe. However I have some comments to your "contribution scheme" as you have desribed in your proposition:
The benefits for those contributing include:
- Preferred Service Non-paying customers will only receive service if there is no outstanding work for paying customers.
- Influence Paying customers will determine the general direction, the policies and the services of SIRCE.
- Credit The level of your contribution will be publicly acknowledged.
As you know coordination of incident handling relies on strict cooperation among IRTs, ISPs , customer representatives and many others. Therefore you cannot ignore request just because it is from non-paying customer (assuming you have some "payed" requests to handle) because it can be dangerous to all constituency you serve. Hence I can imagine that paying customers have "full service" but those non-paying should receive some basic level of incident handling services. This is important at least from the statistical point of view (how many incidents, what kind of incidents etc.)Those who are paying should also be interested in handling of every incident by "European CERT" instead of handling of selected ones - because everybody is interconnected. Best regards, Krzysztof Silicki CERT NASK --------------------------------------------------------------------------- Krzysztof Silicki e-mail: krzysiek@nask.pl tel/fax +48 22 268000 Naukowa i _) _) _) _)_)_)_) _) _) Research and Akademicka _)_) _) _)_) _) _) _) Academic Siec _) _) _) _) _) _)_) _) _)_)_) Network in Poland Komputerowa _) _)_) _) _) _) _) _) _) Bartycka 18 w Polsce _) _) _) _) _)_)_)_) _) _) 00-716 Warsaw personal PGP public key: ftp://pub/CERT_NASK/cert_pgp_keys/k_silicki.pgp CERT NASK PGP public key: ftp://pub/CERT_NASK/cert_pgp_keys/CERT_NASK.pgp ---------------------------------------------------------------------------