On Sun, 2 Aug 2026 at 14:12, Serge Droz via Security-wg < [email protected]> wrote:
> In the day and age of cloud services there are hundreds of examples of > services provided to different jurisdictions. Usually the law of your legal > residence applies. > That is not true. If your cloud service has it's data centres in the USA then US law applies to your data, regardless of your residence. cheers denis > > > Furthermore, APnic and Lacnic do such things, and they cover multiple > jurisdictions,a fact you seem to ignore. At least let us know what makes > them different from us,in away that cannot be changed. > > And your cutlery vendor analogy doesn't cut it: Once the knife is sold, > the vendor doesn't control it anymore. That is different from ip addresses. > > Best > Serge > > > On 2 August 2026 10:26:01 UTC, Nick Hilliard <[email protected]> wrote: > >> Suresh Ramasubramanian wrote on 01/08/2026 16:31: >> >>> That suggests that some capacity building is in order. They have what is >>> effectively a fiduciary duty to IP space. >>> >>> So they can no more not develop competence in this than a bank manager can >>> disclaim all competence in assessing whether a loan that they disburse is >>> going to be repaid or not, used for illegal activity or not etc. >>> >> >> Suresh, >> >> the RIPE NCC has a fiduciary duty to registration of IP space. How those >> number resources are used is an issue for the courts and the law. >> >> Your comparison with the bank manager is inapplicable for a lot of reasons, >> the main ones being that a bank is not a registration authority and - unlike >> money - an IP address isn't at risk of disappearing into thin air when the >> holder walks out the front door. >> >> If you want to claim that the bank manager is still on the hook to do some >> due diligence to ensure that it's not obviously being used for illegal >> activity, there's no problem pulling out another somewhat inapplicable >> comparison and say that road / motorway operators don't seem to be bound by >> any sort of due diligence for use of their resources, and knowingly allow >> their roads to be used for all sorts of crimes, many heinous. There are >> plenty of situations in society where abuse of a resource or a registration >> can cause harm and where we don't require any sort of due diligence: cutlery >> vendors don't check their customer out if someone walks in to buy a carving >> knife; the IEEE isn't on the hook if their MAC addresses are used in NICs >> which are used for network abuse, and so forth. >> >> The point is not that that you can't invoke comparisons of dubious >> comparative value with other organisations or societal structures, it's that >> the RIPE NCC is in something of a unique position, being a registration >> organisation for a large number of countries for numbers which are used for >> international communications. We don't have a direct analogue anywhere else. >> >> Nick >> >> -- > Dr. Serge Droz > Director, Forum of Incident Response and Security Teams > https://first.org > ----- > To unsubscribe from this mailing list or change your subscription options, > please visit: > https://mailman.ripe.net/mailman3/lists/security-wg.ripe.net/ > As we have migrated to Mailman 3, you will need to create an account with > the email matching your subscription before you can change your settings. > More details at: https://www.ripe.net/membership/mail/mailman-3-migration/
----- To unsubscribe from this mailing list or change your subscription options, please visit: https://mailman.ripe.net/mailman3/lists/security-wg.ripe.net/ As we have migrated to Mailman 3, you will need to create an account with the email matching your subscription before you can change your settings. More details at: https://www.ripe.net/membership/mail/mailman-3-migration/
