Re: Fed Bill Would Restrict Web Server Logs

2006-02-14 Thread Owen DeLong
> > Original posting from Declan McCullagh's PoliTech mailing list. Thought > NANOGers would be interested since, if this bill passes, it would impact > almost all of us. Just imagine the impact on security of not being able > to login IP address and referring page of all web server connections! >

Re: Fed Bill Would Restrict Web Server Logs

2006-02-14 Thread Florian Weimer
* Frank Louwers: > Strange thing is that we have exact the opposite here in Europe. There > is a new bill that has been passed that forces us to keep al logs (mail > and web) for at least 1 or 2 years. It's not a bill, it's a EU directive which still has to be implemented in national law. Nothi

Re: Fed Bill Would Restrict Web Server Logs

2006-02-14 Thread bmanning
On Tue, Feb 14, 2006 at 11:31:48AM -0500, [EMAIL PROTECTED] wrote: > On Tue, 14 Feb 2006 16:14:11 GMT, Andy Davidson said: > > It's interesting that the US government is requiring less user data is > > stored when European politicians are calling for greater data and log > > retention rules. >

Re: Fed Bill Would Restrict Web Server Logs

2006-02-14 Thread Bill Nash
On Tue, 14 Feb 2006, Hyunseog Ryu wrote: I guess the question is how to read "legitimate" word. ^.^ I guess the bill was written in mind of privacy concern. But also there is some requirement for security/law-enforcement viewpoint. I received the request from some law-enforcement about actual

Re: Fed Bill Would Restrict Web Server Logs

2006-02-14 Thread Steven M. Bellovin
This is a pro-privacy bill that would regulate business, and it's been introduced by a Democrat in a Republican-controlled Congress with a Republican president, at a time when privacy is out of favor. It's not going to pass. (To me, of course, that's a bug, especially since I'd rather that st

Re: Fed Bill Would Restrict Web Server Logs

2006-02-14 Thread Gregory Hicks
> Date: Tue, 14 Feb 2006 09:47:50 -0500 > From: "Jon R. Kibler" <[EMAIL PROTECTED]> > > > Date: Thu, 09 Feb 2006 00:14:23 -0800 > > From: Declan McCullagh > > > > I've posted the text here: > > http://www.politechbot.com/docs/markey.data.deletion.bill.020806.pdf > > > > A summary is here: > >

Re: Fed Bill Would Restrict Web Server Logs

2006-02-14 Thread Hyunseog Ryu
I guess the question is how to read "legitimate" word. ^.^ I guess the bill was written in mind of privacy concern. But also there is some requirement for security/law-enforcement viewpoint. I received the request from some law-enforcement about actual user of IP address 3 year ago or older. With

RE: Fed Bill Would Restrict Web Server Logs

2006-02-14 Thread Bill Nash
On Tue, 14 Feb 2006, David Hubbard wrote: From: Andy Davidson Speaking with my e-commerce vendor hat on, server logs (apache, mail, application audit logs) and other information about visitors (especially those who have conducted a purchase transaction with us, or signed up to our newslett

Re: Fed Bill Would Restrict Web Server Logs

2006-02-14 Thread Valdis . Kletnieks
On Tue, 14 Feb 2006 16:14:11 GMT, Andy Davidson said: > It's interesting that the US government is requiring less user data is > stored when European politicians are calling for greater data and log > retention rules. Obviously, none of the Total Info Awareness proponents were able to get their

Re: Fed Bill Would Restrict Web Server Logs

2006-02-14 Thread Jeff Shultz
Mark Borchers wrote: Strange thing is that we have exact the opposite here in Europe. There is a new bill that has been passed that forces us to keep al logs (mail and web) for at least 1 or 2 years. Vriendelijke groeten, Frank Louwers That is far scarier. Which hard drive vendor wrot

RE: Fed Bill Would Restrict Web Server Logs

2006-02-14 Thread David Hubbard
From: Andy Davidson > > > Speaking with my e-commerce vendor hat on, server logs (apache, mail, > application audit logs) and other information about visitors > (especially those who have conducted a purchase transaction with > us, or signed up to our newsletter) never stop having a business >

Re: Fed Bill Would Restrict Web Server Logs

2006-02-14 Thread Andy Davidson
Suresh Ramasubramanian wrote: On 2/14/06, Jon R. Kibler <[EMAIL PROTECTED]> wrote: "A bill just announced in Congress would require every Web site operator to delete information about visitors, including e-mail addresses, if the data is no longer required for a "legitimate" business purpose. O

RE: Fed Bill Would Restrict Web Server Logs

2006-02-14 Thread Mark Borchers
> Strange thing is that we have exact the opposite here in Europe. There > is a new bill that has been passed that forces us to keep al > logs (mail and web) for at least 1 or 2 years. > > Vriendelijke groeten, > Frank Louwers That is far scarier.

Re: Fed Bill Would Restrict Web Server Logs

2006-02-14 Thread Suresh Ramasubramanian
On 2/14/06, Frank Louwers <[EMAIL PROTECTED]> wrote: > Strange thing is that we have exact the opposite here in Europe. There > is a new bill that has been passed that forces us to keep al logs (mail > and web) for at least 1 or 2 years. 6 months to 2 years I think. http://blogs.iht.com/tribtalk/

Re: Fed Bill Would Restrict Web Server Logs

2006-02-14 Thread Frank Louwers
On Tue, Feb 14, 2006 at 10:33:19AM -0500, David G. Andersen wrote: > > On Tue, Feb 14, 2006 at 09:47:50AM -0500, Jon R. Kibler scribed: > > > > > > http://www.politechbot.com/docs/markey.data.deletion.bill.020806.pdf > > > > > > to delete information about visitors, including e-mail addresses,

Re: Fed Bill Would Restrict Web Server Logs

2006-02-14 Thread David G. Andersen
On Tue, Feb 14, 2006 at 09:47:50AM -0500, Jon R. Kibler scribed: > > > > http://www.politechbot.com/docs/markey.data.deletion.bill.020806.pdf > > > > to delete information about visitors, including e-mail addresses, if the > > data is no longer required for a "legitimate" business purpose. > >

Re: Fed Bill Would Restrict Web Server Logs

2006-02-14 Thread Suresh Ramasubramanian
On 2/14/06, Jon R. Kibler <[EMAIL PROTECTED]> wrote: > > "A bill just announced in Congress would require every Web site operator > > to delete information about visitors, including e-mail addresses, if the > > data is no longer required for a "legitimate" business purpose. > Original posting fro