HRIA guidelines for DNS abuse mitigation

[Tapani Tarvainen]

Dear all,

On the session on developing human rights impact assessment guidelines
for DNS abuse mitigation Farzaneh had us do a little exercise in
hypothetical scenarios. It went very well, especially given how little
time there was, with some very illuminating ideas - like, demanding a
quick response from the registrant can be a problem if the registrant
is in jail - and if we keep pushing we could well come up with
actually useful guidelines.

One thing I wanted to highlight is our discussion about what the
registrar can do directly and where they'd have to reach out to the
hosting provider or dns provider. The latter we didn't actually
discuss much, it was only mentioned in passing, most people perhaps
thinking that dns provider is usually same as registrar. That is
indeed often the case (some registrars even insist on it) but not
always (some registrars don't even offer it as a service, notably
including ISNIC where ncsg.is is registered).

Perhaps it would be a good exercise to make a list of what things each
actor - registrar, dns provider, hosting provider - can and can't do.

-- 
Tapani Tarvainen