Jeff Schiller, Area Director for Security Area, commented that there exists a tension between Internet security and business interests of ISPs to the point that the relationship between the user and the ISP would be one of a contractual basis. He gave an example of wanting his ISP to inform him when a security incident occurs that effects him. The document editor, Tom Killalea, reported that he had revised the -03 version and thought the new draft addressed all the concerns that surfaced during the IETF last call. The next portion of the meeting was spent reviewing the current evidence protection draft. There was some discussion concerning the collection procedures and the use of digital signatures.
Signing makes the verification easier.
Attendees were encouraged to send content to the list. Tom requested that attendees take the draft to their local law enforcement folks for review. We want to ensure the document is as internationally appropriate as possible. There was some discussion about who the evidence was being protected for. That is, is the document focused on protecting evidence so that law enforcement can use it to track down the perpetrator, or is it focused on protecting evidence so that when a perpetrator is identified, the evidence will hold up in a court of law.