Anonymity versus Pseudonymity (was Re: [87attendees] procedural question with remote participation)

2013-08-02 Thread Adam Roach
Moving to ietf@ietf.org, since I think this is not in any way specific 
to Berlin.



On 8/2/13 12:24, Olle E. Johansson wrote:

In rtcweb we have remote participants that prefer anonymity for a number of 
reasons.


I'm going to make a broad assumption that the "number of reasons" all 
relate to privacy. If that is incorrect, please weigh in.



The question is how this is handled in regards to note well, when they want 
jabber scribes to relay opinions or proposals to the meeting.

Just a note for the future. I think we should allow anonymous listeners, but 
should they really be allowed to participate?



We had a previous conversation around pseudonyms, which I think 
concluded that pseudonyms are pretty much okay (and impossible to 
reliably detect anyway).


Given this fact, someone can protect their identity through use of a 
consistent pseudonym. This has the property of developing a persona 
behind that pseudonym that the working group members can reasonably 
interact with.


By contrast, attempting to participate in a truly anonymous fashion 
rather than participating with a pseudonym seems to have very little 
justification, with significant potential drawback for the working 
group. The privacy implications are pretty much identical, but it 
provides the illusion that one can act in a way that has no impact on a 
persona's reputation. IMHO, this is ripe for bad behavior, bad faith 
participation, and other abuses.


Given the availability of pseudonymous participation, I don't think we 
need to tolerate anonymous participation.


/a



Re: Anonymity versus Pseudonymity (was Re: [87attendees] procedural question with remote participation)

2013-08-02 Thread Scott Brim
I'm completely against participating anonymously because of IPR issues.
 I'm mostly against pseudonymous participation for the same reason.  I
need to be able to know who I'm dealing with, in order to know if there
are IPR issues that should be brought up.


Re: Anonymity versus Pseudonymity (was Re: [87attendees] procedural question with remote participation)

2013-08-02 Thread Brian E Carpenter
On 03/08/2013 00:13, Scott Brim wrote:
> I'm completely against participating anonymously because of IPR issues.
>  I'm mostly against pseudonymous participation for the same reason.  I
> need to be able to know who I'm dealing with, in order to know if there
> are IPR issues that should be brought up.

More generally, there are other kinds of conflict of interest, not just
intentional or accidental concealment of IPR, that can be hidden by
anonymity or pseudonymity. It seems to me to be directly against the
principles of open standards openly developed.

Brian



Re: Anonymity versus Pseudonymity (was Re: [87attendees] procedural question with remote participation)

2013-08-02 Thread Lou Berger

+1.



On August 2, 2013 1:13:05 PM Scott Brim  wrote:

I'm completely against participating anonymously because of IPR issues.
 I'm mostly against pseudonymous participation for the same reason.  I
need to be able to know who I'm dealing with, in order to know if there
are IPR issues that should be brought up.






Re: Anonymity versus Pseudonymity (was Re: [87attendees] procedural question with remote participation)

2013-08-02 Thread Abdussalam Baryun
Hi Adam,

I don't agree with you. I am a remote participant (2 years and never
attended meetings) in the IETF organisation, do you think that IETF is
fare in treating remote participants? I think the current IETF
direction is in favor of attended-meeting participants, so IMHO one
reason of some hidding their name is because the IETF still is not yet
able to control wrong behaviour of participants who think they are
well known. Thoes wrong behavior abuse peoples rights in IETF. If some
are well known, the reason is because they got better opportunity in
going to meetings, or that majority of participants are from two
regions (North America+Europe).

For me the IETF reputation is about 40% (evaluated by asking close
friends that did not participate and including the way I was treated
within 2 years), still needs more work to build its reputation (e.g. I
think some old participants need guidance to IETF visions). For me
participants' good reputation depend on their reactions: if I get a
nice reply from them, or if they don't only respond to known people,
or if they acknowledge efforts, or if they encourage other into IETF
visions, or if they provide good ideas/inputs, or if they manage
work/WG/IETF well, etc.

