nanog mailing list archives
RE: 23,000 IP addresses
From: "Keith Medcalf" <kmedcalf () dessus com>
Date: Wed, 11 May 2011 07:52:13 -0400
Luis Marta wrote on 2011-05-10:
In the EU you have Directive 2006/24/EC: http://eur- lex.europa.eu/LexUriServ/LexUriServ.do?uri=OJ:L:2006:105:0054:0063:EN:PDF
Article 6 - Periods of retention Member States shall ensure that the categories of data specified in Article 5 are retained for periods of not less than six months and not more than two years from the date of the communication.
Article 5 - Categories of data to be retained 1. Member States shall ensure that the following categories of data are retained under this Directive: (a) data necessary to trace and identify the source of a communication: (...) the name and address of the subscriber or registered user to whom an Internet Protocol (IP) address, user ID or telephone number was allocated at the time of the communication;
The real problem is in the stupid wording. The IP Address is not allocated to a "subscriber" or "registered user". It is handed out for use on an authorized circuit. That circuit is being paid for by someone. There is no nexus between a "circuit number" and a "subscriber" or "user" (or there should not be -- and there only is if YOU CHOOSE TO CREATE SUCH). If network operators behaved rationally, the proper response to any request to divulge information related to an IP address would be limited to the Account Number which was paying for the circuit on which the IP Address was allocated WITH NO IDENTIFICATION OF ANY INDIVIDUAL WHATSOEVER. The entire problem is being created by Network Operators who are making up answers that they cannot prove are true, and causing grief to their customers. Eventually some customer will decide to challenge the Network Operator to prove their allegations of misfeasance. The result will be that the Network Operators will lose, and lose big time. After all, it is the Network Operators who are the accusers -- not the media mafia.
Each member state creates its own law, according to the directive. In Portugal, you have to retain the data for one year. Best Regards, Luís Marta.
--- Keith Medcalf () ascii ribbon campaign against html e-mail /\ www.asciiribbon.org
Current thread:
- Re: Fwd: 23,000 IP addresses, (continued)
- Re: Fwd: 23,000 IP addresses Michael Holstein (May 10)
- Re: 23,000 IP addresses Owen DeLong (May 10)
- Re: 23,000 IP addresses Steven Bellovin (May 10)
- Re: 23,000 IP addresses Kevin Oberman (May 10)
- Re: 23,000 IP addresses Justin M. Streiner (May 10)
- Re: 23,000 IP addresses Michael Holstein (May 10)
- Re: 23,000 IP addresses Kevin Oberman (May 10)
- Re: 23,000 IP addresses Steven Bellovin (May 10)
- Re: 23,000 IP addresses Bill Bogstad (May 10)
- Re: 23,000 IP addresses Claudio Lapidus (May 10)
- RE: 23,000 IP addresses Keith Medcalf (May 11)
- Re: 23,000 IP addresses Roland Perry (May 11)
- Re: 23,000 IP addresses Michael Painter (May 10)
- Re: 23,000 IP addresses Steven Bellovin (May 10)
- Re: 23,000 IP addresses Ong Beng Hui (May 10)
- Re: 23,000 IP addresses Ken Chase (May 11)
- Re: 23,000 IP addresses Michael Holstein (May 11)
- Re: 23,000 IP addresses Wil Schultz (May 10)
- Re: 23,000 IP addresses Steven Bellovin (May 10)