[iot-discussion] Proposed US legislation

That is assuming you want a horse of course (sorry ;-)

From: iot-discussion [mailto:iot-discussion-bounces at ripe.net] On Behalf Of Richard Lamb
Sent: Wednesday, August 9, 2017 9:27 AM
To: Marco Hogewoning <marcoh at ripe.net>; Patrik Fältström <paf at frobbit.se>
Cc: iot-discussion at ripe.net
Subject: Re: [iot-discussion] Proposed US legislation

I agree that at least requiring an audited SDLC (software development lifecycle) plan might be useful (like we created for dnssec root ops).  However, besides the auditor cost$, beware the “designed by committee” problem.  Ive had good and bad experiences here but bad for those coming out of IGOs – sometimes the result is a camel and not a horse.  -Rick


From: Marco Hogewoning [mailto:marcoh at ripe.net]
Sent: Wednesday, August 9, 2017 12:41 AM
To: Patrik Fältström <paf at frobbit.se<mailto:paf at frobbit.se>>
Cc: Richard Lamb <richard.lamb at icann.org<mailto:richard.lamb at icann.org>>; iot-discussion at ripe.net<mailto:iot-discussion at ripe.net>
Subject: Re: [iot-discussion] Proposed US legislation




Groet,

MarcoH
--
Sent from a small touch screen, apologies for typos
On 9 Aug 2017, at 07:59, Patrik Fältström <paf at frobbit.se<mailto:paf at frobbit.se>> wrote:
On 8 Aug 2017, at 16:01, Marco Hogewoning wrote:

Still on the fence whether this can only be solved by hard regulation and liability or whether we as industry can still create enough of a cultural shift to “do the right thing” under our own momentum.

Require just like in other environmental discussions (glass recycling etc) that the manufacturers present a responsibility/management process for the whole lifecycle of the "thing", and we will be done. Including destruction, recycling of material etc.

  paf

Yups, such a solution would ultimately be the thing to have. You are right in that at the meta level this is just a sustainability issue.

Big question, would the current IG eco system be up to the task of defining the requirements, have the different stakeholders implement their part of the solution and in the end collectively provide enough incentive for the system to be (self) enforced.

And if that is not the case, how likely would a multi-lateral solution be? And more importantly, how to ensure we at least can give input to that process, we are after all the experts.

Oh and of course when we do get this invite, what are we going to say and is there any chance we coordinate ourselves to a coherent strategy.

Sounds like there is still enough to talk about, fancy a trip to Leeds?

Groet,

MarcoH
--
Sent from a small touch screen, apologies for typos
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.ripe.net/ripe/mail/archives/iot-wg/attachments/20170809/701a5446/attachment.html>