In IETF volunteers' reputations SHOULD always be high and respected,
but seems like the IETF give chance for abuse so its reputation makes
some people prefer to be anonymous so they try to save their self
reputation. We in IETF SHOULD not focus on people's reputation, we
SHOULD focus on ideas, reasons, work-quality, documents/RFCs
reputations and process-procedures reputations. We are here to
document IETF reputation but not to document a person reputation or
even his/her name. A person's name for me is only important when I
want to refer to his/her review, draft, idea, etc. Don't forget that
in procedure; any input into IETF is own also by IETF no matter what
was the name given, so bad behaviour makes IETF reputation bad and
then some people leave, or make anonymous names, or don't participate
just listen. IMO, the majority of subscribers (in WGs) are listeners
with zero participation.

AB

On 8/2/13, Adam Roach  wrote:
> Moving to ietf@ietf.org, since I think this is not in any way specific
> to Berlin.
>
>
> On 8/2/13 12:24, Olle E. Johansson wrote:
>> In rtcweb we have remote participants that prefer anonymity for a number
>> of reasons.
>
> I'm going to make a broad assumption that the "number of reasons" all
> relate to privacy. If that is incorrect, please weigh in.
>
>> The question is how this is handled in regards to note well, when they
>> want jabber scribes to relay opinions or proposals to the meeting.
>>
>> Just a note for the future. I think we should allow anonymous listeners,
>> but should they really be allowed to participate?
>>
>
> We had a previous conversation around pseudonyms, which I think
> concluded that pseudonyms are pretty much okay (and impossible to
> reliably detect anyway).
>
> Given this fact, someone can protect their identity through use of a
> consistent pseudonym. This has the property of developing a persona
> behind that pseudonym that the working group members can reasonably
> interact with.
>
> By contrast, attempting to participate in a truly anonymous fashion
> rather than participating with a pseudonym seems to have very little
> justification, with significant potential drawback for the working
> group. The privacy implications are pretty much identical, but it
> provides the illusion that one can act in a way that has no impact on a
> persona's reputation. IMHO, this is ripe for bad behavior, bad faith
> participation, and other abuses.
>
> Given the availability of pseudonymous participation, I don't think we
> need to tolerate anonymous participation.
>
> /a
>
>


Re: Anonymity versus Pseudonymity (was Re: [87attendees] procedural question with remote participation)

2013-08-03 Thread Olle E. Johansson

2 aug 2013 kl. 14:13 skrev Scott Brim :

> I'm completely against participating anonymously because of IPR issues.
> I'm mostly against pseudonymous participation for the same reason.  I
> need to be able to know who I'm dealing with, in order to know if there
> are IPR issues that should be brought up.

THat's exactly the problem. Unfortunately the world requires the IETF to
manage IPR. There's a reason why we need to be strict with the note well.
Anonymous remote *PARTICIPATION* breaks the requirements of the
note well acceptance in my view. 


/O


Re: Anonymity versus Pseudonymity (was Re: [87attendees] procedural question with remote participation)

2013-08-03 Thread Scott Brim
AB, saving your entire message for context ... You're fixing the wrong
problem.  The problem is not finding a way to cloak so some unspecified
person doesn't experience abuse.  It's important that we all know who we
are dealing with.  The problem, rather, is what is leading you to think
anonymity might be useful, i.e. the alleged abuse itself.

