Subject: Re: [regext] I-D Action: draft-harrison-regext-rdap-mirroring-00.txt

From: Stephane Bortzmeyer <[email-masked]>
Date: Mon, 25 Mar 2019 10:53:03 +0100

On Fri, Feb 01, 2019 at 04:20:56AM -0800,
 [email-masked] <[email-masked]> wrote 
 a message of 44 lines which said:

>         Title           : RDAP Mirroring Protocol (RMP)
>         Authors         : Tom Harrison
>                           George G. Michaelson
>                           Andrew Lee Newton
> 	Filename        : draft-harrison-regext-rdap-mirroring-00.txt

Since it is in the agenda of the WG this afternoon...

The Security Considerations are too weak. Unlike the RPKI (which was
the inspiration for this protocol), RDAP data may be
sensitive/personal. So, it requires a more thought-of privacy
analysis.

The current text just refers to RFC 7481, which do not seem to
consider bulk access. Mirroring all the data is very different from
having access for specific requests.