Hi, On Sun, Aug 02, 2026 at 11:31:27PM +0300, Sergey Myasoedov via Security-wg wrote:
Technically, we crossed this line when we introduced not just the company names, but also their registration numbers into the RIPE Database. NWI-21.
This very much sounds like a thing a registry would do, like, register numbers and document who has them, in an unambiguous way? So which line exactly was crossed by publishing more unambiguous holder info, for legal entities?
Not all of the data collected by the registry should be published. Publishing an "official" identifier is a significant step to future steps towards technical and/or political restrictions based on the registry data.
The RIPE NCC does not publish "all the data collected", far from it. It does, and should, publish who is the receiver of a set of numbers received from the RIPE NCC. In commercial relationships, requiring the legal registry number of your contract partner is the most normal thing to do (at least over here). I fail to make the conclusion how this will pave the way to future "restrictions based on the data". Gert Doering -- NetMaster -- have you enabled IPv6 on something today...? SpaceNet AG Vorstand: Sebastian v. Bomhard, Karin Schuler, Sebastian Cler Joseph-Dollinger-Bogen 14 Aufsichtsratsvors.: Dr. Frank Thiäner D-80807 Muenchen HRB: 136055 (AG Muenchen) Tel: +49 (0)89/32356-444 USt-IdNr.: DE813185279