Scott

On 08/03/13 02:41, Abdussalam Baryun allegedly wrote:
> Hi Adam,
> 
> I don't agree with you. I am a remote participant (2 years and never
> attended meetings) in the IETF organisation, do you think that IETF is
> fare in treating remote participants? I think the current IETF
> direction is in favor of attended-meeting participants, so IMHO one
> reason of some hidding their name is because the IETF still is not yet
> able to control wrong behaviour of participants who think they are
> well known. Thoes wrong behavior abuse peoples rights in IETF. If some
> are well known, the reason is because they got better opportunity in
> going to meetings, or that majority of participants are from two
> regions (North America+Europe).
> 
> For me the IETF reputation is about 40% (evaluated by asking close
> friends that did not participate and including the way I was treated
> within 2 years), still needs more work to build its reputation (e.g. I
> think some old participants need guidance to IETF visions). For me
> participants' good reputation depend on their reactions: if I get a
> nice reply from them, or if they don't only respond to known people,
> or if they acknowledge efforts, or if they encourage other into IETF
> visions, or if they provide good ideas/inputs, or if they manage
> work/WG/IETF well, etc.
> 
> In IETF volunteers' reputations SHOULD always be high and respected,
> but seems like the IETF give chance for abuse so its reputation makes
> some people prefer to be anonymous so they try to save their self
> reputation. We in IETF SHOULD not focus on people's reputation, we
> SHOULD focus on ideas, reasons, work-quality, documents/RFCs
> reputations and process-procedures reputations. We are here to
> document IETF reputation but not to document a person reputation or
> even his/her name. A person's name for me is only important when I
> want to refer to his/her review, draft, idea, etc. Don't forget that
> in procedure; any input into IETF is own also by IETF no matter what
> was the name given, so bad behaviour makes IETF reputation bad and
> then some people leave, or make anonymous names, or don't participate
> just listen. IMO, the majority of subscribers (in WGs) are listeners
> with zero participation.
> 
> AB
> 
> On 8/2/13, Adam Roach  wrote:
>> Moving to ietf@ietf.org, since I think this is not in any way specific
>> to Berlin.
>>
>>
>> On 8/2/13 12:24, Olle E. Johansson wrote:
>>> In rtcweb we have remote participants that prefer anonymity for a number
>>> of reasons.
>>
>> I'm going to make a broad assumption that the "number of reasons" all
>> relate to privacy. If that is incorrect, please weigh in.
>>
>>> The question is how this is handled in regards to note well, when they
>>> want jabber scribes to relay opinions or proposals to the meeting.
>>>
>>> Just a note for the future. I think we should allow anonymous listeners,
>>> but should they really be allowed to participate?
>>>
>>
>> We had a previous conversation around pseudonyms, which I think
>> concluded that pseudonyms are pretty much okay (and impossible to
>> reliably detect anyway).
>>
>> Given this fact, someone can protect their identity through use of a
>> consistent pseudonym. This has the property of developing a persona
>> behind that pseudonym that the working group members can reasonably
>> interact with.
>>
>> By contrast, attempting to participate in a truly anonymous fashion
>> rather than participating with a pseudonym seems to have very little
>> justification, with significant potential drawback for the working
>> group. The privacy implications are pretty much identical, but it
>> provides the illusion that one can act in a way that has no impact on a
>> persona's reputation. IMHO, this is ripe for bad behavior, bad faith
>> participation, and other abuses.
>>
>> Given the availability of pseudonymous participation, I don't think we
>> need to tolerate anonymous participation.
>>
>> /a
>>
>>


RE: Anonymity versus Pseudonymity (was Re: [87attendees] procedural question with remote participation)

2013-08-03 Thread l.wood

AB,

You write
"Some people prefer to be anonymous so they try to save their self reputation"

Are you pursuing this line of argument because, after
- campaigning for but failing to achieve the abolition of April 1 RFCs
- campaigning for but failing to achieve an acknowledgement in a MANET draft 
you didn't write.
- campaigning for changes to the posting summary that now regularly lists you 
as Number One poster on this list

You believe that your reputation is harmed, would require saving for meaningful 
interaction, and that you need pseudonymity?

Lloyd Wood
http://sat-net.com/L.Wood/



From: ietf-boun...@ietf.org [ietf-boun...@ietf.org] On Behalf Of Abdussalam 
Baryun [abdussalambar...@gmail.com]
Sent: 03 August 2013 07:41
To: Adam Roach
Cc: Olle E. Johansson; ietf@ietf.org
Subject: Re: Anonymity versus Pseudonymity (was Re: [87attendees] procedural    
question with remote participation)

Hi Adam,

I don't agree with you. I am a remote participant (2 years and never
attended meetings) in the IETF organisation, do you think that IETF is
fare in treating remote participants? I think the current IETF
direction is in favor of attended-meeting participants, so IMHO one
reason of some hidding their name is because the IETF still is not yet
able to control wrong behaviour of participants who think they are
well known. Thoes wrong behavior abuse peoples rights in IETF. If some
are well known, the reason is because they got better opportunity in
going to meetings, or that majority of participants are from two
regions (North America+Europe).

For me the IETF reputation is about 40% (evaluated by asking close
friends that did not participate and including the way I was treated
within 2 years), still needs more work to build its reputation (e.g. I
think some old participants need guidance to IETF visions). For me
participants' good reputation depend on their reactions: if I get a
nice reply from them, or if they don't only respond to known people,
or if they acknowledge efforts, or if they encourage other into IETF
visions, or if they provide good ideas/inputs, or if they manage
work/WG/IETF well, etc.

