Hi, On Tue, 13 Oct 2026 13:08:46 +0200, Angela Dall'Ara <adallara@ripe.net> wrote:
We encourage you to review this proposal and send your comments to security-wg@ripe.net before 11 November 2026.
I note that dictionary attacks, which were expressly included in August are not included in the exhaustive Article 1.1 list now. Was that intentional? In 1.2, grammatically, “It” has no clean antecedent. The preceding subject in 1.1 is "Network Abuse", so it appears to limit that definition. Suppose an infected residential PC is participating in a DDoS botnet. The botnet is certainly the sort of thing 1.1 appears intended to address. But its IP belongs to a residential/dynamic pool, which Article 1.3 explicitly excludes from the definition. So the policy seems to contemplate, for example, something like XBL minus PBL rather than XBL as is. Best Ale --