FWIW I never bought the idea that blacklists were passive and
therefore completely the act of the person using them. I think that's
facile and disingenuous.
Consider other reputation systems, such as credit agencies.
Sure, a lender chooses to use information provided by a credit agency
so why blame the credit agency in any case?
How many credit agencies would list every customer of Verizon
because one customer of Verizon defaulted on a loan?
How many credit agencies would list half the population of spain?
Would a credit agency list Texas because of Enron?
I think it is utterly ludicrous to expect that any document is
going to make it through IESG review on this topic.
Barry is right about plaintifs using the BCP in littigation,
I would also expect to see the IETF drawn into littigation if
it published a BCP that endorsed collateral damage or keeping
the identity of a blacklist secret to avoid littigation.
_______________________________________________
Asrg mailing list
Asrg(_at_)ietf(_dot_)org
https://www1.ietf.org/mailman/listinfo/asrg