In IETF volunteers' reputations SHOULD always be high and respected,
but seems like the IETF give chance for abuse so its reputation makes
some people prefer to be anonymous so they try to save their self
reputation. We in IETF SHOULD not focus on people's reputation, we
SHOULD focus on ideas, reasons, work-quality, documents/RFCs
reputations and process-procedures reputations. We are here to
document IETF reputation but not to document a person reputation or
even his/her name. A person's name for me is only important when I
want to refer to his/her review, draft, idea, etc. Don't forget that
in procedure; any input into IETF is own also by IETF no matter what
was the name given, so bad behaviour makes IETF reputation bad and
then some people leave, or make anonymous names, or don't participate
just listen. IMO, the majority of subscribers (in WGs) are listeners
with zero participation.

AB

On 8/2/13, Adam Roach  wrote:
> Moving to ietf@ietf.org, since I think this is not in any way specific
> to Berlin.
>
>
> On 8/2/13 12:24, Olle E. Johansson wrote:
>> In rtcweb we have remote participants that prefer anonymity for a number
>> of reasons.
>
> I'm going to make a broad assumption that the "number of reasons" all
> relate to privacy. If that is incorrect, please weigh in.
>
>> The question is how this is handled in regards to note well, when they
>> want jabber scribes to relay opinions or proposals to the meeting.
>>
>> Just a note for the future. I think we should allow anonymous listeners,
>> but should they really be allowed to participate?
>>
>
> We had a previous conversation around pseudonyms, which I think
> concluded that pseudonyms are pretty much okay (and impossible to
> reliably detect anyway).
>
> Given this fact, someone can protect their identity through use of a
> consistent pseudonym. This has the property of developing a persona
> behind that pseudonym that the working group members can reasonably
> interact with.
>
> By contrast, attempting to participate in a truly anonymous fashion
> rather than participating with a pseudonym seems to have very little
> justification, with significant potential drawback for the working
> group. The privacy implications are pretty much identical, but it
> provides the illusion that one can act in a way that has no impact on a
> persona's reputation. IMHO, this is ripe for bad behavior, bad faith
> participation, and other abuses.
>
> Given the availability of pseudonymous participation, I don't think we
> need to tolerate anonymous participation.
>
> /a
>
>


Re: Anonymity versus Pseudonymity (was Re: [87attendees] procedural question with remote participation)

2013-08-03 Thread Yoav Nir

On Aug 3, 2013, at 9:49 AM, Olle E. Johansson  wrote:

> 
> 2 aug 2013 kl. 14:13 skrev Scott Brim :
> 
>> I'm completely against participating anonymously because of IPR issues.
>> I'm mostly against pseudonymous participation for the same reason.  I
>> need to be able to know who I'm dealing with, in order to know if there
>> are IPR issues that should be brought up.
> 
> THat's exactly the problem. Unfortunately the world requires the IETF to
> manage IPR. There's a reason why we need to be strict with the note well.
> Anonymous remote *PARTICIPATION* breaks the requirements of the
> note well acceptance in my view. 

Hi Olle

The participation in the IETF is already pseudonymous. I have a driver's 
license, a passport, and a national ID card, all proving that my name is indeed 
Yoav Nir. But I have never been asked to present any of them at the IETF. I 
claim to work for Check Point, and my email address tends to suggest it, but a 
lot of participants use gmail addresses.

I had participated in IETF mailing lists for 3 years before ever attending a 
meeting, and I got RFC 4478 published before attending one. At that point, none 
of the IETF regulars had ever seen me - I was just a claimed name on the 
mailing list and on the draft.

As I don't have to prove an identity when registering for meetings, if that had 
been a ruse, I could continue running with it to this day, although by now 
there are two participants who can link the IETF participant with the name I 
use at work. BTW: nobody's stopping anybody from creating a new gmail account 
under the name "Yoav Nir", registering to IETF mailing lists, and posting in my 
name. Unless I notice it and cry foul, nobody would be the wiser.

Yoav



Re: Anonymity versus Pseudonymity (was Re: [87attendees] procedural question with remote participation)

2013-08-04 Thread Ted Lemon
On Aug 3, 2013, at 10:23 PM, Yoav Nir  wrote:
> The participation in the IETF is already pseudonymous. I have a driver's 
> license, a passport, and a national ID card, all proving that my name is 
> indeed Yoav Nir. But I have never been asked to present any of them at the 
> IETF. I claim to work for Check Point, and my email address tends to suggest 
> it, but a lot of participants use gmail addresses.

So, you pay cash when you register?

It would probably be difficult to keep your identity secret if there were a 
discovery process during a patent trial.  You would also have to lie on the 
stand, and risk severe repercussions if your lie were revealed.

So yes, this is a problem, but it's not clear to me that it's a serious problem.



Re: Anonymity versus Pseudonymity (was Re: [87attendees] procedural question with remote participation)

2013-08-04 Thread Yoav Nir

On Aug 4, 2013, at 9:09 PM, Ted Lemon  wrote:

> On Aug 3, 2013, at 10:23 PM, Yoav Nir  wrote:
>> The participation in the IETF is already pseudonymous. I have a driver's 
>> license, a passport, and a national ID card, all proving that my name is 
>> indeed Yoav Nir. But I have never been asked to present any of them at the 
>> IETF. I claim to work for Check Point, and my email address tends to suggest 
>> it, but a lot of participants use gmail addresses.
> 
> So, you pay cash when you register?

No, I use a credit card in the name of my company's "head of purchasing", so 
not in my name. 

> It would probably be difficult to keep your identity secret if there were a 
> discovery process during a patent trial.  You would also have to lie on the 
> stand, and risk severe repercussions if your lie were revealed.

I would never lie at trial. But the name I use at trial doesn't go back to the 
IETF.

> So yes, this is a problem, but it's not clear to me that it's a serious 
> problem.

I don't think it's a serious problem anyway, but the IETF does not collect 
enough data to "track you down" as a condition for participation. So tracking 
you down becomes the lawyer's problem, not something that the IETF can give 
away.

Yoav



Re: Anonymity versus Pseudonymity (was Re: [87attendees] procedural question with remote participation)

2013-08-04 Thread Ted Lemon
On Aug 4, 2013, at 3:06 PM, Yoav Nir  wrote:
> No, I use a credit card in the name of my company's "head of purchasing", so 
> not in my name. 

Why wouldn't that be sufficient to identify you?   Is the head of purchasing 
going to protect your anonymity?

> I would never lie at trial. But the name I use at trial doesn't go back to 
> the IETF.

If you came to the IETF and were working for company X, registered 
pseudonymously, and didn't disclose IPR belonging to you or company X, and then 
later company X sued someone for using their IPR, you and company X would get 
raked over the coals, jointly and severally; the deliberate attempt to deceive 
would make things worse for you.   And that's the point: to provide you with a 
strong disincentive to doing such a thing.   So whether the rules prevent you 
from being anonymous, or prevent you from suing, everybody's happy.

(IANAL, so I'm just explaining my understanding of the situation.)




Re: Anonymity versus Pseudonymity (was Re: [87attendees] procedural question with remote participation)

2013-08-05 Thread John C Klensin


--On Sunday, August 04, 2013 19:31 + Ted Lemon
 wrote:

> If you came to the IETF and were working for company X,
> registered pseudonymously, and didn't disclose IPR belonging
> to you or company X, and then later company X sued someone for
> using their IPR, you and company X would get raked over the
> coals, jointly and severally; the deliberate attempt to
> deceive would make things worse for you.   And that's the
> point: to provide you with a strong disincentive to doing such
> a thing.   So whether the rules prevent you from being
> anonymous, or prevent you from suing, everybody's happy.

If company X wanted to collaborate with Yoav in preserving his
pseudonym (i.e., not disclosing the binding to his name), they
could presumably file a disclosure without identifying the
particular employee for whom the disclosure was made.
Especially with the ambiguities created by anonymous and
pseudonymous remote participation, I assume we would not decline
to post an IPR disclosure from an organization on the grounds
that we didn't know who was affiliated with it who participated
in the IETF.

> (IANAL, so I'm just explaining my understanding of the
> situation.)

ditto.

best,
  john